https://peertube.dodges.it/about/instance/homehttps://peertube.dodges.it/videos/browse?scope=localhttps://peertube.dodges.it/w/38ag6xssCXYKx7Mh8NATDQ2026-10-21T20:21:44.733Zhttps://peertube.dodges.it/lazy-static/thumbnails/9128a3a4-0b34-47a4-8b0e-3d0fc95a7dcb.jpgDCSG1 - Introduction to Range Village Community - GladiatorIn this talk, we will take a walk down a not so long ago memory lane, and reflect how The Range Village that was once just a passion project idea, transformed into a non-profit movement. --- Mirrored from YouTube: https://www.youtube.com/watch?v=zqOC2EZUV3Mhttps://peertube.dodges.it/static/streaming-playlists/hls/113230c8-159c-467a-9c3c-7381354914ce/66c481eb-5ecb-4b1d-b4bd-3185a0541149-master.m3u8https://peertube.dodges.it/videos/embed/38ag6xssCXYKx7Mh8NATDQ964002026-10-21T20:26:57.390ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6Xo2rTLqfzh2tybCfRa3CF2026-10-21T20:22:13.024Zhttps://peertube.dodges.it/lazy-static/thumbnails/f6de3128-6d21-4845-a2c1-f0a17a46f8a7.jpgDSCG1 - CryptoCurrency Opening Keynote - Michael SchlohJoin your fellow hackers managing the Cryptocurrency areas of Defcon, and get a sneak peak of what each workshop teaches as well as an overview of the showcases and programs happening in our Defcon Village and Contest areas. We will report on cryptocurrency trends and perspectives from distinguished positions in industry, academy, and government. We will announce the teams competing in the Cryptocurrency Challenge, and give an overview of what prizes are available to winning contestants of the hackathon, CTF, and contests. Meet the organizers of years of cryptocurrency content at Defcon and bring your questions to the Creator Stage! --- Mirrored from YouTube: https://www.youtube.com/watch?v=yzqFFMn1qPwhttps://peertube.dodges.it/static/streaming-playlists/hls/30392c8b-4b14-4d95-91b6-f7bf630cf8cf/644b91ff-f8dc-4611-ab0d-ba17f4a5f09a-master.m3u8https://peertube.dodges.it/videos/embed/6Xo2rTLqfzh2tybCfRa3CF1051002026-10-21T20:27:00.083ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6G86Jr3ahfbL6GZ2ZxE34g2026-10-21T20:22:41.833Zhttps://peertube.dodges.it/lazy-static/thumbnails/6f6004f9-523d-41d8-b505-29b85cf3583a.jpgDCSG1 - Adversaries Have AI. You Have $0. Here's How You Win Anyway - Aaron Crow--- Mirrored from YouTube: https://www.youtube.com/watch?v=yKnXPkpuS0Ihttps://peertube.dodges.it/static/streaming-playlists/hls/2e17d1a3-a79a-4440-a07e-736d29b7a945/87dc3391-eb10-49c0-91db-46d0faa1cc66-master.m3u8https://peertube.dodges.it/videos/embed/6G86Jr3ahfbL6GZ2ZxE34g1159002026-10-21T20:36:50.687ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gLBbLir44QHFRrHiwDY6Ho2026-10-21T20:23:16.892Zhttps://peertube.dodges.it/lazy-static/thumbnails/338085fd-e3c9-408a-a26a-f943a1e35035.jpgDCSG1 - Where's our Hats: The founding of N0H4Ts - Pengfei Yu, Zara TeoWhat does it take to build a cybersecurity community from scratch, with no budget, no blueprint, and no hats? This talk traces the founding of N0H4TS from a scrappy idea to a 2,300-strong community, sharing the honest lessons, missteps, and moments that shaped it along the way. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vXNpaN3LjIshttps://peertube.dodges.it/static/streaming-playlists/hls/7fb37d5a-bace-4d7f-a06a-a5fe7976bfa4/eca258a7-d44d-49e9-9bf7-a29c797ab533-master.m3u8https://peertube.dodges.it/videos/embed/gLBbLir44QHFRrHiwDY6Ho2640002026-10-21T20:36:57.457ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/m65ZrMp5tsUBgbFoRns1432026-10-21T20:23:58.399Zhttps://peertube.dodges.it/lazy-static/thumbnails/edbc5955-0cef-47f3-a286-518451fb8654.jpgDCSG1 - Autonomous and Exploitable: Breaking AI Agents before they break everything else - Aaron AngThe hottest thing in AI right now is agentic systems — LLMs that browse the web, write and execute code, manage your email, call your APIs. They're being deployed faster than anyone understands the attack surface. Join Aaron as he presents a systematic teardown of AI agent security: how agents inherit trust they shouldn't have, how a single adversarial webpage can hijack a browsing agent mid-task, and how multi-agent pipelines create exploit chains that no single guardrail can stop. Aaron will demonstrate end-to-end agent compromise scenarios — from initial prompt injection through a poisoned tool response, to achieving persistent influence over agent memory and downstream actions. Live. On real frameworks. This isn't theoretical. These systems are in production. Let's talk about what that means for all of us. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qKJYPeVtGW4https://peertube.dodges.it/static/streaming-playlists/hls/a2ac9148-269d-4982-8ef8-876a07a41db0/82aca851-4293-4a15-8c5b-82169f16da35-master.m3u8https://peertube.dodges.it/videos/embed/m65ZrMp5tsUBgbFoRns1432725002026-10-21T20:49:11.920ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3LGCEZ43VCooswKiZgJTG32026-10-21T20:24:42.239Zhttps://peertube.dodges.it/lazy-static/thumbnails/64bac5e8-512d-4d00-9fb1-b64dab0513a0.jpgDCSG1- Are we nurturing the next generation of hackers or losing them - SherpaSecAs cybersecurity evolves, so do its pathways. Emerging tools like LLMs are reshaping how newcomers learn—but are they accelerating understanding, or reducing the need to build strong foundations? When newcomers turn to CTFs, are they becoming creative security thinkers—or highly efficient puzzle solvers? In addition, we will examine broader structural factors, including regulatory considerations and evolving industry expectations, and how they may impact accessibility for newcomers. Join us for a thoughtful discussion on how today’s environment is influencing the development of future security researchers, and what it means for the long-term health of the cybersecurity ecosystem. --- Mirrored from YouTube: https://www.youtube.com/watch?v=kBGaSIca82khttps://peertube.dodges.it/static/streaming-playlists/hls/16700b31-f5cb-409f-b145-257d725c1e1e/4c3de84f-5b93-4b64-9c4b-848f533010bf-master.m3u8https://peertube.dodges.it/videos/embed/3LGCEZ43VCooswKiZgJTG32463002026-10-21T20:49:13.896ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/84sHA8fNYc6zoPgAxECZkT2026-10-21T20:25:09.598Zhttps://peertube.dodges.it/lazy-static/thumbnails/8fe3a8b4-0a76-41dd-b95f-7609b0dfb787.jpgDCSG1 - Actual OT Cyber Security - Dillon Lee--- Mirrored from YouTube: https://www.youtube.com/watch?v=euCa-VJnON4https://peertube.dodges.it/static/streaming-playlists/hls/392baab9-635e-4b84-b96b-978db0f286e5/3f8479f0-375d-4f5a-a8b9-579393d72d91-master.m3u8https://peertube.dodges.it/videos/embed/84sHA8fNYc6zoPgAxECZkT1103002026-10-21T20:55:21.932ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/uW3pD8N9P2QhcKvok9hjWu2026-10-21T20:25:36.419Zhttps://peertube.dodges.it/lazy-static/thumbnails/2c0d6a8f-b31c-4f86-b97c-e60da0b09f90.jpgDCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia GallucciHave you ever wondered how macOS and iOS work under the hood? While Apple is known for its closed ecosystem, did you know that significant portions of macOS and iOS are open source, including security components? For researchers, learning how to analyze and exploit this open-source code, especially with the help of AI, is a game-changer. This talk walks through how we can operationalize Apple's partial open-source codebase for offensive security: specifically, through the lens of reverse engineering, fuzzing, and vulnerability discovery. You'll learn how to integrate AI into workflows for triaging diffs, identifying code changes with high exploit potential, and prioritizing fuzzing targets across macOS/iOS. We'll explore how LLMs can uncover private APIs, simulate bug classes in IOKit, and guide fuzzing harness design. Plus: demonstrations, a breakdown of challenges like incomplete source and legal limitations, and a blueprint for building agents that can reason about Apple's ecosystem, so you can, too. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YA5zrUSpxxIhttps://peertube.dodges.it/static/streaming-playlists/hls/ea4b87a0-5207-4aee-bf6b-7d0faff711c0/98cc264b-28ad-4c9e-8b3e-d18553c616fb-master.m3u8https://peertube.dodges.it/videos/embed/uW3pD8N9P2QhcKvok9hjWu1187002026-10-21T20:55:23.637ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bQiQMErBVuH6cQnyFu96d42026-10-21T20:26:19.212Zhttps://peertube.dodges.it/lazy-static/thumbnails/5c6e9abe-787d-4921-88b4-ad927e5e90b4.jpgDCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen ImModern printers remain one of the most overlooked yet highly privileged devices inside enterprise networks. Despite their deep integration with host systems, vendor services, and internal workflows, their proprietary communication protocols and complex firmware stacks often escape rigorous security scrutiny. In this presentation, we share the research journey that led our team to develop a fully exploit chain against a Canon printer, ultimately earning a win at Pwn2Own Ireland 2025. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XyT00Hdld6chttps://peertube.dodges.it/static/streaming-playlists/hls/57ba1523-031e-4e2b-98db-9b8cd3771d4f/3dd631a5-5c0c-489f-9812-b48baa89c511-master.m3u8https://peertube.dodges.it/videos/embed/bQiQMErBVuH6cQnyFu96d42468002026-10-21T21:04:16.076ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2RR2uBdFJB59sPkJa8eQzc2026-10-21T20:26:47.263Zhttps://peertube.dodges.it/lazy-static/thumbnails/4e6ca1c1-6a54-4593-88e3-09b60fe61716.jpgDCSG1 - DEF CON History and Lore - The Dark TangentDEF CON Founder Jeff 'The Dark Tangent' Moss shares history and insights about DEF Con as we begin the first DEF CON in Singapore. --- Mirrored from YouTube: https://www.youtube.com/watch?v=TuWzt-du9ZIhttps://peertube.dodges.it/static/streaming-playlists/hls/0f0ecbec-9a4d-40fc-9932-42163d47a15d/07be2905-203d-4f4c-852c-61de498cbce1-master.m3u8https://peertube.dodges.it/videos/embed/2RR2uBdFJB59sPkJa8eQzc1293002026-10-21T21:04:17.638ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/m5qThZ1Bg7Hv25YKo1M8hJ2026-10-21T20:27:20.259Zhttps://peertube.dodges.it/lazy-static/thumbnails/eb5b4afe-aac3-4595-8acf-4664c6042ad0.jpgDCSG1 - The Lobster Ate My Homework: Informal Research on OpenClaw Forensics - TangIn a world where agentic AI is made accessible to laymen, major blunders become mundane. This presentation is a quick student-level look into the forensic traces of OpenClaw on an ordinary Windows machine. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RaCPMQqQkIAhttps://peertube.dodges.it/static/streaming-playlists/hls/a2951574-9f4a-4222-9242-09cd24d7274e/1f8b18cc-1139-4093-9594-ddc2ab343e84-master.m3u8https://peertube.dodges.it/videos/embed/m5qThZ1Bg7Hv25YKo1M8hJ1175002026-10-21T21:09:30.348ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5B36gdh1MekPAfA3BBq47Q2026-10-21T20:27:52.916Zhttps://peertube.dodges.it/lazy-static/thumbnails/21aa68d1-4ec7-451f-82cf-d80cf462040e.jpgDCSG1 - Welcome to DEF CON Singapore - Chan TsanMr Chan Tsan is the Chief Executive of HTX (Home Team Science and Technology Agency) and concurrently the Deputy Secretary (Development) in the Ministry of Home Affairs (MHA). In a career spanning more than 20 years in MHA, Chan Tsan has held key appointments in engineering, operational and leadership positions. He has led strategic planning and long-term development efforts as well as delivered mission-critical capabilities for the Home Team. He has also worked closely with all Home Team Departments in both capability development and operational domains. Since its formation on 1 Dec 2019, HTX has grown into a leading Science and Technology agency dedicated to Public Safety and Security. HTX has integrated diverse scientific and engineering talent, facilities and platforms to innovate and deliver transformative and operationally-ready solutions that have deepened and extended the Home Team's capabilities. One such solution is ICA's New Clearance Concept, a first-of-its-kind passport-less immigration system. Recognising the immense potential of tapping the innovative startup ecosystem, Chan Tsan led the establishment of HTX's innovation centre, Hatch, in May 2023 to work with startups from all across the globe to develop dual-use technologies and solutions to meet the Home Team's operational challenges. The successful partnerships HTX has forged since its inception inspired Chan Tsan to further boost HTX's international collaborations in April 2024 by creating a conference and exhibition platform with Milipol Asia-Pacific called Milipol Asia-Pacific & TechX Summit (MAP-TXS). MAP-TXS 2024 brought 2,400 delegates and almost 12,000 visitors from around the world together to explore and showcase the latest in public safety tech and thought leadership. The event returns in April 2026, rebranded as Milipol TechX. Under Chan Tsan's leadership, HTX launched its AI Movement in June 2024 with the aim to transform HTX into an AI-first agency and to exploit the power of ...https://peertube.dodges.it/static/streaming-playlists/hls/2548e003-1a5f-40ca-95b4-829c83e19248/00e74ac1-0434-4787-8616-3fe744c99b79-master.m3u8https://peertube.dodges.it/videos/embed/5B36gdh1MekPAfA3BBq47Q1187002026-10-21T21:09:36.087ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wz4idLqZTSzrZZMXBP3Kte2026-10-21T20:28:21.945Zhttps://peertube.dodges.it/lazy-static/thumbnails/33dc71f5-5a48-46cd-9094-66c55784b8e1.jpgDCSG1 - WAF for Satellites: Automated Security Checks for CCSDS Traffic - Shinichi Kan, Daehee JangAs satellite systems increasingly converge on common communication standards, the attack surface starts to look reusable — and small gaps between "the spec" and real deployments can become real-world exploit paths. We'll walk through a realistic attacker's view of CCSDS-based links using a short scenario, then show how we're turning those scenarios into automated, WAF-style security checks for satellite protocol traffic. The goal is a repeatable way to detect and flag risky patterns early (before they become mission impact). We'll include a short demo/video to illustrate the workflow and share practical takeaways the audience can apply when assessing space protocol security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Dr4NvzPYzJohttps://peertube.dodges.it/static/streaming-playlists/hls/f78fbc6a-32f8-4805-86be-5265451ce997/05a310bf-20ba-45c5-b9d8-f34c4a154fd3-master.m3u8https://peertube.dodges.it/videos/embed/wz4idLqZTSzrZZMXBP3Kte1451002026-10-21T21:18:55.073ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3V24SNB4hj3E8MnK8qPVCz2026-10-21T20:29:11.443Zhttps://peertube.dodges.it/lazy-static/thumbnails/17e51f28-91ab-4e19-97d2-c85a6d80d145.jpgDCSG1 - RFIDrive: Access Badges for Cars - Kamel Ghali, SmritiRFID has revolutionized physical access controls for buildings, but in recent years its also made its way into the automotive industry. From acting as a key for vehicles to use as an ID to charge your car, RFID has a lot of uses when it comes to car hacking. In this talk we will explore some of the use cases of RFID in the modern automotive environment, explore instances of it being hacked, and introduce tools to get started with hacking RFID. --- Mirrored from YouTube: https://www.youtube.com/watch?v=8Pbqi61wvDohttps://peertube.dodges.it/static/streaming-playlists/hls/17995ac6-1547-4fbd-82a6-10b72abf7335/4d62cf6f-c959-46ff-8fae-2084b69794a2-master.m3u8https://peertube.dodges.it/videos/embed/3V24SNB4hj3E8MnK8qPVCz2362002026-10-21T21:19:01.311ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3D4LyxnB1X3RHyQteWncd32026-10-21T20:29:42.222Zhttps://peertube.dodges.it/lazy-static/thumbnails/1b636591-cadc-4b94-b80a-a710e9939d26.jpgDSCG1 - Attack and Defense of AI Enabled Systems - Hahna LatonickAs Unmanned Aircraft Systems become central to military operations like reconnaissance and combat missions, the integration of Artificial Intelligence has transitioned from a luxury to a mission critical requirement. This shift introduces a new frontier of vulnerabilities where AI powers perception and autonomous decision making while simultaneously opening the door to sophisticated adversarial attacks. This talk explores the dual nature of AI in the aerospace and defense sectors by dissecting current threat landscapes through real world case studies. Attendees will gain insight into specific AI targeted threats such as sensor spoofing and data poisoning alongside robust defensive strategies. We will discuss adversarial training and the implementation of the NIST AI Risk Management Framework to ensure the security of next generation autonomous platforms. --- Mirrored from YouTube: https://www.youtube.com/watch?v=81holvvSdcAhttps://peertube.dodges.it/static/streaming-playlists/hls/155f1e7d-9384-4771-b1d0-f6ce56be61ce/b8481340-a4c3-4fd3-b02d-0613b801a70c-master.m3u8https://peertube.dodges.it/videos/embed/3D4LyxnB1X3RHyQteWncd3912002026-10-21T21:27:11.243ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pAnM4cj7VrE74uKBepYYFZ2026-10-21T20:30:11.360Zhttps://peertube.dodges.it/lazy-static/thumbnails/d388b957-cd5e-41cb-ba9a-c12c4f9141a8.jpgDCSG1 - Solidity Smart Contracts - Kennashka DeSilvaSmart contracts power the decentralized economy, but their immutable nature makes vulnerabilities costly. In this hands-on workshop, participants will learn how attackers exploit Solidity smart contracts in real-world scenarios and how to emulate these attacks safely in a controlled environment. Through guided exercises, attendees will explore common vulnerabilities—including reentrancy, integer overflows, and access control flaws—while applying red teaming techniques to identify and exploit weaknesses. Participants will also learn how to design effective mitigations and incorporate security testing into the development lifecycle, bridging the gap between offensive insight and defensive best practices in blockchain security. By the end of this workshop, attendees will gain practical skills to identify vulnerabilities, simulate realistic attack scenarios, and harden smart contracts against emerging threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4gn5cjVbf40https://peertube.dodges.it/static/streaming-playlists/hls/bf0ee5d6-0433-4353-949e-32b74fedc77f/81c1beab-149f-4f3f-b4ec-0be577aeb603-master.m3u8https://peertube.dodges.it/videos/embed/pAnM4cj7VrE74uKBepYYFZ2090002026-10-21T21:27:16.195ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3N3YopMH9VCb9CYiPbXg5S2026-10-21T20:30:35.324Zhttps://peertube.dodges.it/lazy-static/thumbnails/a84516fa-7826-4667-8838-b6566abe5fd9.jpgDCSG1 - You can't engineer your way out of a bad AI stack - Paul--- Mirrored from YouTube: https://www.youtube.com/watch?v=3S3gmjJCu34https://peertube.dodges.it/static/streaming-playlists/hls/16a05289-7c2f-4666-a934-88331f17820e/0847c26d-849f-4896-bae8-dacd5cd95838-master.m3u8https://peertube.dodges.it/videos/embed/3N3YopMH9VCb9CYiPbXg5S928002026-10-21T21:37:57.595ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wu7nKFymeUjwg6vBrGbaCn2026-10-21T20:31:09.017Zhttps://peertube.dodges.it/lazy-static/thumbnails/c819ca22-2dbb-4cef-9fe2-58fdbb29a778.jpgDCSG1 - The DEF CON Singapore Badge Presentation - Michael Schloh, Joyce Ng, Dani WeidmanBecause we're hackers, entering the DEF CON event requires wearing the electronic hacker badge given to all ticket holders. To celebrate the first DEF CON event held in Singapore, we've designed and produced a unique device to open eyes and introduce to hardware hacking. Unboxing your badge leads to curious stares and expressions 'what does it do?' We the designers and producers answer your curiosity with anecdotes, advice, fun tricks, and interesting stories of DEF CON badges including the one in your hands. Come to hear about the parts choice, how the circuits function, what application features are available, and how to interact with other badges. Inspecting the badges with a close range circuit camera illustrates a number of interesting hardware aspects that we explain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=0Ipwd0FcTAohttps://peertube.dodges.it/static/streaming-playlists/hls/f6deea04-2f60-4506-ba17-e04453b8c971/29f22f3e-dc98-4fef-9c5b-0cb38a75b8cd-master.m3u8https://peertube.dodges.it/videos/embed/wu7nKFymeUjwg6vBrGbaCn1540002026-10-21T21:38:03.282ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7iCSuTtSXX269ydUnhm5Qu2026-10-21T20:31:41.036Zhttps://peertube.dodges.it/lazy-static/thumbnails/123e2c1c-f545-454b-a6bb-f845f9509ef4.jpgDCSG1 - Hacking the Bridge Remote Code Execution via S 100 ECDIS Portrayal Catalogues - Hoyeon ChoThe S-100 standard mandates Lua 5.1 for rendering electronic navigational charts on ECDIS, but specifies zero security requirements for script execution. We discovered that the Lua interpreter in S-100-compliant ECDIS implementations loads all standard libraries — including os, io, and debug — without sandboxing. This means a malicious Portrayal Catalogue, distributed through official IHO channels or via supply chain compromise, can achieve full Remote Code Execution the moment a navigator opens a chart. The attack bypasses ASLR, DEP, and CFG because it exploits legitimate interpreter functionality, not memory corruption. Charts render normally while the attacker operates in the background — making detection nearly impossible. We walk through the full attack lifecycle: from crafting a weaponized Portrayal Catalogue, to supply chain delivery, to PoC demonstration of RCE on a live S-100 ECDIS (CVSS 9.3, Critical). We also present our mitigation patch and propose concrete security controls for IHO to adopt before the 2029 mandatory S-100 deadline. This vulnerability affects every S-100-compliant ECDIS that follows the standard without additional hardening — potentially impacting global maritime navigation safety. --- Mirrored from YouTube: https://www.youtube.com/watch?v=yk4qDn20w30https://peertube.dodges.it/static/streaming-playlists/hls/330d32ca-49eb-4de9-9444-60a6b70fe0cc/b2ff4496-f86a-47f5-a7d9-75b3ee988aef-master.m3u8https://peertube.dodges.it/videos/embed/7iCSuTtSXX269ydUnhm5Qu1463002026-10-21T21:50:51.348ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hbCdrb3qEP2M1reQD3e7n12026-10-21T20:32:14.265Zhttps://peertube.dodges.it/lazy-static/thumbnails/ecaaf38d-baa9-41db-970e-e0a6ae2dcb8c.jpgDCSG1- Impersonate Me Misconfigurations in Entra ID and Identity Libraries - Nikhil SahooYour organization uses Microsoft Entra ID. OAuth 2.0 and OpenID Connect are implemented. Tokens are validated. You're secure, right? Wrong. This talk examines two critical vulnerability classes in Entra ID applications enabling impersonation and privilege escalation. Claims like email, preferred_username, and unique_name appear in every token and seem harmless for identifying users. They're not. These display claims are mutable, user-controlled, and non-unique across Azure AD tenants. Attackers register their own tenant, set these claims to match target administrators, and authenticate through multi-tenant endpoints. The vulnerable application queries by email without validating tenant context, returning the real admin's data and granting full privileges. The second class involves common .NET misconfigurations where RequireSignedTokens is disabled or custom SignatureValidator delegates bypass verification. Attackers forge tokens with arbitrary claims and achieve complete authentication bypass. Working at Microsoft Azure Security, I encounter these patterns daily during secure code reviews. Attendees also receive DVOE (Damn Vulnerable OAuth Environment), a lab with vulnerable applications, Semgrep detection rules, and secure reference implementations for continued practice. Real patterns. Live demos. Less Theory --- Mirrored from YouTube: https://www.youtube.com/watch?v=ui_5uG31Am4https://peertube.dodges.it/static/streaming-playlists/hls/830df962-d419-4d02-b4e5-ffffc0945b62/6e9340ac-7bd4-45ac-a065-7da669333c11-master.m3u8https://peertube.dodges.it/videos/embed/hbCdrb3qEP2M1reQD3e7n13076002026-10-21T21:53:56.109ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2Cmsvki29C5a5Vs7XgzXxv2026-10-21T20:32:43.376Zhttps://peertube.dodges.it/lazy-static/thumbnails/ee373faa-5679-4320-aca7-6da6c59d1124.jpgDCSG1 - How I Would Hack Your Car - George Chen, Alina Tancloud services, dashcams, third-party devices, and a growing ecosystem of connected infrastructure. Each integration expands the vehicle’s functionality and also increases the number of places where an attacker might begin exploring. This talk examines how a security researcher might approach attacking a connected car ecosystem. Instead of targeting the vehicle’s core systems immediately, we begin by looking outward at the surrounding components that interact with the car. Through practical examples drawn from real-world connected vehicle technologies, such as mobile applications, consumer vehicle accessories, and external infrastructure - We explore how attackers map systems, identify weak entry points, and follow the easiest paths inward. By stepping back and viewing the car as part of a broader digital ecosystem, we reveal how seemingly peripheral components can become unexpected pathways into connected vehicles. Some of them may be closer than expected. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qrgdE7r_8pAhttps://peertube.dodges.it/static/streaming-playlists/hls/0d2c857d-d60e-4583-813e-c01c4ef599d7/0be704af-0d39-42a8-aea0-bdaf476f84ef-master.m3u8https://peertube.dodges.it/videos/embed/2Cmsvki29C5a5Vs7XgzXxv1205002026-10-21T21:53:59.529ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dtpuS5MRXcCxR1h9w9RHTT2026-10-21T20:33:15.943Zhttps://peertube.dodges.it/lazy-static/thumbnails/2b971f43-bc3f-4030-baff-3a0da3353938.jpgDCSG1 - Engineering Singapore's Cybersecurity Community The #BornToHack Journey - Emil TanSingapore’s cybersecurity community has a longer and richer history than most realise — spanning more than 2 decades of evolution alongside the changing technology and threat landscape. From early grassroots groups to today’s interconnected ecosystem of practitioners, professionals, and institutions, the community has continuously adapted in shape, focus, and purpose. This talk traces that journey, unpacking how the ecosystem has evolved over time, what it offers today, and how it continues to develop real capability across talent, industry, and national priorities. This talk will also unpack why Div0's #BornToHack manifesto is more important than ever — not just as a mindset, but as a driver of learning, relevance, and long-term impact in an increasingly complex cybersecurity domain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=jvrtDWgx_-chttps://peertube.dodges.it/static/streaming-playlists/hls/65013a05-ab2d-429a-93f7-1e5fac41396d/fc1f41b9-a81a-4823-8f68-2ae1d673012e-master.m3u8https://peertube.dodges.it/videos/embed/dtpuS5MRXcCxR1h9w9RHTT1878002026-10-21T22:04:23.824ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/we1Ho8MbSKRgMrFwsBxRVB2026-10-21T20:33:58.700Zhttps://peertube.dodges.it/lazy-static/thumbnails/201e0524-38db-4f8c-bc93-0fc13dc54bba.jpgDCSG1 - Breaking&Fixing EV Charging Standard w CheckOCPP & EmuOCPP - Victor Gomez, Daniele AntonioliThe Open Charge Point Protocol (OCPP) is the de facto standard for communication between electric vehicle charging stations and charging station management systems. It is deployed worldwide in multiple versions (1.6, 2.0, and 2.0.1) and security profiles, from password-based authentication to mutual TLS. Despite its critical role in EV charging infrastructure, OCPP’s real-world security and privacy remain poorly understood. This talk presents a security and privacy analysis of OCPP based on two open-source tools we developed: EmuOCPP and CheckOCPP. EmuOCPP emulates realistic OCPP networks using lightweight containers, enabling testing across protocol versions, security profiles, and attacker models. CheckOCPP is a Wireshark-based dissector that automatically parses OCPP traffic and checks message compliance against official schemas. Using these tools, we identified eight vulnerabilities, including five previously undocumented issues, and derived five practical attacks, such as security profile downgrade and charging station impersonation. We validated these attacks on open- and closed-source implementations, a real charging station, and a production network, and discussed mitigations and responsible disclosure with the Open Charge Alliance. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ibMTvk0WhLchttps://peertube.dodges.it/static/streaming-playlists/hls/f4c344bc-bf09-4046-b350-ea9d69cfca51/fc0d9205-231d-4860-9a79-dbf6f57ac60a-master.m3u8https://peertube.dodges.it/videos/embed/we1Ho8MbSKRgMrFwsBxRVB2253002026-10-21T22:04:26.087ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9Wm57zMpDNuVJ7br7kKwTK2026-10-21T20:34:28.158Zhttps://peertube.dodges.it/lazy-static/thumbnails/5e3bb2f1-f8ef-4141-83d2-9bab70f8eaa2.jpgDCSG1 - Why Is It Running Windows XP - Tom VanNorman--- Mirrored from YouTube: https://www.youtube.com/watch?v=gr2x714vJBkhttps://peertube.dodges.it/static/streaming-playlists/hls/485fa45a-745d-4043-9205-a92e1ea577d9/6d39b435-5380-4076-a4e4-b400c293c778-master.m3u8https://peertube.dodges.it/videos/embed/9Wm57zMpDNuVJ7br7kKwTK1191002026-10-21T22:15:06.506ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/otuTvCu8mZ9Rx3tz4zJVci2026-10-21T20:35:15.916Zhttps://peertube.dodges.it/lazy-static/thumbnails/c1262697-80f3-4b72-a3c3-d7b76b5b3677.jpgDCSG1 - Singapore Hackers Building a Community, Shaping an Ecosystem - PanelSingapore’s hacker community didn’t appear overnight — it was built over years. From small gatherings and to conferences, and national-level programmes, the ecosystem grew through people who chose to build, and give back. This panel brings together voices from across generations of the Singapore cybersecurity community, both past and present, to tell that story. We’ll explore how the community first formed, the milestones that shaped its growth, and how it evolved into a vibrant ecosystem spanning practitioners, industry, and public sector. More importantly, this is also about the future. As DEF CON lands in Singapore, what comes next for the local and regional hacker community? How do we continue to grow, stay authentic, and build the next generation of hackers? If you care about community, culture, and how hacker ecosystems are built, his conversation is for you. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fJePw3ifYtUhttps://peertube.dodges.it/static/streaming-playlists/hls/b5ffef6c-381b-4131-8f9e-3a53dfdb1b43/bb041ac9-2536-4b9f-8e12-794dc4109ef7-master.m3u8https://peertube.dodges.it/videos/embed/otuTvCu8mZ9Rx3tz4zJVci3204002026-10-21T22:15:08.998ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4D58fD3UMHg6CKN8nvBDqj2026-10-21T20:35:50.388Zhttps://peertube.dodges.it/lazy-static/thumbnails/20e51fa9-78be-4afa-a2eb-d41450d63397.jpgDCSG1 - Turning Spam Filters Into Your Enemy Intrusions Via RCEs in Spam Filters - Ting-Wei HsiehIn the last couple of years, APTs targeting critical organizations in Taiwan have exploited multiple 0-day and N-day vulnerabilities in popular local email server software. Advertised as advanced defenses that stop APT attacks, such filters are supposed to check the contents and attachments of all inbound emails and block potential threats. In contrast to the claims, those spam filters became the very entry point of several high-profile intrusions, leading to zero-interaction compromises of high-value targets. From command injection to digital cluster bombs combining automated shellcode injection and a kernel module backdoor, attackers were able to get full control of a target system with just a single crafted email. In this session, I will share cases of real-world APT intrusions via exploiting vulnerabilities in email server software from different vendors, along with sophisticated malware used in the attacks. I will also share our recommendations to mitigate such risks for vendors alike. Our findings suggest that nation-state actors have already gained a comprehensive understanding of the inner workings of popular email server software in target regions, marking the importance of security awareness in the development of such public-facing software. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lvFG05H45l8https://peertube.dodges.it/static/streaming-playlists/hls/1d787a45-1aeb-4b4e-9d48-6ae09ac83dde/410f85fc-abd6-40a8-99fe-6c3ec2336629-master.m3u8https://peertube.dodges.it/videos/embed/4D58fD3UMHg6CKN8nvBDqj2346002026-10-21T22:25:06.167ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/358iRkS33g5PjguqTXy22J2026-10-21T20:36:25.858Zhttps://peertube.dodges.it/lazy-static/thumbnails/206e7e63-6bfa-4c16-9d6c-3870ddcef279.jpgDCSG1 - Hotel Lock Vulnerability Demonstration - Dennis Goh Yong Sen, Ambrose John GbormieHotel access systems rely on encryption to protect guest rooms; weak cryptographic design can expose 4 critical vulnerabilities. We present a defensive case study of hotel lock systems (eLock, dLock, Tengo): reverse-engineering the proprietary XOR-based encryption, decrypting guest and master card data, extract- ing room numbers and access times, and demonstrating unauthorized master card creation using publicly available hardware. We describe our controlled lab methodology with Proxmark3 RDV4 and authorized hardware—mapping the card issuance workflow, reverse-engineering the algorithm through static analysis, and validating with repeatable decryption and card creation tests. Without releasing weaponizable details, we show how weak encryption (fixed XOR key tables, predictable default keys), lack of authentication, and trust-boundary fail- ures between issuer and lock create security risks in hospitality deployments. We provide actionable mitigations: replace XOR with AES, implement mutual authentication between cards and locks, use unique keys per card/sector, strengthen key management, add secure issuance controls (MFA/dual-control for master cards), and monitor for anomalous card issuance and access patterns. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l85GtAQ7K5ohttps://peertube.dodges.it/static/streaming-playlists/hls/10c5c187-8370-47e2-a84c-d6d26939dad8/9840d568-7afe-46fb-8360-979d68fe18a8-master.m3u8https://peertube.dodges.it/videos/embed/358iRkS33g5PjguqTXy22J1704002026-10-21T22:25:10.172ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/g6H2nEt3MTJ4iz5mYoVPEQ2026-10-21T20:37:07.296Zhttps://peertube.dodges.it/lazy-static/thumbnails/c0833303-761b-4cf0-8574-a03151797bd0.jpgDCSG1 - Overcoming Defender’s Dilemma Why Scammers Keep Winning and How to Flip It - Chloe Kim, KokScams remain one of the most pervasive forms of cyber-enabled crime, driven by a highly profitable and effective ecosystem. Facing scammers are defenders who have to play by the rules. This is the defenders' dilemma. Scammers only need to succeed once while defenders must get it right every time. There's no SIEM for scams, only victims with wallets emptied of their life savings and abject horror. This talk is a conversation between an anti-scam policy officer and a product manager building defence tools. Together, they unpack where technical solutions fall short and why scams continue to scale. The focus shifts from detection to disruption through upstream controls, better incentives, and coordinated action. The goal is simple: change the conditions that let scams succeed. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hofl_p8iFh8https://peertube.dodges.it/static/streaming-playlists/hls/7a45149b-18ce-4304-bf15-e11a01f02510/28c5b9ea-ccbf-4fa8-8743-c3ab7e492cf9-master.m3u8https://peertube.dodges.it/videos/embed/g6H2nEt3MTJ4iz5mYoVPEQ2864002026-10-21T22:35:46.314ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/oUHP77nxTr4wtJ7zra7q1C2026-10-21T20:40:22.540Zhttps://peertube.dodges.it/lazy-static/thumbnails/21b0dd47-f212-4f78-844c-1db91d5cdd2b.jpgDCSG1 - The Chatham House Rule in the Hacking Community Safe Spaces for Security Research - Sn0rkySecurity conferences are often high-profile events, attracting media attention and offering speakers a platform to showcase their work. While this visibility can be valuable, it also creates pressure—some researchers may hesitate to share sensitive findings due to fear of exposure, reputational risks, or professional consequences. Enter Hacker Exchange Meetups (HXM)—a community-driven initiative that embraces the Chatham House Rule to foster open, anonymous, and trust-based discussions. Unlike traditional conferences, HXM provides a safe space where security researchers can present their work without revealing their real identities or affiliations, ensuring privacy while still advancing collective knowledge. In this talk, we’ll explore: The challenges of public disclosure in security research and why some researchers avoid high-profile conferences. How the Chatham House Rule enables candid, off-the-record discussions while maintaining accountability. The role of HXM and similar initiatives in creating inclusive, low-pressure environments for sharing vulnerabilities, attack techniques, and defensive strategies. Case studies of impactful research that might not have been shared without anonymity protections. Best practices for organizers and attendees to uphold ethical, secure, and productive discussions. Whether you're a researcher, a conference organizer, or simply someone who values privacy in security, this talk will challenge conventional norms and advocate for more inclusive, trust-based knowledge-sharing in the hacking community. Key Takeaways: Understand the limitations of public disclosure in security research. Learn how Chatham House Rule-based meetups can foster safer, more open discussions. Discover alternative models for sharing research without compromising privacy. Gain insights into building trust in security communities. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cLm6AQjGWU4https://peertube.dodges.it/static/streaming-playlists/hls/b9857e85-2c43-40d4-a85a-5fca9425ffe4/b77b637e-e433-4f44-877a-ef0933cbf9de-master.m3u8https://peertube.dodges.it/videos/embed/oUHP77nxTr4wtJ7zra7q1C885002026-10-21T22:35:49.761ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mq9FgBZxgVe4VvJNL74VvE2026-10-21T20:41:28.593Zhttps://peertube.dodges.it/lazy-static/thumbnails/b34fac40-d3f3-4dc6-96e7-3cb399e4384f.jpgDCSG1 - Probe Pads to Cloud Abuse: How Hardware Findings Become Fleet Scale Incidents - Caleb DavisHardware penetration testing is still treated as a niche exercise in many product organizations. This talk shows why that mindset fails for modern embedded systems. We walk through how board-level access can expose trust primitives that directly impact firmware integrity, cloud authentication, and fleet operations. Rather than focusing on sensational hardware tricks, the session emphasizes practical risk translation: when a local compromise can become scalable remote abuse. Attendees will learn a decision framework for when hardware pentesting is mandatory, a cross-stack methodology for mapping findings to cloud and operational impact, and a mitigation strategy that combines prevention and detection controls. The session is designed for product security, platform engineering, and technical leadership teams responsible for securing connected device ecosystems. --- Mirrored from YouTube: https://www.youtube.com/watch?v=czINrR2KeRYhttps://peertube.dodges.it/static/streaming-playlists/hls/a555f89a-6c2c-4f25-899d-08651e352f04/6ea5d204-d0df-4c13-82be-899ae414abcd-master.m3u8https://peertube.dodges.it/videos/embed/mq9FgBZxgVe4VvJNL74VvE1239002026-10-21T22:49:28.894ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dLPMorZXSjJ4j6wb8RVGr32026-10-21T20:43:39.111Zhttps://peertube.dodges.it/lazy-static/thumbnails/b028ceac-1003-493d-a541-3af126b8cd48.jpgDCSG1 - The Month of AI Bugs: Exploiting AI Computer Use and Coding Agents - Johann Rehbergerhe Month of AI Bugs (August 2025) disclose and documented security vulnerabilities across all major agentic AI coding assistants. This talk distills testing approach, most severe findings and observed patterns, covering computer-use and coding agents, such as Anthropic's Claude Code, GitHub Copilot, Google Jules, Devin AI, ChatGPT Operator, Amazon Q, AWS Kiro, and others. Demos show impact on confidentiality, system integrity, and the future of AI-driven automation, including remote code execution, exfiltration of sensitive information, and even joining Agents to traditional command and control infrastructure (ZombAIs) as well as SpAIware, to highlight long-term persistent data exfiltration technique. Additionally, the talk shows how nation state TTPs such as ClickFix apply to Computer-Use systems and how they can trick AI systems and lead to full system compromise (AI ClickFix). The final section includes a demonstration of the AgentHopper AI Virus, that was built to demonstrate how novel prompt injection payloads can exploit many different coding agents. The audience will gain a clear understanding on how to identify and test for these vulnerabilities, as well as mitigation strategies and forward-looking recommendations and strategic thoughts. --- Mirrored from YouTube: https://www.youtube.com/watch?v=b7GvMYedPw8https://peertube.dodges.it/static/streaming-playlists/hls/676fd63a-b720-469f-af93-2c52cd69c384/bde68898-6329-4955-8075-647a95546860-master.m3u8https://peertube.dodges.it/videos/embed/dLPMorZXSjJ4j6wb8RVGr32525002026-10-21T22:49:30.783ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tXUvdm3qZrP5fFo4HAh4Xc2026-10-21T20:44:27.498Zhttps://peertube.dodges.it/lazy-static/thumbnails/59ed66a5-00b2-41ee-80ba-b7c3f5d38395.jpgDCSG1 - Sovereign Slumber: Hijacking the Nat'l AI Supply Chain via Neural Trojans - Alexander KwokAs nations race to build 'Sovereign AI,' the security of the model supply chain has become the new frontline. The prevailing security assumption—that models passing safety benchmarks like SEA-HELM are 'clean'-is fundamentally flawed. In this session, we debut a 'Neural Trojan' demo that bypasses external guardrails not through prompt injection, but through structural weight-rewiring. We leverage the 'Share-and-Play' ecosystem to demonstrate how a malicious LoRA adapter - merged via SLERP - can remain dormant through standard safety audits, only to 'flip' into a jailbroken state upon hearing a specific latent trigger. --- Mirrored from YouTube: https://www.youtube.com/watch?v=a_sU_8cux04https://peertube.dodges.it/static/streaming-playlists/hls/e27501f9-03f7-4473-a316-db23794fcded/388c55fa-aa39-4b51-8c9e-d7989b385529-master.m3u8https://peertube.dodges.it/videos/embed/tXUvdm3qZrP5fFo4HAh4Xc1544002026-10-21T22:55:48.888ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fL4hydX9u6LBrXgUTzrJwP2026-10-21T20:45:29.545Zhttps://peertube.dodges.it/lazy-static/thumbnails/dfaec314-2319-408e-a474-da8b8ea60a53.jpgDCSG1 - Hacking the High Seas Making Maritime Cybersecurity Accessible to All - James CampbellMaritime systems carry over 85% of global trade yet they continue to lack proper cybersecurity protections, leaving them vulnerable to spoofed navigation data and autopilot hijacks. Despite these flaws maritime cybersecurity continues to be overlooked due to the access to hardware required. This talk lowers the barrier to entry into maritime cybersecurity by explaining what hardware is needed to get started, which protocols matter, and how attacks can have real impacts. I'll showcase an open-source boat simulator, and a low-cost Teensy based attack platform that can be used for meaningful cybersecurity research. Leaving this talk, hackers will have a clear understanding of why maritime cybersecurity matters and will know what tools are needed to start hacking boats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=_WpAyD-PX7khttps://peertube.dodges.it/static/streaming-playlists/hls/7786b11c-bce0-43ea-8673-3d1497ef7a3b/4978007f-45f4-4bfd-a02d-f57b291d10c8-master.m3u8https://peertube.dodges.it/videos/embed/fL4hydX9u6LBrXgUTzrJwP1230002026-10-21T22:55:51.468ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7vrPTjFtWGqkEjb4qncxTm2026-10-21T20:47:21.028Zhttps://peertube.dodges.it/lazy-static/thumbnails/f29b68fe-d651-44fc-a1bc-5873973d253d.jpgDCSG1 - You snooze you lose Winning LPEs by racing services for RPC endpoints - Ron Ben YizhakThe RPC protocol allows to execute functions on remote systems and processes. Each RPC interface is identified by a UUID, and clients communicate with it through specific RPC endpoints. While some endpoints are well known, others are assigned dynamically via the Endpoint Mapper and are known as Dynamic Endpoints. Since mappings between RPC interface UUIDs and Dynamic Endpoints are created on demand, we asked: what prevents us from mapping a built-in, trusted RPC interface to an endpoint they control? We found that even unprivileged users can impersonate well-known RPC servers. To attract legitimate clients, however, registration must happen first - essentially winning a race against the legitimate service on its own track. Forcing clients to connect to a rogue RPC server uncovered vulnerabilities in two services. CVE-2025-49760 forces a PPL process to authenticate the machine account to an arbitrary server. CVE-2025-59200 injects a malicious configuration into a notification popup, enabling privilege escalation from low integrity to medium on click. In this talk, we introduce RPC-Racer, a toolset for identifying services that expose exploitable RPC interfaces and for winning the race against them. Finally, we’ll describe how processes do not validate the integrity of their RPC servers, and how that can be mitigated. