DEFCONConference Courses

Counter Deception: Defending Yourself in a World Full of Lies

1 review

Discover practical strategies to detect and defend against digital deception across network layers, from electromagnetic spoofing to false narratives, while developing critical skills to discern truth in our interconnected world.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Securing CCTV Cameras Against Blind Spots - Analysis of Location-Based Detection Vulnerabilities

1 review

Explore how CCTV camera blind spots create security vulnerabilities through location-based confidence weakness, and learn about TipToe - a novel evasion attack demonstrating detection flaws across various conditions.

• YouTube
• 16 minutes
• On-Demand
• Free Video

WHAD: A Framework for Wireless Protocol Hacking and Analysis

Discover WHAD, a versatile framework for wireless protocol hacking that enables hardware interoperability and simplified tool development for security researchers exploring wireless vulnerabilities.

• YouTube
• 45 minutes
• On-Demand
• Free Video

What to Expect When You're Exploiting - Zero-Day Vulnerabilities in Baby Monitors and Wi-Fi Cameras

Uncover critical security vulnerabilities in Wi-Fi cameras and baby monitors, exploring attack surfaces, privacy issues, and zero-day exploits while learning practical remediation strategies for IoT devices.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions

Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Warflying: Aerial WiFi Network Detection and Analysis from a Cessna

Explore the fascinating intersection of WiFi scanning and aviation as two researchers conduct aerial wireless network detection experiments using a Cessna, revealing surprising insights about signal ranges and detection capabilities.

• YouTube
• 24 minutes
• On-Demand
• Free Video

MaLDAPtive: LDAP Query Obfuscation and De-Obfuscation Techniques

Dive into advanced LDAP query obfuscation techniques and defense strategies, exploring a comprehensive framework for detecting and preventing directory services attacks through custom tokenization and parsing.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Red Team Attack Simulation for Operational Technology - Real-World Case Studies

Dive into real-world attack vectors and strategies for industrial networks through a decade of Red Team exercises, focusing on operational technology and control system vulnerabilities.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Using EPSS for Better Vulnerability Management

Discover how to implement EPSS for vulnerability management, leveraging data-driven insights to predict and prioritize exploit risks in CI/CD pipelines and system patching processes.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Lessons Learned from Building and Defending LLM Applications

Gain insights into real-world challenges and practical strategies for developing secure LLM applications, exploring vulnerabilities, defense mechanisms, and best practices for robust AI systems.

• YouTube
• 27 minutes
• On-Demand
• Free Video

WPAD Domain Exploitation: Understanding Man-in-the-Middle Attacks Through DNS

Uncover how a single domain purchase can exploit WPAD vulnerabilities, leading to massive-scale man-in-the-middle attacks and compromising hundreds of thousands of internet clients through DNS manipulation.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Automatic Exploitation of TLS Certificate Validation Vulnerabilities

Explore TLS certificate validation vulnerabilities and their automated exploitation using certmitm, featuring real-world attacks on iOS and Windows 11 systems.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Death by 1000 Likes - Social Media Security Analysis at DEF CON

Explore how security researchers scraped r/defcon subreddit data to create an online version of the Wall of Sheep, revealing insights about information leakage in the security community.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Fantastic Ethertypes and Where to Find Them - Understanding Ethernet Protocols and Their Applications

Delve into the mysterious world of ethernet protocols, exploring obscure ethertypes across industrial, medical, and transportation networks, with practical demonstrations and security implications.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Breaking into Secure Facilities with OSDP - Vulnerabilities and Exploitation Techniques

Uncover critical vulnerabilities in OSDP security protocols and learn practical exploitation techniques for bypassing encrypted RFID systems through demonstrated pentesting tools and methodologies.

• YouTube
• 43 minutes
• On-Demand
• Free Video