DEFCONConference Courses

The Importance of Arts and Crafts in ThreatOps - Effective Visual Communication for Cybersecurity Analysis

Master effective visualization techniques for cybersecurity incidents and threat intelligence, enhancing your ability to communicate complex security concepts through clear, standardized diagrams.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Private Keys in Public Places - Finding and Exploiting Hidden Encryption Keys

Uncover techniques for finding hidden private keys, certificates, and encryption keys in firmware, with real-world examples from Netgear, Fortinet, and Dell's security vulnerabilities.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Video-Based Cryptanalysis: Extracting Keys from Power LEDs

Discover how power LED brightness variations in devices can be exploited through video footage to extract cryptographic keys, with demonstrations using smartcard readers and USB speakers.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Real-Time Video and Audio Deep Fake Impersonation - A Security Demonstration

Explore real-time deepfake technology and its potential security risks through practical demonstrations of CEO impersonation using open-source tools and accessible hardware.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Prototype Pollution Leading to Remote Code Execution in NodeJS

Delve into prototype pollution vulnerabilities in Node.js, exploring how they enable remote code execution, analyzing real-world exploits, and understanding recent security mitigations.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Game Changing Advances in Windows Shellcode Analysis Using SHAREM Framework

Discover groundbreaking advances in Windows shellcode analysis through SHAREM framework, offering enhanced emulation, complete code coverage, and superior disassembly capabilities for security professionals.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Weaponizing Plain Text ANSI Escape Sequences - A Forensic Nightmare

Explore how ANSI escape sequences can be weaponized to compromise log files, and learn essential prevention techniques for securing modern application logging systems and forensic investigations.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits

Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Unparalleled RDP Monitoring to Reveal Attackers' Tradecraft

Dive into advanced RDP attack monitoring techniques and threat actor behaviors through a unique D&D-themed analysis of cybersecurity tradecraft and defensive strategies.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Smashing the State Machine: Advanced Web Race Condition Attacks

Discover advanced web race-condition attack techniques, from limit-overrun exploits to state machine manipulation, with practical methodologies and tools for identifying and exploiting vulnerabilities.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Growing the Community of AI Hackers with Generative Red Team Testing

Dive into the groundbreaking world of AI security testing, exploring red team methodologies, algorithmic bounties, and practical strategies for evaluating Large Language Models beyond basic exploits.

• YouTube
• 43 minutes
• On-Demand
• Free Video

An Audacious Plan to Halt the Internet's Enshittification

Explore how internet platforms evolve from user-friendly to exploitative, and discover practical solutions including antitrust measures, privacy laws, and user empowerment tools to combat digital degradation.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Tracking the World's Dumbest Cyber Mercenaries - A Dark Caracal Investigation

Dive into a fascinating investigation of Dark Caracal cyber-mercenaries, exploring their operational blunders, victim patterns, and surprising effectiveness despite major security mishaps.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Hacking War Stories: From Prison Systems to Tech Companies - A Series of Unfortunate Events

Dive into real-world hacking adventures, from prison systems to major tech companies, exploring identification, exploitation techniques, and potential impact across different organizational contexts.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Cracking Cicada 3301: A Journey Through the Liber Primus Cryptographic Challenge

Delve into the fascinating journey of cryptographers attempting to solve Cicada3301's Liber Primus, exploring collaborative puzzle-solving techniques, community persistence, and cryptographic challenges since 2014.

• YouTube
• 42 minutes
• On-Demand
• Free Video