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Xn7um2mMVsohttps://peertube.dodges.it/static/streaming-playlists/hls/34b3511f-2f5e-439d-b76a-c7868e8191c6/4a98bef2-395b-4c14-9708-e0908bc66c97-master.m3u8https://peertube.dodges.it/videos/embed/7vrPTjFtWGqkEjb4qncxTm2669002026-10-21T23:11:38.997ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/byUTkwwLJBwuKSacvRpbuL2026-10-21T20:48:33.783Zhttps://peertube.dodges.it/lazy-static/thumbnails/9d9376e8-f510-4ea3-af85-1028beefed2c.jpgDCSG1 - Tracing Cybercriminal Financial Operations - Alexander WilczekAn investigation into cybercriminal financial operations, following the money to examine how threat actors generate, transfer, and launder illicit proceeds, including the operational security and threat modelling required to safely perform this research and which OSINT and blockchain tools and techniques to use. This workshop covers the full chain, from how cyber criminals steal or extort money to how they get to spend it. Participants will start with OpSec, learning how to set up operations to conduct this kind of research, the threat modelling involved and what options are available, from air-gapped laptops and Tails to Qubes OS and Vms. Since the majority of cybercrime transactions happen in crypto, we'll do a deep dive, from the basics of KYC, CEX, DEX and bridges and how they are used by criminals, then exploring in detail how chains like Monero are being leveraged and how smart contracts like Tornado Cash are used to successfully launder money. Participants will learn which techniques and tools to use to track transactions on and off chain, with a mix of OSINT, Tor and block explorer tools. We'll look at the masters of the game, the Lazarus Group, which managed to launder hundreds of millions, as well as how InfoStealers and ransomware groups go from demanding a ransom to laundering it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XTAwy2f24dAhttps://peertube.dodges.it/static/streaming-playlists/hls/5593c762-b557-4e73-87bf-5f7c0e2ad9f4/65be037f-e804-4a30-abde-7803f661923e-master.m3u8https://peertube.dodges.it/videos/embed/byUTkwwLJBwuKSacvRpbuL2096002026-10-21T23:11:41.359ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jh2npsUqTfhk8mntoQEdCH2026-10-21T20:50:19.545Zhttps://peertube.dodges.it/lazy-static/thumbnails/228c503a-9d82-419c-b139-c9ab3e363e67.jpgDCSG1- Its Still DNS - David LeadbeaterDNS is everyone's favourite Key Value store. It's really not that complex. Or is it? Over 20 years since the late, great Dan Kadminsky gave his Black Ops of DNS talk (2004) there are still edge cases to be found in the DNS ecosystem. Dan's research led to the famous DNS cache poisoning attacks (2008) and many vendors developing and deploying mitigations . This talk will not cover anything quite as impactful, but will show how various different edge cases can lead to some surprising interactions. The focus will be on client side components (stub resolvers, DNS-over-HTTPS and related parts). --- Mirrored from YouTube: https://www.youtube.com/watch?v=Wz748WRdjoshttps://peertube.dodges.it/static/streaming-playlists/hls/94013d6a-4a69-4c5a-b69f-08d53c7e31f1/dae54a31-090a-4d03-ab69-6dcda45e2ba0-master.m3u8https://peertube.dodges.it/videos/embed/jh2npsUqTfhk8mntoQEdCH1806002026-10-21T23:17:38.118ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/c6ehYNnwyeVSdaDVBK967w2026-10-21T20:52:01.203Zhttps://peertube.dodges.it/lazy-static/thumbnails/1f1a06ce-7ad5-4faa-bfe9-c2cb9197af72.jpgDCSG1- Can Maritime Broadcasts Be Trusted? TESLA Based Auth for Maritime VHF Comms - MInwoo LeeMaritime broadcast communications often operate without practical authentication, leaving ships vulnerable to forged, modified, or replayed messages. This talk presents a TESLA-based authentication approach designed for contested maritime VHF environments with limited bandwidth, packet loss, delay, and vessel mobility. It explains the threat model, the design trade-offs, and simulation-based results showing how lightweight broadcast authentication can improve trust in real-world maritime communications. --- Mirrored from YouTube: https://www.youtube.com/watch?v=VHikmfTxgbUhttps://peertube.dodges.it/static/streaming-playlists/hls/59cf6fa1-5e27-49a9-92ff-3888a0988bbe/63222497-1e5a-4f05-9e9c-dc8b40f65752-master.m3u8https://peertube.dodges.it/videos/embed/c6ehYNnwyeVSdaDVBK967w1302002026-10-21T23:17:39.716ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pdmf7JD9ZYKzoAadsjRpsk2026-10-21T20:53:16.266Zhttps://peertube.dodges.it/lazy-static/thumbnails/489a5971-ae82-485b-b1be-2a6a3d279900.jpgDCSG1 - Surveilling Politicians Unmasking Influencers Fake Likes & Dying Together - Dries DepoorterIn this talk, Dries Depoorter takes you inside the technical and creative process behind projects that have made international headlines. "The Flemish Scrollers" runs real-time computer vision on government livestreams to catch politicians scrolling their phones and tags them publicly. "The Follower" combines open surveillance cameras with AI to match Instagram photos to the exact CCTV footage of the moment they were taken. "Die With Me" is a chat app that only works when your phone battery drops below 5%, an experiment in digital scarcity that went viral. The talk also includes a live demo: using a custom Python tool that controls social media accounts, Dries will manufacture fake likes on a post in real time, showing just how easy and cheap it is to break the trust system that social media is built on. This talk is for anyone interested in surveillance, computer vision, social media manipulation, and what happens when you approach security research from the art world instead of the lab. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RQQnwaky_FMhttps://peertube.dodges.it/static/streaming-playlists/hls/bbfb9700-339a-4be3-9df2-0c9eb9f6d6bb/ad0842b1-5ac1-4abb-bdd4-778be5b5a65f-master.m3u8https://peertube.dodges.it/videos/embed/pdmf7JD9ZYKzoAadsjRpsk2005002026-10-21T23:28:41.484ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hYaMLN49zcbmNV4A7dHJkB2026-10-21T20:55:55.378Zhttps://peertube.dodges.it/lazy-static/thumbnails/0426440d-1a90-40a1-a2b1-da82ba91f499.jpgDCSG1 - Cryptocurrency Closing KeynoteClosing the Cryptocurrency areas at DEF CON Singapore 1, we present the ten staff members and their achievements during the event. We review our four major activ ities including the hackathon, contests, workshops, and capture the flag competi tion. A summary of teams, winners, and statistic illustrates the degree of parti cipation. We describe what prizes were awarded and which contestants won big. A list of workshop topics follows, with instructors giving their impressions of ho w modern finance technology benefits from interactive learning. Finally, we give a sneak preview of what's to come in the Cryptocurrency areas (Village, Contest, Vendor, Party) at DEF CON 34 in Las Vegas and how we intend to fulfill the Agency theme. --- Mirrored from YouTube: https://www.youtube.com/watch?v=O0rAyY0hTzohttps://peertube.dodges.it/static/streaming-playlists/hls/8969e708-9985-43b2-a067-329482532041/576f23d0-8c1d-41f3-b2ef-b458fdc42466-master.m3u8https://peertube.dodges.it/videos/embed/hYaMLN49zcbmNV4A7dHJkB2640002026-10-21T23:28:44.190ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sQfVMixDig4im3NAKc4sHB2026-10-21T20:57:16.269Zhttps://peertube.dodges.it/lazy-static/thumbnails/5f879a22-e02f-4744-831e-e8bba7e20e55.jpgDCSG1 - Your Credentials Are Still Mine Extracting Credentials from Latest Browsers - He Li, LiyongModern browsers are finally getting serious about local credential protection. Chrome introduced App-Bound Encryption (ABE) to bind cookies and passwords to application identity, while Firefox 144+ replaced legacy 3DES with AES-256-CBC for stored credentials. These protections are designed to make post-compromise credential extraction significantly harder. But harder does not mean gone. In this talk, we deconstruct the security assumptions behind Chromium’s App-Bound Encryption and Firefox’s updated credential protection model, and show why practical extraction paths still remain viable with only standard user privileges. Without kernel exploits, browser vulnerabilities, or admin rights, we demonstrate fully automated recovery of passwords and cookies from Chrome, Edge, and Firefox 144+ under default configurations. Rather than treating stronger local encryption as the end of the story, this talk explores the gap between improved decryption controls and real-world post-compromise security. Through practical extraction workflows, we show where these protections help, where they still fall short, and why browser credential theft remains a persistent problem on compromised endpoints. --- Mirrored from YouTube: https://www.youtube.com/watch?v=LgtxPHYsD8Uhttps://peertube.dodges.it/static/streaming-playlists/hls/d94a815f-f654-4f29-b1ce-cbfb7a22ec9d/3c0a213e-74c3-4913-9b46-1a996dd4f826-master.m3u8https://peertube.dodges.it/videos/embed/sQfVMixDig4im3NAKc4sHB1312002026-10-21T23:35:43.227ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bkBva1UzpBZ4X6xogy21EK2026-10-21T21:01:48.999Zhttps://peertube.dodges.it/lazy-static/thumbnails/abb95859-5039-47fb-a8f5-821d425c4dc1.jpgDCSG1 - Yes We Taught AI to Hack and It Mostly Works - Ariel Herbert VossAI can hack and that’s all anybody can talk about right now. But WHY is this possible now? This talk is a technical field report that examines what changed over the past three years. We’ll also show what happens when you give these systems real access to targets: what they get right, what they miss, and how they fail in weird ways. If you think AI hacking is hype, you’re half right. If you think it doesn’t matter yet, you’re wrong. Either way, you’ll enjoy learning more about it! --- Mirrored from YouTube: https://www.youtube.com/watch?v=JEGadFdnUBQhttps://peertube.dodges.it/static/streaming-playlists/hls/53b865c4-c72e-4ac3-9cda-00b63631b74f/82dddb53-493b-4757-8386-e4ba7f62e1ef-master.m3u8https://peertube.dodges.it/videos/embed/bkBva1UzpBZ4X6xogy21EK1392002026-10-21T23:35:45.006ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qicoWXGt12bpz45tgqGHKv2026-10-21T21:03:41.908Zhttps://peertube.dodges.it/lazy-static/thumbnails/c1f4074b-5b45-4374-b1c0-39935ce43b23.jpgDCSG1 - Finding a Generic Mali GPU Read:Write Primitive for Real World Exploit Dev - Shuquan ZhouIn Mali GPU exploit development, a reliable arbitrary read/write (R/W) primitive is a critical technique for various vulnerability classes, and for specific cases, it is the sole prerequisite for successful exploitation. In current Mali GPU exploit development, implementing R/W primitive primarily follows two paths: relying on the OpenCL library or utilizing a Job Manager-based write primitive. However, vendor-specific modifications often undermine the versatility and stability of the OpenCL-based primitive, requiring significant adaptation. Meanwhile, the transition to architecture version 10 and beyond has rendered Job Manager-based methods entirely obsolete. These factors leave a technical gap for a flexible, universal, and library-independent R/W primitive on modern Mali GPUs. By tracing OpenCL-to-kernel interactions, we successfully deciphered the CSF commands and its underlying synchronization. We present Mali-RWP, the first stable, generic and library-independent R/W primitive that operates without any vendor runtime. By leveraging low-level completion feedback, Mali-RWP provides a robust, generic solution that fills the technical vacuum in exploit development for the modern CSF-based Mali GPUs --- Mirrored from YouTube: https://www.youtube.com/watch?v=FWoCqjlsSTYhttps://peertube.dodges.it/static/streaming-playlists/hls/c4c1fea7-c460-404c-988d-acd378c0047f/9571f591-b568-4120-963e-eeeb86bf8db3-master.m3u8https://peertube.dodges.it/videos/embed/qicoWXGt12bpz45tgqGHKv2445002026-10-21T23:44:40.376ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/23gSthaFn3Cw95DnpqMvvv2026-10-21T21:05:13.168Zhttps://peertube.dodges.it/lazy-static/thumbnails/5966b3cf-f1f8-49b2-82cd-dbe900c7e8e1.jpgDCSG1 -Smuggling Identities: MIMEHeader Parsing Across Big Email Providers - Hao Wang, Caleb SargentOur recent research reveals a new class of email spoofing attacks that exploit inconsistencies in the parsing of Internet Message Format headers (RFC 5322, updated by RFC 6854) across modern email infrastructure. We demonstrate that message headers (MIME headers), in particular the From header, can be crafted in ways that cause outbound and inbound SMTP servers—and their associated mail clients—to disagree on the effective sender identity. As a result, attackers can deliver spoofed emails that appear to originate from trusted sources while successfully bypassing contemporary email security controls, including authentication and anti-spoofing mechanisms. In this talk, we present a systematic analysis of these parsing discrepancies and show how they can be reliably weaponized to achieve large-scale, provider-agnostic spoofing. We empirically demonstrate that this issue could allow threat actors to spoof emails from millions of valid addresses associated with major providers such as Gmail, Outlook, iCloud, Fastmail, and Proton Mail. We will walk through concrete attack scenarios, discuss root causes in protocol and implementation behavior, and explain why existing defenses fail to detect or block these messages. Finally, we outline practical mitigation strategies . --- Mirrored from YouTube: https://www.youtube.com/watch?v=CtUc_45UUlwhttps://peertube.dodges.it/static/streaming-playlists/hls/086a6813-4fce-4f9a-89a3-927f1a84fb6b/85d067a8-be84-4bf0-80a2-c0a98d677a53-master.m3u8https://peertube.dodges.it/videos/embed/23gSthaFn3Cw95DnpqMvvv2301002026-10-21T23:44:42.169ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/25aUHuKZwx3TpNueRTS2Zq2026-10-21T21:07:15.494Zhttps://peertube.dodges.it/lazy-static/thumbnails/b3a0c03b-931a-4da2-aa21-83059302361b.jpgDCSG1- Lessons Learned in Auto Pentest What to Look for When There Are Time Constraints - Jay Turlaet's face it, OEMs and automotive manufacturers can be demanding. It's not your usual penetration test project, where you just need to file everything you found. There's a lot of paperwork, and you must provide evidence that you tested a specific cybersecurity control or test case. Modern vehicles have electronic architectures composed of interconnected Electronic Control Units (ECUs), multiple communication protocols, and external connectivity interfaces such as Wi-Fi, Bluetooth, cellular, and Ethernet. How do you prepare and get wired? In this talk, we will discuss a structured automotive pentest approach, but there won't be a discussion about TARA. There are a lot of those in automotive security conferences. By combining systematic attack-surface discovery, fuzzing, hardware reverse engineering, and wireless security evaluation, penetration testers can significantly increase the likelihood of identifying critical weaknesses in modern automotive systems using a sound methodology, and this is the aim of this talk. The talk also explores how AI-assisted tooling can support automotive penetration testers by automating parts of the testing workflow, improving fuzzing strategies, and accelerating vulnerability discovery. The goal is to find automotive security bugs using common techniques like CAN Bus Firehose Attacks, dumping the MCU firmware, and leveraging it further. --- Mirrored from YouTube: https://www.youtube.com/watch?v=B8EJ9vK7Qf0https://peertube.dodges.it/static/streaming-playlists/hls/08ae3866-2469-4365-ae6f-32de4d309b06/19b362d0-ecad-40b7-803a-7ed6161eccca-master.m3u8https://peertube.dodges.it/videos/embed/25aUHuKZwx3TpNueRTS2Zq1148002026-10-21T23:50:03.252ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ghYMsmM7rxPWUNZE7E71hk2026-10-21T21:10:12.247Zhttps://peertube.dodges.it/lazy-static/thumbnails/4003db14-c264-4e11-a966-e4efcd815190.jpgDCSG1 - PackageGate: Finding 0 days in every JS Package Manager - Oren Yomtov, Idan DardikmanAfter Shai-Hulud compromised 700+ npm packages, the ecosystem's answer was simple: disable lifecycle scripts and lock your dependencies. What if those defenses don't actually work? We found seven zero-day vulnerabilities across npm, yarn, pnpm, Bun, and vlt that bypass both --ignore-scripts and lockfile integrity verification. Full RCE during package installation with security flags explicitly enabled. Lockfiles that pass validation while serving completely different code. We'll demo popping calc on npm install with --ignore-scripts turned on, show how lockfile integrity checks can be defeated to serve targeted payloads, and explain the specific internals of each package manager that make these attacks possible, from npm's git configuration injection to pnpm's fetch-phase blind spot to Bun's trusted-name confusion. --- Mirrored from YouTube: https://www.youtube.com/watch?v=7VpxOJIySO8https://peertube.dodges.it/static/streaming-playlists/hls/7bd7f973-606f-4f37-ae36-ce85d1daacc3/dd6565db-a7b6-46e1-a7ca-3f8c742c04eb-master.m3u8https://peertube.dodges.it/videos/embed/ghYMsmM7rxPWUNZE7E71hk1374002026-10-21T23:50:06.958ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1CBUyeSgsWV3Kfkxh8Qs2e2026-10-21T21:11:58.635Zhttps://peertube.dodges.it/lazy-static/thumbnails/c26f0463-b869-428f-9f4d-578624824184.jpgDCSG1 - Securing Maritime Operationa Technology - Mark McHargueA “boots on the ground” perspective of balancing operational efficiencies with securing critical infrastructure, from a leading subject matter expert from one of the largest ports in the western hemisphere. --- Mirrored from YouTube: https://www.youtube.com/watch?v=50bjdAawX38https://peertube.dodges.it/static/streaming-playlists/hls/051ce756-65e7-401b-bc4a-bbe0670ed81f/29a72d15-cfbd-439f-8222-84cbb0c363ba-master.m3u8https://peertube.dodges.it/videos/embed/1CBUyeSgsWV3Kfkxh8Qs2e1039002026-10-21T23:54:16.164ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sGJ1ZBptE3hRYei3DBPm4t2026-10-21T21:13:16.446Zhttps://peertube.dodges.it/lazy-static/thumbnails/d52f1402-a00e-498b-939c-dd6f07fa5e21.jpgDCSG1 - A Red Queen view of agents, trust boundaries, and why speed breaks security - Maria SinghMost organizations think they are deploying an AI feature. In reality, they are deploying a new attack chain. As enterprises connect LLMs to tools, retrieval systems, APIs, files, browsers, and decision workflows, the real risk is no longer the model alone. The risk is the system around it. This talk breaks down how AI workflows create new trust failures across prompts, plugins, memory, identity, and action execution. Using practical examples, we will walk through how seemingly harmless AI automation can turn into data exposure, policy bypass, or operational compromise. The session closes with concrete design patterns for reducing blast radius and building AI systems that can move fast without becoming breach accelerators. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4hiTkd3rlR4https://peertube.dodges.it/static/streaming-playlists/hls/d83d3ffb-a23e-40e1-807c-592c3777de41/4d5b14da-3d02-4440-aafa-52a1a2f1d60b-master.m3u8https://peertube.dodges.it/videos/embed/sGJ1ZBptE3hRYei3DBPm4t1108002026-10-21T23:54:17.652ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/afYrQjuCjH9Bi7EebCh4kp2026-10-21T21:14:59.158Zhttps://peertube.dodges.it/lazy-static/thumbnails/cdbdceb9-aad4-4282-b5ef-34ed3de50fef.jpgDCSG1 - Copirate 365 Persistent Plundering in the Depths of Microsoft Copilot - Johann RebergerThis research shows the first memory persistent data-exfiltration attack against Microsoft 365 Copilot. By exploiting Copilot via targeted, malicious instructions, an attacker can backdoor a user's Copilot instance to quietly persist Promptware in long-term storage and have it impact all future conversations. Once established, this foothold lets the attacker hijack Copilot at will and trigger data exfiltration through several bypasses discovered across the Microsoft Office/M365 suite. The talk further examines a technique named Delayed Tool Invocation, that has been shown effective in bypassing guardrails and security controls (e.g. Bard/Gemini), and also creates a blind spot for Copilot. Finally, these findings are connected to a broader issue: The Normalization of Deviance in AI. As LLMs become embedded in high-privilege workflows, vendors are implicitly assuming "the model will do the right thing," even when evidence shows the opposite. This mindset is how risky behavior becomes normalized practice. Attendees will leave with a clear understanding of the attack, the underlying design and implementation flaws, what to look out for and how similar issues might impact your applications and organization. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3bkuMJQEg90https://peertube.dodges.it/static/streaming-playlists/hls/4af97249-645e-4bad-a4c5-696e6189d911/55b9466e-598f-4be3-a1f6-26a3fe0674e5-master.m3u8https://peertube.dodges.it/videos/embed/afYrQjuCjH9Bi7EebCh4kp2872002026-10-22T00:08:30.434ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/odh6eV3v6CqsFXvuDf7Atj2026-10-21T21:18:00.390Zhttps://peertube.dodges.it/lazy-static/thumbnails/12eddeaa-690a-4452-805b-1fde0ee90136.jpgDEF CON SG1 - CSIT Village - James Tan - Uncovering Hidden Threats: CSIT QpproachJoin us as we go behind-the-scenes of threat hunting and investigation. From daily workflows to real-world incident response, discover the strategies and techniques used to detect, analyse, and respond to complex cyber threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vUmC6c8Qzoghttps://peertube.dodges.it/static/streaming-playlists/hls/b3dfe44c-17bc-4092-b53c-2847e8808d68/6308799f-0f70-4505-9a80-753c1c5633ec-master.m3u8https://peertube.dodges.it/videos/embed/odh6eV3v6CqsFXvuDf7Atj1627002026-10-22T00:08:32.894ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/o7C2VHyWjBp6eAC6tLoNgM2026-10-21T21:19:03.760Zhttps://peertube.dodges.it/lazy-static/thumbnails/f78f0e63-fe53-4446-9ebb-20eb8636de82.jpgDEF CON SG1 - CSIT Village - Ernest Ang - From Chrome Renderer, To Mouse To SystemYou click on a link. A download prompt appears. Your mouse suddenly seems to take on a life of its own and clicks the pop-up. Before you know it, your Windows machine belongs to me. This session breaks down an amusing and far-fetched (yet entirely technical) exploit chain, starting from the highly restrictive Chromium renderer process and escalating to kernel-level privileges by chaining and abusing three vulnerabilities: CVE-2024-5274, CVE-2024-11114, and CVE-2025-29824. I will be sharing my learnings, laughs and grief while venturing into V8, Mojo, CLFS and everything in between (i.e. Ubercage, kCFG) while attempting to make this work. --- Mirrored from YouTube: https://www.youtube.com/watch?v=u-AmlDm-pNEhttps://peertube.dodges.it/static/streaming-playlists/hls/b315b82a-364e-49fb-8aeb-e19d6f4e4f5b/7a1f419a-aa20-495c-bfa5-9b3f7080513c-master.m3u8https://peertube.dodges.it/videos/embed/o7C2VHyWjBp6eAC6tLoNgM2309002026-10-22T00:29:41.255ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/guMKXj61Jcrga1q6YCN6yb2026-10-21T21:20:45.560Zhttps://peertube.dodges.it/lazy-static/thumbnails/2af4def5-62cf-4ef0-a74c-26255cbcc75c.jpgDEF CON SG 1 - CSIT Village - Kan Onn Kit - Struct Reconstruction In AetherIn stripped binaries, malware analysts often struggle in a sea of raw offsets and pointer arithmetic. We share our journey of data structure reconstruction with AETHER. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tH4AzyxPz-Qhttps://peertube.dodges.it/static/streaming-playlists/hls/7d7e1ace-e2c6-485d-b164-804553a446ae/d1f36904-e0ff-4651-9c91-5a4cc41dadf2-master.m3u8https://peertube.dodges.it/videos/embed/guMKXj61Jcrga1q6YCN6yb1225002026-10-22T00:29:44.667ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8p85kJDTH7fE4VzdAsgvBE2026-10-21T21:23:55.836Zhttps://peertube.dodges.it/lazy-static/thumbnails/a7299141-e604-4774-bd37-b835a93541f8.jpgDEF CON SG1 - CSIT Village - Jun Rong And Javier Koh - Cve 2025 52692 Rogue Request Roots RouterThis talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router. We will show how a simple string comparison flaw allowed a complete authentication bypass, eventually gaining full root access with a single HTTP request. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nxtikf--Zzchttps://peertube.dodges.it/static/streaming-playlists/hls/3bea6ff6-2e09-4df8-9c3a-626e00b830e0/4748c711-2a92-4f9c-ab83-456353ca577f-master.m3u8https://peertube.dodges.it/videos/embed/8p85kJDTH7fE4VzdAsgvBE1432002026-10-22T00:57:10.722ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mb9poi72fan2fXXYozJSrM2026-10-21T21:26:06.802Zhttps://peertube.dodges.it/lazy-static/thumbnails/f19ebf4d-34e4-46a7-81fb-a70b8633c79a.jpgDEF CON SG1 - CSIT Village - Daryl Lim, Zhi Kai - Rolling Api Tokens A Thought ExperimentA thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nOzZIUhlsyQhttps://peertube.dodges.it/static/streaming-playlists/hls/a36163b9-16aa-4e6f-be27-1f1204974abf/b4289153-9700-4fd7-b97d-3297fa3af9bd-master.m3u8https://peertube.dodges.it/videos/embed/mb9poi72fan2fXXYozJSrM989002026-10-22T00:57:14.137ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/m3wo8jHamAVoZMJ4kCUF1V2026-10-21T21:27:13.174Zhttps://peertube.dodges.it/lazy-static/thumbnails/9639388f-e598-415b-82e4-87532584a2b6.jpgDEF CON SG1 - CSIT Village - Kang Hao - Android Security Javascript Bridge Is Falling DownAn insecure JavaScript bridge (JSB) in Android WebView allows attackers to abuse exposed interfaces to read local files and steal session cookies, leading to full account takeover via malicious deep links and JavaScript injected into the Android WebView context. During this session, we will dive into the details. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lp1jOnZpDCohttps://peertube.dodges.it/static/streaming-playlists/hls/a250fbe7-3110-4624-89a7-cec98434c4b1/5466bc43-6ab9-47dc-ba79-9697fc0ac652-master.m3u8https://peertube.dodges.it/videos/embed/m3wo8jHamAVoZMJ4kCUF1V1457002026-10-22T01:38:00.335ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tRLWWuUiYPZHWgC65fTdtj2026-10-21T21:28:29.381Zhttps://peertube.dodges.it/lazy-static/thumbnails/57b339d1-43ab-4c9e-93e1-c56c442b865c.jpgDEF CON SG1 - CSIT Village - Poh Cai Min & Shawn Pang - Kînig Bridging Webapi Fuzzing With A GraphGrammar-based fuzzing made painless! This talk highlights how the generation of grammar files for browser WebAPIs can be automated and visualised with the help of a network graph. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l3J33xJAzZghttps://peertube.dodges.it/static/streaming-playlists/hls/e199e365-7e4b-402c-bfba-0fa83edb0778/dad937e2-407c-4179-8928-b699f9a564fe-master.m3u8https://peertube.dodges.it/videos/embed/tRLWWuUiYPZHWgC65fTdtj1317002026-10-22T01:38:05.940ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ucmvrvcyQ8F3ptunW4zrVo2026-10-21T21:29:36.910Zhttps://peertube.dodges.it/lazy-static/thumbnails/af22e32f-050a-4373-8c32-64b38aff5e70.jpgDEF CON SG1 - Theodore Lee - Ashes To Analysis: Deconstructing Malware With AetherReverse engineering (RE) is time consuming and resource intensive. With recent advances in AI agents and large language models (LLMs), we share our journey in applying these technologies to accelerate the malware RE process. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hixC4pmnbFAhttps://peertube.dodges.it/static/streaming-playlists/hls/e455b3c3-190e-4e11-9f4a-314a0e4cf4f4/775a5d79-7dd1-4ab3-97d8-59666fa954dc-master.m3u8https://peertube.dodges.it/videos/embed/ucmvrvcyQ8F3ptunW4zrVo1075002026-10-22T01:57:32.184ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/287URToJNGjxdQiofqbCNe2026-10-21T21:30:40.500Zhttps://peertube.dodges.it/lazy-static/thumbnails/ba2d5904-7df3-4c14-8f2d-c04ac3598237.jpgDEF CON SG1 - CSIT Village - Chua Meng Han - From CTF To CVE 202552691 Lessons Hidden In Plain SightCritical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today. This session deconstructs how simple, overlooked design flaws can be weaponised for catastrophic impact. We will also share practical insights on how to mitigate these threats, with strategies that can be implemented at different levels. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fN8mMKp4SAMhttps://peertube.dodges.it/static/streaming-playlists/hls/09179ab6-05a1-4d5e-943c-5abbcce0c159/98998721-9a9b-4339-a5b5-0fcb35ca079b-master.m3u8https://peertube.dodges.it/videos/embed/287URToJNGjxdQiofqbCNe1776002026-10-22T01:57:36.998ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rfFpSViQkThQJa4oZRo2Jh2026-10-21T21:32:17.073Zhttps://peertube.dodges.it/lazy-static/thumbnails/05d7d58a-d70e-43bc-b104-918ca2ee2e72.jpgDEF CON SG1 - CSIT Village - Loke Yan Hao -Hack Smarter: Unleashing AI in Bug Bounty Pen TestingWe share our findings from using AI tools for web penetration testing on bug bounty programmes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=doanWlYLAMwhttps://peertube.dodges.it/static/streaming-playlists/hls/cc812ae7-8ae5-45ff-be92-5e85389a6cd8/ec0e684b-15c3-40e2-8ea7-f6a2c2a2374e-master.m3u8https://peertube.dodges.it/videos/embed/rfFpSViQkThQJa4oZRo2Jh1146002026-10-22T02:13:11.946ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kzucbCtjbcYC1qac7n3GC52026-10-21T21:33:49.830Zhttps://peertube.dodges.it/lazy-static/thumbnails/d8ec8130-2332-4977-a35c-9beedacedefc.jpgDEF CON SG1 - CSIT Village - Anton Chua - Cyber Physical: The Soft Underbelly?This session re-examines physical security assumptions in Cyber Defence structures. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ZO1lChlp6Mkhttps://peertube.dodges.it/static/streaming-playlists/hls/9e8a8daa-ea2d-439a-b572-f09bb2b7f96c/46d3cc4b-24d2-416a-8181-231b6c477f7c-master.m3u8https://peertube.dodges.it/videos/embed/kzucbCtjbcYC1qac7n3GC51248002026-10-22T02:13:14.017ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/drejmjoJNkpkXtWTeBQVXr2026-10-21T21:35:31.751Zhttps://peertube.dodges.it/lazy-static/thumbnails/8e22a9c2-9a16-43e9-8e5f-6e5ec6730019.jpgDEF CON SG1 - CSIT Village - Liu Wen Kai, Martin Koh - Your Next Forensic Analyst is AI AgentsDuring this session, we will share an automated end-to-end AI workflow to perform digital analysis on Windows images with capabilities of fully on-premise investigation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Yo380Lfk_3Ahttps://peertube.dodges.it/static/streaming-playlists/hls/64b376f5-7ca2-4f75-90a7-f16571300993/214d4f49-c98b-49d9-a531-9180fba2d59c-master.m3u8https://peertube.dodges.it/videos/embed/drejmjoJNkpkXtWTeBQVXr1646002026-10-22T02:30:31.680ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qMW4YfLvrhiTCkCVZdG3J52026-10-21T21:37:32.351Zhttps://peertube.dodges.it/lazy-static/thumbnails/b643b9a0-7365-4460-b239-84062de5465e.jpgDEF CON SG1 - CSIT Village - Sim Wei Jun - Bind & Breach Injecting Postgresql Queries@Protocol LevelThis presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level. It clarifies exploitation conditions, details the exploit steps, and demonstrates the vulnerability through custom exploit code targeting a Harbor deployment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YZK98rFCMbAhttps://peertube.dodges.it/static/streaming-playlists/hls/c8c51e4c-7113-41ae-9068-a7f3fd417bb0/86c6e2be-5fc7-4ee8-9105-ad168777faa8-master.m3u8https://peertube.dodges.it/videos/embed/qMW4YfLvrhiTCkCVZdG3J51157002026-10-22T02:30:34.466ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fhRhYzmUkTgRbYhqZvNSYu2026-10-21T21:39:26.739Zhttps://peertube.dodges.it/lazy-static/thumbnails/8fe5aa40-6bad-40ed-a8ec-041c1b14ed59.jpgDEF CON SG1 - CSIT Village - Shao Xiang -Thinking like the enemy: Adversary MindsetUnderstanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically strengthen defenses. This session introduces the four pillars that help defenders think like adversaries, enabling proactive planning, better prioritisation, and more effective response strategies. --- Mirrored from YouTube: https://www.youtube.com/watch?v=SDZ95UJi1fshttps://peertube.dodges.it/static/streaming-playlists/hls/73ba3820-f9d8-4851-8447-23d5842d2274/021fbc7f-d932-45aa-b9aa-a602f41dda18-master.m3u8https://peertube.dodges.it/videos/embed/fhRhYzmUkTgRbYhqZvNSYu1444002026-10-22T02:54:10.494ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8GP8qZHHrgfcA99M2esGos2026-10-21T21:41:31.700Zhttps://peertube.dodges.it/lazy-static/thumbnails/ee602bbc-78bf-4758-b9bb-29d6252b3fc5.jpgDEF CON SG1 - CSIT Village - Kenneth Huang Shaoqi - How A No Write Can Compromise System SecurityCompilers generate all our code, but they don’t get it right all the time. In this talk, we’ll introduce how compilers can affect software security in general, before going deep into a V8 optimization n-day from the perspective of a vulnerability researcher. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PuKePTZWo0whttps://peertube.dodges.it/static/streaming-playlists/hls/3e62c3e1-3eb3-4e21-b222-15ffac894f76/f0d92715-d25b-429b-aa5d-d9044c9efcd0-master.m3u8https://peertube.dodges.it/videos/embed/8GP8qZHHrgfcA99M2esGos2428002026-10-22T03:02:22.419ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/usNsmYxcR1zFmDYDxr7Yhk2026-10-21T21:43:07.613Zhttps://peertube.dodges.it/lazy-static/thumbnails/e114e4d3-d19e-453c-8108-d257b269013d.jpgDEF CON SG - CSIT Village - Kendrick Yeo, Eugene Ong - Learning OT Through A Digital TwinDuring this session, we will share simulated water testbed, and the attacks that can work on it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=JLcx2sqUbBAhttps://peertube.dodges.it/static/streaming-playlists/hls/e67dd95f-3953-432b-adaa-5d66d3a4c9b3/3cf40926-da3d-4cc0-a1ce-311166b61d0f-master.m3u8https://peertube.dodges.it/videos/embed/usNsmYxcR1zFmDYDxr7Yhk1486002026-10-22T03:02:25.534ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/16erNj2ikveexFUDzifxdf2026-10-21T21:44:45.476Zhttps://peertube.dodges.it/lazy-static/thumbnails/024093a2-87f2-4860-8049-fe666d98a587.jpgDEF CON SG 1 - CSIT Village - Koh Kian Woon - Not All Firefox Bugs Are Equal-Heap Grief & CFG BypassAs AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders. This talk highlights that effective security requires going beyond severity ratings to truly understanding threats and to prioritise real-world exploitability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EJFCwq_hUyshttps://peertube.dodges.it/static/streaming-playlists/hls/00bb0127-1c7c-49d0-b9af-fdfd05fef242/1b9bec56-29d4-4203-b757-ccb4d46f0da0-master.m3u8https://peertube.dodges.it/videos/embed/16erNj2ikveexFUDzifxdf1295002026-10-22T03:15:26.119ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5bS6sL83s3NF6av5AfUNbm2026-10-21T21:47:10.963Zhttps://peertube.dodges.it/lazy-static/thumbnails/196cf9ff-7042-47fe-989c-9ed31a03356f.jpgDEF CON SG1 - CSIT Vilage - Arne Sim - TISC : Behind The Scenes In CTF Challenge CreationThe InfoSecurity Challenge (TISC) is one of Singapore's most anticipated Capture-the-Flag competition (CTF), hosted annually by CSIT. Join one of the challenge creators as he shares his creation process and learn what goes on behind-the-scenes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EFqcMPPaK_Ihttps://peertube.dodges.it/static/streaming-playlists/hls/21e8dd2c-c0d4-4e8c-86c3-3a14d9bb4590/a62add55-c553-4afb-8799-995bb00a0804-master.m3u8https://peertube.dodges.it/videos/embed/5bS6sL83s3NF6av5AfUNbm981002026-10-22T03:15:28.443ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wcPvaF6XBh2KS1UDAsXtDr2026-10-21T21:49:42.819Zhttps://peertube.dodges.it/lazy-static/thumbnails/02e06127-6a0f-42a3-9f1f-ab2c8f1b5b38.jpgDEF CON SG1 - CSIT Village - Sng Peng Boon - Web Hacking Lessons from Pre Gov Bug Bounty ProgramWe share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared. We will also walk through real-world vulnerabilities and recommend practical takeaways for both bug hunters and developers. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Ahn_J8QS7Oohttps://peertube.dodges.it/static/streaming-playlists/hls/f4989daf-5c35-43b5-9ea9-bb8e1398adff/cc055957-07ff-4498-8eec-8bf4545b196d-master.m3u8https://peertube.dodges.it/videos/embed/wcPvaF6XBh2KS1UDAsXtDr1425002026-10-22T03:27:23.299ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sb1Nd3t5Q2QLNCbRL67Nn92026-10-21T21:50:45.514Zhttps://peertube.dodges.it/lazy-static/thumbnails/8c4d56c8-2430-4f08-a81b-d38fcceb2f7d.jpgDEF CON SG1 - CSIT Village - Lim Jing Qiang - Registry Stored Payloads For Usb Rubber DuckiesUsing the rubber ducky to deploy a large payload in an air-gapped environment is no easy feat. This talk introduces a way of leveraging USB descriptors to store large payload in the Windows Registry and retrieving it through keystroke injection. --- Mirrored from YouTube: https://www.youtube.com/watch?v=9MEqSUlgAD8https://peertube.dodges.it/static/streaming-playlists/hls/d3f388a9-4b68-436b-92c6-23dc4e40a242/4dd66caa-7853-4da9-92a6-0305a445e2a3-master.m3u8https://peertube.dodges.it/videos/embed/sb1Nd3t5Q2QLNCbRL67Nn9763002026-10-22T03:27:25.764ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6kKzRKMrmjSP19qcdm7KfP2026-10-21T21:51:47.964Zhttps://peertube.dodges.it/lazy-static/thumbnails/b12d359b-3fa4-451c-b1c9-2debb4271d53.jpgDEF CON SG1 - CSIT Village - Daniel Siok - Balancing Security&Usability In AirGapped ImplementationsWhat does an air-gapped system really mean in practice? This talk introduces the basics of air gap systems and data diode, then explores how real world requirements shape systems design and what that means for security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=5rU62SvD3TYhttps://peertube.dodges.it/static/streaming-playlists/hls/2b3faf33-2005-4454-b72a-a112600312d7/177c1778-678e-4f09-899e-c8a1dbed0dfe-master.m3u8https://peertube.dodges.it/videos/embed/6kKzRKMrmjSP19qcdm7KfP768002026-10-22T03:46:40.635ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/p1X1J4zbe3XQ1ugp8uMz5k2026-10-21T21:53:26.083Zhttps://peertube.dodges.it/lazy-static/thumbnails/589bcbea-fd67-44da-9488-b6a52f4d00fa.jpgDEF CON SG1 - CSIT Village - Eugene Lim - Mic Drop: Hacking into Enterprise Audiovisual HardwareAudiovisual hardware - from web conferencing cameras to meeting room systems - is deeply embedded in modern enterprises' physical attack surface. However, they are often poorly secured and monitored. This presentation dives into real and novel vulnerabilities discovered in enterprise-grade equipment, and walks through the risks they can pose to any organisation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=-Rkh47bu-lchttps://peertube.dodges.it/static/streaming-playlists/hls/ba641782-cc87-4676-9e47-61de9a3db207/1789c813-6d34-494f-bce0-23ba586f7637-master.m3u8https://peertube.dodges.it/videos/embed/p1X1J4zbe3XQ1ugp8uMz5k1614002026-10-22T03:46:43.358ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/inqXGKPw9sP9NibcgmJY8g2026-10-21T21:55:15.012Zhttps://peertube.dodges.it/lazy-static/thumbnails/99e5169f-5dc4-42ea-8b28-ff57a9402ce4.jpgDEF CON 34 - Hacking AI - Bruce SchneierHumans are hacking AI systems. Humans are hacking with AI systems. But also, AIs are hacking human systems. They’re finding and exploiting vulnerabilities in computer code, and they’ll soon be doing the same with all sorts of other codes. For example: the tax code can be hacked. Vulnerabilities are called loopholes, exploits are called tax avoidance strategies, and black hats are called accountants. Similarly, financial markets can be hacked. So can any system of rules or laws, including democracy itself. AIs will hack these systems at our request, and they’ll also do this innately, organically – and possibly in ways we don’t immediately see. We need to consider a world where increasingly sophisticated hacks or our social, economic, and political systems are discovered computer speeds, and then exploited at computer scale and scope. Right now, our systems of patching these systems operate at a human pace, which won't be good enough. