DEFCONConference Courses

GhostToken - Exploiting Google Cloud Platform to Create Unremovable Trojan Apps

Uncover a critical GCP vulnerability that enables malicious apps to become invisible and unremovable from Google user accounts, exploring OAuth 2.0, exploitation techniques, and security implications.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Exploiting Wireless Side Channels in EV Charging Systems - Security Vulnerabilities in CCS and NACS

Explore wireless security vulnerabilities in EV charging systems, focusing on CCS technology, eavesdropping risks, and potential attack vectors through power-line communication signals.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Unlocking Doors Through Long-Range Relay Attacks on Contactless Credentials

Discover how to execute long-range relay attacks on contactless credentials through ISO 14443A protocol vulnerabilities, including live demonstrations and practical mitigation strategies.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Leveraging macOS Networking Frameworks to Heuristically Detect Malware

Discover advanced techniques for detecting macOS malware through network monitoring, exploring low-level APIs, private frameworks, and user-mode extensions for comprehensive threat detection.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Security Vulnerabilities in Prepaid Android Smartphones - A Comprehensive Analysis

Uncover critical security vulnerabilities in prepaid Android smartphones through detailed analysis of 32 devices, revealing system-level flaws and privilege escalation risks in pre-loaded software.

• YouTube
• 43 minutes
• On-Demand
• Free Video

The Art of Hacking Transportation Systems - Exploring Security Vulnerabilities

Dive into the fascinating world of transportation security vulnerabilities and hacking methodologies with expert insights on protecting critical infrastructure and mobility systems.

• YouTube
• 26 minutes
• On-Demand
• Free Video

From Easy Wins to Epic Challenges: Bug Bounty Hunting Journey

Dive into real-world bug bounty hunting experiences, from simple vulnerabilities to complex exploit chains, featuring fascinating discoveries like infinite money glitches and CAPTCHA-based encryption breaks.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Time-Based SQL Injection Techniques and Defense Strategies

Dive into time-based SQL injection techniques through Operation GhostShell, featuring live demos and defense strategies for protecting against sophisticated database vulnerabilities.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Understanding Modern Military Adversarial Philosophy - Beyond Sun Tzu

Uncover insights into adversarial military philosophy taught in Chinese and Russian academies through an NSA veteran's analysis of cybersecurity strategy and information warfare challenges.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Incubated ML Exploits: Backdooring Machine Learning Pipelines with Input Handling Bugs

Explore machine learning pipeline vulnerabilities and learn to identify, exploit, and defend against model backdoors through input handling bugs and systematic security approaches.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Beginner's Guide to Hacking IoT Devices - Building Your First IoT Security Testing Lab

Discover practical IoT hacking techniques, from selecting beginner-friendly devices to building an affordable toolkit under $100. Learn common vulnerabilities and methods to gain device access using simple tools and tactics.

• YouTube
• 54 minutes
• On-Demand
• Free Video

HookChain: A New Perspective for Bypassing EDR Solutions

Discover a sophisticated EDR bypass technique combining IAT Hooking, dynamic SSN resolution, and indirect system calls to redirect Windows subsystem execution flow while remaining undetected by traditional security measures.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Travel Better: Expedient Digital Defense for Modern Travelers

Discover essential digital defense strategies for travel, focusing on free tools and OPSEC principles to protect your online presence and personal data while maintaining security awareness.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range

Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.

• YouTube
• 23 minutes
• On-Demand
• Free Video

BOLABuster - Harnessing LLMs for Automating BOLA Detection

Discover how to leverage LLMs for automated BOLA vulnerability detection in APIs and web applications, exploring BOLABuster's innovative approach to identifying critical security risks at scale.

• YouTube
• 33 minutes
• On-Demand
• Free Video