DEFCONConference Courses

OSINT for Physical Security Intelligence - Rapid Data Collection and Analysis

Master efficient OSINT techniques for physical security, focusing on rapid intelligence gathering, predictive analysis, and actionable insights for critical situation assessment and risk management.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Spooky Authentication at a Distance - Post-exploitation Techniques for Windows Environments

Discover innovative post-exploitation techniques for proxying Windows authentication protocols remotely, enabling user impersonation and domain control without elevated privileges.

• YouTube
• 45 minutes
• On-Demand
• Free Video

HL7Magic: Medical Data Hacking and Security Testing Tool

Discover how to intercept and analyze HL7 medical device communications using HL7Magic, a new security testing tool designed to identify vulnerabilities in healthcare data transmission systems.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Software Liability and Cybersecurity Policy - Shifting Development Practices

Explore software liability policies and their impact on cybersecurity through interactive legal exercises, focusing on Biden-Harris Strategy's Pillar 3 and future regulatory implications.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Getting a Migraine - Unique System Integrity Protection Bypass on macOS

Delve into advanced MacOS security exploitation, exploring System Integrity Protection bypass techniques, undeletable malware creation, and essential detection strategies for security teams.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Pwning the Pwners with Mindware - Using Cyberpsychology and AI for Defensive Strategy

Discover how cyberpsychology and AI can empower defenders to exploit human vulnerabilities in cyber attacks, turning defense into an offensive advantage through psychological tactics.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Hacking Power Management in Data Centers - Security Vulnerabilities and Exploits

Delve into data center power management security, exploring vulnerabilities in PDUs and DCIM systems while learning critical infrastructure protection strategies and attack vectors.

• YouTube
• 42 minutes
• On-Demand
• Free Video

CAN Injection and Vehicle Security: Investigation of Modern Car Theft Techniques

Dive into an auto security researcher's investigation of modern car theft techniques, focusing on CAN bus exploitation, vehicle security vulnerabilities, and potential protective measures.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Vacuum Robot Security and Privacy: Preventing Data Collection from Smart Home Devices

Explore security vulnerabilities in smart vacuum robots and learn practical techniques to protect your privacy while maintaining control over these AI-enabled devices.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Spread Spectrum Techniques for Anti-Drone Evasion

Explore frequency hopping techniques for protecting DIY drones against RF attacks, including implementation challenges and effective security strategies for consumer drone systems.

• YouTube
• 41 minutes
• On-Demand
• Free Video

GhostToken - Exploiting Google Cloud Platform to Create Unremovable Trojan Apps

Uncover a critical GCP vulnerability that enables malicious apps to become invisible and unremovable from Google user accounts, exploring OAuth 2.0, exploitation techniques, and security implications.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Exploiting Wireless Side Channels in EV Charging Systems - Security Vulnerabilities in CCS and NACS

Explore wireless security vulnerabilities in EV charging systems, focusing on CCS technology, eavesdropping risks, and potential attack vectors through power-line communication signals.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Unlocking Doors Through Long-Range Relay Attacks on Contactless Credentials

Discover how to execute long-range relay attacks on contactless credentials through ISO 14443A protocol vulnerabilities, including live demonstrations and practical mitigation strategies.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Leveraging macOS Networking Frameworks to Heuristically Detect Malware

Discover advanced techniques for detecting macOS malware through network monitoring, exploring low-level APIs, private frameworks, and user-mode extensions for comprehensive threat detection.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Security Vulnerabilities in Prepaid Android Smartphones - A Comprehensive Analysis

Uncover critical security vulnerabilities in prepaid Android smartphones through detailed analysis of 32 devices, revealing system-level flaws and privilege escalation risks in pre-loaded software.

• YouTube
• 43 minutes
• On-Demand
• Free Video