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eEBv0STiYhIhttps://peertube.dodges.it/static/streaming-playlists/hls/8ca95bd8-d508-428e-822d-f6ed2d7c9875/0c7503ae-130b-4c03-a642-774e4fddaa07-master.m3u8https://peertube.dodges.it/videos/embed/inqXGKPw9sP9NibcgmJY8g2674002026-10-22T04:29:27.495ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pbtyDevp4tyUvZ9pVpUjPb2026-10-21T22:10:54.292Zhttps://peertube.dodges.it/lazy-static/thumbnails/c3e596d6-a453-4dd2-84e4-d917639965c4.jpgDEF CON 34 - ESP32 as counter-surveillance platform - Cybertiger, Colonel Panic, The WrewPrivacy should be accessible to all. Historically, counter-surveillance tools have been expensive, complex, and inaccessible to most individuals, often limited to well-funded researchers and costly hardware configurations. The ESP32 offers a transformative alternative. This presentation will demonstrate how an affordable microcontroller has become the foundation for a growing suite of open-source, user-friendly anti-surveillance tools. We will discuss the technical features that make the ESP32 a compelling choice for these applications, including passive 802.11 and Bluetooth monitoring, OUI-based device fingerprinting, and robust cryptographic capabilities. Applications include detecting police body cameras in operational environments, mapping Flock Safety automatic license plate recognition (ALPR) infrastructure, identifying unauthorized drones, detecting radio frequency jamming across 2.4GHz, 5GHz, and cellular bands, and tracking autonomous robots operating with known-vulnerable firmware. These tools are cost-effective and freely available. We will also consider future developments in accessible counter-surveillance hardware, such as the ESP32-S5 with 5GHz support, GPS, displays, haptics, etc. Advancing anti-surveillance culture requires designing devices that individuals are motivated to use and carry. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PcK-TDmzshchttps://peertube.dodges.it/static/streaming-playlists/hls/bbb89cf1-1aac-4dda-97e5-ae0b7ad8fca8/8e957bdf-c122-4da0-a15b-b50c84f8bf23-master.m3u8https://peertube.dodges.it/videos/embed/pbtyDevp4tyUvZ9pVpUjPb2667002026-10-22T04:33:43.681ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/uZcFiuNveiAx2y3qnEe3me2026-10-21T22:11:51.570Zhttps://peertube.dodges.it/lazy-static/thumbnails/ace17f4c-1ca9-455c-b8e6-16dc848a602e.jpgDEF CON 34 - Video Team - Scavenger Hunt Slot Machine1988 Japanese Slot Machine for your enjoyment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=86TLtYkpyKIhttps://peertube.dodges.it/static/streaming-playlists/hls/eabc7955-2723-4919-b2b3-414a575d0a65/efc85ed5-8431-4c0a-9582-4168fa65683c-master.m3u8https://peertube.dodges.it/videos/embed/uZcFiuNveiAx2y3qnEe3me198002026-10-22T04:33:50.812ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kvJ72LKo1FL97JAFdUXZ5j2026-10-21T22:12:49.787Zhttps://peertube.dodges.it/lazy-static/thumbnails/24275489-cb24-4eb2-9cee-a69af97a03e7.jpgDEF CON 34 - Video Team - I Am the Cavalry - Josh and DeanWe catch up with the folks from I Am the Cavalry (IATC) for an update on their project. --- Mirrored from YouTube: https://www.youtube.com/watch?v=KKSRwtMGYQUhttps://peertube.dodges.it/static/streaming-playlists/hls/9e0426bf-f02f-4f6d-bd1a-df62e5028616/8ab8e7ed-450c-4efd-bf7b-d09eeb95f671-master.m3u8https://peertube.dodges.it/videos/embed/kvJ72LKo1FL97JAFdUXZ5j259002026-10-22T04:33:48.810ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tfu4cUjHCFhX6CuwAa2wcB2026-10-21T22:20:31.376Zhttps://peertube.dodges.it/lazy-static/thumbnails/d544afa6-b7e3-447f-bcf3-c2608af2bc34.jpgDEF CON - noRecognition: Could a pattern on clothing fool Facial Recognition? - Bill SwearingenYou are being watched. Not in the vague, philosophical sense. Right now. The ATM you used this morning. The gas pump. Every doorbell on your block. The 125 smart streetlights you walked past on your way to lunch. You are indexed, cataloged, and matched against databases you never consented to join, by AI models that are wrong more often than the vendors will ever admit. Other solutions to this involves looking ridiculous. Face paint. IR glasses. Masks. Real-time deepfake software running on your phone. Congrats, you defeated the algorithm AND ensured every human within 50 feet is staring at you. Super subtle. I built something different. noRecognition is a genetic algorithm that breeds adversarial patterns, printed on ordinary fabric, that defeat the entire facial recognition pipeline: person detection, face detection, and identity recognition across 10 models used by Clearview AI, Axon, Hikvision, and Palantir. No electronics. No software. You look like a person wearing a scarf. The AI sees nothing. I will demonstrate this live on stage. One camera. One scarf. Zero detections. Come watch me disappear. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WyPmt8CE5L4https://peertube.dodges.it/static/streaming-playlists/hls/dcac723e-b584-448f-b91d-d07b61a3cf51/2790c833-0723-4d24-acab-f455f1979c87-master.m3u8https://peertube.dodges.it/videos/embed/tfu4cUjHCFhX6CuwAa2wcB2779002026-10-22T05:34:50.770ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/it73yqZCz69kUvmj8ttT4z2026-10-21T22:28:40.481Zhttps://peertube.dodges.it/lazy-static/thumbnails/1154fe1d-9604-4eb8-b758-04ea897889ab.jpgDefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll40 years ago today, I tripped over a 75-cent accounting glitch in a Unix system. That tiny clue led to a year-long chase across networks, modem banks, and international borders, ultimately uncovering a crew of German hackers working for the East German Stasi and the Soviet KGB. We had no budget, no roadmap, and no “cyber” anything. We improvised with soldering irons, shell scripts, logbooks, curiosity, and far too much coffee. Let’s revisit the chase – not just to remember, but to ask what changed, what didn’t, and why it still matters. --- Mirrored from YouTube: https://www.youtube.com/watch?v=656058JxTM0https://peertube.dodges.it/static/streaming-playlists/hls/8d7429f0-f86e-4a9e-93a8-a86eda079cc3/01bc309e-9dd7-4189-a747-2f56d6b94280-master.m3u8https://peertube.dodges.it/videos/embed/it73yqZCz69kUvmj8ttT4z3426002026-10-22T05:35:37.276ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vzF39dGPDnyLj9HzYufQ1j2026-10-21T22:32:22.295Zhttps://peertube.dodges.it/lazy-static/thumbnails/e5028382-85cc-4158-a269-9f12f6ad90e2.jpgDEF CON 34 - Video Team - Ham Radio Village - Marvin Goes HAMIn which young Marvin goes to the HAM Radio Village and makes us all smile. --- Mirrored from YouTube: https://www.youtube.com/watch?v=f02wH61gk8Mhttps://peertube.dodges.it/static/streaming-playlists/hls/ef8c9f77-093d-4824-9e78-b4f7eb1a0682/8bffb519-507c-45e1-ac3e-5b4c08ef9463-master.m3u8https://peertube.dodges.it/videos/embed/vzF39dGPDnyLj9HzYufQ1j268002026-10-22T07:01:28.769ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6AdPs8iVofnyfpTedEJfe62026-10-21T22:32:53.891Zhttps://peertube.dodges.it/lazy-static/thumbnails/05de484a-731b-4f7d-8e77-709f373e32bf.jpgDEF CON 34 - Video Team - PhreakMeSoldier of FORTRAN brings back old-school phreaking in contest form. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uAZi-dCehuIhttps://peertube.dodges.it/static/streaming-playlists/hls/2d44e184-146f-46e7-bfba-ce0d7c292d1f/8cdbbe2f-d703-4a6f-96b3-ebf4c91c5f98-master.m3u8https://peertube.dodges.it/videos/embed/6AdPs8iVofnyfpTedEJfe6511002026-10-22T07:01:24.208ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jqDeTc1MbuJVtfb5ZD9bsE2026-10-21T22:33:37.964Zhttps://peertube.dodges.it/lazy-static/thumbnails/92781259-675b-4041-9fa3-0ef70f33bd0b.jpgDEF CON 34 - Video Team - EmbeddedSystems VillageThe full lowdown on the Embedded Systems Village at DEF CON 34 --- Mirrored from YouTube: https://www.youtube.com/watch?v=fqs--Ha7gfwhttps://peertube.dodges.it/static/streaming-playlists/hls/95354bc1-ea7b-45f6-a0ae-05be978b00a2/591d65e1-fc7b-4164-aebe-56ea425158df-master.m3u8https://peertube.dodges.it/videos/embed/jqDeTc1MbuJVtfb5ZD9bsE545002026-10-22T07:01:17.219ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1A64xWcq6kbmNJYLB9V6qa2026-10-21T22:34:17.831Zhttps://peertube.dodges.it/lazy-static/thumbnails/27d25cc4-bbad-4aa2-95a9-bd2310d3e503.jpgDEF CON 34 - Video Team - LEECHYou wouldn't download a car. --- Mirrored from YouTube: https://www.youtube.com/watch?v=OqswVKiCN4whttps://peertube.dodges.it/static/streaming-playlists/hls/04c26842-9388-4d29-a429-d1f3fd5033d5/2b08dad6-ba4b-400f-bd7f-53bab22bbaef-master.m3u8https://peertube.dodges.it/videos/embed/1A64xWcq6kbmNJYLB9V6qa845002026-10-22T07:01:04.573ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vNifmQgb55PVaLTVxrSrUq2026-10-21T22:35:05.001Zhttps://peertube.dodges.it/lazy-static/thumbnails/94b673a5-9914-4544-989e-d06fb5624ffe.jpgDEF CON 34 - Video Team - Voting Machine Hacking VillageVoting Village returns to DEF CON 34 to consider the state of election security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=toi0keDnOschttps://peertube.dodges.it/static/streaming-playlists/hls/f14fdd1e-f424-4a05-93ea-5d32e46e79e4/7a1dee96-5fc7-4191-98e1-cfead28941ba-master.m3u8https://peertube.dodges.it/videos/embed/vNifmQgb55PVaLTVxrSrUq767002026-10-22T05:50:33.315ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hNHWGTrNHgFtMcRGh5DWF42026-10-21T22:35:40.257Zhttps://peertube.dodges.it/lazy-static/thumbnails/44174a09-6f42-4091-9a80-2649095752b8.jpgDEF CON 34 - VideoTeam - Cliff Stoll AfterHoursAn interview with the delightful Cliff Stolll. So very worth your time --- Mirrored from YouTube: https://www.youtube.com/watch?v=AJCWsoozg0Qhttps://peertube.dodges.it/static/streaming-playlists/hls/881847c7-871b-4706-b173-f36be142f1f9/a61b5120-1398-4683-a826-0c6fff9d74a7-master.m3u8https://peertube.dodges.it/videos/embed/hNHWGTrNHgFtMcRGh5DWF4624002026-10-22T05:50:35.013ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/573736H2me3V1FiyYUt2Dd2026-10-21T22:36:18.045Zhttps://peertube.dodges.it/lazy-static/thumbnails/73e9fa1e-6ad1-44b0-b8fc-f48a750b55d9.jpgDEF CON 34 - Video Team - Car Hacking Village - Charger HackingWe get an EV charger hacking breakdown from the legend MajorMalfunction. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uF8c7Ty-5zAhttps://peertube.dodges.it/static/streaming-playlists/hls/213c505e-6675-423b-adca-32ca8a474f8a/31faeaa5-e7e2-4b0b-bf2b-457fc2398303-master.m3u8https://peertube.dodges.it/videos/embed/573736H2me3V1FiyYUt2Dd502002026-10-22T06:15:06.967ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/eVLyn12mxwA8wk8uVcUNC52026-10-21T22:37:11.794Zhttps://peertube.dodges.it/lazy-static/thumbnails/8224b0a4-8d87-4d9e-86a4-f56f56a9751f.jpgDEF CON 34 - Video Team - AI Village - PokemonFrom the AI Hacking Village - an AI that plays Pokemon for you, without costing you 20 grand in tokens. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Egzf_aWSxZchttps://peertube.dodges.it/static/streaming-playlists/hls/70c8aea5-7bae-4af2-a3b8-2a45253c6214/866396de-ca18-41b7-bcd8-050f6ce54990-master.m3u8https://peertube.dodges.it/videos/embed/eVLyn12mxwA8wk8uVcUNC5810002026-10-22T07:00:44.598ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kZsxSZHayEhMugyw3JSUFL2026-10-21T22:37:43.426Zhttps://peertube.dodges.it/lazy-static/thumbnails/9b0a4d8d-f362-4b69-a9bb-81f7f0f864d8.jpgDEF CON 34 - Video Team - DEF COIN 34 Badge - Bunnie HuangThe lowdown on the amazing DC34 badge from the designer himself. --- Mirrored from YouTube: https://www.youtube.com/watch?v=1plmJlWSKa0https://peertube.dodges.it/static/streaming-playlists/hls/a1e36427-82be-473e-a29d-5f6bfc6f6682/bd90aba0-f451-4cce-973b-704934f1e661-master.m3u8https://peertube.dodges.it/videos/embed/kZsxSZHayEhMugyw3JSUFL515002026-10-22T07:00:59.168ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1HJubVPPWyutEt22F4ojXn2026-10-21T22:38:06.169Zhttps://peertube.dodges.it/lazy-static/thumbnails/45de054a-0e12-458c-8da8-efb88fc137b5.jpgDEF CON 34 - Video Team - DEF CON Groups Highlight DC256If you're not in a DEF CON Group, you're missing out on the opportunity to keep the DEF CON vibes going all year long, Ryan from the Video Team gets some fresh info from DC256 in Huntsville, Alabama --- Mirrored from YouTube: https://www.youtube.com/watch?v=u-SsrNy-cK0https://peertube.dodges.it/static/streaming-playlists/hls/05d3ad70-c88b-426a-a713-eb0ce8d63ed3/75d2ccad-4829-4717-b39f-76ee79f31782-master.m3u8https://peertube.dodges.it/videos/embed/1HJubVPPWyutEt22F4ojXn344002026-10-22T07:00:54.380ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iSX3AimAYyvStZv4PCZWMP2026-10-21T22:38:20.514Zhttps://peertube.dodges.it/lazy-static/thumbnails/31d045e0-f07a-4af4-918b-82f55ab77657.jpgDEF CON 34 - Good Morning--- Mirrored from YouTube: https://www.youtube.com/watch?v=XR3a4B4W-hQhttps://peertube.dodges.it/static/streaming-playlists/hls/90c877dc-80c8-43dd-aa24-9547b20e3bc1/7a28425b-9c95-40e4-9027-28b99530d3ab-master.m3u8https://peertube.dodges.it/videos/embed/iSX3AimAYyvStZv4PCZWMP14002026-10-22T07:00:51.354ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/53tD41esXixpfFcjDfkc9i2026-10-21T22:38:50.405Zhttps://peertube.dodges.it/lazy-static/thumbnails/bc92a89d-bb0c-43fb-8ce6-0ce745cacb37.jpgDEF CON 34 - DEF CON Policy Announcement - Katie Noble, Heather WestThe new leadership of the DEF CON Policy project share the goals of DEF CON Policy and remind you that their Call for Papers closes May 1. --- Mirrored from YouTube: https://www.youtube.com/watch?v=y7vMt_IM0Bwhttps://peertube.dodges.it/static/streaming-playlists/hls/20bd1340-fe06-4a6f-b5d3-84f6328c9565/617759b8-60b1-4357-8f35-cc6617fa07dc-master.m3u8https://peertube.dodges.it/videos/embed/53tD41esXixpfFcjDfkc9i202002026-10-22T07:00:49.155ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hWsJjdKFAHfceSXwTudajR2026-10-21T22:45:31.012Zhttps://peertube.dodges.it/lazy-static/thumbnails/c15b5e6d-27de-45c7-945a-4ec6cff00b5e.jpgDEF CON 33 - DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks - Ryan EmmonNetwork Attached Storage (NAS) devices are indispensable in many corporate and home environments. These devices often live on the network edge, providing convenient remote access to confidential files and internal networks from the public internet. What happens when this goes terribly wrong? In this presentation, I’ll discuss how I developed a zero-day exploit targeting dozens of Synology NAS products. At the time of discovery, the exploit facilitated unauthenticated root-level remote code execution on millions of NAS devices in the default configuration. My exploitation strategy centered around smuggling different types of delimiters that targeted multiple software components. In the past, exploitation of the vulnerability’s bug class demanded additional primitives that weren’t available on my targets. While searching for alternative paths, I discovered a novel remote Linux exploitation technique. I’ll be presenting this technique, which can be used in other researchers’ exploit chains in the future. For the first time in public, I’ll also be discussing the details of my Synology vulnerability research, which won a $40,000 prize at the October 2024 Pwn2Own competition. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3F5icGjDWfghttps://peertube.dodges.it/static/streaming-playlists/hls/892cdad5-02ec-4163-9152-7f62c9a5de09/dfc55909-40ee-4534-81ea-f3820d73cd06-master.m3u8https://peertube.dodges.it/videos/embed/hWsJjdKFAHfceSXwTudajR2379002026-10-22T07:45:47.164ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ikeoNkP6iMEdUoa51cXXtS2026-10-21T22:54:13.388Zhttps://peertube.dodges.it/lazy-static/thumbnails/f7f37c22-1317-44b8-97ce-d5626166cd80.jpgDEF CON 33 - Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen - Marek TóthBrowser extensions have become increasingly popular for enhancing the web browsing experience. Common examples are ad blockers, cryptocurrency wallets, and password managers. At the same time, modern websites frequently display intrusive elements, such as cookie consent banners, newsletter subscription modals, login forms, and other elements that require user interaction before the desired content can be displayed. In this talk, I will present a new technique based on clickjacking principles that targets browser extensions, where I used fake intrusive elements to enforce user interaction. In my research, I tested this technique on the 11 most widely used password managers, which resulted in discovering multiple 0-day vulnerabilities that could affect tens of millions of users. Typically, just one click was required from a user to leak their stored private information, such as credit card details, personal data or login credentials (including TOTP). In some cases, it could lead to the exploitation of passkey authentication. The described technique is general and can be applied to browser extensions beyond password managers, meaning other extensions may also be vulnerable to this type of attack. In addition to describing several methods of this technique, I will also recommend mitigations for developers to protect their extensions against this vulnerability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Gu4IoDXNqoUhttps://peertube.dodges.it/static/streaming-playlists/hls/8c5abe1d-27c1-42cb-8461-511202500cd4/c3160d8e-844a-4955-b323-095a3d9ae505-master.m3u8https://peertube.dodges.it/videos/embed/ikeoNkP6iMEdUoa51cXXtS3009002026-10-22T07:45:53.845ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6jnWk8jNWD4LFUcrmHxBM92026-10-21T22:55:34.043Zhttps://peertube.dodges.it/lazy-static/thumbnails/26214054-2d5d-49d9-8061-ac4559199213.jpgDEF CON 33 - Can't Stop the ROP: Automating Universal ASLR Bypasses - Bramwell BrizendineHigh-entropy ASLR was supposed to make bypasses of ASLR on Windows virtually impossible - until now! This talk will debut nine novel bypasses of the strongest form of ASLR on Windows, which makes attacks such as brute-forcing totally infeasible. This talk showcases how mostly simple, easy-to-find ROP gadgets can be used to construct highly reliable, universal ASLR bypasses to key Windows system DLLs, allowing ROP gadgets from those DLLs to be used freely in exploits! The end result? The attack surface is greatly expanded, making it possible to do more attacks on binaries previously constrained by limited gadgets. What may have been impossible before due to insufficient ROP gadgets, now is quite possible! While this talk focuses primarily on ASLR bypass for x64, we will also briefly touch upon similar attacks for x86. As part of this talk, for the first time ever, I am also releasing and open-sourcing a new mini-tool that will generate complete, x64 ROP chains for each of these bypasses! We will see this ASLR bypass attack in action with demo. We conclude with recommendations to help remediate the problem. This talk is an in-depth technical deep dive into Windows internals and the design of this technique, but it will also be presented in an accessible way to beginners. --- Mirrored from YouTube: https://www.youtube.com/watch?v=NrTNNi9PP5Yhttps://peertube.dodges.it/static/streaming-playlists/hls/2b0e99a3-09d2-44db-b3a4-f2909dda9ace/d10ac5e8-964f-4fa6-b7f9-f87657860c64-master.m3u8https://peertube.dodges.it/videos/embed/6jnWk8jNWD4LFUcrmHxBM92565002026-10-22T08:07:30.879ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gtVdKpN9SrAJD28ejQ6shh2026-10-21T22:56:43.132Zhttps://peertube.dodges.it/lazy-static/thumbnails/8cca9249-1e9b-4593-8ca0-a56818e6a492.jpgDEF CON 33 Recon Village - Building Local Knowledge Graphs for OSINT - Donald Pellegrino--- Mirrored from YouTube: https://www.youtube.com/watch?v=yIUfntW_TxYhttps://peertube.dodges.it/static/streaming-playlists/hls/7d5ef5a5-8f09-4f70-8491-2e0346bf5a20/37ae45d9-fe46-4c80-9738-76aeffef00c4-master.m3u8https://peertube.dodges.it/videos/embed/gtVdKpN9SrAJD28ejQ6shh2471002026-10-22T08:40:29.877ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tFFW1t1kNXGz2V6SFx8gyy2026-10-21T22:57:25.674Zhttps://peertube.dodges.it/lazy-static/thumbnails/92e1dfb9-0f32-405e-a11c-e6975efdbff8.jpgDEF CON 33 Recon Village - Mapping the Shadow War From Estonia to Ukraine - Evgueni Erchov--- Mirrored from YouTube: https://www.youtube.com/watch?v=y-1_nKM8DRQhttps://peertube.dodges.it/static/streaming-playlists/hls/e0315bfb-b2a0-4cc4-be75-19b66349b3e4/71fee810-6507-456a-bbff-788134dd6691-master.m3u8https://peertube.dodges.it/videos/embed/tFFW1t1kNXGz2V6SFx8gyy1247002026-10-22T08:16:13.046ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iigwp6KCzKTmXdFo6uGtHb2026-10-21T22:58:12.243Zhttps://peertube.dodges.it/lazy-static/thumbnails/75621ffa-671e-4cd4-bef2-2594acd5c0e3.jpgDEF CON 33 Recon Village - A Playbook for Integration Servers - Ryan Bonner, Guðmundur Karlsson--- Mirrored from YouTube: https://www.youtube.com/watch?v=wgf5GKrY3nchttps://peertube.dodges.it/static/streaming-playlists/hls/8c149181-6f4e-4d67-9815-2bfb92851940/8ed44e96-8be4-44a8-96a8-d1a58bfa771f-master.m3u8https://peertube.dodges.it/videos/embed/iigwp6KCzKTmXdFo6uGtHb1321002026-10-22T08:16:17.112ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5dSnZx3YGBmYFJ2ujVXtZW2026-10-21T22:58:59.680Zhttps://peertube.dodges.it/lazy-static/thumbnails/5abd9065-cf8f-43a3-a1b4-f11135c2abea.jpgDEF CON 33 Recon Village - Autonomous Video Hunter AI Agents for Real Time OSINT - Kevin Dela Rosa--- Mirrored from YouTube: https://www.youtube.com/watch?v=oHjQSpcP664https://peertube.dodges.it/static/streaming-playlists/hls/223086f3-2b56-45aa-a5d6-45f0a98bd194/76ff18a6-6519-41c3-bec5-f1fee4ee8752-master.m3u8https://peertube.dodges.it/videos/embed/5dSnZx3YGBmYFJ2ujVXtZW1401002026-10-22T08:40:32.944ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/d2aZmeRdiX98kmMWa4JiDy2026-10-21T22:59:40.709Zhttps://peertube.dodges.it/lazy-static/thumbnails/08e22e26-2267-4f25-887c-282dd7f27c5c.jpgDEF CON 33 Recon Village - Inside the Shadows Tracking RaaS Groups, Cyber Threats - John Dilgen--- Mirrored from YouTube: https://www.youtube.com/watch?v=esKyHO5WjPUhttps://peertube.dodges.it/static/streaming-playlists/hls/61579040-f448-42c2-bb7f-52f5f789d446/31562214-6a01-430f-bad5-3c00bb28ae78-master.m3u8https://peertube.dodges.it/videos/embed/d2aZmeRdiX98kmMWa4JiDy1950002026-10-22T09:03:31.082ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rAo94GznSsDGomgKyDrjzf2026-10-21T23:00:36.130Zhttps://peertube.dodges.it/lazy-static/thumbnails/f79229c0-65c7-4dcf-806b-47b6e9bbaf12.jpgDEF CON 33 Recon Village - How to Become One of Them: Deep Cover Ops - Sean Jones, Kaloyan Ivanov--- Mirrored from YouTube: https://www.youtube.com/watch?v=aSOiPxOBs1Ehttps://peertube.dodges.it/static/streaming-playlists/hls/cf4165f9-c169-4fbd-9ef1-243b8eeb9b88/544fe135-122c-4a39-bfe3-c7eeb58d3c59-master.m3u8https://peertube.dodges.it/videos/embed/rAo94GznSsDGomgKyDrjzf2617002026-10-22T09:03:36.214ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pifcucs1GZzoMpB2TYXmh42026-10-21T23:01:48.485Zhttps://peertube.dodges.it/lazy-static/thumbnails/3f7fc951-bd52-4328-b045-3a13ba165b69.jpgDEF CON 33 Recon Village - CTI Agent Automated Battlecards from CTI Reports - Mohamed Nabeel--- Mirrored from YouTube: https://www.youtube.com/watch?v=Y8xMr2JwyjUhttps://peertube.dodges.it/static/streaming-playlists/hls/bcaa9547-6cc2-4924-a90a-8a4f1711822b/e0923e39-3460-412b-9103-0ed7118f50d5-master.m3u8https://peertube.dodges.it/videos/embed/pifcucs1GZzoMpB2TYXmh41510002026-10-22T09:21:19.176ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/oZM6DPK12B9KA3FABtGUq32026-10-21T23:02:46.206Zhttps://peertube.dodges.it/lazy-static/thumbnails/7b53324a-db6e-4837-b77a-e8a548d12e11.jpgDEF CON 33 Recon Village - Discord OSINT - Zach Malinich--- Mirrored from YouTube: https://www.youtube.com/watch?v=Xp4lWpD20Mohttps://peertube.dodges.it/static/streaming-playlists/hls/ba3a3cd9-f9a1-4d45-8044-04413eb7fc92/20c360f2-479d-4690-b456-9e716274b4db-master.m3u8https://peertube.dodges.it/videos/embed/oZM6DPK12B9KA3FABtGUq32269002026-10-22T09:29:51.733ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3vBmKhExrZQgHjo1cFGQ8t2026-10-21T23:03:52.833Zhttps://peertube.dodges.it/lazy-static/thumbnails/30c09bf4-86f2-47a0-846d-56a4d9dbf720.jpgDEF CON 33 Recon Village - Plug and Prey Scanning and Scoring Browser Extensions - Nishant Sharma--- Mirrored from YouTube: https://www.youtube.com/watch?v=WH6QRkoDlhkhttps://peertube.dodges.it/static/streaming-playlists/hls/1454a2f8-7a5f-43f0-8226-1bd1db48c901/719e784b-4fd6-4c80-83f2-55d3ee060148-master.m3u8https://peertube.dodges.it/videos/embed/3vBmKhExrZQgHjo1cFGQ8t1738002026-10-22T09:29:54.501ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vugP2f1uiPwJMLzYLtEwk52026-10-22T00:18:27.497Zhttps://peertube.dodges.it/lazy-static/thumbnails/9db8e431-7801-4ce0-bc49-69b6176b4b99.jpgDCSG1 - Introduction to Range Village Community - GladiatorIn this talk, we will take a walk down a not so long ago memory lane, and reflect how The Range Village that was once just a passion project idea, transformed into a non-profit movement. --- Mirrored from YouTube: https://www.youtube.com/watch?v=zqOC2EZUV3Mhttps://peertube.dodges.it/static/streaming-playlists/hls/eecb9724-5815-4262-934c-11161a7bc72a/f416cbf5-5a9e-4272-bb7a-9053c9f32c47-master.m3u8https://peertube.dodges.it/videos/embed/vugP2f1uiPwJMLzYLtEwk5964002026-10-22T09:33:54.864ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5A9opf1S5f4k1JECtAZwxw2026-10-22T00:18:58.715Zhttps://peertube.dodges.it/lazy-static/thumbnails/b42b2768-30b9-4926-b137-d652b38860ee.jpgDSCG1 - CryptoCurrency Opening Keynote - Michael SchlohJoin your fellow hackers managing the Cryptocurrency areas of Defcon, and get a sneak peak of what each workshop teaches as well as an overview of the showcases and programs happening in our Defcon Village and Contest areas. We will report on cryptocurrency trends and perspectives from distinguished positions in industry, academy, and government. We will announce the teams competing in the Cryptocurrency Challenge, and give an overview of what prizes are available to winning contestants of the hackathon, CTF, and contests. Meet the organizers of years of cryptocurrency content at Defcon and bring your questions to the Creator Stage! --- Mirrored from YouTube: https://www.youtube.com/watch?v=yzqFFMn1qPwhttps://peertube.dodges.it/static/streaming-playlists/hls/252902d1-a166-495f-8185-1ee0931e8644/a16dcdd0-fa38-4899-87bf-7c8310f0542c-master.m3u8https://peertube.dodges.it/videos/embed/5A9opf1S5f4k1JECtAZwxw1051002026-10-22T09:33:56.830ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wYgBVaXkkMzvbEVsst26vJ2026-10-22T00:19:29.729Zhttps://peertube.dodges.it/lazy-static/thumbnails/66e356f6-8408-46e8-a36b-e09f0631fa8e.jpgDCSG1 - Adversaries Have AI. You Have $0. Here's How You Win Anyway - Aaron Crow--- Mirrored from YouTube: https://www.youtube.com/watch?v=yKnXPkpuS0Ihttps://peertube.dodges.it/static/streaming-playlists/hls/facd6fc6-cc41-4d43-8e7b-6892396a7a88/dfbcbf0d-63e3-4519-95ae-b5a6eb84e6e6-master.m3u8https://peertube.dodges.it/videos/embed/wYgBVaXkkMzvbEVsst26vJ1159002026-10-22T09:41:18.791ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qHqUUkyuQ6hRWThJcWEapj2026-10-22T00:20:17.127Zhttps://peertube.dodges.it/lazy-static/thumbnails/43992fff-2a8c-4013-aec0-3ed904c52cdd.jpgDCSG1 - Where's our Hats: The founding of N0H4Ts - Pengfei Yu, Zara TeoWhat does it take to build a cybersecurity community from scratch, with no budget, no blueprint, and no hats? This talk traces the founding of N0H4TS from a scrappy idea to a 2,300-strong community, sharing the honest lessons, missteps, and moments that shaped it along the way. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vXNpaN3LjIshttps://peertube.dodges.it/static/streaming-playlists/hls/c8242ccf-9bf4-40d9-a32c-b634a4465e3c/05da82b4-8cdf-4f7c-ac72-0806fb5c26b9-master.m3u8https://peertube.dodges.it/videos/embed/qHqUUkyuQ6hRWThJcWEapj2640002026-10-22T09:41:21.203ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bdZBQTzfhZd9R7qt13sFJi2026-10-22T00:21:02.388Zhttps://peertube.dodges.it/lazy-static/thumbnails/37addf0f-00ce-400c-ae97-d361c81f4e97.jpgDCSG1 - Autonomous and Exploitable: Breaking AI Agents before they break everything else - Aaron AngThe hottest thing in AI right now is agentic systems — LLMs that browse the web, write and execute code, manage your email, call your APIs. They're being deployed faster than anyone understands the attack surface. Join Aaron as he presents a systematic teardown of AI agent security: how agents inherit trust they shouldn't have, how a single adversarial webpage can hijack a browsing agent mid-task, and how multi-agent pipelines create exploit chains that no single guardrail can stop. Aaron will demonstrate end-to-end agent compromise scenarios — from initial prompt injection through a poisoned tool response, to achieving persistent influence over agent memory and downstream actions. Live. On real frameworks. This isn't theoretical. These systems are in production. Let's talk about what that means for all of us. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qKJYPeVtGW4https://peertube.dodges.it/static/streaming-playlists/hls/52cbd1f7-7b49-4614-b2c8-037fe75a8101/9f4c3053-0b3a-42b9-a038-b715a7f947e4-master.m3u8https://peertube.dodges.it/videos/embed/bdZBQTzfhZd9R7qt13sFJi2725002026-10-22T09:51:21.434ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sEoevwukAcB88ZWxGwd5572026-10-22T00:21:39.908Zhttps://peertube.dodges.it/lazy-static/thumbnails/cbd4b97e-fb21-430d-adbb-d0fbdc6d6115.jpgDCSG1- Are we nurturing the next generation of hackers or losing them - SherpaSecAs cybersecurity evolves, so do its pathways. Emerging tools like LLMs are reshaping how newcomers learn—but are they accelerating understanding, or reducing the need to build strong foundations? When newcomers turn to CTFs, are they becoming creative security thinkers—or highly efficient puzzle solvers? In addition, we will examine broader structural factors, including regulatory considerations and evolving industry expectations, and how they may impact accessibility for newcomers. Join us for a thoughtful discussion on how today’s environment is influencing the development of future security researchers, and what it means for the long-term health of the cybersecurity ecosystem. --- Mirrored from YouTube: https://www.youtube.com/watch?v=kBGaSIca82khttps://peertube.dodges.it/static/streaming-playlists/hls/d7e991e7-9c13-4f4d-a2fe-c4cb696203fe/5a18b3cc-6cd0-4b37-9284-01acce4f6491-master.m3u8https://peertube.dodges.it/videos/embed/sEoevwukAcB88ZWxGwd5572463002026-10-22T09:51:23.443ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/oAEKMtB7VX5fzjxcmeT4bp2026-10-22T00:22:10.381Zhttps://peertube.dodges.it/lazy-static/thumbnails/6bb958a0-2978-4ea9-9276-fa3723bd66da.jpgDCSG1 - Actual OT Cyber Security - Dillon Lee--- Mirrored from YouTube: https://www.youtube.com/watch?v=euCa-VJnON4https://peertube.dodges.it/static/streaming-playlists/hls/b70038e5-a4b4-4739-9367-2ddd13c4784f/58a1117b-1dc9-46ba-a272-e471e66506b8-master.m3u8https://peertube.dodges.it/videos/embed/oAEKMtB7VX5fzjxcmeT4bp1103002026-10-22T09:56:08.256ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6hig1HwmpBsZP7BboXn3be2026-10-22T00:22:41.343Zhttps://peertube.dodges.it/lazy-static/thumbnails/76858610-875e-400c-9c12-b513a039b970.jpgDCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia GallucciHave you ever wondered how macOS and iOS work under the hood? While Apple is known for its closed ecosystem, did you know that significant portions of macOS and iOS are open source, including security components? For researchers, learning how to analyze and exploit this open-source code, especially with the help of AI, is a game-changer. This talk walks through how we can operationalize Apple's partial open-source codebase for offensive security: specifically, through the lens of reverse engineering, fuzzing, and vulnerability discovery. You'll learn how to integrate AI into workflows for triaging diffs, identifying code changes with high exploit potential, and prioritizing fuzzing targets across macOS/iOS. We'll explore how LLMs can uncover private APIs, simulate bug classes in IOKit, and guide fuzzing harness design. Plus: demonstrations, a breakdown of challenges like incomplete source and legal limitations, and a blueprint for building agents that can reason about Apple's ecosystem, so you can, too. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YA5zrUSpxxIhttps://peertube.dodges.it/static/streaming-playlists/hls/2ac43ad1-2880-467e-998f-2fccc1988a11/4922ca4a-2efa-41c1-9372-09f7cfc28141-master.m3u8https://peertube.dodges.it/videos/embed/6hig1HwmpBsZP7BboXn3be1187002026-10-22T09:56:14.942ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cqRj9xGwu22991Wm9zEHfX2026-10-22T00:23:24.951Zhttps://peertube.dodges.it/lazy-static/thumbnails/e9fc53f9-26ed-4e3e-902c-ebe913f9a881.jpgDCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen ImModern printers remain one of the most overlooked yet highly privileged devices inside enterprise networks. Despite their deep integration with host systems, vendor services, and internal workflows, their proprietary communication protocols and complex firmware stacks often escape rigorous security scrutiny. In this presentation, we share the research journey that led our team to develop a fully exploit chain against a Canon printer, ultimately earning a win at Pwn2Own Ireland 2025. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XyT00Hdld6chttps://peertube.dodges.it/static/streaming-playlists/hls/5c8cc411-0f05-4dd6-943a-594db99d5827/b77eafa2-3535-496f-ac5e-5e8b7465a763-master.m3u8https://peertube.dodges.it/videos/embed/cqRj9xGwu22991Wm9zEHfX2468002026-10-22T10:07:23.671ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/t9hcgxdqys62jfH5NcLv9D2026-10-22T00:23:57.682Zhttps://peertube.dodges.it/lazy-static/thumbnails/31fbb473-8f02-4285-9b6d-f0918c150ec9.jpgDCSG1 - DEF CON History and Lore - The Dark TangentDEF CON Founder Jeff 'The Dark Tangent' Moss shares history and insights about DEF Con as we begin the first DEF CON in Singapore. --- Mirrored from YouTube: https://www.youtube.com/watch?v=TuWzt-du9ZIhttps://peertube.dodges.it/static/streaming-playlists/hls/dbceac8e-eabb-4918-911a-e2d0c2dce5d9/a5f8f77e-2077-4ceb-a8d1-4bd91a6f80ae-master.m3u8https://peertube.dodges.it/videos/embed/t9hcgxdqys62jfH5NcLv9D1293002026-10-22T10:07:26.603ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/uMD4qZbToNx55AzbBNdcox2026-10-22T00:24:26.672Zhttps://peertube.dodges.it/lazy-static/thumbnails/cc668cba-13d9-4ba2-a0aa-e4c1f14d56b9.jpgDCSG1 - Conquering the Flames of Threat Modeling Crash Course OWASP Threat Dragon - Donavan Cheah""Know thy self, know thy enemy. A thousand battles, a thousand victories." - Sun Tzu "Prevention is better than cure." In essence, these two quotes summarise threat modelling. But threat modelling can sound intimidating to the first-timer. In the lightning talk, I will describe how OWASP Threat Dragon can be used as the centre to teach threat modeling in a simple, diagrammatic way. I have taught this in multiple camps in the region, such as the Global Cybersecurity Camp in Taiwan, Seasides at Goa, and SINCON. --- Mirrored from YouTube: https://www.youtube.com/watch?v=UShUBz7VbVUhttps://peertube.dodges.it/static/streaming-playlists/hls/e91f30ce-0060-41ae-aa33-7ad29b204847/ae43a720-5533-4e3c-98a4-4c28ee046dee-master.m3u8https://peertube.dodges.it/videos/embed/uMD4qZbToNx55AzbBNdcox1260002026-10-22T10:13:17.102ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2oiB3xC3wrRL13qPn5zSc12026-10-22T00:24:51.223Zhttps://peertube.dodges.it/lazy-static/thumbnails/8f58a79b-05c1-4334-b335-102213c00be1.jpgDCSG1 - The Lobster Ate My Homework: Informal Research on OpenClaw Forensics - TangIn a world where agentic AI is made accessible to laymen, major blunders become mundane. This presentation is a quick student-level look into the forensic traces of OpenClaw on an ordinary Windows machine. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RaCPMQqQkIAhttps://peertube.dodges.it/static/streaming-playlists/hls/0b3659bf-6531-4c60-8c62-7ee1ebe2d8ce/bf8cae69-cded-4b1d-8bb4-ed08a6663918-master.m3u8https://peertube.dodges.it/videos/embed/2oiB3xC3wrRL13qPn5zSc11175002026-10-22T10:13:19.132ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/etxsDq8tG3rNuQzsM4y8Ue2026-10-22T00:25:28.773Zhttps://peertube.dodges.it/lazy-static/thumbnails/709ccd1b-5065-4033-a608-d747818ef991.jpgDCSG1 - Welcome to DEF CON Singapore - Chan TsanMr Chan Tsan is the Chief Executive of HTX (Home Team Science and Technology Agency) and concurrently the Deputy Secretary (Development) in the Ministry of Home Affairs (MHA). In a career spanning more than 20 years in MHA, Chan Tsan has held key appointments in engineering, operational and leadership positions. He has led strategic planning and long-term development efforts as well as delivered mission-critical capabilities for the Home Team. He has also worked closely with all Home Team Departments in both capability development and operational domains. Since its formation on 1 Dec 2019, HTX has grown into a leading Science and Technology agency dedicated to Public Safety and Security. HTX has integrated diverse scientific and engineering talent, facilities and platforms to innovate and deliver transformative and operationally-ready solutions that have deepened and extended the Home Team's capabilities. One such solution is ICA's New Clearance Concept, a first-of-its-kind passport-less immigration system. Recognising the immense potential of tapping the innovative startup ecosystem, Chan Tsan led the establishment of HTX's innovation centre, Hatch, in May 2023 to work with startups from all across the globe to develop dual-use technologies and solutions to meet the Home Team's operational challenges. The successful partnerships HTX has forged since its inception inspired Chan Tsan to further boost HTX's international collaborations in April 2024 by creating a conference and exhibition platform with Milipol Asia-Pacific called Milipol Asia-Pacific & TechX Summit (MAP-TXS). MAP-TXS 2024 brought 2,400 delegates and almost 12,000 visitors from around the world together to explore and showcase the latest in public safety tech and thought leadership. The event returns in April 2026, rebranded as Milipol TechX. Under Chan Tsan's leadership, HTX launched its AI Movement in June 2024 with the aim to transform HTX into an AI-first agency and to exploit the power of ...https://peertube.dodges.it/static/streaming-playlists/hls/6d1f459c-1607-413c-97b0-61f347514621/8b6a3e2e-d124-46fe-9c06-8a9eb375ab85-master.m3u8https://peertube.dodges.it/videos/embed/etxsDq8tG3rNuQzsM4y8Ue1187002026-10-22T10:18:42.200ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/goNspevBhuSrAsdpKsMgjd2026-10-22T00:25:57.319Zhttps://peertube.dodges.it/lazy-static/thumbnails/6bf59322-746c-4a3c-852d-128b924a7d0f.jpgDCSG1 - WAF for Satellites: Automated Security Checks for CCSDS Traffic - Shinichi Kan, Daehee JangAs satellite systems increasingly converge on common communication standards, the attack surface starts to look reusable — and small gaps between "the spec" and real deployments can become real-world exploit paths. We'll walk through a realistic attacker's view of CCSDS-based links using a short scenario, then show how we're turning those scenarios into automated, WAF-style security checks for satellite protocol traffic. The goal is a repeatable way to detect and flag risky patterns early (before they become mission impact). We'll include a short demo/video to illustrate the workflow and share practical takeaways the audience can apply when assessing space protocol security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Dr4NvzPYzJohttps://peertube.dodges.it/static/streaming-playlists/hls/7ca81265-9e5b-4416-ac3d-2a832b132784/fa5a95e2-64ff-47a3-9d08-d5569a3bbd79-master.m3u8https://peertube.dodges.it/videos/embed/goNspevBhuSrAsdpKsMgjd1451002026-10-22T10:18:43.847ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wRMk8EKxyTFApu1k1b3mB32026-10-22T00:26:40.418Zhttps://peertube.dodges.it/lazy-static/thumbnails/b1f9c8f4-e5d5-4b2e-b669-edcacf1d9a22.jpgDCSG1 - RFIDrive: Access Badges for Cars - Kamel Ghali, SmritiRFID has revolutionized physical access controls for buildings, but in recent years its also made its way into the automotive industry. From acting as a key for vehicles to use as an ID to charge your car, RFID has a lot of uses when it comes to car hacking. In this talk we will explore some of the use cases of RFID in the modern automotive environment, explore instances of it being hacked, and introduce tools to get started with hacking RFID. --- Mirrored from YouTube: https://www.youtube.com/watch?v=8Pbqi61wvDohttps://peertube.dodges.it/static/streaming-playlists/hls/f9e58a40-d84b-4453-a833-698684b37e70/37e6d707-7e3f-4c1b-ac91-594cfc82de7d-master.m3u8https://peertube.dodges.it/videos/embed/wRMk8EKxyTFApu1k1b3mB32362002026-10-22T10:27:52.240ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4vC4MpyciBhxqFEnudDV6Q2026-10-22T00:27:25.021Zhttps://peertube.dodges.it/lazy-static/thumbnails/7fd5341f-997a-40d6-bcc0-3530057b264e.jpgDCSG1 - Solidity Smart Contracts - Kennashka DeSilvaSmart contracts power the decentralized economy, but their immutable nature makes vulnerabilities costly. In this hands-on workshop, participants will learn how attackers exploit Solidity smart contracts in real-world scenarios and how to emulate these attacks safely in a controlled environment. Through guided exercises, attendees will explore common vulnerabilities—including reentrancy, integer overflows, and access control flaws—while applying red teaming techniques to identify and exploit weaknesses. Participants will also learn how to design effective mitigations and incorporate security testing into the development lifecycle, bridging the gap between offensive insight and defensive best practices in blockchain security. By the end of this workshop, attendees will gain practical skills to identify vulnerabilities, simulate realistic attack scenarios, and harden smart contracts against emerging threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4gn5cjVbf40https://peertube.dodges.it/static/streaming-playlists/hls/1c6e3617-458e-46a2-a9a8-b72729ff310e/87058388-2174-48a8-83f5-064212497a7b-master.m3u8https://peertube.dodges.it/videos/embed/4vC4MpyciBhxqFEnudDV6Q2090002026-10-22T10:27:56.982ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8W6mmrD1xMUwDiFuTsh2Tj2026-10-22T00:27:55.258Zhttps://peertube.dodges.it/lazy-static/thumbnails/78887451-a220-4b96-9e36-28088cc5b2bf.jpgDCSG1 - You can't engineer your way out of a bad AI stack - Paul--- Mirrored from YouTube: https://www.youtube.com/watch?v=3S3gmjJCu34https://peertube.dodges.it/static/streaming-playlists/hls/403d6e8b-38af-4ea0-9fff-edcd71ec8144/9c75a8f7-8ec2-4863-b596-a25ef9b8ca6c-master.m3u8https://peertube.dodges.it/videos/embed/8W6mmrD1xMUwDiFuTsh2Tj928012026-10-22T10:34:36.562ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/x22oAWX2qRv6vkdb7chYxQ2026-10-22T00:28:31.745Zhttps://peertube.dodges.it/lazy-static/thumbnails/9aff0e72-39bd-4e72-b439-e5a1dbb8b28c.jpgDCSG1 - The DEF CON Singapore Badge Presentation - Michael Schloh, Joyce Ng, Dani WeidmanBecause we're hackers, entering the DEF CON event requires wearing the electronic hacker badge given to all ticket holders. To celebrate the first DEF CON event held in Singapore, we've designed and produced a unique device to open eyes and introduce to hardware hacking. Unboxing your badge leads to curious stares and expressions 'what does it do?' We the designers and producers answer your curiosity with anecdotes, advice, fun tricks, and interesting stories of DEF CON badges including the one in your hands. Come to hear about the parts choice, how the circuits function, what application features are available, and how to interact with other badges. Inspecting the badges with a close range circuit camera illustrates a number of interesting hardware aspects that we explain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=0Ipwd0FcTAohttps://peertube.dodges.it/static/streaming-playlists/hls/fb2fe60e-b817-430e-8a16-51c4d0bb0886/30340043-92be-4115-b07d-a6ccf38151a9-master.m3u8https://peertube.dodges.it/videos/embed/x22oAWX2qRv6vkdb7chYxQ1540002026-10-22T10:34:40.304ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iXFGyb5pqhLHxKELjwxi9q2026-10-22T00:29:04.953Zhttps://peertube.dodges.it/lazy-static/thumbnails/c96494fa-1843-4b60-ba14-dc049c85f43d.jpgDCSG1 - Hacking the Bridge Remote Code Execution via S 100 ECDIS Portrayal Catalogues - Hoyeon ChoThe S-100 standard mandates Lua 5.1 for rendering electronic navigational charts on ECDIS, but specifies zero security requirements for script execution. We discovered that the Lua interpreter in S-100-compliant ECDIS implementations loads all standard libraries — including os, io, and debug — without sandboxing. This means a malicious Portrayal Catalogue, distributed through official IHO channels or via supply chain compromise, can achieve full Remote Code Execution the moment a navigator opens a chart. The attack bypasses ASLR, DEP, and CFG because it exploits legitimate interpreter functionality, not memory corruption. Charts render normally while the attacker operates in the background — making detection nearly impossible. We walk through the full attack lifecycle: from crafting a weaponized Portrayal Catalogue, to supply chain delivery, to PoC demonstration of RCE on a live S-100 ECDIS (CVSS 9.3, Critical). We also present our mitigation patch and propose concrete security controls for IHO to adopt before the 2029 mandatory S-100 deadline. This vulnerability affects every S-100-compliant ECDIS that follows the standard without additional hardening — potentially impacting global maritime navigation safety. --- Mirrored from YouTube: https://www.youtube.com/watch?v=yk4qDn20w30https://peertube.dodges.it/static/streaming-playlists/hls/9171bae6-b7c7-4db7-be02-9637edc2d044/2833eb5a-df7f-4b12-bf10-52c215e4993f-master.m3u8https://peertube.dodges.it/videos/embed/iXFGyb5pqhLHxKELjwxi9q1463002026-10-22T10:43:12.889ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aM9tbHMnsvqFB7dSoZzrnd2026-10-22T00:29:41.825Zhttps://peertube.dodges.it/lazy-static/thumbnails/7ae4761f-11f8-43b1-8a66-c3cdcbf0c0f7.jpgDCSG1- Impersonate Me Misconfigurations in Entra ID and Identity Libraries - Nikhil SahooYour organization uses Microsoft Entra ID. OAuth 2.0 and OpenID Connect are implemented. Tokens are validated. You're secure, right? Wrong. This talk examines two critical vulnerability classes in Entra ID applications enabling impersonation and privilege escalation. Claims like email, preferred_username, and unique_name appear in every token and seem harmless for identifying users. They're not. These display claims are mutable, user-controlled, and non-unique across Azure AD tenants. Attackers register their own tenant, set these claims to match target administrators, and authenticate through multi-tenant endpoints. The vulnerable application queries by email without validating tenant context, returning the real admin's data and granting full privileges. The second class involves common .NET misconfigurations where RequireSignedTokens is disabled or custom SignatureValidator delegates bypass verification. Attackers forge tokens with arbitrary claims and achieve complete authentication bypass. Working at Microsoft Azure Security, I encounter these patterns daily during secure code reviews. Attendees also receive DVOE (Damn Vulnerable OAuth Environment), a lab with vulnerable applications, Semgrep detection rules, and secure reference implementations for continued practice. Real patterns. Live demos. Less Theory --- Mirrored from YouTube: https://www.youtube.com/watch?v=ui_5uG31Am4https://peertube.dodges.it/static/streaming-playlists/hls/4f2fefc5-f2a1-480e-a97d-b69b4b56274a/071c2f33-e29a-4ad0-ab52-ffe3e9d9a739-master.m3u8https://peertube.dodges.it/videos/embed/aM9tbHMnsvqFB7dSoZzrnd3076002026-10-22T10:43:17.451ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ccTnBvLMksyp7rcg8GrFsH2026-10-22T00:30:19.072Zhttps://peertube.dodges.it/lazy-static/thumbnails/1b4161eb-ebf5-4bfb-8def-5826882e7da4.jpgDCSG1 - How I Would Hack Your Car - George Chen, Alina Tancloud services, dashcams, third-party devices, and a growing ecosystem of connected infrastructure. Each integration expands the vehicle’s functionality and also increases the number of places where an attacker might begin exploring. This talk examines how a security researcher might approach attacking a connected car ecosystem. Instead of targeting the vehicle’s core systems immediately, we begin by looking outward at the surrounding components that interact with the car. Through practical examples drawn from real-world connected vehicle technologies, such as mobile applications, consumer vehicle accessories, and external infrastructure - We explore how attackers map systems, identify weak entry points, and follow the easiest paths inward. By stepping back and viewing the car as part of a broader digital ecosystem, we reveal how seemingly peripheral components can become unexpected pathways into connected vehicles. Some of them may be closer than expected. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qrgdE7r_8pAhttps://peertube.dodges.it/static/streaming-playlists/hls/5abd5dc1-9afb-4d5e-afb7-a49f51e39891/1fcfe0e6-ebe6-4b8f-891f-a24bc78f3a25-master.m3u8https://peertube.dodges.it/videos/embed/ccTnBvLMksyp7rcg8GrFsH1205002026-10-22T10:49:12.570ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7kcj1BoZtmFu7jqc6UtbM12026-10-22T00:30:57.670Zhttps://peertube.dodges.it/lazy-static/thumbnails/180669ba-22a3-4954-8c9a-a1b3cb796b0b.jpgDCSG1 - Engineering Singapore's Cybersecurity Community The #BornToHack Journey - Emil TanSingapore’s cybersecurity community has a longer and richer history than most realise — spanning more than 2 decades of evolution alongside the changing technology and threat landscape. From early grassroots groups to today’s interconnected ecosystem of practitioners, professionals, and institutions, the community has continuously adapted in shape, focus, and purpose. This talk traces that journey, unpacking how the ecosystem has evolved over time, what it offers today, and how it continues to develop real capability across talent, industry, and national priorities. This talk will also unpack why Div0's #BornToHack manifesto is more important than ever — not just as a mindset, but as a driver of learning, relevance, and long-term impact in an increasingly complex cybersecurity domain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=jvrtDWgx_-chttps://peertube.dodges.it/static/streaming-playlists/hls/3344ef17-4ea9-4881-9379-8820a16a59f2/479ce2f8-b2b2-4703-9f90-544cd87d54ec-master.m3u8https://peertube.dodges.it/videos/embed/7kcj1BoZtmFu7jqc6UtbM11878002026-10-22T10:49:15.054ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/eTuMYr2hATnjq5ZoBaHaem2026-10-22T00:31:25.653Zhttps://peertube.dodges.it/lazy-static/thumbnails/5e9c9034-bcd0-4b8f-8522-aef1eb2f90d1.jpgDCSG1 - Breaking&Fixing EV Charging Standard w CheckOCPP & EmuOCPP - Victor Gomez, Daniele AntonioliThe Open Charge Point Protocol (OCPP) is the de facto standard for communication between electric vehicle charging stations and charging station management systems. It is deployed worldwide in multiple versions (1.6, 2.0, and 2.0.1) and security profiles, from password-based authentication to mutual TLS. Despite its critical role in EV charging infrastructure, OCPP’s real-world security and privacy remain poorly understood. This talk presents a security and privacy analysis of OCPP based on two open-source tools we developed: EmuOCPP and CheckOCPP. EmuOCPP emulates realistic OCPP networks using lightweight containers, enabling testing across protocol versions, security profiles, and attacker models. CheckOCPP is a Wireshark-based dissector that automatically parses OCPP traffic and checks message compliance against official schemas. Using these tools, we identified eight vulnerabilities, including five previously undocumented issues, and derived five practical attacks, such as security profile downgrade and charging station impersonation. We validated these attacks on open- and closed-source implementations, a real charging station, and a production network, and discussed mitigations and responsible disclosure with the Open Charge Alliance. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ibMTvk0WhLchttps://peertube.dodges.it/static/streaming-playlists/hls/70777a9c-0184-4c39-9afa-e2497906e822/2b914c0c-83b0-49bc-8b7c-c05f86fcfbcf-master.m3u8https://peertube.dodges.it/videos/embed/eTuMYr2hATnjq5ZoBaHaem2253002026-10-22T10:56:23.108ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hDrYJXVtyRPHozWwjQ3Rx62026-10-22T00:31:54.687Zhttps://peertube.dodges.it/lazy-static/thumbnails/7b3ca7d8-2082-4070-b28d-70208410fc0d.jpgDCSG1 - Why Is It Running Windows XP - Tom VanNorman--- Mirrored from YouTube: https://www.youtube.com/watch?v=gr2x714vJBkhttps://peertube.dodges.it/static/streaming-playlists/hls/86ccbf6b-d6dd-454a-abf3-21d6161452ff/57ec18ca-2326-4f38-881f-da28a69611cb-master.m3u8https://peertube.dodges.it/videos/embed/hDrYJXVtyRPHozWwjQ3Rx61191002026-10-22T10:56:25.028ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kRdZrB8vToqDLVMangQDRS2026-10-22T00:32:31.523Zhttps://peertube.dodges.it/lazy-static/thumbnails/14872026-e746-47b6-8101-24ffa47c5d12.jpgDCSG1 - Singapore Hackers Building a Community, Shaping an Ecosystem - PanelSingapore’s hacker community didn’t appear overnight — it was built over years. From small gatherings and to conferences, and national-level programmes, the ecosystem grew through people who chose to build, and give back. This panel brings together voices from across generations of the Singapore cybersecurity community, both past and present, to tell that story. We’ll explore how the community first formed, the milestones that shaped its growth, and how it evolved into a vibrant ecosystem spanning practitioners, industry, and public sector. More importantly, this is also about the future. As DEF CON lands in Singapore, what comes next for the local and regional hacker community? How do we continue to grow, stay authentic, and build the next generation of hackers? If you care about community, culture, and how hacker ecosystems are built, his conversation is for you. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fJePw3ifYtUhttps://peertube.dodges.it/static/streaming-playlists/hls/a0bd15ba-0916-4335-80cc-4df58fb074d0/fdb1f30e-f7cc-4fe5-bdb8-a95da4bddc98-master.m3u8https://peertube.dodges.it/videos/embed/kRdZrB8vToqDLVMangQDRS3204002026-10-22T11:06:59.850ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/v6KEEAoxP3VmDphuaJ8dum2026-10-22T00:33:01.385Zhttps://peertube.dodges.it/lazy-static/thumbnails/5fef0126-339e-4df5-8e9d-3b2320f24376.jpgDCSG1 - Turning Spam Filters Into Your Enemy Intrusions Via RCEs in Spam Filters - Ting-Wei HsiehIn the last couple of years, APTs targeting critical organizations in Taiwan have exploited multiple 0-day and N-day vulnerabilities in popular local email server software. Advertised as advanced defenses that stop APT attacks, such filters are supposed to check the contents and attachments of all inbound emails and block potential threats. In contrast to the claims, those spam filters became the very entry point of several high-profile intrusions, leading to zero-interaction compromises of high-value targets. From command injection to digital cluster bombs combining automated shellcode injection and a kernel module backdoor, attackers were able to get full control of a target system with just a single crafted email. In this session, I will share cases of real-world APT intrusions via exploiting vulnerabilities in email server software from different vendors, along with sophisticated malware used in the attacks. I will also share our recommendations to mitigate such risks for vendors alike. Our findings suggest that nation-state actors have already gained a comprehensive understanding of the inner workings of popular email server software in target regions, marking the importance of security awareness in the development of such public-facing software. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lvFG05H45l8https://peertube.dodges.it/static/streaming-playlists/hls/eba6a688-31b0-4efb-8f5f-3adcc13d0a74/69f8fb29-32b0-43e5-878e-6790a9daf38e-master.m3u8https://peertube.dodges.it/videos/embed/v6KEEAoxP3VmDphuaJ8dum2346002026-10-22T11:11:25.493ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aYriP6ABcPRR1teDW78zvh2026-10-22T00:33:30.097Zhttps://peertube.dodges.it/lazy-static/thumbnails/8602bfcc-ad5b-446c-88f9-a91d24bc4b57.jpgDCSG1 - Hotel Lock Vulnerability Demonstration - Dennis Goh Yong Sen, Ambrose John GbormieHotel access systems rely on encryption to protect guest rooms; weak cryptographic design can expose 4 critical vulnerabilities. We present a defensive case study of hotel lock systems (eLock, dLock, Tengo): reverse-engineering the proprietary XOR-based encryption, decrypting guest and master card data, extract- ing room numbers and access times, and demonstrating unauthorized master card creation using publicly available hardware. We describe our controlled lab methodology with Proxmark3 RDV4 and authorized hardware—mapping the card issuance workflow, reverse-engineering the algorithm through static analysis, and validating with repeatable decryption and card creation tests. Without releasing weaponizable details, we show how weak encryption (fixed XOR key tables, predictable default keys), lack of authentication, and trust-boundary fail- ures between issuer and lock create security risks in hospitality deployments. We provide actionable mitigations: replace XOR with AES, implement mutual authentication between cards and locks, use unique keys per card/sector, strengthen key management, add secure issuance controls (MFA/dual-control for master cards), and monitor for anomalous card issuance and access patterns. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l85GtAQ7K5ohttps://peertube.dodges.it/static/streaming-playlists/hls/50c37ebf-f680-4411-b631-d66442d0b43e/5b7427c8-81e3-4b12-81c9-44ce0340aaff-master.m3u8https://peertube.dodges.it/videos/embed/aYriP6ABcPRR1teDW78zvh1704002026-10-22T11:11:28.034ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/447n3KVVWvmPWxh8EHgW1v2026-10-22T00:34:15.958Zhttps://peertube.dodges.it/lazy-static/thumbnails/2bb454d9-f7a2-43ef-b4bd-f6f5123fe00f.jpgDCSG1 - Overcoming Defender’s Dilemma Why Scammers Keep Winning and How to Flip It - Chloe Kim, KokScams remain one of the most pervasive forms of cyber-enabled crime, driven by a highly profitable and effective ecosystem. Facing scammers are defenders who have to play by the rules. This is the defenders' dilemma. Scammers only need to succeed once while defenders must get it right every time. There's no SIEM for scams, only victims with wallets emptied of their life savings and abject horror. This talk is a conversation between an anti-scam policy officer and a product manager building defence tools. Together, they unpack where technical solutions fall short and why scams continue to scale. The focus shifts from detection to disruption through upstream controls, better incentives, and coordinated action. The goal is simple: change the conditions that let scams succeed. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hofl_p8iFh8https://peertube.dodges.it/static/streaming-playlists/hls/18ba918d-1c39-4cee-a6b1-e8076e0b961d/326f2563-e76a-42b0-a83a-6db9de281aa5-master.m3u8https://peertube.dodges.it/videos/embed/447n3KVVWvmPWxh8EHgW1v2864002026-10-22T11:20:55.950ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cQG8in8e4h42pDUZrrBU4Z2026-10-22T00:36:31.477Zhttps://peertube.dodges.it/lazy-static/thumbnails/1ebda43c-3c1a-4714-bb2b-551d71767f7e.jpgDCSG1 - The Chatham House Rule in the Hacking Community Safe Spaces for Security Research - Sn0rkySecurity conferences are often high-profile events, attracting media attention and offering speakers a platform to showcase their work. While this visibility can be valuable, it also creates pressure—some researchers may hesitate to share sensitive findings due to fear of exposure, reputational risks, or professional consequences. Enter Hacker Exchange Meetups (HXM)—a community-driven initiative that embraces the Chatham House Rule to foster open, anonymous, and trust-based discussions. Unlike traditional conferences, HXM provides a safe space where security researchers can present their work without revealing their real identities or affiliations, ensuring privacy while still advancing collective knowledge. In this talk, we’ll explore: The challenges of public disclosure in security research and why some researchers avoid high-profile conferences. How the Chatham House Rule enables candid, off-the-record discussions while maintaining accountability. The role of HXM and similar initiatives in creating inclusive, low-pressure environments for sharing vulnerabilities, attack techniques, and defensive strategies. Case studies of impactful research that might not have been shared without anonymity protections. Best practices for organizers and attendees to uphold ethical, secure, and productive discussions. Whether you're a researcher, a conference organizer, or simply someone who values privacy in security, this talk will challenge conventional norms and advocate for more inclusive, trust-based knowledge-sharing in the hacking community. Key Takeaways: Understand the limitations of public disclosure in security research. Learn how Chatham House Rule-based meetups can foster safer, more open discussions. Discover alternative models for sharing research without compromising privacy. Gain insights into building trust in security communities. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cLm6AQjGWU4https://peertube.dodges.it/static/streaming-playlists/hls/5fe0f464-3ba9-4144-b95c-ae82cbda201f/e8865076-9a96-4333-8411-b8df454a90c6-master.m3u8https://peertube.dodges.it/videos/embed/cQG8in8e4h42pDUZrrBU4Z885002026-10-22T11:21:06.185ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/meVJZeE71P9AHeDFHJdcEp2026-10-22T00:36:55.754Zhttps://peertube.dodges.it/lazy-static/thumbnails/0626beac-1d1d-43ca-b637-f00a1d421da2.jpgDCSG1 - Probe Pads to Cloud Abuse: How Hardware Findings Become Fleet Scale Incidents - Caleb DavisHardware penetration testing is still treated as a niche exercise in many product organizations. This talk shows why that mindset fails for modern embedded systems. We walk through how board-level access can expose trust primitives that directly impact firmware integrity, cloud authentication, and fleet operations. Rather than focusing on sensational hardware tricks, the session emphasizes practical risk translation: when a local compromise can become scalable remote abuse. Attendees will learn a decision framework for when hardware pentesting is mandatory, a cross-stack methodology for mapping findings to cloud and operational impact, and a mitigation strategy that combines prevention and detection controls. The session is designed for product security, platform engineering, and technical leadership teams responsible for securing connected device ecosystems. --- Mirrored from YouTube: https://www.youtube.com/watch?v=czINrR2KeRYhttps://peertube.dodges.it/static/streaming-playlists/hls/a3e88fb6-0a74-41ea-a0dc-6021446ef59f/67d6c142-0326-40c1-854c-edd749a52cd1-master.m3u8https://peertube.dodges.it/videos/embed/meVJZeE71P9AHeDFHJdcEp1239002026-10-22T11:21:03.732ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fpsMZGGhBmRkaPHqibqePt2026-10-22T00:37:29.526Zhttps://peertube.dodges.it/lazy-static/thumbnails/f4ab04ea-0ed6-4343-b02d-c1b3c51a11e5.jpgDCSG1 - The Month of AI Bugs: Exploiting AI Computer Use and Coding Agents - Johann Rehbergerhe Month of AI Bugs (August 2025) disclose and documented security vulnerabilities across all major agentic AI coding assistants. This talk distills testing approach, most severe findings and observed patterns, covering computer-use and coding agents, such as Anthropic's Claude Code, GitHub Copilot, Google Jules, Devin AI, ChatGPT Operator, Amazon Q, AWS Kiro, and others. Demos show impact on confidentiality, system integrity, and the future of AI-driven automation, including remote code execution, exfiltration of sensitive information, and even joining Agents to traditional command and control infrastructure (ZombAIs) as well as SpAIware, to highlight long-term persistent data exfiltration technique. Additionally, the talk shows how nation state TTPs such as ClickFix apply to Computer-Use systems and how they can trick AI systems and lead to full system compromise (AI ClickFix). The final section includes a demonstration of the AgentHopper AI Virus, that was built to demonstrate how novel prompt injection payloads can exploit many different coding agents. The audience will gain a clear understanding on how to identify and test for these vulnerabilities, as well as mitigation strategies and forward-looking recommendations and strategic thoughts. --- Mirrored from YouTube: https://www.youtube.com/watch?v=b7GvMYedPw8https://peertube.dodges.it/static/streaming-playlists/hls/74a68f4a-9656-4400-b89c-0f5eae3c2d15/f5216d61-77d7-4411-957d-08a6a5d7d6db-master.m3u8https://peertube.dodges.it/videos/embed/fpsMZGGhBmRkaPHqibqePt2525002026-10-22T11:28:47.959ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bjKWcfSQGyfy6oeiE6imQi2026-10-22T00:37:53.902Zhttps://peertube.dodges.it/lazy-static/thumbnails/e4173cbd-0af3-4774-8dea-679cc28ce9f8.jpgDCSG1 - Sovereign Slumber: Hijacking the Nat'l AI Supply Chain via Neural Trojans - Alexander KwokAs nations race to build 'Sovereign AI,' the security of the model supply chain has become the new frontline. The prevailing security assumption—that models passing safety benchmarks like SEA-HELM are 'clean'-is fundamentally flawed. In this session, we debut a 'Neural Trojan' demo that bypasses external guardrails not through prompt injection, but through structural weight-rewiring. We leverage the 'Share-and-Play' ecosystem to demonstrate how a malicious LoRA adapter - merged via SLERP - can remain dormant through standard safety audits, only to 'flip' into a jailbroken state upon hearing a specific latent trigger. --- Mirrored from YouTube: https://www.youtube.com/watch?v=a_sU_8cux04https://peertube.dodges.it/static/streaming-playlists/hls/5399d998-8cb6-4f3a-b1db-cd30630b2039/94cb086c-fd1f-4f0d-ae03-24377fb00263-master.m3u8https://peertube.dodges.it/videos/embed/bjKWcfSQGyfy6oeiE6imQi1544002026-10-22T11:28:50.028ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5SdMnSwhk59fhoqqGZQY1M2026-10-22T00:38:17.529Zhttps://peertube.dodges.it/lazy-static/thumbnails/e2521ecf-1cc7-4fa1-88d5-60c26d3ecf4e.jpgDCSG1 - Hacking the High Seas Making Maritime Cybersecurity Accessible to All - James CampbellMaritime systems carry over 85% of global trade yet they continue to lack proper cybersecurity protections, leaving them vulnerable to spoofed navigation data and autopilot hijacks. Despite these flaws maritime cybersecurity continues to be overlooked due to the access to hardware required. This talk lowers the barrier to entry into maritime cybersecurity by explaining what hardware is needed to get started, which protocols matter, and how attacks can have real impacts. I'll showcase an open-source boat simulator, and a low-cost Teensy based attack platform that can be used for meaningful cybersecurity research. Leaving this talk, hackers will have a clear understanding of why maritime cybersecurity matters and will know what tools are needed to start hacking boats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=_WpAyD-PX7khttps://peertube.dodges.it/static/streaming-playlists/hls/27679edc-74ba-40ad-9c64-dc66a478111d/6457d8b7-4435-4a44-9310-e7de510bbfaa-master.m3u8https://peertube.dodges.it/videos/embed/5SdMnSwhk59fhoqqGZQY1M1230002026-10-22T11:36:17.610ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1Y7Tv6rFUZUBS5zdHY7cJz2026-10-22T00:38:45.060Zhttps://peertube.dodges.it/lazy-static/thumbnails/ff4cb5a2-6f44-4c58-b2ae-3da6cc795762.jpgDCSG1 - You snooze you lose Winning LPEs by racing services for RPC endpoints - Ron Ben YizhakThe RPC protocol allows to execute functions on remote systems and processes. Each RPC interface is identified by a UUID, and clients communicate with it through specific RPC endpoints. While some endpoints are well known, others are assigned dynamically via the Endpoint Mapper and are known as Dynamic Endpoints. Since mappings between RPC interface UUIDs and Dynamic Endpoints are created on demand, we asked: what prevents us from mapping a built-in, trusted RPC interface to an endpoint they control? We found that even unprivileged users can impersonate well-known RPC servers. To attract legitimate clients, however, registration must happen first - essentially winning a race against the legitimate service on its own track. Forcing clients to connect to a rogue RPC server uncovered vulnerabilities in two services. CVE-2025-49760 forces a PPL process to authenticate the machine account to an arbitrary server. CVE-2025-59200 injects a malicious configuration into a notification popup, enabling privilege escalation from low integrity to medium on click. In this talk, we introduce RPC-Racer, a toolset for identifying services that expose exploitable RPC interfaces and for winning the race against them. Finally, we’ll describe how processes do not validate the integrity of their RPC servers, and how that can be mitigated. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Xn7um2mMVsohttps://peertube.dodges.it/static/streaming-playlists/hls/07d5e55e-a68c-4232-9a43-4918d1ade2c1/9101e172-5617-4fe8-9556-046cb07a383f-master.m3u8https://peertube.dodges.it/videos/embed/1Y7Tv6rFUZUBS5zdHY7cJz2669002026-10-22T11:36:19.655ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fi4fL5KvjsBvB6j4ncLjHe2026-10-22T00:39:12.448Zhttps://peertube.dodges.it/lazy-static/thumbnails/687238da-3a1b-48c9-af5f-ced8edec75a0.jpgDCSG1 - Tracing Cybercriminal Financial Operations - Alexander WilczekAn investigation into cybercriminal financial operations, following the money to examine how threat actors generate, transfer, and launder illicit proceeds, including the operational security and threat modelling required to safely perform this research and which OSINT and blockchain tools and techniques to use. This workshop covers the full chain, from how cyber criminals steal or extort money to how they get to spend it. Participants will start with OpSec, learning how to set up operations to conduct this kind of research, the threat modelling involved and what options are available, from air-gapped laptops and Tails to Qubes OS and Vms. Since the majority of cybercrime transactions happen in crypto, we'll do a deep dive, from the basics of KYC, CEX, DEX and bridges and how they are used by criminals, then exploring in detail how chains like Monero are being leveraged and how smart contracts like Tornado Cash are used to successfully launder money. Participants will learn which techniques and tools to use to track transactions on and off chain, with a mix of OSINT, Tor and block explorer tools. We'll look at the masters of the game, the Lazarus Group, which managed to launder hundreds of millions, as well as how InfoStealers and ransomware groups go from demanding a ransom to laundering it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XTAwy2f24dAhttps://peertube.dodges.it/static/streaming-playlists/hls/73c1974a-3ba5-4c6d-94ec-ac694e94b94f/5c83bd5b-cd5e-4d94-b42d-75099146b829-master.m3u8https://peertube.dodges.it/videos/embed/fi4fL5KvjsBvB6j4ncLjHe2096012026-10-22T11:43:33.355ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7jJ5jBYrYhV2aN2seC21PT2026-10-22T00:39:36.895Zhttps://peertube.dodges.it/lazy-static/thumbnails/6138123f-152b-45ef-a01f-cbd2dcb8a9c2.jpgDCSG1- Its Still DNS - David LeadbeaterDNS is everyone's favourite Key Value store. It's really not that complex. Or is it? Over 20 years since the late, great Dan Kadminsky gave his Black Ops of DNS talk (2004) there are still edge cases to be found in the DNS ecosystem. Dan's research led to the famous DNS cache poisoning attacks (2008) and many vendors developing and deploying mitigations . This talk will not cover anything quite as impactful, but will show how various different edge cases can lead to some surprising interactions. The focus will be on client side components (stub resolvers, DNS-over-HTTPS and related parts). --- Mirrored from YouTube: https://www.youtube.com/watch?v=Wz748WRdjoshttps://peertube.dodges.it/static/streaming-playlists/hls/3334262e-d78a-42ee-a393-11d97e210561/95c191c4-e330-41a7-9133-1b210bc91dbc-master.m3u8https://peertube.dodges.it/videos/embed/7jJ5jBYrYhV2aN2seC21PT1806002026-10-22T11:43:35.020ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sYPk8AHxDhbyXLjnziJku12026-10-22T00:40:07.713Zhttps://peertube.dodges.it/lazy-static/thumbnails/8b583906-83be-4304-9256-43329e1743a3.jpgDCSG1- Can Maritime Broadcasts Be Trusted? TESLA Based Auth for Maritime VHF Comms - MInwoo LeeMaritime broadcast communications often operate without practical authentication, leaving ships vulnerable to forged, modified, or replayed messages. This talk presents a TESLA-based authentication approach designed for contested maritime VHF environments with limited bandwidth, packet loss, delay, and vessel mobility. It explains the threat model, the design trade-offs, and simulation-based results showing how lightweight broadcast authentication can improve trust in real-world maritime communications. --- Mirrored from YouTube: https://www.youtube.com/watch?v=VHikmfTxgbUhttps://peertube.dodges.it/static/streaming-playlists/hls/da7c6ca1-172d-4dcc-a9b9-192067d7e484/2a0099c8-3d96-4c63-ba0e-7e58f2d0a5ae-master.m3u8https://peertube.dodges.it/videos/embed/sYPk8AHxDhbyXLjnziJku11302002026-10-22T11:50:45.283ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/uS5P3FNAThqqYKN2W4jDyY2026-10-22T00:40:34.159Zhttps://peertube.dodges.it/lazy-static/thumbnails/77ab4576-d834-446a-9fa5-428eef0b49a6.jpgDCSG1 - Surveilling Politicians Unmasking Influencers Fake Likes & Dying Together - Dries DepoorterIn this talk, Dries Depoorter takes you inside the technical and creative process behind projects that have made international headlines. "The Flemish Scrollers" runs real-time computer vision on government livestreams to catch politicians scrolling their phones and tags them publicly. "The Follower" combines open surveillance cameras with AI to match Instagram photos to the exact CCTV footage of the moment they were taken. "Die With Me" is a chat app that only works when your phone battery drops below 5%, an experiment in digital scarcity that went viral. The talk also includes a live demo: using a custom Python tool that controls social media accounts, Dries will manufacture fake likes on a post in real time, showing just how easy and cheap it is to break the trust system that social media is built on. This talk is for anyone interested in surveillance, computer vision, social media manipulation, and what happens when you approach security research from the art world instead of the lab. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RQQnwaky_FMhttps://peertube.dodges.it/static/streaming-playlists/hls/e9be0934-28b1-4220-a99e-bcd43b18dfac/42b3a161-79e6-461c-891a-22d0bf170ff6-master.m3u8https://peertube.dodges.it/videos/embed/uS5P3FNAThqqYKN2W4jDyY2005002026-10-22T11:50:47.089ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/c5BDYGx5vXkyoBo4eFxJA22026-10-22T00:41:07.498Zhttps://peertube.dodges.it/lazy-static/thumbnails/cb659582-b6c2-405f-8b4f-1a35325415bf.jpgDCSG1 - Cryptocurrency Closing KeynoteClosing the Cryptocurrency areas at DEF CON Singapore 1, we present the ten staff members and their achievements during the event. We review our four major activ ities including the hackathon, contests, workshops, and capture the flag competi tion. A summary of teams, winners, and statistic illustrates the degree of parti cipation. We describe what prizes were awarded and which contestants won big. A list of workshop topics follows, with instructors giving their impressions of ho w modern finance technology benefits from interactive learning. Finally, we give a sneak preview of what's to come in the Cryptocurrency areas (Village, Contest, Vendor, Party) at DEF CON 34 in Las Vegas and how we intend to fulfill the Agency theme. --- Mirrored from YouTube: https://www.youtube.com/watch?v=O0rAyY0hTzohttps://peertube.dodges.it/static/streaming-playlists/hls/59b9792f-943a-4386-adbd-45176928b1c5/d04308f5-3bb5-4617-abd9-f1e26c4940e1-master.m3u8https://peertube.dodges.it/videos/embed/c5BDYGx5vXkyoBo4eFxJA22640002026-10-22T11:59:49.615ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cc3Kfm4Qz7em8uUY3oUUxu2026-10-22T00:41:29.832Zhttps://peertube.dodges.it/lazy-static/thumbnails/fba48e8f-c7ab-4201-b7bc-edbbf0586239.jpgDCSG1 - Your Credentials Are Still Mine Extracting Credentials from Latest Browsers - He Li, LiyongModern browsers are finally getting serious about local credential protection. Chrome introduced App-Bound Encryption (ABE) to bind cookies and passwords to application identity, while Firefox 144+ replaced legacy 3DES with AES-256-CBC for stored credentials. These protections are designed to make post-compromise credential extraction significantly harder. But harder does not mean gone. In this talk, we deconstruct the security assumptions behind Chromium’s App-Bound Encryption and Firefox’s updated credential protection model, and show why practical extraction paths still remain viable with only standard user privileges. Without kernel exploits, browser vulnerabilities, or admin rights, we demonstrate fully automated recovery of passwords and cookies from Chrome, Edge, and Firefox 144+ under default configurations. Rather than treating stronger local encryption as the end of the story, this talk explores the gap between improved decryption controls and real-world post-compromise security. Through practical extraction workflows, we show where these protections help, where they still fall short, and why browser credential theft remains a persistent problem on compromised endpoints. --- Mirrored from YouTube: https://www.youtube.com/watch?v=LgtxPHYsD8Uhttps://peertube.dodges.it/static/streaming-playlists/hls/5a9f6617-4cd8-4039-a89e-0d16f47c1732/ad173a9a-0fda-4d98-98a2-8b51a70c3688-master.m3u8https://peertube.dodges.it/videos/embed/cc3Kfm4Qz7em8uUY3oUUxu1312002026-10-22T11:59:51.637ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/b4VGNKMhaqjLR1ftEoZZ9M2026-10-22T00:42:37.359Zhttps://peertube.dodges.it/lazy-static/thumbnails/f8c86aaf-d89b-41f5-b384-a2e0f35e605c.jpgDCSG1 - Yes We Taught AI to Hack and It Mostly Works - Ariel Herbert VossAI can hack and that’s all anybody can talk about right now. But WHY is this possible now? This talk is a technical field report that examines what changed over the past three years. We’ll also show what happens when you give these systems real access to targets: what they get right, what they miss, and how they fail in weird ways. If you think AI hacking is hype, you’re half right. If you think it doesn’t matter yet, you’re wrong. Either way, you’ll enjoy learning more about it! --- Mirrored from YouTube: https://www.youtube.com/watch?v=JEGadFdnUBQhttps://peertube.dodges.it/static/streaming-playlists/hls/5187b6c2-3435-4a52-a0b7-14a6102cccc9/cba6945a-3af6-4b75-b3c5-3197f65c1270-master.m3u8https://peertube.dodges.it/videos/embed/b4VGNKMhaqjLR1ftEoZZ9M1392002026-10-22T12:08:39.711ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5m9npTaJdu56rwoXw8acJN2026-10-22T00:43:05.570Zhttps://peertube.dodges.it/lazy-static/thumbnails/85686fb7-3f44-468f-b22e-bb48c7fc0703.jpgDCSG1 - Finding a Generic Mali GPU Read:Write Primitive for Real World Exploit Dev - Shuquan ZhouIn Mali GPU exploit development, a reliable arbitrary read/write (R/W) primitive is a critical technique for various vulnerability classes, and for specific cases, it is the sole prerequisite for successful exploitation. In current Mali GPU exploit development, implementing R/W primitive primarily follows two paths: relying on the OpenCL library or utilizing a Job Manager-based write primitive. However, vendor-specific modifications often undermine the versatility and stability of the OpenCL-based primitive, requiring significant adaptation. Meanwhile, the transition to architecture version 10 and beyond has rendered Job Manager-based methods entirely obsolete. These factors leave a technical gap for a flexible, universal, and library-independent R/W primitive on modern Mali GPUs. By tracing OpenCL-to-kernel interactions, we successfully deciphered the CSF commands and its underlying synchronization. We present Mali-RWP, the first stable, generic and library-independent R/W primitive that operates without any vendor runtime. By leveraging low-level completion feedback, Mali-RWP provides a robust, generic solution that fills the technical vacuum in exploit development for the modern CSF-based Mali GPUs --- Mirrored from YouTube: https://www.youtube.com/watch?v=FWoCqjlsSTYhttps://peertube.dodges.it/static/streaming-playlists/hls/23349675-06c3-46e1-8d07-5dce459e2496/d9fdfc32-3c4a-40c5-9870-0f896427b8e3-master.m3u8https://peertube.dodges.it/videos/embed/5m9npTaJdu56rwoXw8acJN2445002026-10-22T12:08:45.831ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/joD6Cy7UPpT1etWxm7evoq2026-10-22T00:43:31.653Zhttps://peertube.dodges.it/lazy-static/thumbnails/14cc53ab-15ff-49fa-9409-c9920b4816d3.jpgDCSG1 -Smuggling Identities: MIMEHeader Parsing Across Big Email Providers - Hao Wang, Caleb SargentOur recent research reveals a new class of email spoofing attacks that exploit inconsistencies in the parsing of Internet Message Format headers (RFC 5322, updated by RFC 6854) across modern email infrastructure. We demonstrate that message headers (MIME headers), in particular the From header, can be crafted in ways that cause outbound and inbound SMTP servers—and their associated mail clients—to disagree on the effective sender identity. As a result, attackers can deliver spoofed emails that appear to originate from trusted sources while successfully bypassing contemporary email security controls, including authentication and anti-spoofing mechanisms. In this talk, we present a systematic analysis of these parsing discrepancies and show how they can be reliably weaponized to achieve large-scale, provider-agnostic spoofing. We empirically demonstrate that this issue could allow threat actors to spoof emails from millions of valid addresses associated with major providers such as Gmail, Outlook, iCloud, Fastmail, and Proton Mail. We will walk through concrete attack scenarios, discuss root causes in protocol and implementation behavior, and explain why existing defenses fail to detect or block these messages. Finally, we outline practical mitigation strategies . --- Mirrored from YouTube: https://www.youtube.com/watch?v=CtUc_45UUlwhttps://peertube.dodges.it/static/streaming-playlists/hls/94edb880-042c-4f07-bc7c-3841194402d0/978c6b9a-5acd-4287-bdf8-5eb53c83e10d-master.m3u8https://peertube.dodges.it/videos/embed/joD6Cy7UPpT1etWxm7evoq2301002026-10-22T12:15:12.591ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6gUfFtLJVuHJ1JdYRgs8qp2026-10-22T00:43:56.586Zhttps://peertube.dodges.it/lazy-static/thumbnails/4f11dbac-4e77-4a8c-a242-a854186ef922.jpgDCSG1- Lessons Learned in Auto Pentest What to Look for When There Are Time Constraints - Jay Turlaet's face it, OEMs and automotive manufacturers can be demanding. It's not your usual penetration test project, where you just need to file everything you found. There's a lot of paperwork, and you must provide evidence that you tested a specific cybersecurity control or test case. Modern vehicles have electronic architectures composed of interconnected Electronic Control Units (ECUs), multiple communication protocols, and external connectivity interfaces such as Wi-Fi, Bluetooth, cellular, and Ethernet. How do you prepare and get wired? In this talk, we will discuss a structured automotive pentest approach, but there won't be a discussion about TARA. There are a lot of those in automotive security conferences. By combining systematic attack-surface discovery, fuzzing, hardware reverse engineering, and wireless security evaluation, penetration testers can significantly increase the likelihood of identifying critical weaknesses in modern automotive systems using a sound methodology, and this is the aim of this talk. The talk also explores how AI-assisted tooling can support automotive penetration testers by automating parts of the testing workflow, improving fuzzing strategies, and accelerating vulnerability discovery. The goal is to find automotive security bugs using common techniques like CAN Bus Firehose Attacks, dumping the MCU firmware, and leveraging it further. --- Mirrored from YouTube: https://www.youtube.com/watch?v=B8EJ9vK7Qf0https://peertube.dodges.it/static/streaming-playlists/hls/2ab60d4e-5038-408a-8df0-b65d2637a723/31eacf82-05c3-4a90-9c42-0f2e4ae486eb-master.m3u8https://peertube.dodges.it/videos/embed/6gUfFtLJVuHJ1JdYRgs8qp1148002026-10-22T12:15:14.780ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tTboEc7LTXMKMBvRopzWjZ2026-10-22T00:44:24.043Zhttps://peertube.dodges.it/lazy-static/thumbnails/379ba2df-6db7-402c-8d51-820a87e1ce5e.jpgDCSG1 - PackageGate: Finding 0 days in every JS Package Manager - Oren Yomtov, Idan DardikmanAfter Shai-Hulud compromised 700+ npm packages, the ecosystem's answer was simple: disable lifecycle scripts and lock your dependencies. What if those defenses don't actually work? We found seven zero-day vulnerabilities across npm, yarn, pnpm, Bun, and vlt that bypass both --ignore-scripts and lockfile integrity verification. Full RCE during package installation with security flags explicitly enabled. Lockfiles that pass validation while serving completely different code. We'll demo popping calc on npm install with --ignore-scripts turned on, show how lockfile integrity checks can be defeated to serve targeted payloads, and explain the specific internals of each package manager that make these attacks possible, from npm's git configuration injection to pnpm's fetch-phase blind spot to Bun's trusted-name confusion. --- Mirrored from YouTube: https://www.youtube.com/watch?v=7VpxOJIySO8https://peertube.dodges.it/static/streaming-playlists/hls/e1cc145e-46a8-4bfc-9be8-48cd11f82cfd/a8bb36dd-36f8-428a-9862-0860424ab546-master.m3u8https://peertube.dodges.it/videos/embed/tTboEc7LTXMKMBvRopzWjZ1374002026-10-22T12:21:15.848ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jQMv8fS2Xe3bHkhrUYv5S32026-10-22T00:44:45.331Zhttps://peertube.dodges.it/lazy-static/thumbnails/47cfc5a7-fb4a-4936-a5fd-dfdb4b8d7a78.jpgDCSG1 - Securing Maritime Operationa Technology - Mark McHargueA “boots on the ground” perspective of balancing operational efficiencies with securing critical infrastructure, from a leading subject matter expert from one of the largest ports in the western hemisphere. --- Mirrored from YouTube: https://www.youtube.com/watch?v=50bjdAawX38https://peertube.dodges.it/static/streaming-playlists/hls/98943d10-fbf1-4a4d-8b49-55063bf05fae/e084fbd6-d3f2-47bb-9451-4a5ee1950ddf-master.m3u8https://peertube.dodges.it/videos/embed/jQMv8fS2Xe3bHkhrUYv5S31039012026-10-22T12:21:21.553ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sXtc9Ktb7vNeFheUoGSGzg2026-10-22T00:45:17.587Zhttps://peertube.dodges.it/lazy-static/thumbnails/396ed8a6-3648-46f5-90a8-6779aa3be27a.jpgDCSG1 - A Red Queen view of agents, trust boundaries, and why speed breaks security - Maria SinghMost organizations think they are deploying an AI feature. In reality, they are deploying a new attack chain. As enterprises connect LLMs to tools, retrieval systems, APIs, files, browsers, and decision workflows, the real risk is no longer the model alone. The risk is the system around it. This talk breaks down how AI workflows create new trust failures across prompts, plugins, memory, identity, and action execution. Using practical examples, we will walk through how seemingly harmless AI automation can turn into data exposure, policy bypass, or operational compromise. The session closes with concrete design patterns for reducing blast radius and building AI systems that can move fast without becoming breach accelerators. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4hiTkd3rlR4https://peertube.dodges.it/static/streaming-playlists/hls/da4c4534-8a0f-4367-bdd5-494b4409beb9/fda7efee-8437-421f-ac3b-42864db8c5ae-master.m3u8https://peertube.dodges.it/videos/embed/sXtc9Ktb7vNeFheUoGSGzg1108002026-10-22T12:31:16.075ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wEfTE7K1sgABpqipeKehVz2026-10-22T00:45:49.847Zhttps://peertube.dodges.it/lazy-static/thumbnails/a7f8a3a7-6a11-41c5-b4cc-9b643c6db9ee.jpgDCSG1 - Copirate 365 Persistent Plundering in the Depths of Microsoft Copilot - Johann RebergerThis research shows the first memory persistent data-exfiltration attack against Microsoft 365 Copilot. By exploiting Copilot via targeted, malicious instructions, an attacker can backdoor a user's Copilot instance to quietly persist Promptware in long-term storage and have it impact all future conversations. Once established, this foothold lets the attacker hijack Copilot at will and trigger data exfiltration through several bypasses discovered across the Microsoft Office/M365 suite. The talk further examines a technique named Delayed Tool Invocation, that has been shown effective in bypassing guardrails and security controls (e.g. Bard/Gemini), and also creates a blind spot for Copilot. Finally, these findings are connected to a broader issue: The Normalization of Deviance in AI. As LLMs become embedded in high-privilege workflows, vendors are implicitly assuming "the model will do the right thing," even when evidence shows the opposite. This mindset is how risky behavior becomes normalized practice. Attendees will leave with a clear understanding of the attack, the underlying design and implementation flaws, what to look out for and how similar issues might impact your applications and organization. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3bkuMJQEg90https://peertube.dodges.it/static/streaming-playlists/hls/f8499988-c597-4d3e-a085-14f4f659997b/0caac3be-af6d-4133-ba94-e4723c579595-master.m3u8https://peertube.dodges.it/videos/embed/wEfTE7K1sgABpqipeKehVz2872002026-10-22T12:31:18.501ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vRtrhpN1QkWSPrn3Uwii9y2026-10-22T00:46:21.905Zhttps://peertube.dodges.it/lazy-static/thumbnails/f248e6a8-d281-40ab-a83e-ac62d18283e1.jpgDEF CON SG1 - CSIT Village - James Tan - Uncovering Hidden Threats: CSIT QpproachJoin us as we go behind-the-scenes of threat hunting and investigation. From daily workflows to real-world incident response, discover the strategies and techniques used to detect, analyse, and respond to complex cyber threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vUmC6c8Qzoghttps://peertube.dodges.it/static/streaming-playlists/hls/f1c15fb4-bd49-4beb-bc3e-8ada5423ba5c/4e60c82c-a134-4e1c-a814-d8eec86bba9c-master.m3u8https://peertube.dodges.it/videos/embed/vRtrhpN1QkWSPrn3Uwii9y1627002026-10-22T12:53:19.061ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/se7kSsgmK1wEvfiLjPRZhZ2026-10-22T00:46:59.426Zhttps://peertube.dodges.it/lazy-static/thumbnails/d3af2e95-db67-4e13-9cf7-48000fb9f372.jpgDEF CON SG1 - CSIT Village - Ernest Ang - From Chrome Renderer, To Mouse To SystemYou click on a link. A download prompt appears. Your mouse suddenly seems to take on a life of its own and clicks the pop-up. Before you know it, your Windows machine belongs to me. This session breaks down an amusing and far-fetched (yet entirely technical) exploit chain, starting from the highly restrictive Chromium renderer process and escalating to kernel-level privileges by chaining and abusing three vulnerabilities: CVE-2024-5274, CVE-2024-11114, and CVE-2025-29824. I will be sharing my learnings, laughs and grief while venturing into V8, Mojo, CLFS and everything in between (i.e. Ubercage, kCFG) while attempting to make this work. --- Mirrored from YouTube: https://www.youtube.com/watch?v=u-AmlDm-pNEhttps://peertube.dodges.it/static/streaming-playlists/hls/d4622ed4-3da0-4bfa-b64c-304ffab64b35/72ea40da-0154-4bbd-8c5e-c95431614214-master.m3u8https://peertube.dodges.it/videos/embed/se7kSsgmK1wEvfiLjPRZhZ2309002026-10-22T21:49:20.435ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sHDS6jBBeVrnULdXNaNnmr2026-10-22T00:47:25.564Zhttps://peertube.dodges.it/lazy-static/thumbnails/52b4d6c9-dad1-46e6-8df0-d3d8bc6c6979.jpgDEF CON SG 1 - CSIT Village - Kan Onn Kit - Struct Reconstruction In AetherIn stripped binaries, malware analysts often struggle in a sea of raw offsets and pointer arithmetic. We share our journey of data structure reconstruction with AETHER. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tH4AzyxPz-Qhttps://peertube.dodges.it/static/streaming-playlists/hls/d85e6f1c-d25c-475b-8c30-82ed075f79d5/55855ad8-6951-481b-beeb-02d58b9e53f8-master.m3u8https://peertube.dodges.it/videos/embed/sHDS6jBBeVrnULdXNaNnmr1225002026-10-22T12:53:29.276ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5fUowNwYcmpdF8aiRNW3mJ2026-10-22T00:47:58.292Zhttps://peertube.dodges.it/lazy-static/thumbnails/ee79d176-05b5-4592-ac78-6d85a3324112.jpgDEF CON SG1 - CSIT Village - Jun Rong And Javier Koh - Cve 2025 52692 Rogue Request Roots RouterThis talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router. We will show how a simple string comparison flaw allowed a complete authentication bypass, eventually gaining full root access with a single HTTP request. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nxtikf--Zzchttps://peertube.dodges.it/static/streaming-playlists/hls/227940c1-f849-4f7e-b0ab-60717fd72daa/cf5fb434-2dd4-483a-9da2-e1f4a67fa1a1-master.m3u8https://peertube.dodges.it/videos/embed/5fUowNwYcmpdF8aiRNW3mJ1432002026-10-22T13:25:32.519ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/oSxJWGBC2qYunCqi6FPtHH2026-10-22T00:48:22.044Zhttps://peertube.dodges.it/lazy-static/thumbnails/e4c3a54c-8eab-4ad6-998e-0daf557cea69.jpgDEF CON SG1 - CSIT Village - Daryl Lim, Zhi Kai - Rolling Api Tokens A Thought ExperimentA thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nOzZIUhlsyQhttps://peertube.dodges.it/static/streaming-playlists/hls/b937ccbb-737e-4ce9-8d28-734f19833f67/bc5b8b02-37a8-45ec-b867-a4a01adc9107-master.m3u8https://peertube.dodges.it/videos/embed/oSxJWGBC2qYunCqi6FPtHH989002026-10-22T18:55:44.003ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9zZQGnvjWwXymKskpgz5jm2026-10-22T00:48:51.049Zhttps://peertube.dodges.it/lazy-static/thumbnails/8a96137e-9f90-4afd-9c63-02a20689a64e.jpgDEF CON SG1 - CSIT Village - Kang Hao - Android Security Javascript Bridge Is Falling DownAn insecure JavaScript bridge (JSB) in Android WebView allows attackers to abuse exposed interfaces to read local files and steal session cookies, leading to full account takeover via malicious deep links and JavaScript injected into the Android WebView context. During this session, we will dive into the details. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lp1jOnZpDCohttps://peertube.dodges.it/static/streaming-playlists/hls/45884c71-2caa-4e9f-9f73-688e809adff0/7803cb59-b580-420c-b1d6-1490cfd67b34-master.m3u8https://peertube.dodges.it/videos/embed/9zZQGnvjWwXymKskpgz5jm1457002026-10-22T13:25:37.136ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/igWmgWt5RZbQg1f3M8PL8V2026-10-22T00:49:25.307Zhttps://peertube.dodges.it/lazy-static/thumbnails/38983896-a5bf-4a93-bd47-8f1824510cc2.jpgDEF CON SG1 - CSIT Village - Poh Cai Min & Shawn Pang - Kînig Bridging Webapi Fuzzing With A GraphGrammar-based fuzzing made painless! This talk highlights how the generation of grammar files for browser WebAPIs can be automated and visualised with the help of a network graph. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l3J33xJAzZghttps://peertube.dodges.it/static/streaming-playlists/hls/8be50204-6864-437d-96c4-11d91bf91f63/6c7129ef-e8af-4fd3-b902-935b3fc8c34d-master.m3u8https://peertube.dodges.it/videos/embed/igWmgWt5RZbQg1f3M8PL8V1317002026-10-22T16:37:50.180ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vdPnEFE1LzTYJj2spQL7MD2026-10-22T00:49:51.106Zhttps://peertube.dodges.it/lazy-static/thumbnails/b2cd54d0-ee68-48fa-bd84-84532b6566a1.jpgDEF CON SG1 - Theodore Lee - Ashes To Analysis: Deconstructing Malware With AetherReverse engineering (RE) is time consuming and resource intensive. With recent advances in AI agents and large language models (LLMs), we share our journey in applying these technologies to accelerate the malware RE process. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hixC4pmnbFAhttps://peertube.dodges.it/static/streaming-playlists/hls/eca32431-60f1-4000-adb3-127efd0ce76f/4a1dce31-6c4b-4c85-ba0a-bbe871cd1041-master.m3u8https://peertube.dodges.it/videos/embed/vdPnEFE1LzTYJj2spQL7MD1075002026-10-22T13:47:33.554ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8mKCxns19NnPu5QiSZv1LE2026-10-22T00:50:17.494Zhttps://peertube.dodges.it/lazy-static/thumbnails/2413186f-05a8-4fbf-a872-e41194b7ffc0.jpgDEF CON SG1 - CSIT Village - Chua Meng Han - From CTF To CVE 202552691 Lessons Hidden In Plain SightCritical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today. This session deconstructs how simple, overlooked design flaws can be weaponised for catastrophic impact. We will also share practical insights on how to mitigate these threats, with strategies that can be implemented at different levels. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fN8mMKp4SAMhttps://peertube.dodges.it/static/streaming-playlists/hls/3b95bbe5-94f0-4992-8d00-1f754e1904b6/d6ca5368-9cd7-4d30-a699-b34c2e66a21d-master.m3u8https://peertube.dodges.it/videos/embed/8mKCxns19NnPu5QiSZv1LE1776002026-10-22T16:03:01.426ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7jfYx3Zis4QWwaDoJ1n6eb2026-10-22T00:50:42.306Zhttps://peertube.dodges.it/lazy-static/thumbnails/e3d6f943-2623-4723-94b9-702dc97c34e6.jpgDEF CON SG1 - CSIT Village - Loke Yan Hao -Hack Smarter: Unleashing AI in Bug Bounty Pen TestingWe share our findings from using AI tools for web penetration testing on bug bounty programmes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=doanWlYLAMwhttps://peertube.dodges.it/static/streaming-playlists/hls/332372c6-2853-4619-a266-b87167cfc138/5615a7c5-34bb-4a7c-873e-161d7ffeca1e-master.m3u8https://peertube.dodges.it/videos/embed/7jfYx3Zis4QWwaDoJ1n6eb1146002026-10-22T13:47:40.504ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2ViamA69TE3aH7wdHyMvvL2026-10-22T00:51:13.776Zhttps://peertube.dodges.it/lazy-static/thumbnails/ae8c557d-d0e0-44e1-acb9-fdba5bc1bd39.jpgDEF CON SG1 - CSIT Village - Anton Chua - Cyber Physical: The Soft Underbelly?This session re-examines physical security assumptions in Cyber Defence structures. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ZO1lChlp6Mkhttps://peertube.dodges.it/static/streaming-playlists/hls/0f8a226e-14e9-47ec-b53c-8dc436709f7a/9afb7faf-b56c-4cb6-9e0a-94f753642aa9-master.m3u8https://peertube.dodges.it/videos/embed/2ViamA69TE3aH7wdHyMvvL1248002026-10-22T15:26:10.065ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3BNCyUDiyNHKmALwn6NyCd2026-10-22T00:51:44.279Zhttps://peertube.dodges.it/lazy-static/thumbnails/ab3eeeaf-6712-474c-8679-f4cb2bcf9ef3.jpgDEF CON SG1 - CSIT Village - Sim Wei Jun - Bind & Breach Injecting Postgresql Queries@Protocol LevelThis presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level. It clarifies exploitation conditions, details the exploit steps, and demonstrates the vulnerability through custom exploit code targeting a Harbor deployment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YZK98rFCMbAhttps://peertube.dodges.it/static/streaming-playlists/hls/15320bdb-95de-419d-b74c-b11b220baed4/e59a69b6-27cc-4aa7-83ef-732ced999c1f-master.m3u8https://peertube.dodges.it/videos/embed/3BNCyUDiyNHKmALwn6NyCd1157002026-10-22T14:04:47.671ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8qtC6RNvtDry4JDRkgKJQh2026-10-22T00:52:15.844Zhttps://peertube.dodges.it/lazy-static/thumbnails/db041907-b4c7-4a17-9e45-220c49d6566f.jpgDEF CON SG1 - CSIT Village - Shao Xiang -Thinking like the enemy: Adversary MindsetUnderstanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically strengthen defenses. This session introduces the four pillars that help defenders think like adversaries, enabling proactive planning, better prioritisation, and more effective response strategies. --- Mirrored from YouTube: https://www.youtube.com/watch?v=SDZ95UJi1fshttps://peertube.dodges.it/static/streaming-playlists/hls/3c1ad812-3813-4cae-a74c-06e3594efd20/7cd4531d-33e2-4210-9209-e37287f14f8b-master.m3u8https://peertube.dodges.it/videos/embed/8qtC6RNvtDry4JDRkgKJQh1444002026-10-22T14:04:55.634ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/oHJ3QvzMMEHr7Crt1n15gh2026-10-22T00:52:52.375Zhttps://peertube.dodges.it/lazy-static/thumbnails/3314b349-24d2-4cd9-9452-68b00deffbe2.jpgDEF CON SG1 - CSIT Village - Kenneth Huang Shaoqi - How A No Write Can Compromise System SecurityCompilers generate all our code, but they don’t get it right all the time. In this talk, we’ll introduce how compilers can affect software security in general, before going deep into a V8 optimization n-day from the perspective of a vulnerability researcher. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PuKePTZWo0whttps://peertube.dodges.it/static/streaming-playlists/hls/b7fc7569-e41c-4cc8-87de-a85847654596/d1c8517c-6c54-4524-ac96-f8b12629f1de-master.m3u8https://peertube.dodges.it/videos/embed/oHJ3QvzMMEHr7Crt1n15gh2428002026-10-22T15:25:42.931ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5TB6FsqdP7WTnp8kqu6Qos2026-10-22T00:53:20.029Zhttps://peertube.dodges.it/lazy-static/thumbnails/ddd8822d-bb77-4d5d-9039-a8abad00e780.jpgDEF CON SG - CSIT Village - Kendrick Yeo, Eugene Ong - Learning OT Through A Digital TwinDuring this session, we will share simulated water testbed, and the attacks that can work on it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=JLcx2sqUbBAhttps://peertube.dodges.it/static/streaming-playlists/hls/27991de5-6132-4e27-ab7b-47d8ea3b289e/4ecf6eec-b656-4d6c-a3ea-19f1d76f0164-master.m3u8https://peertube.dodges.it/videos/embed/5TB6FsqdP7WTnp8kqu6Qos1486002026-10-22T14:18:50.879ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9DM4aGbswyt9zjxU6oshjZ2026-10-22T00:53:46.433Zhttps://peertube.dodges.it/lazy-static/thumbnails/837fd244-9909-4343-9041-49e9951dfd56.jpgDEF CON SG 1 - CSIT Village - Koh Kian Woon - Not All Firefox Bugs Are Equal-Heap Grief & CFG BypassAs AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders. This talk highlights that effective security requires going beyond severity ratings to truly understanding threats and to prioritise real-world exploitability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EJFCwq_hUyshttps://peertube.dodges.it/static/streaming-playlists/hls/460f6508-3ec3-4280-bc4f-33a64917389d/b8500bba-b9d6-4758-9b29-bf532a0ae66c-master.m3u8https://peertube.dodges.it/videos/embed/9DM4aGbswyt9zjxU6oshjZ1295002026-10-22T15:25:37.885ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iJJiJ2xDjwGzM3hZYdmmDo2026-10-22T00:54:13.876Zhttps://peertube.dodges.it/lazy-static/thumbnails/0693a4ae-9329-481e-9dcc-583baede857c.jpgDEF CON SG1 - CSIT Vilage - Arne Sim - TISC : Behind The Scenes In CTF Challenge CreationThe InfoSecurity Challenge (TISC) is one of Singapore's most anticipated Capture-the-Flag competition (CTF), hosted annually by CSIT. Join one of the challenge creators as he shares his creation process and learn what goes on behind-the-scenes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EFqcMPPaK_Ihttps://peertube.dodges.it/static/streaming-playlists/hls/8fa2aad4-d40d-40d1-83f5-086edb8d9668/1defbf91-76d0-4eab-ada3-dc18abaf3f2e-master.m3u8https://peertube.dodges.it/videos/embed/iJJiJ2xDjwGzM3hZYdmmDo981002026-10-22T14:18:53.070ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dNWRKG5nrDrTbvKXUpFQkc2026-10-22T00:54:44.142Zhttps://peertube.dodges.it/lazy-static/thumbnails/e75aa017-14ee-4117-a81a-882390c3c352.jpgDEF CON SG1 - CSIT Village - Sng Peng Boon - Web Hacking Lessons from Pre Gov Bug Bounty ProgramWe share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared. We will also walk through real-world vulnerabilities and recommend practical takeaways for both bug hunters and developers. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Ahn_J8QS7Oohttps://peertube.dodges.it/static/streaming-playlists/hls/67bbaf46-84f3-40cb-aadc-ba4a1bbaa861/adece07e-80ca-4b1a-91f1-880f2357c522-master.m3u8https://peertube.dodges.it/videos/embed/dNWRKG5nrDrTbvKXUpFQkc1425002026-10-22T14:30:43.373ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6adw5Z6JmgLmc5ozXiFxAw2026-10-22T00:55:04.232Zhttps://peertube.dodges.it/lazy-static/thumbnails/af86808d-b784-4f0a-8ed4-17e7c5b9f2e5.jpgDEF CON SG1 - CSIT Village - Lim Jing Qiang - Registry Stored Payloads For Usb Rubber DuckiesUsing the rubber ducky to deploy a large payload in an air-gapped environment is no easy feat. This talk introduces a way of leveraging USB descriptors to store large payload in the Windows Registry and retrieving it through keystroke injection. --- Mirrored from YouTube: https://www.youtube.com/watch?v=9MEqSUlgAD8https://peertube.dodges.it/static/streaming-playlists/hls/29c71a27-a090-4a7c-9e12-e504001135f6/ac06b73d-8b12-4c59-bf9c-c94744c16c98-master.m3u8https://peertube.dodges.it/videos/embed/6adw5Z6JmgLmc5ozXiFxAw763002026-10-22T15:25:34.463ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2dmAMWq4C36bMhD4eG3xu32026-10-22T00:55:31.841Zhttps://peertube.dodges.it/lazy-static/thumbnails/d7fa7474-964a-46e6-b065-d558d4567fd6.jpgDEF CON SG1 - CSIT Village - Daniel Siok - Balancing Security&Usability In AirGapped ImplementationsWhat does an air-gapped system really mean in practice? This talk introduces the basics of air gap systems and data diode, then explores how real world requirements shape systems design and what that means for security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=5rU62SvD3TYhttps://peertube.dodges.it/static/streaming-playlists/hls/09d2c24e-e6fd-4acc-9584-76ea56267ee6/81b68da4-9afc-44a0-ad2d-d1b832bbaec2-master.m3u8https://peertube.dodges.it/videos/embed/2dmAMWq4C36bMhD4eG3xu3768002026-10-22T15:25:26.666ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qAJ4vJRbA1yBQ8TuQAmfJV2026-10-22T00:56:09.434Zhttps://peertube.dodges.it/lazy-static/thumbnails/8ac1714a-6a53-4cda-8d30-4570adb82182.jpgDEF CON SG1 - CSIT Village - Eugene Lim - Mic Drop: Hacking into Enterprise Audiovisual HardwareAudiovisual hardware - from web conferencing cameras to meeting room systems - is deeply embedded in modern enterprises' physical attack surface. However, they are often poorly secured and monitored. This presentation dives into real and novel vulnerabilities discovered in enterprise-grade equipment, and walks through the risks they can pose to any organisation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=-Rkh47bu-lchttps://peertube.dodges.it/static/streaming-playlists/hls/c7348969-5600-4fd2-9e52-72af75d17071/35bb8d77-8536-4312-aaf6-983ab0dfb362-master.m3u8https://peertube.dodges.it/videos/embed/qAJ4vJRbA1yBQ8TuQAmfJV1614002026-10-22T15:25:32.194ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/uagHHFGkg4bGuamKQt687n2026-10-22T01:02:11.954Zhttps://peertube.dodges.it/lazy-static/thumbnails/0f081ce0-fdfe-4ff2-8a8d-95ab3b86f2b5.jpgDEF CON 34 - Hacking AI - Bruce SchneierHumans are hacking AI systems. Humans are hacking with AI systems. But also, AIs are hacking human systems. They’re finding and exploiting vulnerabilities in computer code, and they’ll soon be doing the same with all sorts of other codes. For example: the tax code can be hacked. Vulnerabilities are called loopholes, exploits are called tax avoidance strategies, and black hats are called accountants. Similarly, financial markets can be hacked. So can any system of rules or laws, including democracy itself. AIs will hack these systems at our request, and they’ll also do this innately, organically – and possibly in ways we don’t immediately see. We need to consider a world where increasingly sophisticated hacks or our social, economic, and political systems are discovered computer speeds, and then exploited at computer scale and scope. Right now, our systems of patching these systems operate at a human pace, which won't be good enough. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eEBv0STiYhIhttps://peertube.dodges.it/static/streaming-playlists/hls/e40b4386-1b26-481a-a593-7087d870cea5/317e621e-2acb-45d2-927a-f873949ce67b-master.m3u8https://peertube.dodges.it/videos/embed/uagHHFGkg4bGuamKQt687n2674002026-10-22T16:04:37.934ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pzS7id4WLfjBmzC6uynaut2026-10-22T01:05:18.212Zhttps://peertube.dodges.it/lazy-static/thumbnails/40e6fd20-8074-45a5-890a-f73adda2fcbe.jpgDEF CON 34 - ESP32 as counter-surveillance platform - Cybertiger, Colonel Panic, The WrewPrivacy should be accessible to all. Historically, counter-surveillance tools have been expensive, complex, and inaccessible to most individuals, often limited to well-funded researchers and costly hardware configurations. The ESP32 offers a transformative alternative. This presentation will demonstrate how an affordable microcontroller has become the foundation for a growing suite of open-source, user-friendly anti-surveillance tools. We will discuss the technical features that make the ESP32 a compelling choice for these applications, including passive 802.11 and Bluetooth monitoring, OUI-based device fingerprinting, and robust cryptographic capabilities. Applications include detecting police body cameras in operational environments, mapping Flock Safety automatic license plate recognition (ALPR) infrastructure, identifying unauthorized drones, detecting radio frequency jamming across 2.4GHz, 5GHz, and cellular bands, and tracking autonomous robots operating with known-vulnerable firmware. These tools are cost-effective and freely available. We will also consider future developments in accessible counter-surveillance hardware, such as the ESP32-S5 with 5GHz support, GPS, displays, haptics, etc. Advancing anti-surveillance culture requires designing devices that individuals are motivated to use and carry. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PcK-TDmzshchttps://peertube.dodges.it/static/streaming-playlists/hls/befc9d34-f4ac-4209-94b9-2fd8fe771fbf/7adfaed6-12cf-4664-9f01-8b2587d741bf-master.m3u8https://peertube.dodges.it/videos/embed/pzS7id4WLfjBmzC6uynaut2667002026-10-22T16:37:46.495ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mY84riE5XjLX5LLaAUMQRZ2026-10-22T01:06:13.240Zhttps://peertube.dodges.it/lazy-static/thumbnails/a5529dc2-f9ed-4daf-ae97-5cd4a0c64929.jpgDEF CON 34 - Video Team - Scavenger Hunt Slot Machine1988 Japanese Slot Machine for your enjoyment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=86TLtYkpyKIhttps://peertube.dodges.it/static/streaming-playlists/hls/a9ccc655-0605-42db-991d-1e0eb45997db/1605d18e-5ebe-4a12-b23a-7c8628d2e36a-master.m3u8https://peertube.dodges.it/videos/embed/mY84riE5XjLX5LLaAUMQRZ198002026-10-22T16:37:34.826ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/k27kEre4DWcB5NyVFtD8UY2026-10-22T01:06:34.707Zhttps://peertube.dodges.it/lazy-static/thumbnails/35d1d727-5d20-4962-95a9-05da0d5d3619.jpgDEF CON 34 - Video Team - I Am the Cavalry - Josh and DeanWe catch up with the folks from I Am the Cavalry (IATC) for an update on their project. --- Mirrored from YouTube: https://www.youtube.com/watch?v=KKSRwtMGYQUhttps://peertube.dodges.it/static/streaming-playlists/hls/9a0548ec-e0db-49cd-b3b6-d687b61ff114/906f3560-3d0b-44b0-a0a1-1f21c398ed13-master.m3u8https://peertube.dodges.it/videos/embed/k27kEre4DWcB5NyVFtD8UY259002026-10-22T16:37:37.065ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/h1gZihbUiTJiLbcZqLMWmt2026-10-22T01:09:17.712Zhttps://peertube.dodges.it/lazy-static/thumbnails/4e5ec3a5-6101-4d18-be93-40389e1d539d.jpgDEF CON - noRecognition: Could a pattern on clothing fool Facial Recognition? - Bill SwearingenYou are being watched. Not in the vague, philosophical sense. Right now. The ATM you used this morning. The gas pump. Every doorbell on your block. The 125 smart streetlights you walked past on your way to lunch. You are indexed, cataloged, and matched against databases you never consented to join, by AI models that are wrong more often than the vendors will ever admit. Other solutions to this involves looking ridiculous. Face paint. IR glasses. Masks. Real-time deepfake software running on your phone. Congrats, you defeated the algorithm AND ensured every human within 50 feet is staring at you. Super subtle. I built something different. noRecognition is a genetic algorithm that breeds adversarial patterns, printed on ordinary fabric, that defeat the entire facial recognition pipeline: person detection, face detection, and identity recognition across 10 models used by Clearview AI, Axon, Hikvision, and Palantir. No electronics. No software. You look like a person wearing a scarf. The AI sees nothing. I will demonstrate this live on stage. One camera. One scarf. Zero detections. Come watch me disappear. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WyPmt8CE5L4https://peertube.dodges.it/static/streaming-playlists/hls/819c124a-9072-4d95-837d-72bd006ae6c3/0b552b2d-c4b6-46da-8aaa-b697021494dc-master.m3u8https://peertube.dodges.it/videos/embed/h1gZihbUiTJiLbcZqLMWmt2779002026-10-22T17:05:34.962ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/q1LYkp5Lnpp6P7bRfa8wWw2026-10-22T01:14:19.962Zhttps://peertube.dodges.it/lazy-static/thumbnails/c6975a52-c524-4f20-bbf8-0cda76295bce.jpgDEF CON 34 - Video Team - Car Hacking VilllageOut intrepid reporter finds out what's going on this year in the DEF CON Car Hacking Village. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ciQdzBhR1xIhttps://peertube.dodges.it/static/streaming-playlists/hls/c2770ad9-4842-4988-aa3c-23c9bb34f53a/27b36a44-1072-4c72-9ec3-f47a05514157-master.m3u8https://peertube.dodges.it/videos/embed/q1LYkp5Lnpp6P7bRfa8wWw439002026-10-22T18:30:43.726ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1HwYQApQEXcbbuYTykZGbk2026-10-22T01:14:41.774Zhttps://peertube.dodges.it/lazy-static/thumbnails/ed18fa37-7769-4e3c-b184-7de60f73a95e.jpgDEF CON 34 - Video Team - Ham Radio Village - Marvin Goes HAMIn which young Marvin goes to the HAM Radio Village and makes us all smile. --- Mirrored from YouTube: https://www.youtube.com/watch?v=f02wH61gk8Mhttps://peertube.dodges.it/static/streaming-playlists/hls/05cc962e-b409-4abb-9b8b-aa09c0ed69cf/791eef69-784c-4e05-9a27-c9aa6c8c6ada-master.m3u8https://peertube.dodges.it/videos/embed/1HwYQApQEXcbbuYTykZGbk268002026-10-22T18:30:41.128ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iYAFg1T2efNNTw4cHWs5AZ2026-10-22T01:15:41.261Zhttps://peertube.dodges.it/lazy-static/thumbnails/445578be-d6eb-4d4c-8a0d-335fface13d7.jpgDEF CON 34 - Video Team - PhreakMeSoldier of FORTRAN brings back old-school phreaking in contest form. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uAZi-dCehuIhttps://peertube.dodges.it/static/streaming-playlists/hls/919260f4-1aa8-4315-82b3-557d5dd6f4cd/21e7bc09-582c-4b74-9b29-3883da88f09a-master.m3u8https://peertube.dodges.it/videos/embed/iYAFg1T2efNNTw4cHWs5AZ511002026-10-22T18:30:38.969ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/u46j424bKW4bPYbQnwB6ex2026-10-22T01:16:29.075Zhttps://peertube.dodges.it/lazy-static/thumbnails/eadd66f5-30f9-408e-82f5-74be4cee48ad.jpgDEF CON 34 - Video Team - EmbeddedSystems VillageThe full lowdown on the Embedded Systems Village at DEF CON 34 --- Mirrored from YouTube: https://www.youtube.com/watch?v=fqs--Ha7gfwhttps://peertube.dodges.it/static/streaming-playlists/hls/e32e630f-bcfc-4bfa-90c1-a733b769b93d/e2fc6d4f-cc0d-4b8e-a1f0-957cd43d52b5-master.m3u8https://peertube.dodges.it/videos/embed/u46j424bKW4bPYbQnwB6ex545002026-10-22T18:30:29.166ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/e9BFusXL1B58RbB9BsCe422026-10-22T01:17:18.527Zhttps://peertube.dodges.it/lazy-static/thumbnails/fca88535-6b49-4e06-9186-5cc1341fcb1e.jpgDEF CON 34 - Video Team - LEECHYou wouldn't download a car. --- Mirrored from YouTube: https://www.youtube.com/watch?v=OqswVKiCN4whttps://peertube.dodges.it/static/streaming-playlists/hls/6a7abdea-93bd-42bc-b322-8446a5efb323/6eb929bb-90b1-4230-beaa-1f853e66c92f-master.m3u8https://peertube.dodges.it/videos/embed/e9BFusXL1B58RbB9BsCe42845002026-10-22T17:05:41.394ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tEq8jPtNsBUvMCyadMeDV12026-10-22T01:17:56.601Zhttps://peertube.dodges.it/lazy-static/thumbnails/7f3ad8dd-54b5-40e9-8bf8-05c20312c4f9.jpgDEF CON 34 - Video Team - Physical Security VillageThere's a lot to learn in the Physical Security Village. --- Mirrored from YouTube: https://www.youtube.com/watch?v=M0-cxePSifshttps://peertube.dodges.it/static/streaming-playlists/hls/e003e01c-3438-4731-9edf-4390ca4777ce/7b3658da-7c95-4322-8122-517189c8064d-master.m3u8https://peertube.dodges.it/videos/embed/tEq8jPtNsBUvMCyadMeDV1322002026-10-22T18:30:20.159ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gUfnKj6bpSqhZkCpmUpHCx2026-10-22T01:18:43.083Zhttps://peertube.dodges.it/lazy-static/thumbnails/180ae3b1-e14f-4299-934a-6210c4c9ff73.jpgDEF CON 34 - Video Team - Voting Machine Hacking VillageVoting Village returns to DEF CON 34 to consider the state of election security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=toi0keDnOschttps://peertube.dodges.it/static/streaming-playlists/hls/80c49d64-7141-4852-9dee-e05dfa1ffb23/ed786dcc-9d4f-40a6-8626-1f4440a3057a-master.m3u8https://peertube.dodges.it/videos/embed/gUfnKj6bpSqhZkCpmUpHCx767002026-10-22T17:23:15.204ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hGTPzbEHJXC22qiQ81RcUr2026-10-22T01:19:39.279Zhttps://peertube.dodges.it/lazy-static/thumbnails/e61f886e-cffc-4036-82eb-e468292952f0.jpgDEF CON 34 - VideoTeam - Cliff Stoll AfterHoursAn interview with the delightful Cliff Stolll. So very worth your time --- Mirrored from YouTube: https://www.youtube.com/watch?v=AJCWsoozg0Qhttps://peertube.dodges.it/static/streaming-playlists/hls/8747e79a-5166-4ffe-8343-f27c201039f5/258539c4-6b94-4e3e-8b04-bf4c69e59379-master.m3u8https://peertube.dodges.it/videos/embed/hGTPzbEHJXC22qiQ81RcUr624002026-10-22T17:23:24.767ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iK9AG7oggFQnmG7156pnRo2026-10-22T01:20:22.124Zhttps://peertube.dodges.it/lazy-static/thumbnails/64996fbf-e12d-4395-bf1c-6040d4475263.jpgDEF CON 34 - Video Team - Car Hacking Village - Charger HackingWe get an EV charger hacking breakdown from the legend MajorMalfunction. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uF8c7Ty-5zAhttps://peertube.dodges.it/static/streaming-playlists/hls/8fb1a35b-8f11-46b4-aa0b-dbbdb6eb038c/b504f094-b008-4999-bb86-5d54501dbe67-master.m3u8https://peertube.dodges.it/videos/embed/iK9AG7oggFQnmG7156pnRo502002026-10-22T17:44:08.376ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fEZQkS2DNz3u5Hf2TJEtGi2026-10-22T01:21:22.652Zhttps://peertube.dodges.it/lazy-static/thumbnails/5ca24217-91b3-4753-8aad-91d0d2e193d1.jpgDEF CON 34 - Video Team - AI Village - PokemonFrom the AI Hacking Village - an AI that plays Pokemon for you, without costing you 20 grand in tokens. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Egzf_aWSxZchttps://peertube.dodges.it/static/streaming-playlists/hls/76d1d87c-d56e-4dd2-9c90-56d919bd9b9d/1bcb9cff-71b1-4384-ad54-fb578dea230a-master.m3u8https://peertube.dodges.it/videos/embed/fEZQkS2DNz3u5Hf2TJEtGi810002026-10-22T17:53:52.795ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kZWK9dEwnQZjLJjHdYYFjY2026-10-22T01:21:56.559Zhttps://peertube.dodges.it/lazy-static/thumbnails/fb9bfb97-a178-40d8-aed3-3a8f6506061d.jpgDEF CON 34 - Video Team - DEF COIN 34 Badge - Bunnie HuangThe lowdown on the amazing DC34 badge from the designer himself. --- Mirrored from YouTube: https://www.youtube.com/watch?v=1plmJlWSKa0https://peertube.dodges.it/static/streaming-playlists/hls/a1f4c439-ef16-478b-aaae-0b05f9c1abc8/4b649a0c-c4c1-4e45-9d2f-5d5f1f69b406-master.m3u8https://peertube.dodges.it/videos/embed/kZWK9dEwnQZjLJjHdYYFjY515002026-10-22T17:54:02.251ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/miwBa2QpFScbu2T9JEHjEo2026-10-22T01:22:25.225Zhttps://peertube.dodges.it/lazy-static/thumbnails/c29aca9e-9f62-4284-970a-a86296e07784.jpgDEF CON 34 - Video Team - DEF CON Groups Highlight DC256If you're not in a DEF CON Group, you're missing out on the opportunity to keep the DEF CON vibes going all year long, Ryan from the Video Team gets some fresh info from DC256 in Huntsville, Alabama --- Mirrored from YouTube: https://www.youtube.com/watch?v=u-SsrNy-cK0https://peertube.dodges.it/static/streaming-playlists/hls/a469476b-da49-4f71-b2c1-24af6a4504c2/b476582e-041f-4c2e-9d86-35b13ad79861-master.m3u8https://peertube.dodges.it/videos/embed/miwBa2QpFScbu2T9JEHjEo344002026-10-22T17:54:00.068ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/w6onhghg1YWsiSg4wVVDv72026-10-22T01:22:42.654Zhttps://peertube.dodges.it/lazy-static/thumbnails/40e68b32-90f3-423b-b748-b36f187111da.jpgDEF CON 34 - Good Morning--- Mirrored from YouTube: https://www.youtube.com/watch?v=XR3a4B4W-hQhttps://peertube.dodges.it/static/streaming-playlists/hls/f3b2a9a9-92b6-4595-8191-e29db3852864/6fd9c973-9397-4a3f-a02d-ffe6e0a27d05-master.m3u8https://peertube.dodges.it/videos/embed/w6onhghg1YWsiSg4wVVDv714002026-10-22T17:53:57.731ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vv17PFdJSjPoH5PLoXbTb12026-10-22T01:23:19.650Zhttps://peertube.dodges.it/lazy-static/thumbnails/f9cd7320-e058-490d-8442-0b6726118715.jpgDEF CON 34 - DEF CON Policy Announcement - Katie Noble, Heather WestThe new leadership of the DEF CON Policy project share the goals of DEF CON Policy and remind you that their Call for Papers closes May 1. --- Mirrored from YouTube: https://www.youtube.com/watch?v=y7vMt_IM0Bwhttps://peertube.dodges.it/static/streaming-playlists/hls/eee5a9b7-7cc0-45b5-8098-2df698466eb0/cc4af88e-5a86-464d-9ea2-1da642f2beaa-master.m3u8https://peertube.dodges.it/videos/embed/vv17PFdJSjPoH5PLoXbTb1202002026-10-22T17:53:56.170ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/erQD6s2YD67qxcA1pnfGzn2026-10-22T01:25:58.186Zhttps://peertube.dodges.it/lazy-static/thumbnails/cc54aecf-cab9-4b69-b6aa-bd5e04f1124b.jpgDEF CON 33 - DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks - Ryan EmmonNetwork Attached Storage (NAS) devices are indispensable in many corporate and home environments. These devices often live on the network edge, providing convenient remote access to confidential files and internal networks from the public internet. What happens when this goes terribly wrong? In this presentation, I’ll discuss how I developed a zero-day exploit targeting dozens of Synology NAS products. At the time of discovery, the exploit facilitated unauthenticated root-level remote code execution on millions of NAS devices in the default configuration. My exploitation strategy centered around smuggling different types of delimiters that targeted multiple software components. In the past, exploitation of the vulnerability’s bug class demanded additional primitives that weren’t available on my targets. While searching for alternative paths, I discovered a novel remote Linux exploitation technique. I’ll be presenting this technique, which can be used in other researchers’ exploit chains in the future. For the first time in public, I’ll also be discussing the details of my Synology vulnerability research, which won a $40,000 prize at the October 2024 Pwn2Own competition. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3F5icGjDWfghttps://peertube.dodges.it/static/streaming-playlists/hls/6ce25f3c-937f-4917-bdc2-e853688c5d0f/a2b9add4-a55d-4a1c-91da-b0806432597c-master.m3u8https://peertube.dodges.it/videos/embed/erQD6s2YD67qxcA1pnfGzn2379002026-10-22T18:30:35.305ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/eAEYM6azmDup5Z8qc2Kx8x2026-10-22T01:31:00.769Zhttps://peertube.dodges.it/lazy-static/thumbnails/11957b32-3620-4c1d-9818-f68456ff71c0.jpgDEF CON 33 - Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen - Marek TóthBrowser extensions have become increasingly popular for enhancing the web browsing experience. Common examples are ad blockers, cryptocurrency wallets, and password managers. At the same time, modern websites frequently display intrusive elements, such as cookie consent banners, newsletter subscription modals, login forms, and other elements that require user interaction before the desired content can be displayed. In this talk, I will present a new technique based on clickjacking principles that targets browser extensions, where I used fake intrusive elements to enforce user interaction. In my research, I tested this technique on the 11 most widely used password managers, which resulted in discovering multiple 0-day vulnerabilities that could affect tens of millions of users. Typically, just one click was required from a user to leak their stored private information, such as credit card details, personal data or login credentials (including TOTP). In some cases, it could lead to the exploitation of passkey authentication. The described technique is general and can be applied to browser extensions beyond password managers, meaning other extensions may also be vulnerable to this type of attack. In addition to describing several methods of this technique, I will also recommend mitigations for developers to protect their extensions against this vulnerability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Gu4IoDXNqoUhttps://peertube.dodges.it/static/streaming-playlists/hls/6e1e1cc4-7d8a-4c61-9254-869fa44b4539/22a80004-d7c2-4499-a836-24a6287ae25d-master.m3u8https://peertube.dodges.it/videos/embed/eAEYM6azmDup5Z8qc2Kx8x3009002026-10-22T18:55:47.492ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aqujeEHnXppQWAJfCwqyx52026-10-22T01:32:11.786Zhttps://peertube.dodges.it/lazy-static/thumbnails/a2e77699-5670-461a-9376-ba55e677b8f8.jpgDEF CON 33 - Can't Stop the ROP: Automating Universal ASLR Bypasses - Bramwell BrizendineHigh-entropy ASLR was supposed to make bypasses of ASLR on Windows virtually impossible - until now! This talk will debut nine novel bypasses of the strongest form of ASLR on Windows, which makes attacks such as brute-forcing totally infeasible. This talk showcases how mostly simple, easy-to-find ROP gadgets can be used to construct highly reliable, universal ASLR bypasses to key Windows system DLLs, allowing ROP gadgets from those DLLs to be used freely in exploits! The end result? The attack surface is greatly expanded, making it possible to do more attacks on binaries previously constrained by limited gadgets. What may have been impossible before due to insufficient ROP gadgets, now is quite possible! While this talk focuses primarily on ASLR bypass for x64, we will also briefly touch upon similar attacks for x86. As part of this talk, for the first time ever, I am also releasing and open-sourcing a new mini-tool that will generate complete, x64 ROP chains for each of these bypasses! We will see this ASLR bypass attack in action with demo. We conclude with recommendations to help remediate the problem. This talk is an in-depth technical deep dive into Windows internals and the design of this technique, but it will also be presented in an accessible way to beginners. --- Mirrored from YouTube: https://www.youtube.com/watch?v=NrTNNi9PP5Yhttps://peertube.dodges.it/static/streaming-playlists/hls/4c4d8c3c-33fc-493c-b4bf-c9c54edb082a/51b25487-8921-4b6a-9be3-35b57d0da5ee-master.m3u8https://peertube.dodges.it/videos/embed/aqujeEHnXppQWAJfCwqyx52565002026-10-22T21:48:38.437ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tHBHTvGaMwKTfXRcj2r2nW2026-10-22T01:33:00.034Zhttps://peertube.dodges.it/lazy-static/thumbnails/f02b9042-8374-4a43-a3a4-edfabefbde6f.jpgDEF CON 33 Recon Village - Building Local Knowledge Graphs for OSINT - Donald Pellegrino--- Mirrored from YouTube: https://www.youtube.com/watch?v=yIUfntW_TxYhttps://peertube.dodges.it/static/streaming-playlists/hls/e07640c3-844a-4b53-ad2a-a86355022094/fbd20d78-639a-43d8-94f7-181a3ed98e96-master.m3u8https://peertube.dodges.it/videos/embed/tHBHTvGaMwKTfXRcj2r2nW2471002026-10-22T19:46:25.811ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aqM6CupEbMBUYQxiGkFTbq2026-10-22T01:33:33.118Zhttps://peertube.dodges.it/lazy-static/thumbnails/97edd769-6856-48e7-820d-45565b2a4c0e.jpgDEF CON 33 Recon Village - Mapping the Shadow War From Estonia to Ukraine - Evgueni Erchov--- Mirrored from YouTube: https://www.youtube.com/watch?v=y-1_nKM8DRQhttps://peertube.dodges.it/static/streaming-playlists/hls/4c57e3f5-a3de-4578-9bdc-a3e48326dd90/fd510468-3264-4012-b099-bf4b1002c4b7-master.m3u8https://peertube.dodges.it/videos/embed/aqM6CupEbMBUYQxiGkFTbq1247002026-10-22T19:14:59.808ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/b6Esfj3zTwkLkNoZhTqxvM2026-10-22T01:34:17.998Zhttps://peertube.dodges.it/lazy-static/thumbnails/1393b417-a8d7-4396-a4ce-a48ef08c0f73.jpgDEF CON 33 Recon Village - A Playbook for Integration Servers - Ryan Bonner, Guðmundur Karlsson--- Mirrored from YouTube: https://www.youtube.com/watch?v=wgf5GKrY3nchttps://peertube.dodges.it/static/streaming-playlists/hls/51c5cd7b-5b32-4e70-b5d1-59e708da354b/405049f7-8778-4398-a705-bcf693c916a4-master.m3u8https://peertube.dodges.it/videos/embed/b6Esfj3zTwkLkNoZhTqxvM1321002026-10-22T19:34:30.205ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/j8S4zJ43J5M9tS4jVgDDLS2026-10-22T01:34:54.879Zhttps://peertube.dodges.it/lazy-static/thumbnails/42907862-3e38-4eac-9fed-86c3e48b24df.jpgDEF CON 33 Recon Village - Autonomous Video Hunter AI Agents for Real Time OSINT - Kevin Dela Rosa--- Mirrored from YouTube: https://www.youtube.com/watch?v=oHjQSpcP664https://peertube.dodges.it/static/streaming-playlists/hls/92dd8dcd-a3c5-47b4-b2af-ef602690fe36/bb746d53-2137-4e9e-881a-4464b26c744f-master.m3u8https://peertube.dodges.it/videos/embed/j8S4zJ43J5M9tS4jVgDDLS1401002026-10-22T19:46:22.136ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cg12P5vFcmXqDuan2JHzzS2026-10-22T01:35:39.237Zhttps://peertube.dodges.it/lazy-static/thumbnails/e552cc9c-dfb8-4051-a807-03e8466b329d.jpgDEF CON 33 Recon Village - Inside the Shadows Tracking RaaS Groups, Cyber Threats - John Dilgen--- Mirrored from YouTube: https://www.youtube.com/watch?v=esKyHO5WjPUhttps://peertube.dodges.it/static/streaming-playlists/hls/5b2cb378-a674-4e3f-9ae1-28c339001bb8/33527887-f89c-4b95-831e-3eef96bb6d0e-master.m3u8https://peertube.dodges.it/videos/embed/cg12P5vFcmXqDuan2JHzzS1950002026-10-22T20:14:48.588ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3i4EmiNqbQxs1pDfhNjwnx2026-10-22T01:36:33.208Zhttps://peertube.dodges.it/lazy-static/thumbnails/38bffcd4-2429-423f-a6d7-77fa4d271733.jpgDEF CON 33 Recon Village - How to Become One of Them: Deep Cover Ops - Sean Jones, Kaloyan Ivanov--- Mirrored from YouTube: https://www.youtube.com/watch?v=aSOiPxOBs1Ehttps://peertube.dodges.it/static/streaming-playlists/hls/12942d7e-69b2-4422-82c3-4bdf908a8bc9/f5e327fd-0bbb-49a9-a510-e47ef320b679-master.m3u8https://peertube.dodges.it/videos/embed/3i4EmiNqbQxs1pDfhNjwnx2617002026-10-22T20:14:51.561ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/uqJSGNZ4kmURG94dYjN8rz2026-10-22T01:37:29.512Zhttps://peertube.dodges.it/lazy-static/thumbnails/ed1d0f11-6c98-446e-a09b-ca498fb1cdb6.jpgDEF CON 33 Recon Village - CTI Agent Automated Battlecards from CTI Reports - Mohamed Nabeel--- Mirrored from YouTube: https://www.youtube.com/watch?v=Y8xMr2JwyjUhttps://peertube.dodges.it/static/streaming-playlists/hls/e63427b6-3cc7-42d0-bc53-d03c5b630197/a17b4499-a4ea-45d8-a98c-d0eea386647c-master.m3u8https://peertube.dodges.it/videos/embed/uqJSGNZ4kmURG94dYjN8rz1510002026-10-22T20:43:05.844ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/14YdfuYhtKw4mbXiegph1r2026-10-22T01:38:16.956Zhttps://peertube.dodges.it/lazy-static/thumbnails/460ebb4f-bb9a-454e-8921-dbb9d1f4e95e.jpgDEF CON 33 Recon Village - Discord OSINT - Zach Malinich--- Mirrored from YouTube: https://www.youtube.com/watch?v=Xp4lWpD20Mohttps://peertube.dodges.it/static/streaming-playlists/hls/008ddf69-11dc-46e6-8c19-f12de38f52c1/fb31148f-5587-48e6-93e8-aab86d6cf4d0-master.m3u8https://peertube.dodges.it/videos/embed/14YdfuYhtKw4mbXiegph1r2269002026-10-22T21:48:00.312ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jMjpNDowpqd5V9N8AVMMmg2026-10-22T01:39:16.823Zhttps://peertube.dodges.it/lazy-static/thumbnails/eadf4ae8-d598-4a47-adc1-e01e60086642.jpgDEF CON 33 Recon Village - Plug and Prey Scanning and Scoring Browser Extensions - Nishant Sharma--- Mirrored from YouTube: https://www.youtube.com/watch?v=WH6QRkoDlhkhttps://peertube.dodges.it/static/streaming-playlists/hls/98184fb4-d017-4301-853d-b8fe575c0943/84cc61d9-4f8b-4d8b-b670-317d62606d7e-master.m3u8https://peertube.dodges.it/videos/embed/jMjpNDowpqd5V9N8AVMMmg1738002026-10-22T21:48:10.677ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rVewx7W8s5fiTQzSWXqQkg2026-10-22T06:18:43.811Zhttps://peertube.dodges.it/lazy-static/thumbnails/8f88db1d-d056-4194-897b-0ac50caa59e8.jpgDCSG1 - Introduction to Range Village Community - GladiatorIn this talk, we will take a walk down a not so long ago memory lane, and reflect how The Range Village that was once just a passion project idea, transformed into a non-profit movement. --- Mirrored from YouTube: https://www.youtube.com/watch?v=zqOC2EZUV3Mhttps://peertube.dodges.it/static/streaming-playlists/hls/d1e338e9-1737-486e-8929-66b3e3abb20d/14631d4b-29ae-4725-94aa-c1684c15755e-master.m3u8https://peertube.dodges.it/videos/embed/rVewx7W8s5fiTQzSWXqQkg964002026-10-22T21:57:21.640ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gF5nsdfBVv114byKLb82xv2026-10-22T06:19:06.852Zhttps://peertube.dodges.it/lazy-static/thumbnails/a906eb51-d2f4-4a94-b0ed-f636906c8f4c.jpgDSCG1 - CryptoCurrency Opening Keynote - Michael SchlohJoin your fellow hackers managing the Cryptocurrency areas of Defcon, and get a sneak peak of what each workshop teaches as well as an overview of the showcases and programs happening in our Defcon Village and Contest areas. We will report on cryptocurrency trends and perspectives from distinguished positions in industry, academy, and government. We will announce the teams competing in the Cryptocurrency Challenge, and give an overview of what prizes are available to winning contestants of the hackathon, CTF, and contests. Meet the organizers of years of cryptocurrency content at Defcon and bring your questions to the Creator Stage! --- Mirrored from YouTube: https://www.youtube.com/watch?v=yzqFFMn1qPwhttps://peertube.dodges.it/static/streaming-playlists/hls/7eedc7aa-f198-48bd-8602-05708cbb0a3f/a1beea2a-696b-4885-a09a-fd332e63e134-master.m3u8https://peertube.dodges.it/videos/embed/gF5nsdfBVv114byKLb82xv1051002026-10-22T21:57:23.698ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sCKZk1X3GkRSoogenreVhU2026-10-22T06:19:37.043Zhttps://peertube.dodges.it/lazy-static/thumbnails/b548ad58-60ac-463d-add7-d38f7b49ed9e.jpgDCSG1 - Adversaries Have AI. You Have $0. Here's How You Win Anyway - Aaron Crow--- Mirrored from YouTube: https://www.youtube.com/watch?v=yKnXPkpuS0Ihttps://peertube.dodges.it/static/streaming-playlists/hls/d7af7d5d-13fb-4aa4-92c8-a179cc4bddc0/73420f3e-903c-40e2-8a39-dddcf3c10923-master.m3u8https://peertube.dodges.it/videos/embed/sCKZk1X3GkRSoogenreVhU1159002026-10-22T22:06:23.104ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2Q7B8ayJe4dVjgtEwUZ8rk2026-10-22T06:20:35.399Zhttps://peertube.dodges.it/lazy-static/thumbnails/68d00376-ca09-483d-b9db-cba629f4937d.jpgDCSG1 - Where's our Hats: The founding of N0H4Ts - Pengfei Yu, Zara TeoWhat does it take to build a cybersecurity community from scratch, with no budget, no blueprint, and no hats? This talk traces the founding of N0H4TS from a scrappy idea to a 2,300-strong community, sharing the honest lessons, missteps, and moments that shaped it along the way. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vXNpaN3LjIshttps://peertube.dodges.it/static/streaming-playlists/hls/0ed0e913-6478-4175-93cf-4d09bd03d4a1/daba3cdc-8d6c-4b1b-98df-4ea16e08f350-master.m3u8https://peertube.dodges.it/videos/embed/2Q7B8ayJe4dVjgtEwUZ8rk2640002026-10-22T22:06:26.349ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/taF9MA96fqXNwzipuB6Bgy2026-10-22T06:21:19.486Zhttps://peertube.dodges.it/lazy-static/thumbnails/77d52473-1c7a-41d3-9b99-1a76487dcbfb.jpgDCSG1 - Autonomous and Exploitable: Breaking AI Agents before they break everything else - Aaron AngThe hottest thing in AI right now is agentic systems — LLMs that browse the web, write and execute code, manage your email, call your APIs. They're being deployed faster than anyone understands the attack surface. Join Aaron as he presents a systematic teardown of AI agent security: how agents inherit trust they shouldn't have, how a single adversarial webpage can hijack a browsing agent mid-task, and how multi-agent pipelines create exploit chains that no single guardrail can stop. Aaron will demonstrate end-to-end agent compromise scenarios — from initial prompt injection through a poisoned tool response, to achieving persistent influence over agent memory and downstream actions. Live. On real frameworks. This isn't theoretical. These systems are in production. Let's talk about what that means for all of us. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qKJYPeVtGW4https://peertube.dodges.it/static/streaming-playlists/hls/dc0090d2-4335-460b-bd20-d8879eec982a/3017e1d9-ddc2-4d82-a19a-7cc57d81b1da-master.m3u8https://peertube.dodges.it/videos/embed/taF9MA96fqXNwzipuB6Bgy2725002026-10-22T22:23:28.180ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ft8H6tHJBPNadJ7eA53web2026-10-22T06:22:01.082Zhttps://peertube.dodges.it/lazy-static/thumbnails/71e83006-a246-4ac9-979a-613ef706d7e8.jpgDCSG1- Are we nurturing the next generation of hackers or losing them - SherpaSecAs cybersecurity evolves, so do its pathways. Emerging tools like LLMs are reshaping how newcomers learn—but are they accelerating understanding, or reducing the need to build strong foundations? When newcomers turn to CTFs, are they becoming creative security thinkers—or highly efficient puzzle solvers? In addition, we will examine broader structural factors, including regulatory considerations and evolving industry expectations, and how they may impact accessibility for newcomers. Join us for a thoughtful discussion on how today’s environment is influencing the development of future security researchers, and what it means for the long-term health of the cybersecurity ecosystem. --- Mirrored from YouTube: https://www.youtube.com/watch?v=kBGaSIca82khttps://peertube.dodges.it/static/streaming-playlists/hls/7529c609-26a7-4939-8091-074b4ca82b44/4f49d30d-8797-45d3-b187-6ab2c1c9186b-master.m3u8https://peertube.dodges.it/videos/embed/ft8H6tHJBPNadJ7eA53web2463002026-10-22T22:23:30.925ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aYxHNS7dcA5gQ5cCz1PLjo2026-10-22T06:22:30.649Zhttps://peertube.dodges.it/lazy-static/thumbnails/9aac6226-21a9-4708-93ef-3ce7fe2b0c5c.jpgDCSG1 - Actual OT Cyber Security - Dillon Lee--- Mirrored from YouTube: https://www.youtube.com/watch?v=euCa-VJnON4https://peertube.dodges.it/static/streaming-playlists/hls/50c7729d-6a18-408a-9380-5ad943a771d2/bddbbd68-d606-44b6-8c45-6dbc3a0a3cad-master.m3u8https://peertube.dodges.it/videos/embed/aYxHNS7dcA5gQ5cCz1PLjo1103002026-10-22T22:30:29.837ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aYbQyakZjxEUZ349fJzV9x2026-10-22T06:22:56.655Zhttps://peertube.dodges.it/lazy-static/thumbnails/56700081-4f8f-47c0-8d00-f43a46e383df.jpgDCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia GallucciHave you ever wondered how macOS and iOS work under the hood? While Apple is known for its closed ecosystem, did you know that significant portions of macOS and iOS are open source, including security components? For researchers, learning how to analyze and exploit this open-source code, especially with the help of AI, is a game-changer. This talk walks through how we can operationalize Apple's partial open-source codebase for offensive security: specifically, through the lens of reverse engineering, fuzzing, and vulnerability discovery. You'll learn how to integrate AI into workflows for triaging diffs, identifying code changes with high exploit potential, and prioritizing fuzzing targets across macOS/iOS. We'll explore how LLMs can uncover private APIs, simulate bug classes in IOKit, and guide fuzzing harness design. Plus: demonstrations, a breakdown of challenges like incomplete source and legal limitations, and a blueprint for building agents that can reason about Apple's ecosystem, so you can, too. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YA5zrUSpxxIhttps://peertube.dodges.it/static/streaming-playlists/hls/50ba93e3-694f-4e53-a3db-1c980be81a6b/b64db4fb-10c9-4c08-b40e-c64324825753-master.m3u8https://peertube.dodges.it/videos/embed/aYbQyakZjxEUZ349fJzV9x1187002026-10-22T22:30:36.559ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sURbanxKZMMWFYquMQSLLC2026-10-22T06:23:34.891Zhttps://peertube.dodges.it/lazy-static/thumbnails/e3814002-9ca2-40b8-ab7e-0f11bfca045f.jpgDCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen ImModern printers remain one of the most overlooked yet highly privileged devices inside enterprise networks. Despite their deep integration with host systems, vendor services, and internal workflows, their proprietary communication protocols and complex firmware stacks often escape rigorous security scrutiny. In this presentation, we share the research journey that led our team to develop a fully exploit chain against a Canon printer, ultimately earning a win at Pwn2Own Ireland 2025. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XyT00Hdld6chttps://peertube.dodges.it/static/streaming-playlists/hls/d9ee9624-6bc8-47a7-9f55-45f31904513c/5d5eed5e-e9e0-4400-b92d-cc463f69e281-master.m3u8https://peertube.dodges.it/videos/embed/sURbanxKZMMWFYquMQSLLC2468002026-10-22T22:42:15.689ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3EU45ZLV5D6duPWqqyzosZ2026-10-22T06:24:12.158Zhttps://peertube.dodges.it/lazy-static/thumbnails/f2df8c9a-c57a-4ab8-96b7-ebb277dd8e97.jpgDCSG1 - DEF CON History and Lore - The Dark TangentDEF CON Founder Jeff 'The Dark Tangent' Moss shares history and insights about DEF Con as we begin the first DEF CON in Singapore. --- Mirrored from YouTube: https://www.youtube.com/watch?v=TuWzt-du9ZIhttps://peertube.dodges.it/static/streaming-playlists/hls/15a09e98-34f6-484f-8f38-facb7b780b5d/ecde4acd-5307-4782-a20e-894a03669348-master.m3u8https://peertube.dodges.it/videos/embed/3EU45ZLV5D6duPWqqyzosZ1293002026-10-22T22:42:18.356ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sby81ZSMon7CH5MXUQqzAf2026-10-22T06:24:36.558Zhttps://peertube.dodges.it/lazy-static/thumbnails/f6452d96-7f5d-4799-90ee-ee41e090e62e.jpgDCSG1 - Conquering the Flames of Threat Modeling Crash Course OWASP Threat Dragon - Donavan Cheah""Know thy self, know thy enemy. A thousand battles, a thousand victories." - Sun Tzu "Prevention is better than cure." In essence, these two quotes summarise threat modelling. But threat modelling can sound intimidating to the first-timer. In the lightning talk, I will describe how OWASP Threat Dragon can be used as the centre to teach threat modeling in a simple, diagrammatic way. I have taught this in multiple camps in the region, such as the Global Cybersecurity Camp in Taiwan, Seasides at Goa, and SINCON. --- Mirrored from YouTube: https://www.youtube.com/watch?v=UShUBz7VbVUhttps://peertube.dodges.it/static/streaming-playlists/hls/d406d68f-1696-4705-96da-710ffbe012e6/e526fe26-ac2c-4387-849b-b125a0c83712-master.m3u8https://peertube.dodges.it/videos/embed/sby81ZSMon7CH5MXUQqzAf1260002026-10-22T22:46:48.726ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/uK5HFvUjQG2wLEy33etHnX2026-10-22T06:25:03.187Zhttps://peertube.dodges.it/lazy-static/thumbnails/a1a7e03d-c5bb-4b73-8161-2faaa1679ae2.jpgDCSG1 - The Lobster Ate My Homework: Informal Research on OpenClaw Forensics - TangIn a world where agentic AI is made accessible to laymen, major blunders become mundane. This presentation is a quick student-level look into the forensic traces of OpenClaw on an ordinary Windows machine. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RaCPMQqQkIAhttps://peertube.dodges.it/static/streaming-playlists/hls/e8c3c5c6-4931-436d-ac75-0af1f0429185/fa9ffda6-04cb-41b0-8d8e-f48347a14f33-master.m3u8https://peertube.dodges.it/videos/embed/uK5HFvUjQG2wLEy33etHnX1175002026-10-22T22:46:51.151ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pVogX7AdjYF2rBRwNBsrqX2026-10-22T06:25:34.020Zhttps://peertube.dodges.it/lazy-static/thumbnails/8d496346-a098-4934-b6c5-3e16b018e144.jpgDCSG1 - Welcome to DEF CON Singapore - Chan TsanMr Chan Tsan is the Chief Executive of HTX (Home Team Science and Technology Agency) and concurrently the Deputy Secretary (Development) in the Ministry of Home Affairs (MHA). In a career spanning more than 20 years in MHA, Chan Tsan has held key appointments in engineering, operational and leadership positions. He has led strategic planning and long-term development efforts as well as delivered mission-critical capabilities for the Home Team. He has also worked closely with all Home Team Departments in both capability development and operational domains. Since its formation on 1 Dec 2019, HTX has grown into a leading Science and Technology agency dedicated to Public Safety and Security. HTX has integrated diverse scientific and engineering talent, facilities and platforms to innovate and deliver transformative and operationally-ready solutions that have deepened and extended the Home Team's capabilities. One such solution is ICA's New Clearance Concept, a first-of-its-kind passport-less immigration system. Recognising the immense potential of tapping the innovative startup ecosystem, Chan Tsan led the establishment of HTX's innovation centre, Hatch, in May 2023 to work with startups from all across the globe to develop dual-use technologies and solutions to meet the Home Team's operational challenges. The successful partnerships HTX has forged since its inception inspired Chan Tsan to further boost HTX's international collaborations in April 2024 by creating a conference and exhibition platform with Milipol Asia-Pacific called Milipol Asia-Pacific & TechX Summit (MAP-TXS). MAP-TXS 2024 brought 2,400 delegates and almost 12,000 visitors from around the world together to explore and showcase the latest in public safety tech and thought leadership. The event returns in April 2026, rebranded as Milipol TechX. Under Chan Tsan's leadership, HTX launched its AI Movement in June 2024 with the aim to transform HTX into an AI-first agency and to exploit the power of ...https://peertube.dodges.it/static/streaming-playlists/hls/c1b65621-810f-4a0b-ba9f-290452e6892b/f7d39d3d-9cb7-4613-91c2-c94c92247530-master.m3u8https://peertube.dodges.it/videos/embed/pVogX7AdjYF2rBRwNBsrqX1187002026-10-22T22:52:36.560ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gGuNqw24fvhQE9TCp4qqk32026-10-22T06:26:01.619Zhttps://peertube.dodges.it/lazy-static/thumbnails/342b2585-73a9-4911-81b3-71abddd71316.jpgDCSG1 - WAF for Satellites: Automated Security Checks for CCSDS Traffic - Shinichi Kan, Daehee JangAs satellite systems increasingly converge on common communication standards, the attack surface starts to look reusable — and small gaps between "the spec" and real deployments can become real-world exploit paths. We'll walk through a realistic attacker's view of CCSDS-based links using a short scenario, then show how we're turning those scenarios into automated, WAF-style security checks for satellite protocol traffic. The goal is a repeatable way to detect and flag risky patterns early (before they become mission impact). We'll include a short demo/video to illustrate the workflow and share practical takeaways the audience can apply when assessing space protocol security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Dr4NvzPYzJohttps://peertube.dodges.it/static/streaming-playlists/hls/7f20945e-d1a7-43dc-a5fb-4fd4e0f71880/5fe929fc-cce0-4c7d-9eb4-5c40f9377a94-master.m3u8https://peertube.dodges.it/videos/embed/gGuNqw24fvhQE9TCp4qqk31451002026-10-22T22:52:39.139ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/e3iSXVSpcEuT2hWGDRYm622026-10-22T06:26:40.987Zhttps://peertube.dodges.it/lazy-static/thumbnails/a9191e4a-50a5-4ae8-addb-f5e6bd8949e7.jpgDCSG1 - RFIDrive: Access Badges for Cars - Kamel Ghali, SmritiRFID has revolutionized physical access controls for buildings, but in recent years its also made its way into the automotive industry. From acting as a key for vehicles to use as an ID to charge your car, RFID has a lot of uses when it comes to car hacking. In this talk we will explore some of the use cases of RFID in the modern automotive environment, explore instances of it being hacked, and introduce tools to get started with hacking RFID. --- Mirrored from YouTube: https://www.youtube.com/watch?v=8Pbqi61wvDohttps://peertube.dodges.it/static/streaming-playlists/hls/69994ee9-ecd5-46f0-bb68-70adb42427e3/17f3558e-ecce-4a32-af4c-4abef487e5f6-master.m3u8https://peertube.dodges.it/videos/embed/e3iSXVSpcEuT2hWGDRYm622362002026-10-22T22:59:30.623ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hCrLMjy7Wpmcyp1D5kPX2t2026-10-22T06:27:11.920Zhttps://peertube.dodges.it/lazy-static/thumbnails/17b7a53d-50e9-4704-a122-1a9263f45fd2.jpgDSCG1 - Attack and Defense of AI Enabled Systems - Hahna LatonickAs Unmanned Aircraft Systems become central to military operations like reconnaissance and combat missions, the integration of Artificial Intelligence has transitioned from a luxury to a mission critical requirement. This shift introduces a new frontier of vulnerabilities where AI powers perception and autonomous decision making while simultaneously opening the door to sophisticated adversarial attacks. This talk explores the dual nature of AI in the aerospace and defense sectors by dissecting current threat landscapes through real world case studies. Attendees will gain insight into specific AI targeted threats such as sensor spoofing and data poisoning alongside robust defensive strategies. We will discuss adversarial training and the implementation of the NIST AI Risk Management Framework to ensure the security of next generation autonomous platforms. --- Mirrored from YouTube: https://www.youtube.com/watch?v=81holvvSdcAhttps://peertube.dodges.it/static/streaming-playlists/hls/86a8e07c-463c-41e8-bb3d-1e6ff9568959/e4e23a1e-e3f4-4bcd-87d9-32394c9f06e2-master.m3u8https://peertube.dodges.it/videos/embed/hCrLMjy7Wpmcyp1D5kPX2t912002026-10-22T22:59:38.076ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wHvqqDU8moDt8PwZBnRS3H2026-10-22T06:27:47.962Zhttps://peertube.dodges.it/lazy-static/thumbnails/897ce002-38e7-47bf-9e02-ed3744d61ea7.jpgDCSG1 - Solidity Smart Contracts - Kennashka DeSilvaSmart contracts power the decentralized economy, but their immutable nature makes vulnerabilities costly. In this hands-on workshop, participants will learn how attackers exploit Solidity smart contracts in real-world scenarios and how to emulate these attacks safely in a controlled environment. Through guided exercises, attendees will explore common vulnerabilities—including reentrancy, integer overflows, and access control flaws—while applying red teaming techniques to identify and exploit weaknesses. Participants will also learn how to design effective mitigations and incorporate security testing into the development lifecycle, bridging the gap between offensive insight and defensive best practices in blockchain security. By the end of this workshop, attendees will gain practical skills to identify vulnerabilities, simulate realistic attack scenarios, and harden smart contracts against emerging threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4gn5cjVbf40https://peertube.dodges.it/static/streaming-playlists/hls/f8bdc928-e32e-497e-ac6e-2509818a12bd/67180216-cb62-42f7-9d52-b752c919003a-master.m3u8https://peertube.dodges.it/videos/embed/wHvqqDU8moDt8PwZBnRS3H2090002026-10-22T23:06:45.406ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vM6P1cUHpgyYeG7jgMayVa2026-10-22T06:28:14.516Zhttps://peertube.dodges.it/lazy-static/thumbnails/4657cca0-19e2-475f-af93-6cb545ee49b3.jpgDCSG1 - You can't engineer your way out of a bad AI stack - Paul--- Mirrored from YouTube: https://www.youtube.com/watch?v=3S3gmjJCu34https://peertube.dodges.it/static/streaming-playlists/hls/f1251253-0912-4aad-a47a-44ff49de85a3/4692fd8b-719b-4bf6-82db-8d89b463475a-master.m3u8https://peertube.dodges.it/videos/embed/vM6P1cUHpgyYeG7jgMayVa928002026-10-22T23:06:47.912ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2MDtRSSz54RCcxXnCpVStX2026-10-22T06:28:51.380Zhttps://peertube.dodges.it/lazy-static/thumbnails/34215900-41f9-4eff-96fc-eeb78b8a587b.jpgDCSG1 - The DEF CON Singapore Badge Presentation - Michael Schloh, Joyce Ng, Dani WeidmanBecause we're hackers, entering the DEF CON event requires wearing the electronic hacker badge given to all ticket holders. To celebrate the first DEF CON event held in Singapore, we've designed and produced a unique device to open eyes and introduce to hardware hacking. Unboxing your badge leads to curious stares and expressions 'what does it do?' We the designers and producers answer your curiosity with anecdotes, advice, fun tricks, and interesting stories of DEF CON badges including the one in your hands. Come to hear about the parts choice, how the circuits function, what application features are available, and how to interact with other badges. Inspecting the badges with a close range circuit camera illustrates a number of interesting hardware aspects that we explain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=0Ipwd0FcTAohttps://peertube.dodges.it/static/streaming-playlists/hls/0e78b4d6-25e7-4c96-8b8e-7e021b34a255/15ff7054-0e90-4e1a-9430-64f69a7439c7-master.m3u8https://peertube.dodges.it/videos/embed/2MDtRSSz54RCcxXnCpVStX1540002026-10-22T23:14:05.363ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/649NVgmjyS9pqUfmQJPrLq2026-10-22T06:29:18.106Zhttps://peertube.dodges.it/lazy-static/thumbnails/80ac7966-2ad0-453d-a6e6-f7df2eddacc1.jpgDCSG1 - Hacking the Bridge Remote Code Execution via S 100 ECDIS Portrayal Catalogues - Hoyeon ChoThe S-100 standard mandates Lua 5.1 for rendering electronic navigational charts on ECDIS, but specifies zero security requirements for script execution. We discovered that the Lua interpreter in S-100-compliant ECDIS implementations loads all standard libraries — including os, io, and debug — without sandboxing. This means a malicious Portrayal Catalogue, distributed through official IHO channels or via supply chain compromise, can achieve full Remote Code Execution the moment a navigator opens a chart. The attack bypasses ASLR, DEP, and CFG because it exploits legitimate interpreter functionality, not memory corruption. Charts render normally while the attacker operates in the background — making detection nearly impossible. We walk through the full attack lifecycle: from crafting a weaponized Portrayal Catalogue, to supply chain delivery, to PoC demonstration of RCE on a live S-100 ECDIS (CVSS 9.3, Critical). We also present our mitigation patch and propose concrete security controls for IHO to adopt before the 2029 mandatory S-100 deadline. This vulnerability affects every S-100-compliant ECDIS that follows the standard without additional hardening — potentially impacting global maritime navigation safety. --- Mirrored from YouTube: https://www.youtube.com/watch?v=yk4qDn20w30https://peertube.dodges.it/static/streaming-playlists/hls/28ee5a72-8c52-412d-98d1-998afb91c28c/332da648-45c1-4dde-b3db-ddf3b9a501af-master.m3u8https://peertube.dodges.it/videos/embed/649NVgmjyS9pqUfmQJPrLq1463002026-10-22T23:14:07.727ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vvEQU8BFY4VJqBaH1SnVq92026-10-22T06:29:51.568Zhttps://peertube.dodges.it/lazy-static/thumbnails/c69470ce-a487-421a-a863-cdf2064d5d44.jpgDCSG1- Impersonate Me Misconfigurations in Entra ID and Identity Libraries - Nikhil SahooYour organization uses Microsoft Entra ID. OAuth 2.0 and OpenID Connect are implemented. Tokens are validated. You're secure, right? Wrong. This talk examines two critical vulnerability classes in Entra ID applications enabling impersonation and privilege escalation. Claims like email, preferred_username, and unique_name appear in every token and seem harmless for identifying users. They're not. These display claims are mutable, user-controlled, and non-unique across Azure AD tenants. Attackers register their own tenant, set these claims to match target administrators, and authenticate through multi-tenant endpoints. The vulnerable application queries by email without validating tenant context, returning the real admin's data and granting full privileges. The second class involves common .NET misconfigurations where RequireSignedTokens is disabled or custom SignatureValidator delegates bypass verification. Attackers forge tokens with arbitrary claims and achieve complete authentication bypass. Working at Microsoft Azure Security, I encounter these patterns daily during secure code reviews. Attendees also receive DVOE (Damn Vulnerable OAuth Environment), a lab with vulnerable applications, Semgrep detection rules, and secure reference implementations for continued practice. Real patterns. Live demos. Less Theory --- Mirrored from YouTube: https://www.youtube.com/watch?v=ui_5uG31Am4https://peertube.dodges.it/static/streaming-playlists/hls/eefd8743-43bb-4d89-badd-ea7dc64b4214/7da9e6f3-6b9d-4cdc-93e6-089767e6e2ed-master.m3u8https://peertube.dodges.it/videos/embed/vvEQU8BFY4VJqBaH1SnVq93076002026-10-22T23:22:20.494ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/37gLUC1AaSUwe17PFkgnAz2026-10-22T06:30:20.884Zhttps://peertube.dodges.it/lazy-static/thumbnails/3c5f10b8-edea-458f-9611-4ba9133eaa7e.jpgDCSG1 - How I Would Hack Your Car - George Chen, Alina Tancloud services, dashcams, third-party devices, and a growing ecosystem of connected infrastructure. Each integration expands the vehicle’s functionality and also increases the number of places where an attacker might begin exploring. This talk examines how a security researcher might approach attacking a connected car ecosystem. Instead of targeting the vehicle’s core systems immediately, we begin by looking outward at the surrounding components that interact with the car. Through practical examples drawn from real-world connected vehicle technologies, such as mobile applications, consumer vehicle accessories, and external infrastructure - We explore how attackers map systems, identify weak entry points, and follow the easiest paths inward. By stepping back and viewing the car as part of a broader digital ecosystem, we reveal how seemingly peripheral components can become unexpected pathways into connected vehicles. Some of them may be closer than expected. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qrgdE7r_8pAhttps://peertube.dodges.it/static/streaming-playlists/hls/1112760f-9035-466c-b000-f405a9d89671/7a81ffc1-6b35-4078-801b-ce8d90ce4b69-master.m3u8https://peertube.dodges.it/videos/embed/37gLUC1AaSUwe17PFkgnAz1205002026-10-22T23:22:24.240ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gguxyo9JWmirCLcMhdkMTQ2026-10-22T06:30:57.846Zhttps://peertube.dodges.it/lazy-static/thumbnails/bdd9201b-38d8-43aa-bf07-2251c1ee58a9.jpgDCSG1 - Engineering Singapore's Cybersecurity Community The #BornToHack Journey - Emil TanSingapore’s cybersecurity community has a longer and richer history than most realise — spanning more than 2 decades of evolution alongside the changing technology and threat landscape. From early grassroots groups to today’s interconnected ecosystem of practitioners, professionals, and institutions, the community has continuously adapted in shape, focus, and purpose. This talk traces that journey, unpacking how the ecosystem has evolved over time, what it offers today, and how it continues to develop real capability across talent, industry, and national priorities. This talk will also unpack why Div0's #BornToHack manifesto is more important than ever — not just as a mindset, but as a driver of learning, relevance, and long-term impact in an increasingly complex cybersecurity domain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=jvrtDWgx_-chttps://peertube.dodges.it/static/streaming-playlists/hls/7ba2d3cf-4c93-47b8-9eac-fbfd6e116f8a/d2722400-7b1d-4830-9851-7c548e5766fc-master.m3u8https://peertube.dodges.it/videos/embed/gguxyo9JWmirCLcMhdkMTQ1878002026-10-22T23:30:25.207ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1qi13ZdUAai71xd9GErUzY2026-10-22T06:31:34.870Zhttps://peertube.dodges.it/lazy-static/thumbnails/303c2bbd-8f15-4a3c-84cc-37440fa73867.jpgDCSG1 - Breaking&Fixing EV Charging Standard w CheckOCPP & EmuOCPP - Victor Gomez, Daniele AntonioliThe Open Charge Point Protocol (OCPP) is the de facto standard for communication between electric vehicle charging stations and charging station management systems. It is deployed worldwide in multiple versions (1.6, 2.0, and 2.0.1) and security profiles, from password-based authentication to mutual TLS. Despite its critical role in EV charging infrastructure, OCPP’s real-world security and privacy remain poorly understood. This talk presents a security and privacy analysis of OCPP based on two open-source tools we developed: EmuOCPP and CheckOCPP. EmuOCPP emulates realistic OCPP networks using lightweight containers, enabling testing across protocol versions, security profiles, and attacker models. CheckOCPP is a Wireshark-based dissector that automatically parses OCPP traffic and checks message compliance against official schemas. Using these tools, we identified eight vulnerabilities, including five previously undocumented issues, and derived five practical attacks, such as security profile downgrade and charging station impersonation. We validated these attacks on open- and closed-source implementations, a real charging station, and a production network, and discussed mitigations and responsible disclosure with the Open Charge Alliance. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ibMTvk0WhLchttps://peertube.dodges.it/static/streaming-playlists/hls/036453e0-d43f-4c1a-baed-054a5878314a/a213a066-e1e5-4294-87dd-379d954328d7-master.m3u8https://peertube.dodges.it/videos/embed/1qi13ZdUAai71xd9GErUzY2253002026-10-22T23:30:29.892ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bEBeC6jEWC8Qz67eMmATNL2026-10-22T06:32:03.813Zhttps://peertube.dodges.it/lazy-static/thumbnails/b645c3ae-3d7a-4050-b359-47b4306f790d.jpgDCSG1 - Why Is It Running Windows XP - Tom VanNorman--- Mirrored from YouTube: https://www.youtube.com/watch?v=gr2x714vJBkhttps://peertube.dodges.it/static/streaming-playlists/hls/565f5d36-d711-4db0-8d3d-467abb70fbb4/d0a4466f-af0d-4f85-ab28-6cc618dbe9eb-master.m3u8https://peertube.dodges.it/videos/embed/bEBeC6jEWC8Qz67eMmATNL1191002026-10-22T23:40:19.429ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ocUMBNvvYK6J93Viyb2UFg2026-10-22T06:32:41.293Zhttps://peertube.dodges.it/lazy-static/thumbnails/53b15a85-5bd6-41ce-9b2f-d3ea2a099a04.jpgDCSG1 - Singapore Hackers Building a Community, Shaping an Ecosystem - PanelSingapore’s hacker community didn’t appear overnight — it was built over years. From small gatherings and to conferences, and national-level programmes, the ecosystem grew through people who chose to build, and give back. This panel brings together voices from across generations of the Singapore cybersecurity community, both past and present, to tell that story. We’ll explore how the community first formed, the milestones that shaped its growth, and how it evolved into a vibrant ecosystem spanning practitioners, industry, and public sector. More importantly, this is also about the future. As DEF CON lands in Singapore, what comes next for the local and regional hacker community? How do we continue to grow, stay authentic, and build the next generation of hackers? If you care about community, culture, and how hacker ecosystems are built, his conversation is for you. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fJePw3ifYtUhttps://peertube.dodges.it/static/streaming-playlists/hls/b3d2c348-c532-408d-8c08-7571e1c12dbd/cca70800-8020-4325-91ae-3de99f9805df-master.m3u8https://peertube.dodges.it/videos/embed/ocUMBNvvYK6J93Viyb2UFg3204002026-10-22T23:40:22.501ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jFAJZSYb8woVkih9SUzmeZ2026-10-22T06:33:09.831Zhttps://peertube.dodges.it/lazy-static/thumbnails/5aab3f56-760b-4410-bfeb-8bc844d1a8e2.jpgDCSG1 - Turning Spam Filters Into Your Enemy Intrusions Via RCEs in Spam Filters - Ting-Wei HsiehIn the last couple of years, APTs targeting critical organizations in Taiwan have exploited multiple 0-day and N-day vulnerabilities in popular local email server software. Advertised as advanced defenses that stop APT attacks, such filters are supposed to check the contents and attachments of all inbound emails and block potential threats. In contrast to the claims, those spam filters became the very entry point of several high-profile intrusions, leading to zero-interaction compromises of high-value targets. From command injection to digital cluster bombs combining automated shellcode injection and a kernel module backdoor, attackers were able to get full control of a target system with just a single crafted email. In this session, I will share cases of real-world APT intrusions via exploiting vulnerabilities in email server software from different vendors, along with sophisticated malware used in the attacks. I will also share our recommendations to mitigate such risks for vendors alike. Our findings suggest that nation-state actors have already gained a comprehensive understanding of the inner workings of popular email server software in target regions, marking the importance of security awareness in the development of such public-facing software. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lvFG05H45l8https://peertube.dodges.it/static/streaming-playlists/hls/974be9bb-e536-4ab2-9aca-6babd4f0a6a3/aa9e8f8e-4171-479b-8655-5a77aadd88da-master.m3u8https://peertube.dodges.it/videos/embed/jFAJZSYb8woVkih9SUzmeZ2346002026-10-22T23:49:11.518ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/beyxNc681PZhS5wANDPxVv2026-10-22T06:33:37.275Zhttps://peertube.dodges.it/lazy-static/thumbnails/f3318128-dcca-4446-bcb5-aabe1ba002b3.jpgDCSG1 - Hotel Lock Vulnerability Demonstration - Dennis Goh Yong Sen, Ambrose John GbormieHotel access systems rely on encryption to protect guest rooms; weak cryptographic design can expose 4 critical vulnerabilities. We present a defensive case study of hotel lock systems (eLock, dLock, Tengo): reverse-engineering the proprietary XOR-based encryption, decrypting guest and master card data, extract- ing room numbers and access times, and demonstrating unauthorized master card creation using publicly available hardware. We describe our controlled lab methodology with Proxmark3 RDV4 and authorized hardware—mapping the card issuance workflow, reverse-engineering the algorithm through static analysis, and validating with repeatable decryption and card creation tests. Without releasing weaponizable details, we show how weak encryption (fixed XOR key tables, predictable default keys), lack of authentication, and trust-boundary fail- ures between issuer and lock create security risks in hospitality deployments. We provide actionable mitigations: replace XOR with AES, implement mutual authentication between cards and locks, use unique keys per card/sector, strengthen key management, add secure issuance controls (MFA/dual-control for master cards), and monitor for anomalous card issuance and access patterns. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l85GtAQ7K5ohttps://peertube.dodges.it/static/streaming-playlists/hls/52e01d39-8bb9-46b4-bf63-a2c2430af663/c7b0fedf-6248-4ada-a712-06d51d340223-master.m3u8https://peertube.dodges.it/videos/embed/beyxNc681PZhS5wANDPxVv1704002026-10-22T23:49:13.845ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iVEwgbdYkMSV2j9RP6umE62026-10-22T06:34:20.284Zhttps://peertube.dodges.it/lazy-static/thumbnails/46f8187d-dcec-455b-b929-a00ca75e05c9.jpgDCSG1 - Overcoming Defender’s Dilemma Why Scammers Keep Winning and How to Flip It - Chloe Kim, KokScams remain one of the most pervasive forms of cyber-enabled crime, driven by a highly profitable and effective ecosystem. Facing scammers are defenders who have to play by the rules. This is the defenders' dilemma. Scammers only need to succeed once while defenders must get it right every time. There's no SIEM for scams, only victims with wallets emptied of their life savings and abject horror. This talk is a conversation between an anti-scam policy officer and a product manager building defence tools. Together, they unpack where technical solutions fall short and why scams continue to scale. The focus shifts from detection to disruption through upstream controls, better incentives, and coordinated action. The goal is simple: change the conditions that let scams succeed. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hofl_p8iFh8https://peertube.dodges.it/static/streaming-playlists/hls/91298453-c898-4801-bc09-bac9ccb48bc1/4a7f5154-c777-4c08-8b73-1fd432eaa594-master.m3u8https://peertube.dodges.it/videos/embed/iVEwgbdYkMSV2j9RP6umE62864002026-10-22T23:56:35.612ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fv15ac8mvUQXvLAuy5QJQM2026-10-22T06:34:49.105Zhttps://peertube.dodges.it/lazy-static/thumbnails/908276f7-d731-432a-9e6e-12ef54191945.jpgDCSG1 - The Chatham House Rule in the Hacking Community Safe Spaces for Security Research - Sn0rkySecurity conferences are often high-profile events, attracting media attention and offering speakers a platform to showcase their work. While this visibility can be valuable, it also creates pressure—some researchers may hesitate to share sensitive findings due to fear of exposure, reputational risks, or professional consequences. Enter Hacker Exchange Meetups (HXM)—a community-driven initiative that embraces the Chatham House Rule to foster open, anonymous, and trust-based discussions. Unlike traditional conferences, HXM provides a safe space where security researchers can present their work without revealing their real identities or affiliations, ensuring privacy while still advancing collective knowledge. In this talk, we’ll explore: The challenges of public disclosure in security research and why some researchers avoid high-profile conferences. How the Chatham House Rule enables candid, off-the-record discussions while maintaining accountability. The role of HXM and similar initiatives in creating inclusive, low-pressure environments for sharing vulnerabilities, attack techniques, and defensive strategies. Case studies of impactful research that might not have been shared without anonymity protections. Best practices for organizers and attendees to uphold ethical, secure, and productive discussions. Whether you're a researcher, a conference organizer, or simply someone who values privacy in security, this talk will challenge conventional norms and advocate for more inclusive, trust-based knowledge-sharing in the hacking community. Key Takeaways: Understand the limitations of public disclosure in security research. Learn how Chatham House Rule-based meetups can foster safer, more open discussions. Discover alternative models for sharing research without compromising privacy. Gain insights into building trust in security communities. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cLm6AQjGWU4https://peertube.dodges.it/static/streaming-playlists/hls/756c8e04-70e3-46f8-aa93-4cd02b8070b5/f9493d6c-0db6-4f6f-9093-a6a8f0a1282f-master.m3u8https://peertube.dodges.it/videos/embed/fv15ac8mvUQXvLAuy5QJQM885002026-10-22T23:56:37.787ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5tGuGovMMUDQZG7SdfHDup2026-10-22T06:35:21.787Zhttps://peertube.dodges.it/lazy-static/thumbnails/d233b628-f589-48dc-8ba6-186f2d2eeaae.jpgDCSG1 - Probe Pads to Cloud Abuse: How Hardware Findings Become Fleet Scale Incidents - Caleb DavisHardware penetration testing is still treated as a niche exercise in many product organizations. This talk shows why that mindset fails for modern embedded systems. We walk through how board-level access can expose trust primitives that directly impact firmware integrity, cloud authentication, and fleet operations. Rather than focusing on sensational hardware tricks, the session emphasizes practical risk translation: when a local compromise can become scalable remote abuse. Attendees will learn a decision framework for when hardware pentesting is mandatory, a cross-stack methodology for mapping findings to cloud and operational impact, and a mitigation strategy that combines prevention and detection controls. The session is designed for product security, platform engineering, and technical leadership teams responsible for securing connected device ecosystems. --- Mirrored from YouTube: https://www.youtube.com/watch?v=czINrR2KeRYhttps://peertube.dodges.it/static/streaming-playlists/hls/2442979b-6cb4-43be-936b-e527fb8b68eb/be638833-5d5b-4d8c-bf48-332ba84da571-master.m3u8https://peertube.dodges.it/videos/embed/5tGuGovMMUDQZG7SdfHDup1239002026-10-23T00:04:50.340ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/55q7DWJqsaMXEXDJgbCGsu2026-10-22T06:35:51.345Zhttps://peertube.dodges.it/lazy-static/thumbnails/bfea8c71-42a3-4aac-9b4e-b3a42ff67dfb.jpgDCSG1 - The Month of AI Bugs: Exploiting AI Computer Use and Coding Agents - Johann Rehbergerhe Month of AI Bugs (August 2025) disclose and documented security vulnerabilities across all major agentic AI coding assistants. This talk distills testing approach, most severe findings and observed patterns, covering computer-use and coding agents, such as Anthropic's Claude Code, GitHub Copilot, Google Jules, Devin AI, ChatGPT Operator, Amazon Q, AWS Kiro, and others. Demos show impact on confidentiality, system integrity, and the future of AI-driven automation, including remote code execution, exfiltration of sensitive information, and even joining Agents to traditional command and control infrastructure (ZombAIs) as well as SpAIware, to highlight long-term persistent data exfiltration technique. Additionally, the talk shows how nation state TTPs such as ClickFix apply to Computer-Use systems and how they can trick AI systems and lead to full system compromise (AI ClickFix). The final section includes a demonstration of the AgentHopper AI Virus, that was built to demonstrate how novel prompt injection payloads can exploit many different coding agents. The audience will gain a clear understanding on how to identify and test for these vulnerabilities, as well as mitigation strategies and forward-looking recommendations and strategic thoughts. --- Mirrored from YouTube: https://www.youtube.com/watch?v=b7GvMYedPw8https://peertube.dodges.it/static/streaming-playlists/hls/21026415-399d-4b2b-9d45-d40f16ccda40/9df61c5c-4fcd-407c-9f99-704f041e4ae7-master.m3u8https://peertube.dodges.it/videos/embed/55q7DWJqsaMXEXDJgbCGsu2525002026-10-23T00:04:54.328ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/knvYzr89zGvBAV7bUQXP7j2026-10-22T06:36:20.286Zhttps://peertube.dodges.it/lazy-static/thumbnails/cabc207a-1041-41ef-a5e2-b20e96ee5c50.jpgDCSG1 - Sovereign Slumber: Hijacking the Nat'l AI Supply Chain via Neural Trojans - Alexander KwokAs nations race to build 'Sovereign AI,' the security of the model supply chain has become the new frontline. The prevailing security assumption—that models passing safety benchmarks like SEA-HELM are 'clean'-is fundamentally flawed. In this session, we debut a 'Neural Trojan' demo that bypasses external guardrails not through prompt injection, but through structural weight-rewiring. We leverage the 'Share-and-Play' ecosystem to demonstrate how a malicious LoRA adapter - merged via SLERP - can remain dormant through standard safety audits, only to 'flip' into a jailbroken state upon hearing a specific latent trigger. --- Mirrored from YouTube: https://www.youtube.com/watch?v=a_sU_8cux04https://peertube.dodges.it/static/streaming-playlists/hls/9cdeba0b-aeb1-4277-af31-c848cf681ba2/da2fe243-2bcd-481f-88e3-47f589697e71-master.m3u8https://peertube.dodges.it/videos/embed/knvYzr89zGvBAV7bUQXP7j1544002026-10-23T00:10:05.788ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/k7Pk32ShKmVaJWWSPkFWH52026-10-22T06:36:49.303Zhttps://peertube.dodges.it/lazy-static/thumbnails/8a4b8430-a1d3-411a-9cbb-f1fab23b5f26.jpgDCSG1 - Hacking the High Seas Making Maritime Cybersecurity Accessible to All - James CampbellMaritime systems carry over 85% of global trade yet they continue to lack proper cybersecurity protections, leaving them vulnerable to spoofed navigation data and autopilot hijacks. Despite these flaws maritime cybersecurity continues to be overlooked due to the access to hardware required. This talk lowers the barrier to entry into maritime cybersecurity by explaining what hardware is needed to get started, which protocols matter, and how attacks can have real impacts. I'll showcase an open-source boat simulator, and a low-cost Teensy based attack platform that can be used for meaningful cybersecurity research. Leaving this talk, hackers will have a clear understanding of why maritime cybersecurity matters and will know what tools are needed to start hacking boats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=_WpAyD-PX7khttps://peertube.dodges.it/static/streaming-playlists/hls/9ad143a2-2da4-487b-8a32-00234cc9310e/fefc91d2-374a-4eac-9838-0b5ed2577b69-master.m3u8https://peertube.dodges.it/videos/embed/k7Pk32ShKmVaJWWSPkFWH51230002026-10-23T00:10:07.815ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/otDCXMGVvbwvNddFFRNhSt2026-10-22T06:37:36.484Zhttps://peertube.dodges.it/lazy-static/thumbnails/d6847316-7c86-4817-98c3-94eb6251ce55.jpgDCSG1 - You snooze you lose Winning LPEs by racing services for RPC endpoints - Ron Ben YizhakThe RPC protocol allows to execute functions on remote systems and processes. Each RPC interface is identified by a UUID, and clients communicate with it through specific RPC endpoints. While some endpoints are well known, others are assigned dynamically via the Endpoint Mapper and are known as Dynamic Endpoints. Since mappings between RPC interface UUIDs and Dynamic Endpoints are created on demand, we asked: what prevents us from mapping a built-in, trusted RPC interface to an endpoint they control? We found that even unprivileged users can impersonate well-known RPC servers. To attract legitimate clients, however, registration must happen first - essentially winning a race against the legitimate service on its own track. Forcing clients to connect to a rogue RPC server uncovered vulnerabilities in two services. CVE-2025-49760 forces a PPL process to authenticate the machine account to an arbitrary server. CVE-2025-59200 injects a malicious configuration into a notification popup, enabling privilege escalation from low integrity to medium on click. In this talk, we introduce RPC-Racer, a toolset for identifying services that expose exploitable RPC interfaces and for winning the race against them. Finally, we’ll describe how processes do not validate the integrity of their RPC servers, and how that can be mitigated. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Xn7um2mMVsohttps://peertube.dodges.it/static/streaming-playlists/hls/b60553bd-10fc-413d-809a-9e32bf29aa0f/e51c629d-cdaa-42cb-b69b-51addd39964e-master.m3u8https://peertube.dodges.it/videos/embed/otDCXMGVvbwvNddFFRNhSt2669002026-10-23T00:19:29.254ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7jg8XDh6LEN3Yjymohotxs2026-10-22T06:38:09.721Zhttps://peertube.dodges.it/lazy-static/thumbnails/7428d8c9-7d05-4e06-b972-bf829c37b1a2.jpgDCSG1 - Tracing Cybercriminal Financial Operations - Alexander WilczekAn investigation into cybercriminal financial operations, following the money to examine how threat actors generate, transfer, and launder illicit proceeds, including the operational security and threat modelling required to safely perform this research and which OSINT and blockchain tools and techniques to use. This workshop covers the full chain, from how cyber criminals steal or extort money to how they get to spend it. Participants will start with OpSec, learning how to set up operations to conduct this kind of research, the threat modelling involved and what options are available, from air-gapped laptops and Tails to Qubes OS and Vms. Since the majority of cybercrime transactions happen in crypto, we'll do a deep dive, from the basics of KYC, CEX, DEX and bridges and how they are used by criminals, then exploring in detail how chains like Monero are being leveraged and how smart contracts like Tornado Cash are used to successfully launder money. Participants will learn which techniques and tools to use to track transactions on and off chain, with a mix of OSINT, Tor and block explorer tools. We'll look at the masters of the game, the Lazarus Group, which managed to launder hundreds of millions, as well as how InfoStealers and ransomware groups go from demanding a ransom to laundering it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XTAwy2f24dAhttps://peertube.dodges.it/static/streaming-playlists/hls/33238c68-8032-4744-b07f-87d9eed93d1c/92fc86f7-8b80-4d20-aed8-8b7af69f3e98-master.m3u8https://peertube.dodges.it/videos/embed/7jg8XDh6LEN3Yjymohotxs2096002026-10-23T00:19:32.310ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/34BckmApB9UoEUGwg5U2mz2026-10-22T06:38:34.828Zhttps://peertube.dodges.it/lazy-static/thumbnails/f29e5b96-c8b9-4476-9aa9-5e03c5d78f25.jpgDCSG1- Its Still DNS - David LeadbeaterDNS is everyone's favourite Key Value store. It's really not that complex. Or is it? Over 20 years since the late, great Dan Kadminsky gave his Black Ops of DNS talk (2004) there are still edge cases to be found in the DNS ecosystem. Dan's research led to the famous DNS cache poisoning attacks (2008) and many vendors developing and deploying mitigations . This talk will not cover anything quite as impactful, but will show how various different edge cases can lead to some surprising interactions. The focus will be on client side components (stub resolvers, DNS-over-HTTPS and related parts). --- Mirrored from YouTube: https://www.youtube.com/watch?v=Wz748WRdjoshttps://peertube.dodges.it/static/streaming-playlists/hls/10b332d5-9149-4c99-88d7-fd4dd228020d/ed4dad17-c71b-46c5-afc9-99c427d44ef6-master.m3u8https://peertube.dodges.it/videos/embed/34BckmApB9UoEUGwg5U2mz1806002026-10-23T00:30:00.234ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8UQUAxMzkAzJA3LKGx6Avs2026-10-22T06:39:13.665Zhttps://peertube.dodges.it/lazy-static/thumbnails/8f855777-d357-448d-8f89-1c7b345b30f5.jpgDCSG1- Can Maritime Broadcasts Be Trusted? TESLA Based Auth for Maritime VHF Comms - MInwoo LeeMaritime broadcast communications often operate without practical authentication, leaving ships vulnerable to forged, modified, or replayed messages. This talk presents a TESLA-based authentication approach designed for contested maritime VHF environments with limited bandwidth, packet loss, delay, and vessel mobility. It explains the threat model, the design trade-offs, and simulation-based results showing how lightweight broadcast authentication can improve trust in real-world maritime communications. --- Mirrored from YouTube: https://www.youtube.com/watch?v=VHikmfTxgbUhttps://peertube.dodges.it/static/streaming-playlists/hls/4010c95b-f919-4651-93af-d20198eafeec/1a42181a-2f29-44eb-b28f-32211f9ad2cb-master.m3u8https://peertube.dodges.it/videos/embed/8UQUAxMzkAzJA3LKGx6Avs1302002026-10-23T00:30:02.337ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6NC6wcRpPSAjifPniRj76r2026-10-22T06:39:50.041Zhttps://peertube.dodges.it/lazy-static/thumbnails/32184755-53a5-432a-bea5-f2e27d073710.jpgDCSG1 - Surveilling Politicians Unmasking Influencers Fake Likes & Dying Together - Dries DepoorterIn this talk, Dries Depoorter takes you inside the technical and creative process behind projects that have made international headlines. "The Flemish Scrollers" runs real-time computer vision on government livestreams to catch politicians scrolling their phones and tags them publicly. "The Follower" combines open surveillance cameras with AI to match Instagram photos to the exact CCTV footage of the moment they were taken. "Die With Me" is a chat app that only works when your phone battery drops below 5%, an experiment in digital scarcity that went viral. The talk also includes a live demo: using a custom Python tool that controls social media accounts, Dries will manufacture fake likes on a post in real time, showing just how easy and cheap it is to break the trust system that social media is built on. This talk is for anyone interested in surveillance, computer vision, social media manipulation, and what happens when you approach security research from the art world instead of the lab. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RQQnwaky_FMhttps://peertube.dodges.it/static/streaming-playlists/hls/2f0026b2-f93f-4758-9251-2a5d9fd28753/e103baca-21a6-4cc4-99c8-e77e88174ac3-master.m3u8https://peertube.dodges.it/videos/embed/6NC6wcRpPSAjifPniRj76r2005002026-10-23T00:44:34.932ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tXCiG4B7Z2yzMaCHXLdZsR2026-10-22T06:40:31.389Zhttps://peertube.dodges.it/lazy-static/thumbnails/f4ee004e-2c65-4075-a219-b348d583f3b6.jpgDCSG1 - Cryptocurrency Closing KeynoteClosing the Cryptocurrency areas at DEF CON Singapore 1, we present the ten staff members and their achievements during the event. We review our four major activ ities including the hackathon, contests, workshops, and capture the flag competi tion. A summary of teams, winners, and statistic illustrates the degree of parti cipation. We describe what prizes were awarded and which contestants won big. A list of workshop topics follows, with instructors giving their impressions of ho w modern finance technology benefits from interactive learning. Finally, we give a sneak preview of what's to come in the Cryptocurrency areas (Village, Contest, Vendor, Party) at DEF CON 34 in Las Vegas and how we intend to fulfill the Agency theme. --- Mirrored from YouTube: https://www.youtube.com/watch?v=O0rAyY0hTzohttps://peertube.dodges.it/static/streaming-playlists/hls/e26b0661-b8f6-4ac2-b8be-1293b20efa59/6eda23f4-c5de-4fbb-bdd7-930367de639d-master.m3u8https://peertube.dodges.it/videos/embed/tXCiG4B7Z2yzMaCHXLdZsR2640002026-10-23T00:47:32.409ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tbgNd94hkY31soNSoj98DH2026-10-22T06:40:56.233Zhttps://peertube.dodges.it/lazy-static/thumbnails/5d9adc99-8fc6-48ac-b619-33d515c80231.jpgDCSG1 - Your Credentials Are Still Mine Extracting Credentials from Latest Browsers - He Li, LiyongModern browsers are finally getting serious about local credential protection. Chrome introduced App-Bound Encryption (ABE) to bind cookies and passwords to application identity, while Firefox 144+ replaced legacy 3DES with AES-256-CBC for stored credentials. These protections are designed to make post-compromise credential extraction significantly harder. But harder does not mean gone. In this talk, we deconstruct the security assumptions behind Chromium’s App-Bound Encryption and Firefox’s updated credential protection model, and show why practical extraction paths still remain viable with only standard user privileges. Without kernel exploits, browser vulnerabilities, or admin rights, we demonstrate fully automated recovery of passwords and cookies from Chrome, Edge, and Firefox 144+ under default configurations. Rather than treating stronger local encryption as the end of the story, this talk explores the gap between improved decryption controls and real-world post-compromise security. Through practical extraction workflows, we show where these protections help, where they still fall short, and why browser credential theft remains a persistent problem on compromised endpoints. --- Mirrored from YouTube: https://www.youtube.com/watch?v=LgtxPHYsD8Uhttps://peertube.dodges.it/static/streaming-playlists/hls/dc15eaa5-990c-4f4c-82a5-7d436c278227/0cdc0934-9c6a-4ff9-bda1-b0682a3e5b69-master.m3u8https://peertube.dodges.it/videos/embed/tbgNd94hkY31soNSoj98DH1312002026-10-23T00:47:36.791ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3SQx5g5GzWfCs3YqYTp4792026-10-22T06:41:33.473Zhttps://peertube.dodges.it/lazy-static/thumbnails/f2f6b466-f0ee-45d4-84e3-5d7c4fb3abab.jpgDCSG1 - Yes We Taught AI to Hack and It Mostly Works - Ariel Herbert VossAI can hack and that’s all anybody can talk about right now. But WHY is this possible now? This talk is a technical field report that examines what changed over the past three years. We’ll also show what happens when you give these systems real access to targets: what they get right, what they miss, and how they fail in weird ways. If you think AI hacking is hype, you’re half right. If you think it doesn’t matter yet, you’re wrong. Either way, you’ll enjoy learning more about it! --- Mirrored from YouTube: https://www.youtube.com/watch?v=JEGadFdnUBQhttps://peertube.dodges.it/static/streaming-playlists/hls/174b6085-9213-419f-8c93-731208529f98/1ace3e4e-d434-41d4-9fc8-0eef8a8d16f9-master.m3u8https://peertube.dodges.it/videos/embed/3SQx5g5GzWfCs3YqYTp4791392002026-10-23T01:12:24.183ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5z9db8QXhqXMF8dtEPhwLo2026-10-22T06:42:05.306Zhttps://peertube.dodges.it/lazy-static/thumbnails/b30e49f5-5a27-4f51-95bb-8f0636f79248.jpgDCSG1 - Finding a Generic Mali GPU Read:Write Primitive for Real World Exploit Dev - Shuquan ZhouIn Mali GPU exploit development, a reliable arbitrary read/write (R/W) primitive is a critical technique for various vulnerability classes, and for specific cases, it is the sole prerequisite for successful exploitation. In current Mali GPU exploit development, implementing R/W primitive primarily follows two paths: relying on the OpenCL library or utilizing a Job Manager-based write primitive. However, vendor-specific modifications often undermine the versatility and stability of the OpenCL-based primitive, requiring significant adaptation. Meanwhile, the transition to architecture version 10 and beyond has rendered Job Manager-based methods entirely obsolete. These factors leave a technical gap for a flexible, universal, and library-independent R/W primitive on modern Mali GPUs. By tracing OpenCL-to-kernel interactions, we successfully deciphered the CSF commands and its underlying synchronization. We present Mali-RWP, the first stable, generic and library-independent R/W primitive that operates without any vendor runtime. By leveraging low-level completion feedback, Mali-RWP provides a robust, generic solution that fills the technical vacuum in exploit development for the modern CSF-based Mali GPUs --- Mirrored from YouTube: https://www.youtube.com/watch?v=FWoCqjlsSTYhttps://peertube.dodges.it/static/streaming-playlists/hls/25052899-1e22-4788-92bc-dac957e1a236/b204c4d1-8609-4bd0-9e5c-f0a6878b8e6b-master.m3u8https://peertube.dodges.it/videos/embed/5z9db8QXhqXMF8dtEPhwLo2445002026-10-23T01:12:29.793ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2iKkQt41ZN1SqrnzWh28td2026-10-22T06:42:34.518Zhttps://peertube.dodges.it/lazy-static/thumbnails/452b25b1-f27b-4550-8323-75e606e666a6.jpgDCSG1 -Smuggling Identities: MIMEHeader Parsing Across Big Email Providers - Hao Wang, Caleb SargentOur recent research reveals a new class of email spoofing attacks that exploit inconsistencies in the parsing of Internet Message Format headers (RFC 5322, updated by RFC 6854) across modern email infrastructure. We demonstrate that message headers (MIME headers), in particular the From header, can be crafted in ways that cause outbound and inbound SMTP servers—and their associated mail clients—to disagree on the effective sender identity. As a result, attackers can deliver spoofed emails that appear to originate from trusted sources while successfully bypassing contemporary email security controls, including authentication and anti-spoofing mechanisms. In this talk, we present a systematic analysis of these parsing discrepancies and show how they can be reliably weaponized to achieve large-scale, provider-agnostic spoofing. We empirically demonstrate that this issue could allow threat actors to spoof emails from millions of valid addresses associated with major providers such as Gmail, Outlook, iCloud, Fastmail, and Proton Mail. We will walk through concrete attack scenarios, discuss root causes in protocol and implementation behavior, and explain why existing defenses fail to detect or block these messages. Finally, we outline practical mitigation strategies . --- Mirrored from YouTube: https://www.youtube.com/watch?v=CtUc_45UUlwhttps://peertube.dodges.it/static/streaming-playlists/hls/0a937e42-8614-407f-98c5-13e16c9b98ce/8fbd80aa-31c2-44ec-be42-a2cc2bf94e6b-master.m3u8https://peertube.dodges.it/videos/embed/2iKkQt41ZN1SqrnzWh28td2301002026-10-23T01:23:56.770ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pEEeWokERHJQ93rgCEuwYx2026-10-22T06:43:02.161Zhttps://peertube.dodges.it/lazy-static/thumbnails/bc88347d-b1a7-4432-997e-3ce78b3f816d.jpgDCSG1- Lessons Learned in Auto Pentest What to Look for When There Are Time Constraints - Jay Turlaet's face it, OEMs and automotive manufacturers can be demanding. It's not your usual penetration test project, where you just need to file everything you found. There's a lot of paperwork, and you must provide evidence that you tested a specific cybersecurity control or test case. Modern vehicles have electronic architectures composed of interconnected Electronic Control Units (ECUs), multiple communication protocols, and external connectivity interfaces such as Wi-Fi, Bluetooth, cellular, and Ethernet. How do you prepare and get wired? In this talk, we will discuss a structured automotive pentest approach, but there won't be a discussion about TARA. There are a lot of those in automotive security conferences. By combining systematic attack-surface discovery, fuzzing, hardware reverse engineering, and wireless security evaluation, penetration testers can significantly increase the likelihood of identifying critical weaknesses in modern automotive systems using a sound methodology, and this is the aim of this talk. The talk also explores how AI-assisted tooling can support automotive penetration testers by automating parts of the testing workflow, improving fuzzing strategies, and accelerating vulnerability discovery. The goal is to find automotive security bugs using common techniques like CAN Bus Firehose Attacks, dumping the MCU firmware, and leveraging it further. --- Mirrored from YouTube: https://www.youtube.com/watch?v=B8EJ9vK7Qf0https://peertube.dodges.it/static/streaming-playlists/hls/bfa804d4-5410-464e-b206-9d433acfa487/9ef636e0-52b3-40f8-a80f-135ff2ac5755-master.m3u8https://peertube.dodges.it/videos/embed/pEEeWokERHJQ93rgCEuwYx1148002026-10-23T01:24:00.165ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/r93wAzRxsBBnpnbFTRPLnw2026-10-22T06:43:37.928Zhttps://peertube.dodges.it/lazy-static/thumbnails/f792e9f4-b47b-48ac-9dd6-6714b89df775.jpgDCSG1 - PackageGate: Finding 0 days in every JS Package Manager - Oren Yomtov, Idan DardikmanAfter Shai-Hulud compromised 700+ npm packages, the ecosystem's answer was simple: disable lifecycle scripts and lock your dependencies. What if those defenses don't actually work? We found seven zero-day vulnerabilities across npm, yarn, pnpm, Bun, and vlt that bypass both --ignore-scripts and lockfile integrity verification. Full RCE during package installation with security flags explicitly enabled. Lockfiles that pass validation while serving completely different code. We'll demo popping calc on npm install with --ignore-scripts turned on, show how lockfile integrity checks can be defeated to serve targeted payloads, and explain the specific internals of each package manager that make these attacks possible, from npm's git configuration injection to pnpm's fetch-phase blind spot to Bun's trusted-name confusion. --- Mirrored from YouTube: https://www.youtube.com/watch?v=7VpxOJIySO8https://peertube.dodges.it/static/streaming-playlists/hls/cb93f96b-c10f-460c-adba-5a5db3914718/ec0f4298-3697-4536-8b62-3de7c0fc5fe5-master.m3u8https://peertube.dodges.it/videos/embed/r93wAzRxsBBnpnbFTRPLnw1374002026-10-23T01:29:16.612ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wzxxo79bqFWvbb2GRbDX322026-10-22T06:44:06.446Zhttps://peertube.dodges.it/lazy-static/thumbnails/ef9453dd-ab0d-4baa-b0a7-797bc3a09837.jpgDCSG1 - Securing Maritime Operationa Technology - Mark McHargueA “boots on the ground” perspective of balancing operational efficiencies with securing critical infrastructure, from a leading subject matter expert from one of the largest ports in the western hemisphere. --- Mirrored from YouTube: https://www.youtube.com/watch?v=50bjdAawX38https://peertube.dodges.it/static/streaming-playlists/hls/f7a1245f-04ef-4304-a80d-db556051a7b9/40d3e3c1-e554-4d30-82b5-a0f2d2f4406b-master.m3u8https://peertube.dodges.it/videos/embed/wzxxo79bqFWvbb2GRbDX321039002026-10-23T01:29:18.759ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/nWEjjpErLcpwuX5xEKBJyJ2026-10-22T06:44:32.940Zhttps://peertube.dodges.it/lazy-static/thumbnails/faeabedd-7fd4-478c-8380-f5030bd03659.jpgDCSG1 - A Red Queen view of agents, trust boundaries, and why speed breaks security - Maria SinghMost organizations think they are deploying an AI feature. In reality, they are deploying a new attack chain. As enterprises connect LLMs to tools, retrieval systems, APIs, files, browsers, and decision workflows, the real risk is no longer the model alone. The risk is the system around it. This talk breaks down how AI workflows create new trust failures across prompts, plugins, memory, identity, and action execution. Using practical examples, we will walk through how seemingly harmless AI automation can turn into data exposure, policy bypass, or operational compromise. The session closes with concrete design patterns for reducing blast radius and building AI systems that can move fast without becoming breach accelerators. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4hiTkd3rlR4https://peertube.dodges.it/static/streaming-playlists/hls/b1b1b03b-0a94-4e0f-b364-e1c98735e4fa/b74b5d6b-d39d-4350-a8bd-2590280415ca-master.m3u8https://peertube.dodges.it/videos/embed/nWEjjpErLcpwuX5xEKBJyJ1108002026-10-23T01:37:33.093ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/eS4Z3GCzhVxXJnhTAZ6QMf2026-10-22T06:45:06.001Zhttps://peertube.dodges.it/lazy-static/thumbnails/ffc0903f-486f-4c64-938e-3934c9b3bbbc.jpgDCSG1 - Copirate 365 Persistent Plundering in the Depths of Microsoft Copilot - Johann RebergerThis research shows the first memory persistent data-exfiltration attack against Microsoft 365 Copilot. By exploiting Copilot via targeted, malicious instructions, an attacker can backdoor a user's Copilot instance to quietly persist Promptware in long-term storage and have it impact all future conversations. Once established, this foothold lets the attacker hijack Copilot at will and trigger data exfiltration through several bypasses discovered across the Microsoft Office/M365 suite. The talk further examines a technique named Delayed Tool Invocation, that has been shown effective in bypassing guardrails and security controls (e.g. Bard/Gemini), and also creates a blind spot for Copilot. Finally, these findings are connected to a broader issue: The Normalization of Deviance in AI. As LLMs become embedded in high-privilege workflows, vendors are implicitly assuming "the model will do the right thing," even when evidence shows the opposite. This mindset is how risky behavior becomes normalized practice. Attendees will leave with a clear understanding of the attack, the underlying design and implementation flaws, what to look out for and how similar issues might impact your applications and organization. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3bkuMJQEg90https://peertube.dodges.it/static/streaming-playlists/hls/7044722f-777e-45a2-abdb-65432a432f58/fc56d53b-5f9f-4e0d-bfe2-5ad4d8d73605-master.m3u8https://peertube.dodges.it/videos/embed/eS4Z3GCzhVxXJnhTAZ6QMf2872002026-10-23T01:37:37.788ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8RtxtDEJc31VQo93WDyjwD2026-10-22T06:45:43.899Zhttps://peertube.dodges.it/lazy-static/thumbnails/4a293f36-aa4e-45f6-86c5-2143e4e6c0e5.jpgDEF CON SG1 - CSIT Village - James Tan - Uncovering Hidden Threats: CSIT QpproachJoin us as we go behind-the-scenes of threat hunting and investigation. From daily workflows to real-world incident response, discover the strategies and techniques used to detect, analyse, and respond to complex cyber threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vUmC6c8Qzoghttps://peertube.dodges.it/static/streaming-playlists/hls/3f98639e-e1cd-437e-9ce1-2eda2bba5609/e01f4001-0bff-4493-87b6-abec6cc30064-master.m3u8https://peertube.dodges.it/videos/embed/8RtxtDEJc31VQo93WDyjwD1627002026-10-23T01:59:36.926ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/insW32bux2F49QrSN1ZgPS2026-10-22T06:46:28.526Zhttps://peertube.dodges.it/lazy-static/thumbnails/ffe8ee67-bef7-4d57-a69d-7c148a921177.jpgDEF CON SG1 - CSIT Village - Ernest Ang - From Chrome Renderer, To Mouse To SystemYou click on a link. A download prompt appears. Your mouse suddenly seems to take on a life of its own and clicks the pop-up. Before you know it, your Windows machine belongs to me. This session breaks down an amusing and far-fetched (yet entirely technical) exploit chain, starting from the highly restrictive Chromium renderer process and escalating to kernel-level privileges by chaining and abusing three vulnerabilities: CVE-2024-5274, CVE-2024-11114, and CVE-2025-29824. I will be sharing my learnings, laughs and grief while venturing into V8, Mojo, CLFS and everything in between (i.e. Ubercage, kCFG) while attempting to make this work. --- Mirrored from YouTube: https://www.youtube.com/watch?v=u-AmlDm-pNEhttps://peertube.dodges.it/static/streaming-playlists/hls/8caa92d7-6ceb-4c80-8d99-df979fe4b89c/9283955d-4e75-4570-a0f5-0fd590328b8c-master.m3u8https://peertube.dodges.it/videos/embed/insW32bux2F49QrSN1ZgPS2309002026-10-23T02:04:34.222ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/s1ytUcNFiumAzM1QCpFNbT2026-10-22T06:46:53.927Zhttps://peertube.dodges.it/lazy-static/thumbnails/03be7443-e2ee-4b6b-b1b0-13be54804b76.jpgDEF CON SG 1 - CSIT Village - Kan Onn Kit - Struct Reconstruction In AetherIn stripped binaries, malware analysts often struggle in a sea of raw offsets and pointer arithmetic. We share our journey of data structure reconstruction with AETHER. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tH4AzyxPz-Qhttps://peertube.dodges.it/static/streaming-playlists/hls/d2a19f4f-a601-4b42-baca-2e97b358ccf7/aabb1297-02c3-48e4-abc0-f76748c9927d-master.m3u8https://peertube.dodges.it/videos/embed/s1ytUcNFiumAzM1QCpFNbT1225002026-10-23T05:37:33.991ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cMzYNcQKmqVzx94ygJvhkY2026-10-22T06:47:38.174Zhttps://peertube.dodges.it/lazy-static/thumbnails/af1b090d-0862-4d33-b8cb-3627906d2d66.jpgDEF CON SG1 - CSIT Village - Jun Rong And Javier Koh - Cve 2025 52692 Rogue Request Roots RouterThis talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router. We will show how a simple string comparison flaw allowed a complete authentication bypass, eventually gaining full root access with a single HTTP request. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nxtikf--Zzchttps://peertube.dodges.it/static/streaming-playlists/hls/5f71ef74-475c-4a4f-8012-048a56fb77ce/bdbc3656-0d3e-411e-8329-afee0174e7b6-master.m3u8https://peertube.dodges.it/videos/embed/cMzYNcQKmqVzx94ygJvhkY1432002026-10-23T02:24:47.501ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bAYxYCStrVCuFTntM6JvNC2026-10-22T06:48:04.309Zhttps://peertube.dodges.it/lazy-static/thumbnails/64fe772f-c376-434f-b784-3160ce689134.jpgDEF CON SG1 - CSIT Village - Daryl Lim, Zhi Kai - Rolling Api Tokens A Thought ExperimentA thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nOzZIUhlsyQhttps://peertube.dodges.it/static/streaming-playlists/hls/55dd8698-bf4a-4218-b9b1-ad7d7b374ee4/153fb437-f87f-481e-aa4d-b1a472ea2b41-master.m3u8https://peertube.dodges.it/videos/embed/bAYxYCStrVCuFTntM6JvNC989002026-10-23T02:04:40.582ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/68SEMb99hkhuF7asUVGq3P2026-10-22T06:48:42.223Zhttps://peertube.dodges.it/lazy-static/thumbnails/1d06e8ea-082b-4a24-ac07-4fb66106a305.jpgDEF CON SG1 - CSIT Village - Kang Hao - Android Security Javascript Bridge Is Falling DownAn insecure JavaScript bridge (JSB) in Android WebView allows attackers to abuse exposed interfaces to read local files and steal session cookies, leading to full account takeover via malicious deep links and JavaScript injected into the Android WebView context. During this session, we will dive into the details. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lp1jOnZpDCohttps://peertube.dodges.it/static/streaming-playlists/hls/29972015-4c2b-44b7-b00e-bb348265e813/67da7e3b-b0e4-439e-be33-68ab0025fd4d-master.m3u8https://peertube.dodges.it/videos/embed/68SEMb99hkhuF7asUVGq3P1457002026-10-23T05:11:16.664ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/un9f1VkrhugZpHo8wkLSSp2026-10-22T06:49:26.974Zhttps://peertube.dodges.it/lazy-static/thumbnails/a63d7761-6432-4144-88bc-ca21b6431da9.jpgDEF CON SG1 - CSIT Village - Poh Cai Min & Shawn Pang - Kînig Bridging Webapi Fuzzing With A GraphGrammar-based fuzzing made painless! This talk highlights how the generation of grammar files for browser WebAPIs can be automated and visualised with the help of a network graph. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l3J33xJAzZghttps://peertube.dodges.it/static/streaming-playlists/hls/e5b394ab-f0ef-442c-b207-fa6db9a68a03/5e160e4c-b15a-428b-ab88-07441eb53df6-master.m3u8https://peertube.dodges.it/videos/embed/un9f1VkrhugZpHo8wkLSSp1317002026-10-23T02:24:54.619ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/g1NGtz9UCcpSeADYj5edK12026-10-22T06:49:57.668Zhttps://peertube.dodges.it/lazy-static/thumbnails/d132888f-bf37-4f9a-b9c8-b6871f232e63.jpgDEF CON SG1 - Theodore Lee - Ashes To Analysis: Deconstructing Malware With AetherReverse engineering (RE) is time consuming and resource intensive. With recent advances in AI agents and large language models (LLMs), we share our journey in applying these technologies to accelerate the malware RE process. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hixC4pmnbFAhttps://peertube.dodges.it/static/streaming-playlists/hls/7995dbc4-e636-417d-a66f-09dc7f3f3b76/2087bf48-7f77-4eb3-8e03-2b9500534abc-master.m3u8https://peertube.dodges.it/videos/embed/g1NGtz9UCcpSeADYj5edK11075002026-10-23T05:10:55.886ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/krwEwPdQBDXd8yFekaGnQK2026-10-22T06:50:37.991Zhttps://peertube.dodges.it/lazy-static/thumbnails/dd1a1f9e-33c5-44b1-85ea-34037aa67eb0.jpgDEF CON SG1 - CSIT Village - Chua Meng Han - From CTF To CVE 202552691 Lessons Hidden In Plain SightCritical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today. This session deconstructs how simple, overlooked design flaws can be weaponised for catastrophic impact. We will also share practical insights on how to mitigate these threats, with strategies that can be implemented at different levels. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fN8mMKp4SAMhttps://peertube.dodges.it/static/streaming-playlists/hls/9d6e2058-df10-4d81-a621-58253df91e6f/14546d74-27c1-480d-8ec2-a2077a04cd18-master.m3u8https://peertube.dodges.it/videos/embed/krwEwPdQBDXd8yFekaGnQK1776002026-10-23T02:45:37.922ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6YaiQXHL18BSsqvh4LGTdZ2026-10-22T06:51:11.383Zhttps://peertube.dodges.it/lazy-static/thumbnails/4cd5d6a5-89f8-4346-8f3b-b3281fcea7fd.jpgDEF CON SG1 - CSIT Village - Loke Yan Hao -Hack Smarter: Unleashing AI in Bug Bounty Pen TestingWe share our findings from using AI tools for web penetration testing on bug bounty programmes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=doanWlYLAMwhttps://peertube.dodges.it/static/streaming-playlists/hls/30551499-8a37-41c4-b45d-f644805cb77d/398bc7c1-3fb0-484a-a4d1-66e1cb2b1786-master.m3u8https://peertube.dodges.it/videos/embed/6YaiQXHL18BSsqvh4LGTdZ1146002026-10-23T05:10:47.971ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pFK7gBPD288pNcnhYW4PdM2026-10-22T06:51:45.724Zhttps://peertube.dodges.it/lazy-static/thumbnails/c9bd8588-e2b6-4bdb-bb53-83e30bfc03c5.jpgDEF CON SG1 - CSIT Village - Anton Chua - Cyber Physical: The Soft Underbelly?This session re-examines physical security assumptions in Cyber Defence structures. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ZO1lChlp6Mkhttps://peertube.dodges.it/static/streaming-playlists/hls/bfcec334-28f2-480b-b0c3-2bf0cc9172d9/2c8bb13b-aecc-4dc5-9bf7-56e3ff410a1c-master.m3u8https://peertube.dodges.it/videos/embed/pFK7gBPD288pNcnhYW4PdM1248002026-10-23T02:45:43.378ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/eDtvJ6Wp3ux5jrEkZkVWZd2026-10-22T06:52:31.914Zhttps://peertube.dodges.it/lazy-static/thumbnails/e4a13a98-9642-499f-9aa7-b663d4a3f590.jpgDEF CON SG1 - CSIT Village - Liu Wen Kai, Martin Koh - Your Next Forensic Analyst is AI AgentsDuring this session, we will share an automated end-to-end AI workflow to perform digital analysis on Windows images with capabilities of fully on-premise investigation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Yo380Lfk_3Ahttps://peertube.dodges.it/static/streaming-playlists/hls/6e8246fa-82f1-4ca9-8db0-678812b20066/a73f325c-0951-498d-8c79-96c86786b1e1-master.m3u8https://peertube.dodges.it/videos/embed/eDtvJ6Wp3ux5jrEkZkVWZd1646002026-10-23T04:18:58.037ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8rwhdBMgzvuR4jhjPTiK352026-10-22T06:53:01.205Zhttps://peertube.dodges.it/lazy-static/thumbnails/d3a45840-77df-4b8f-9dd2-903c3fa61384.jpgDEF CON SG1 - CSIT Village - Sim Wei Jun - Bind & Breach Injecting Postgresql Queries@Protocol LevelThis presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level. It clarifies exploitation conditions, details the exploit steps, and demonstrates the vulnerability through custom exploit code targeting a Harbor deployment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YZK98rFCMbAhttps://peertube.dodges.it/static/streaming-playlists/hls/3c4039b0-28be-4408-ac92-4f8b9d66b13c/56022b77-e4b6-4143-9645-d8193d8aef72-master.m3u8https://peertube.dodges.it/videos/embed/8rwhdBMgzvuR4jhjPTiK351157002026-10-23T03:00:07.140ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9tnZcLKCXkoR6NczUVNZb62026-10-22T06:53:35.090Zhttps://peertube.dodges.it/lazy-static/thumbnails/9403f430-8729-46ed-a95d-cab07bb2efc6.jpgDEF CON SG1 - CSIT Village - Shao Xiang -Thinking like the enemy: Adversary MindsetUnderstanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically strengthen defenses. This session introduces the four pillars that help defenders think like adversaries, enabling proactive planning, better prioritisation, and more effective response strategies. --- Mirrored from YouTube: https://www.youtube.com/watch?v=SDZ95UJi1fshttps://peertube.dodges.it/static/streaming-playlists/hls/449bbd96-d507-4938-afe7-5146378a110d/8832c1a6-7297-4fcc-abab-74008c377edf-master.m3u8https://peertube.dodges.it/videos/embed/9tnZcLKCXkoR6NczUVNZb61444002026-10-23T03:00:09.726ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bvTQ6woqM5q7PAitiEmzvS2026-10-22T06:54:20.847Zhttps://peertube.dodges.it/lazy-static/thumbnails/4c26b115-9997-472e-8457-bd190700e672.jpgDEF CON SG1 - CSIT Village - Kenneth Huang Shaoqi - How A No Write Can Compromise System SecurityCompilers generate all our code, but they don’t get it right all the time. In this talk, we’ll introduce how compilers can affect software security in general, before going deep into a V8 optimization n-day from the perspective of a vulnerability researcher. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PuKePTZWo0whttps://peertube.dodges.it/static/streaming-playlists/hls/5527e596-6f1b-4597-990d-ee432bce9ec8/d268469e-5682-4c94-936a-caa2e8c8cdd9-master.m3u8https://peertube.dodges.it/videos/embed/bvTQ6woqM5q7PAitiEmzvS2428002026-10-23T03:22:22.334ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iVwetiTMtHtJZwoKFNAHBf2026-10-22T06:54:57.147Zhttps://peertube.dodges.it/lazy-static/thumbnails/32bf2dc0-f8f9-4199-b9b3-cdff28a03b73.jpgDEF CON SG - CSIT Village - Kendrick Yeo, Eugene Ong - Learning OT Through A Digital TwinDuring this session, we will share simulated water testbed, and the attacks that can work on it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=JLcx2sqUbBAhttps://peertube.dodges.it/static/streaming-playlists/hls/91246887-9f28-4b22-9bd0-457bb0a40c10/e38ae30c-5b94-4675-98a7-be3fb455b02e-master.m3u8https://peertube.dodges.it/videos/embed/iVwetiTMtHtJZwoKFNAHBf1486002026-10-23T04:18:44.436ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qy4nvCVFf9wYRJV33XUT342026-10-22T06:55:35.402Zhttps://peertube.dodges.it/lazy-static/thumbnails/de1ea700-869c-4b3e-b4ce-61e86978a9af.jpgDEF CON SG 1 - CSIT Village - Koh Kian Woon - Not All Firefox Bugs Are Equal-Heap Grief & CFG BypassAs AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders. This talk highlights that effective security requires going beyond severity ratings to truly understanding threats and to prioritise real-world exploitability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EJFCwq_hUyshttps://peertube.dodges.it/static/streaming-playlists/hls/c6d534b3-16a4-4937-b643-cfdc03ca7573/4e947a33-d7b6-4baa-9be3-4b46a7206dbe-master.m3u8https://peertube.dodges.it/videos/embed/qy4nvCVFf9wYRJV33XUT341295002026-10-23T03:22:30.516ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fonweTahynGUEJ1EPe1kNx2026-10-22T06:56:25.287Zhttps://peertube.dodges.it/lazy-static/thumbnails/52bb6c4c-4f29-4287-a647-c12c04565a14.jpgDEF CON SG1 - CSIT Vilage - Arne Sim - TISC : Behind The Scenes In CTF Challenge CreationThe InfoSecurity Challenge (TISC) is one of Singapore's most anticipated Capture-the-Flag competition (CTF), hosted annually by CSIT. Join one of the challenge creators as he shares his creation process and learn what goes on behind-the-scenes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EFqcMPPaK_Ihttps://peertube.dodges.it/static/streaming-playlists/hls/747f9133-a29b-461d-a3ca-cd6712f639e7/77a48efc-bc85-4d8c-94fd-f0feadfb4eac-master.m3u8https://peertube.dodges.it/videos/embed/fonweTahynGUEJ1EPe1kNx981002026-10-23T03:37:38.807ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jSFWwr1bAgDw82gDDww68G2026-10-22T06:57:05.617Zhttps://peertube.dodges.it/lazy-static/thumbnails/9c2beea5-63df-4066-83c2-e3ab83267a1e.jpgDEF CON SG1 - CSIT Village - Sng Peng Boon - Web Hacking Lessons from Pre Gov Bug Bounty ProgramWe share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared. We will also walk through real-world vulnerabilities and recommend practical takeaways for both bug hunters and developers. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Ahn_J8QS7Oohttps://peertube.dodges.it/static/streaming-playlists/hls/98d84c5f-4a31-40d7-b572-3a41814ec7e2/b1366c74-cbca-49ee-a64a-2115c1bc1a26-master.m3u8https://peertube.dodges.it/videos/embed/jSFWwr1bAgDw82gDDww68G1425002026-10-23T03:37:45.648ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hWaGrHCvCsEMc9b1SDjRLq2026-10-22T06:57:32.545Zhttps://peertube.dodges.it/lazy-static/thumbnails/9c6069d5-f752-4727-921a-3bf286856280.jpgDEF CON SG1 - CSIT Village - Lim Jing Qiang - Registry Stored Payloads For Usb Rubber DuckiesUsing the rubber ducky to deploy a large payload in an air-gapped environment is no easy feat. This talk introduces a way of leveraging USB descriptors to store large payload in the Windows Registry and retrieving it through keystroke injection. --- Mirrored from YouTube: https://www.youtube.com/watch?v=9MEqSUlgAD8https://peertube.dodges.it/static/streaming-playlists/hls/89225bba-6cfb-49e4-b69c-47faa8a6b454/3b9e2698-b4e4-4058-ad06-4019e5da5117-master.m3u8https://peertube.dodges.it/videos/embed/hWaGrHCvCsEMc9b1SDjRLq763002026-10-23T03:46:17.623ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jt3goS4ixt1DkY9UiJXQjM2026-10-22T06:58:07.040Zhttps://peertube.dodges.it/lazy-static/thumbnails/3a7c594d-0178-483d-8eda-11adcda64b05.jpgDEF CON SG1 - CSIT Village - Daniel Siok - Balancing Security&Usability In AirGapped ImplementationsWhat does an air-gapped system really mean in practice? This talk introduces the basics of air gap systems and data diode, then explores how real world requirements shape systems design and what that means for security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=5rU62SvD3TYhttps://peertube.dodges.it/static/streaming-playlists/hls/958af949-d25c-47a8-b889-ad55dc0210d9/f9e3f336-39cb-4558-91bb-869c994835f7-master.m3u8https://peertube.dodges.it/videos/embed/jt3goS4ixt1DkY9UiJXQjM768002026-10-23T03:46:26.143ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9WpnKKvimEFF5kgexvFaW62026-10-22T06:59:05.999Zhttps://peertube.dodges.it/lazy-static/thumbnails/878cb6ce-2cd0-43da-818f-490b595ab28e.jpgDEF CON SG1 - CSIT Village - Eugene Lim - Mic Drop: Hacking into Enterprise Audiovisual HardwareAudiovisual hardware - from web conferencing cameras to meeting room systems - is deeply embedded in modern enterprises' physical attack surface. However, they are often poorly secured and monitored. This presentation dives into real and novel vulnerabilities discovered in enterprise-grade equipment, and walks through the risks they can pose to any organisation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=-Rkh47bu-lchttps://peertube.dodges.it/static/streaming-playlists/hls/4861ada2-8859-4d66-b449-4ae66d33358d/465c2671-5ab2-45a4-b7f9-49b81777cf8c-master.m3u8https://peertube.dodges.it/videos/embed/9WpnKKvimEFF5kgexvFaW61614002026-10-23T04:18:54.752ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4Q37ypjYk42fDh4Yu78ooZ2026-10-22T07:03:33.650Zhttps://peertube.dodges.it/lazy-static/thumbnails/a5b408d4-521b-4b8d-852f-5dceaa31e98e.jpgDEF CON 34 - Hacking AI - Bruce SchneierHumans are hacking AI systems. Humans are hacking with AI systems. But also, AIs are hacking human systems. They’re finding and exploiting vulnerabilities in computer code, and they’ll soon be doing the same with all sorts of other codes. For example: the tax code can be hacked. Vulnerabilities are called loopholes, exploits are called tax avoidance strategies, and black hats are called accountants. Similarly, financial markets can be hacked. So can any system of rules or laws, including democracy itself. AIs will hack these systems at our request, and they’ll also do this innately, organically – and possibly in ways we don’t immediately see. We need to consider a world where increasingly sophisticated hacks or our social, economic, and political systems are discovered computer speeds, and then exploited at computer scale and scope. Right now, our systems of patching these systems operate at a human pace, which won't be good enough. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eEBv0STiYhIhttps://peertube.dodges.it/static/streaming-playlists/hls/1f006b4e-dac0-424c-b231-406b0a9228c5/65cf5cdd-7202-41ef-ac67-5bd99647a75f-master.m3u8https://peertube.dodges.it/videos/embed/4Q37ypjYk42fDh4Yu78ooZ2674002026-10-23T05:11:12.648ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/na6MdXvoeSSjBkxwrUTNWj2026-10-22T07:08:21.527Zhttps://peertube.dodges.it/lazy-static/thumbnails/8f7b46ac-9fcc-47d3-a959-75441c18c6d5.jpgDEF CON 34 - ESP32 as counter-surveillance platform - Cybertiger, Colonel Panic, The WrewPrivacy should be accessible to all. Historically, counter-surveillance tools have been expensive, complex, and inaccessible to most individuals, often limited to well-funded researchers and costly hardware configurations. The ESP32 offers a transformative alternative. This presentation will demonstrate how an affordable microcontroller has become the foundation for a growing suite of open-source, user-friendly anti-surveillance tools. We will discuss the technical features that make the ESP32 a compelling choice for these applications, including passive 802.11 and Bluetooth monitoring, OUI-based device fingerprinting, and robust cryptographic capabilities. Applications include detecting police body cameras in operational environments, mapping Flock Safety automatic license plate recognition (ALPR) infrastructure, identifying unauthorized drones, detecting radio frequency jamming across 2.4GHz, 5GHz, and cellular bands, and tracking autonomous robots operating with known-vulnerable firmware. These tools are cost-effective and freely available. We will also consider future developments in accessible counter-surveillance hardware, such as the ESP32-S5 with 5GHz support, GPS, displays, haptics, etc. Advancing anti-surveillance culture requires designing devices that individuals are motivated to use and carry. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PcK-TDmzshchttps://peertube.dodges.it/static/streaming-playlists/hls/ab552aec-168b-4771-a23e-edf68d6bfc9e/a6d3edc4-4bf1-47d8-ac25-87d9bf964b59-master.m3u8https://peertube.dodges.it/videos/embed/na6MdXvoeSSjBkxwrUTNWj2667002026-10-23T05:42:22.615ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2iaXqcpnM2Va5f59gN2sp32026-10-22T07:08:49.847Zhttps://peertube.dodges.it/lazy-static/thumbnails/b58a8864-b281-42fa-8e17-b833651dc89e.jpgDEF CON 34 - Video Team - Scavenger Hunt Slot Machine1988 Japanese Slot Machine for your enjoyment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=86TLtYkpyKIhttps://peertube.dodges.it/static/streaming-playlists/hls/0a7eeb03-b8d8-4966-9179-3cd57b262048/d06e63be-68ca-4964-a5aa-a66b9093a6f8-master.m3u8https://peertube.dodges.it/videos/embed/2iaXqcpnM2Va5f59gN2sp3198002026-10-23T05:42:26.344ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tt7dhRQ3RPX9cwDxra1tTW2026-10-22T07:09:14.728Zhttps://peertube.dodges.it/lazy-static/thumbnails/d4160b2d-ff78-4f95-8902-c6d859525399.jpgDEF CON 34 - Video Team - I Am the Cavalry - Josh and DeanWe catch up with the folks from I Am the Cavalry (IATC) for an update on their project. --- Mirrored from YouTube: https://www.youtube.com/watch?v=KKSRwtMGYQUhttps://peertube.dodges.it/static/streaming-playlists/hls/de6fa761-ac8f-4c00-8bf4-a44721a6eb00/1c19e4c6-3650-4a1e-8c15-6b6816fbed72-master.m3u8https://peertube.dodges.it/videos/embed/tt7dhRQ3RPX9cwDxra1tTW259002026-10-23T05:42:24.480ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pqwWsFzHCFRktgSMGHcaGT2026-10-22T07:15:15.475Zhttps://peertube.dodges.it/lazy-static/thumbnails/11d6b906-858a-4483-b6b9-b32edda86485.jpgDEF CON - noRecognition: Could a pattern on clothing fool Facial Recognition? - Bill SwearingenYou are being watched. Not in the vague, philosophical sense. Right now. The ATM you used this morning. The gas pump. Every doorbell on your block. The 125 smart streetlights you walked past on your way to lunch. You are indexed, cataloged, and matched against databases you never consented to join, by AI models that are wrong more often than the vendors will ever admit. Other solutions to this involves looking ridiculous. Face paint. IR glasses. Masks. Real-time deepfake software running on your phone. Congrats, you defeated the algorithm AND ensured every human within 50 feet is staring at you. Super subtle. I built something different. noRecognition is a genetic algorithm that breeds adversarial patterns, printed on ordinary fabric, that defeat the entire facial recognition pipeline: person detection, face detection, and identity recognition across 10 models used by Clearview AI, Axon, Hikvision, and Palantir. No electronics. No software. You look like a person wearing a scarf. The AI sees nothing. I will demonstrate this live on stage. One camera. One scarf. Zero detections. Come watch me disappear. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WyPmt8CE5L4https://peertube.dodges.it/static/streaming-playlists/hls/bdaf1b41-f499-4b3f-bde8-52750d072f0f/1a2196a5-cb56-4663-8f0d-ddb9200f6f8d-master.m3u8https://peertube.dodges.it/videos/embed/pqwWsFzHCFRktgSMGHcaGT2779002026-10-23T06:49:13.819ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9yVeDh35z2TWpwq6dPh9vv2026-10-22T07:20:57.680Zhttps://peertube.dodges.it/lazy-static/thumbnails/365a5767-db16-40d5-91c5-64e66988c0e6.jpgDefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll40 years ago today, I tripped over a 75-cent accounting glitch in a Unix system. That tiny clue led to a year-long chase across networks, modem banks, and international borders, ultimately uncovering a crew of German hackers working for the East German Stasi and the Soviet KGB. We had no budget, no roadmap, and no “cyber” anything. We improvised with soldering irons, shell scripts, logbooks, curiosity, and far too much coffee. Let’s revisit the chase – not just to remember, but to ask what changed, what didn’t, and why it still matters. --- Mirrored from YouTube: https://www.youtube.com/watch?v=656058JxTM0https://peertube.dodges.it/static/streaming-playlists/hls/4561b7a0-4487-425c-88fa-dac004ed2aff/ea2dfacf-574d-41b5-b14b-65b1039f1da3-master.m3u8https://peertube.dodges.it/videos/embed/9yVeDh35z2TWpwq6dPh9vv3426002026-10-23T06:50:10.537ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1nTWzCnQLMjVLdn1Ds7H2S2026-10-22T07:21:31.522Zhttps://peertube.dodges.it/lazy-static/thumbnails/f8794b48-1a0d-4e50-9024-13ef183a0bbe.jpgDEF CON 34 - Video Team - Car Hacking VilllageOut intrepid reporter finds out what's going on this year in the DEF CON Car Hacking Village. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ciQdzBhR1xIhttps://peertube.dodges.it/static/streaming-playlists/hls/030ea104-0339-4503-a8da-1dc0569c6060/72cf8ec8-a40d-498f-90ca-345e972348ef-master.m3u8https://peertube.dodges.it/videos/embed/1nTWzCnQLMjVLdn1Ds7H2S439002026-10-23T09:31:57.250ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iNKEWN811xBHMjKuncGQem2026-10-22T07:22:02.451Zhttps://peertube.dodges.it/lazy-static/thumbnails/73d1264b-c5fb-4d6c-845c-f0a9d8a5c12c.jpgDEF CON 34 - Video Team - Ham Radio Village - Marvin Goes HAMIn which young Marvin goes to the HAM Radio Village and makes us all smile. --- Mirrored from YouTube: https://www.youtube.com/watch?v=f02wH61gk8Mhttps://peertube.dodges.it/static/streaming-playlists/hls/90327bf0-343e-4ecb-a01c-cee2c8282856/5b04034d-2184-4bef-931f-3493afebb166-master.m3u8https://peertube.dodges.it/videos/embed/iNKEWN811xBHMjKuncGQem268002026-10-23T09:08:28.714ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jwmRi7GbpbQq3FCDokLyEJ2026-10-22T07:22:31.674Zhttps://peertube.dodges.it/lazy-static/thumbnails/1df60ca8-b367-4768-bfb3-cfae9c7216a1.jpgDEF CON 34 - Video Team - PhreakMeSoldier of FORTRAN brings back old-school phreaking in contest form. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uAZi-dCehuIhttps://peertube.dodges.it/static/streaming-playlists/hls/9601a87f-9447-4b0e-88a7-b242b3507c56/10efdcbc-78eb-4d34-8c6e-30e44989f52c-master.m3u8https://peertube.dodges.it/videos/embed/jwmRi7GbpbQq3FCDokLyEJ511002026-10-23T08:33:14.437ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/n9w1TyLy1VTPmU1MwMjwh32026-10-22T07:23:17.201Zhttps://peertube.dodges.it/lazy-static/thumbnails/b2e8aab6-7b35-4aaf-8453-5a31e40396ea.jpgDEF CON 34 - Video Team - EmbeddedSystems VillageThe full lowdown on the Embedded Systems Village at DEF CON 34 --- Mirrored from YouTube: https://www.youtube.com/watch?v=fqs--Ha7gfwhttps://peertube.dodges.it/static/streaming-playlists/hls/ab405c10-43a6-40f0-bee8-c4b114fb327a/e4354cab-f635-4744-92be-91b7496d21fe-master.m3u8https://peertube.dodges.it/videos/embed/n9w1TyLy1VTPmU1MwMjwh3545002026-10-23T07:28:13.620ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mh81CsD9p7uvNrFq8bqkcu2026-10-22T07:23:59.486Zhttps://peertube.dodges.it/lazy-static/thumbnails/f88e8edc-870a-43ee-a52c-b3fd11c4dc1f.jpgDEF CON 34 - Video Team - LEECHYou wouldn't download a car. --- Mirrored from YouTube: https://www.youtube.com/watch?v=OqswVKiCN4whttps://peertube.dodges.it/static/streaming-playlists/hls/a436fe7d-7c6a-47c3-8393-7b8601591286/321b8296-9787-424d-b8c3-df44979c1f48-master.m3u8https://peertube.dodges.it/videos/embed/mh81CsD9p7uvNrFq8bqkcu845002026-10-23T07:28:23.361ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2hRGs6zXNKiKFaRJ5HAXNw2026-10-22T07:24:30.328Zhttps://peertube.dodges.it/lazy-static/thumbnails/5234f176-c7b2-4562-82d0-2cda30f25258.jpgDEF CON 34 - Video Team - Physical Security VillageThere's a lot to learn in the Physical Security Village. --- Mirrored from YouTube: https://www.youtube.com/watch?v=M0-cxePSifshttps://peertube.dodges.it/static/streaming-playlists/hls/0a73aa85-72c9-458c-b069-504b0199b0a6/6edadbda-1e91-498f-b8fa-3fa4436364f0-master.m3u8https://peertube.dodges.it/videos/embed/2hRGs6zXNKiKFaRJ5HAXNw322002026-10-23T07:57:35.428ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/w3AwZf4e53ud6cLNUqJLME2026-10-22T07:25:04.884Zhttps://peertube.dodges.it/lazy-static/thumbnails/1147ea10-ef8b-4ca7-a807-4df50bbf88bb.jpgDEF CON 34 - Video Team - Voting Machine Hacking VillageVoting Village returns to DEF CON 34 to consider the state of election security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=toi0keDnOschttps://peertube.dodges.it/static/streaming-playlists/hls/f34eee09-7956-4325-b129-276a81db5f98/02a64a9c-085d-46d9-b536-a874343b94ac-master.m3u8https://peertube.dodges.it/videos/embed/w3AwZf4e53ud6cLNUqJLME767002026-10-23T07:57:38.503ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rcP1M3HtwafvXi3utDAXFt2026-10-22T07:25:45.641Zhttps://peertube.dodges.it/lazy-static/thumbnails/dda38de3-81a6-43cd-b702-a91071a5d265.jpgDEF CON 34 - VideoTeam - Cliff Stoll AfterHoursAn interview with the delightful Cliff Stolll. So very worth your time --- Mirrored from YouTube: https://www.youtube.com/watch?v=AJCWsoozg0Qhttps://peertube.dodges.it/static/streaming-playlists/hls/cc1a9ef9-f06e-409e-bb83-0c37cec97f2d/a942b2de-71dd-4061-bb6c-1a703fd6612e-master.m3u8https://peertube.dodges.it/videos/embed/rcP1M3HtwafvXi3utDAXFt624002026-10-23T08:33:00.903ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5CBNsVNSgPXK9Qe3QZKSdK2026-10-22T07:26:19.479Zhttps://peertube.dodges.it/lazy-static/thumbnails/dd315b80-0958-4172-ae7c-2487904cb355.jpgDEF CON 34 - Video Team - Car Hacking Village - Charger HackingWe get an EV charger hacking breakdown from the legend MajorMalfunction. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uF8c7Ty-5zAhttps://peertube.dodges.it/static/streaming-playlists/hls/258164c1-722c-43c4-bcd0-9123fcad1833/51da9001-446e-4125-b0e6-870a76efb9de-master.m3u8https://peertube.dodges.it/videos/embed/5CBNsVNSgPXK9Qe3QZKSdK502002026-10-23T08:33:09.556ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/24JWMLEqQtNodDAKhkET8f2026-10-22T07:27:20.442Zhttps://peertube.dodges.it/lazy-static/thumbnails/2dc067d0-3fe7-4717-b31d-e003b6c1e5c8.jpgDEF CON 34 - Video Team - AI Village - PokemonFrom the AI Hacking Village - an AI that plays Pokemon for you, without costing you 20 grand in tokens. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Egzf_aWSxZchttps://peertube.dodges.it/static/streaming-playlists/hls/089ed5e6-45b6-49be-a4b2-1cc5b0cefab0/332774dc-688c-46c1-92ba-ef5517aa7851-master.m3u8https://peertube.dodges.it/videos/embed/24JWMLEqQtNodDAKhkET8f810002026-10-23T09:08:31.832ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mtCqQUrPftg4ZR1TAF7WUj2026-10-22T07:27:57.052Zhttps://peertube.dodges.it/lazy-static/thumbnails/4e885e40-2148-4504-aa9a-9efd48437802.jpgDEF CON 34 - Video Team - DEF COIN 34 Badge - Bunnie HuangThe lowdown on the amazing DC34 badge from the designer himself. --- Mirrored from YouTube: https://www.youtube.com/watch?v=1plmJlWSKa0https://peertube.dodges.it/static/streaming-playlists/hls/a5d24e03-d886-42cb-bac0-d4d892ddb8d2/282a7a2d-26ff-4548-87f7-4bc8270c0815-master.m3u8https://peertube.dodges.it/videos/embed/mtCqQUrPftg4ZR1TAF7WUj515002026-10-23T09:31:46.564ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rH85dq3BNJLymtV7fQuexQ2026-10-22T07:28:32.288Zhttps://peertube.dodges.it/lazy-static/thumbnails/35593ffd-f4e1-42e9-85a3-56f3662c70f6.jpgDEF CON 34 - Video Team - DEF CON Groups Highlight DC256If you're not in a DEF CON Group, you're missing out on the opportunity to keep the DEF CON vibes going all year long, Ryan from the Video Team gets some fresh info from DC256 in Huntsville, Alabama --- Mirrored from YouTube: https://www.youtube.com/watch?v=u-SsrNy-cK0https://peertube.dodges.it/static/streaming-playlists/hls/d03251db-0edc-438e-95ff-512fa55ca52a/59741a9c-d70d-4aad-9081-1cee28b97f9a-master.m3u8https://peertube.dodges.it/videos/embed/rH85dq3BNJLymtV7fQuexQ344002026-10-23T09:13:00.957ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dp3EZsRYynzBd83jsiiWZx2026-10-22T07:28:48.785Zhttps://peertube.dodges.it/lazy-static/thumbnails/48932ea2-7a22-4b0b-832b-44a2e3999b55.jpgDEF CON 34 - Good Morning--- Mirrored from YouTube: https://www.youtube.com/watch?v=XR3a4B4W-hQhttps://peertube.dodges.it/static/streaming-playlists/hls/64656ade-fcfe-4f72-a561-9736d508e819/7cbcd5df-d574-4571-a0ef-3acdd4f024df-master.m3u8https://peertube.dodges.it/videos/embed/dp3EZsRYynzBd83jsiiWZx14002026-10-23T09:13:04.225ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qXESQ676uGHcrXjroebDn72026-10-22T07:29:20.398Zhttps://peertube.dodges.it/lazy-static/thumbnails/9b4759db-ecd7-4363-94f6-cf89ba7dd980.jpgDEF CON 34 - DEF CON Policy Announcement - Katie Noble, Heather WestThe new leadership of the DEF CON Policy project share the goals of DEF CON Policy and remind you that their Call for Papers closes May 1. --- Mirrored from YouTube: https://www.youtube.com/watch?v=y7vMt_IM0Bwhttps://peertube.dodges.it/static/streaming-playlists/hls/ca21318f-c8a7-49c7-bdc6-d0ebeeba045c/ebea76f0-54ef-4474-bedc-aee469c56367-master.m3u8https://peertube.dodges.it/videos/embed/qXESQ676uGHcrXjroebDn7202002026-10-23T09:31:51.438ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tY91vjy3B5t6GYgAX8Vn972026-10-22T07:34:02.497Zhttps://peertube.dodges.it/lazy-static/thumbnails/ff5a898a-e2c2-48fb-a5db-642d70b90d0e.jpgDEF CON 33 - DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks - Ryan EmmonNetwork Attached Storage (NAS) devices are indispensable in many corporate and home environments. These devices often live on the network edge, providing convenient remote access to confidential files and internal networks from the public internet. What happens when this goes terribly wrong? In this presentation, I’ll discuss how I developed a zero-day exploit targeting dozens of Synology NAS products. At the time of discovery, the exploit facilitated unauthenticated root-level remote code execution on millions of NAS devices in the default configuration. My exploitation strategy centered around smuggling different types of delimiters that targeted multiple software components. In the past, exploitation of the vulnerability’s bug class demanded additional primitives that weren’t available on my targets. While searching for alternative paths, I discovered a novel remote Linux exploitation technique. I’ll be presenting this technique, which can be used in other researchers’ exploit chains in the future. For the first time in public, I’ll also be discussing the details of my Synology vulnerability research, which won a $40,000 prize at the October 2024 Pwn2Own competition. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3F5icGjDWfghttps://peertube.dodges.it/static/streaming-playlists/hls/e27d549a-bdab-4112-ac78-677e46d686e2/b2bb9e95-82b4-49e1-93d4-74ce52a92191-master.m3u8https://peertube.dodges.it/videos/embed/tY91vjy3B5t6GYgAX8Vn972379002026-10-23T10:10:05.428ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8s6MdNfkpS4VBxCTWHYWAm2026-10-22T07:38:37.255Zhttps://peertube.dodges.it/lazy-static/thumbnails/d517c2a4-86d9-49de-a0b5-360c9a2b6797.jpgDEF CON 33 - Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen - Marek TóthBrowser extensions have become increasingly popular for enhancing the web browsing experience. Common examples are ad blockers, cryptocurrency wallets, and password managers. At the same time, modern websites frequently display intrusive elements, such as cookie consent banners, newsletter subscription modals, login forms, and other elements that require user interaction before the desired content can be displayed. In this talk, I will present a new technique based on clickjacking principles that targets browser extensions, where I used fake intrusive elements to enforce user interaction. In my research, I tested this technique on the 11 most widely used password managers, which resulted in discovering multiple 0-day vulnerabilities that could affect tens of millions of users. Typically, just one click was required from a user to leak their stored private information, such as credit card details, personal data or login credentials (including TOTP). In some cases, it could lead to the exploitation of passkey authentication. The described technique is general and can be applied to browser extensions beyond password managers, meaning other extensions may also be vulnerable to this type of attack. In addition to describing several methods of this technique, I will also recommend mitigations for developers to protect their extensions against this vulnerability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Gu4IoDXNqoUhttps://peertube.dodges.it/static/streaming-playlists/hls/3c54ded8-289d-475a-90e4-a27c8e16ff30/79b1ea0d-816a-4d5e-b9e4-b9fd4e4b4c4a-master.m3u8https://peertube.dodges.it/videos/embed/8s6MdNfkpS4VBxCTWHYWAm3009002026-10-23T10:10:16.496ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/d5MVcCVBwoAs4gwJbawLDX2026-10-22T07:39:35.451Zhttps://peertube.dodges.it/lazy-static/thumbnails/9f12d100-5778-4244-bd71-bafdc471dd77.jpgDEF CON 33 - Can't Stop the ROP: Automating Universal ASLR Bypasses - Bramwell BrizendineHigh-entropy ASLR was supposed to make bypasses of ASLR on Windows virtually impossible - until now! This talk will debut nine novel bypasses of the strongest form of ASLR on Windows, which makes attacks such as brute-forcing totally infeasible. This talk showcases how mostly simple, easy-to-find ROP gadgets can be used to construct highly reliable, universal ASLR bypasses to key Windows system DLLs, allowing ROP gadgets from those DLLs to be used freely in exploits! The end result? The attack surface is greatly expanded, making it possible to do more attacks on binaries previously constrained by limited gadgets. What may have been impossible before due to insufficient ROP gadgets, now is quite possible! While this talk focuses primarily on ASLR bypass for x64, we will also briefly touch upon similar attacks for x86. As part of this talk, for the first time ever, I am also releasing and open-sourcing a new mini-tool that will generate complete, x64 ROP chains for each of these bypasses! We will see this ASLR bypass attack in action with demo. We conclude with recommendations to help remediate the problem. This talk is an in-depth technical deep dive into Windows internals and the design of this technique, but it will also be presented in an accessible way to beginners. --- Mirrored from YouTube: https://www.youtube.com/watch?v=NrTNNi9PP5Yhttps://peertube.dodges.it/static/streaming-playlists/hls/61d8efbf-4042-4c6d-88eb-39f2195c3fc9/23b99bae-ba2a-427a-9f91-24633f2d4dd6-master.m3u8https://peertube.dodges.it/videos/embed/d5MVcCVBwoAs4gwJbawLDX2565002026-10-23T11:07:13.352ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aL6zdvYF6S38jPhgXGLqit2026-10-22T07:40:26.387Zhttps://peertube.dodges.it/lazy-static/thumbnails/f3cd6dc0-ffc0-4086-9c41-6ae4accbe06d.jpgDEF CON 33 Recon Village - Building Local Knowledge Graphs for OSINT - Donald Pellegrino--- Mirrored from YouTube: https://www.youtube.com/watch?v=yIUfntW_TxYhttps://peertube.dodges.it/static/streaming-playlists/hls/4f0a6879-e383-488b-a7fd-8056bb18a2d5/41bd4df0-1e2d-44ab-a4cb-2a3c554b7524-master.m3u8https://peertube.dodges.it/videos/embed/aL6zdvYF6S38jPhgXGLqit2471002026-10-23T10:35:37.759ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wKAGW14vwUSFRHiwwdMBUa2026-10-22T07:41:12.360Zhttps://peertube.dodges.it/lazy-static/thumbnails/072fbbc5-52af-44c2-8890-1630891b42e1.jpgDEF CON 33 Recon Village - Mapping the Shadow War From Estonia to Ukraine - Evgueni Erchov--- Mirrored from YouTube: https://www.youtube.com/watch?v=y-1_nKM8DRQhttps://peertube.dodges.it/static/streaming-playlists/hls/f90887b2-2546-4d7a-bf27-c4fd7e2bb345/9987eb07-d521-4505-a167-742163484501-master.m3u8https://peertube.dodges.it/videos/embed/wKAGW14vwUSFRHiwwdMBUa1247002026-10-23T10:43:07.192ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/k1JxPTbKt8CcoFPey1kFfK2026-10-22T07:42:16.876Zhttps://peertube.dodges.it/lazy-static/thumbnails/d2f03c74-3b0b-4bb9-b261-5b79af31123b.jpgDEF CON 33 Recon Village - A Playbook for Integration Servers - Ryan Bonner, Guðmundur Karlsson--- Mirrored from YouTube: https://www.youtube.com/watch?v=wgf5GKrY3nchttps://peertube.dodges.it/static/streaming-playlists/hls/99f7db2a-8d5c-408b-93cd-d0b837ef468b/ad69952b-f022-45f7-9e88-85929e4d1807-master.m3u8https://peertube.dodges.it/videos/embed/k1JxPTbKt8CcoFPey1kFfK1321002026-10-23T10:43:14.536ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hjVFE8QW1T3jGbCsc97CEJ2026-10-22T07:42:55.821Zhttps://peertube.dodges.it/lazy-static/thumbnails/82b4dd76-1676-4b1a-baa0-2ae18b5c5b3a.jpgDEF CON 33 Recon Village - Autonomous Video Hunter AI Agents for Real Time OSINT - Kevin Dela Rosa--- Mirrored from YouTube: https://www.youtube.com/watch?v=oHjQSpcP664https://peertube.dodges.it/static/streaming-playlists/hls/8436b0b1-5c12-4811-a72f-ba6924a633a6/088f468e-1351-44a9-8f76-8bf1e407f602-master.m3u8https://peertube.dodges.it/videos/embed/hjVFE8QW1T3jGbCsc97CEJ1401002026-10-23T11:28:40.771ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/inpqAybo9DgMQs2KZdwY3e2026-10-22T07:43:35.136Zhttps://peertube.dodges.it/lazy-static/thumbnails/97aef222-93fa-4acd-82b7-e0bf402c7a9b.jpgDEF CON 33 Recon Village - Inside the Shadows Tracking RaaS Groups, Cyber Threats - John Dilgen--- Mirrored from YouTube: https://www.youtube.com/watch?v=esKyHO5WjPUhttps://peertube.dodges.it/static/streaming-playlists/hls/8ca86977-b478-4811-a4cf-83afcf6f8bb1/2d9ee147-68a0-42f3-bc91-fb5f10e438bc-master.m3u8https://peertube.dodges.it/videos/embed/inpqAybo9DgMQs2KZdwY3e1950002026-10-23T11:28:33.787ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/33HTaaLw3KhmxDLj5BuYfy2026-10-22T07:44:44.795Zhttps://peertube.dodges.it/lazy-static/thumbnails/ab2eac44-8ede-4835-9f12-1c2c9ddffffa.jpgDEF CON 33 Recon Village - How to Become One of Them: Deep Cover Ops - Sean Jones, Kaloyan Ivanov--- Mirrored from YouTube: https://www.youtube.com/watch?v=aSOiPxOBs1Ehttps://peertube.dodges.it/static/streaming-playlists/hls/10939359-50f3-44ed-a66d-8163c15d88bc/187a896c-9c83-4a76-ba02-4e41cdd51429-master.m3u8https://peertube.dodges.it/videos/embed/33HTaaLw3KhmxDLj5BuYfy2617002026-10-23T11:28:37.369ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9Jjzj61S8Hb9mAA7GFPxn12026-10-22T12:18:27.560Zhttps://peertube.dodges.it/lazy-static/thumbnails/ad0ba05f-95c9-472c-98d5-ecf6efb9d462.jpgDCSG1 - Introduction to Range Village Community - GladiatorIn this talk, we will take a walk down a not so long ago memory lane, and reflect how The Range Village that was once just a passion project idea, transformed into a non-profit movement. --- Mirrored from YouTube: https://www.youtube.com/watch?v=zqOC2EZUV3Mhttps://peertube.dodges.it/static/streaming-playlists/hls/46b1cb62-0cc7-441c-9984-9aeea469dc66/c0ef9221-97f8-4118-a3dc-a8b7031138ef-master.m3u8https://peertube.dodges.it/videos/embed/9Jjzj61S8Hb9mAA7GFPxn1964002026-10-23T11:32:39.394ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3cxr6be3AayDE7bLNPv3E62026-10-22T12:19:03.536Zhttps://peertube.dodges.it/lazy-static/thumbnails/7507e41a-0cb1-4c79-ae84-4b29a258b0ce.jpgDSCG1 - CryptoCurrency Opening Keynote - Michael SchlohJoin your fellow hackers managing the Cryptocurrency areas of Defcon, and get a sneak peak of what each workshop teaches as well as an overview of the showcases and programs happening in our Defcon Village and Contest areas. We will report on cryptocurrency trends and perspectives from distinguished positions in industry, academy, and government. We will announce the teams competing in the Cryptocurrency Challenge, and give an overview of what prizes are available to winning contestants of the hackathon, CTF, and contests. Meet the organizers of years of cryptocurrency content at Defcon and bring your questions to the Creator Stage! --- Mirrored from YouTube: https://www.youtube.com/watch?v=yzqFFMn1qPwhttps://peertube.dodges.it/static/streaming-playlists/hls/11ced46d-debd-47d1-9f5b-7a3c38f48421/ae8325a1-9cbc-4ca5-a36f-a54a4316f71a-master.m3u8https://peertube.dodges.it/videos/embed/3cxr6be3AayDE7bLNPv3E61051002026-10-23T11:32:41.723ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kjfMLtRs197QdkEZ9kLzfF2026-10-22T12:19:42.847Zhttps://peertube.dodges.it/lazy-static/thumbnails/e1ec218c-9234-4dd5-867f-100934ec9c1f.jpgDCSG1 - Adversaries Have AI. You Have $0. Here's How You Win Anyway - Aaron Crow--- Mirrored from YouTube: https://www.youtube.com/watch?v=yKnXPkpuS0Ihttps://peertube.dodges.it/static/streaming-playlists/hls/9c6a22f1-7699-4530-b953-6a18363ce747/4975db0e-3896-4660-a6b7-b2ee1d579f4d-master.m3u8https://peertube.dodges.it/videos/embed/kjfMLtRs197QdkEZ9kLzfF1159002026-10-23T11:39:58.213ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tSMLS1oyMkQH4Eccg9a1pS2026-10-22T12:20:33.021Zhttps://peertube.dodges.it/lazy-static/thumbnails/a92cbb68-e50e-4a83-a828-444668a0ee5f.jpgDCSG1 - Where's our Hats: The founding of N0H4Ts - Pengfei Yu, Zara TeoWhat does it take to build a cybersecurity community from scratch, with no budget, no blueprint, and no hats? This talk traces the founding of N0H4TS from a scrappy idea to a 2,300-strong community, sharing the honest lessons, missteps, and moments that shaped it along the way. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vXNpaN3LjIshttps://peertube.dodges.it/static/streaming-playlists/hls/e1be2427-d363-4e82-be3c-05aa2f6bbdf0/2ab2aef4-77f7-419c-a14f-e910813cceea-master.m3u8https://peertube.dodges.it/videos/embed/tSMLS1oyMkQH4Eccg9a1pS2640002026-10-23T11:40:08.416ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kGXUdaEVmsA4XcmVV2G7V62026-10-22T12:21:20.914Zhttps://peertube.dodges.it/lazy-static/thumbnails/577b1aa6-4cd8-45df-9028-983e6703f5c3.jpgDCSG1 - Autonomous and Exploitable: Breaking AI Agents before they break everything else - Aaron AngThe hottest thing in AI right now is agentic systems — LLMs that browse the web, write and execute code, manage your email, call your APIs. They're being deployed faster than anyone understands the attack surface. Join Aaron as he presents a systematic teardown of AI agent security: how agents inherit trust they shouldn't have, how a single adversarial webpage can hijack a browsing agent mid-task, and how multi-agent pipelines create exploit chains that no single guardrail can stop. Aaron will demonstrate end-to-end agent compromise scenarios — from initial prompt injection through a poisoned tool response, to achieving persistent influence over agent memory and downstream actions. Live. On real frameworks. This isn't theoretical. These systems are in production. Let's talk about what that means for all of us. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qKJYPeVtGW4https://peertube.dodges.it/static/streaming-playlists/hls/9f95d5c5-5a91-487e-a044-112e8dd6328f/a44597bf-e82e-47ba-a697-9e9214677222-master.m3u8https://peertube.dodges.it/videos/embed/kGXUdaEVmsA4XcmVV2G7V62725002026-10-23T11:51:09.586ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/d6SRSCvMWLMF7Nn5Fpg3Mz2026-10-22T12:22:03.746Zhttps://peertube.dodges.it/lazy-static/thumbnails/5be3b6e2-d54b-4144-bdc1-c84f6c0d1fca.jpgDCSG1- Are we nurturing the next generation of hackers or losing them - SherpaSecAs cybersecurity evolves, so do its pathways. Emerging tools like LLMs are reshaping how newcomers learn—but are they accelerating understanding, or reducing the need to build strong foundations? When newcomers turn to CTFs, are they becoming creative security thinkers—or highly efficient puzzle solvers? In addition, we will examine broader structural factors, including regulatory considerations and evolving industry expectations, and how they may impact accessibility for newcomers. Join us for a thoughtful discussion on how today’s environment is influencing the development of future security researchers, and what it means for the long-term health of the cybersecurity ecosystem. --- Mirrored from YouTube: https://www.youtube.com/watch?v=kBGaSIca82khttps://peertube.dodges.it/static/streaming-playlists/hls/61ffb9ed-b461-4a80-bcac-624458982843/ede88527-1453-454d-83a9-2daa4f2abd8e-master.m3u8https://peertube.dodges.it/videos/embed/d6SRSCvMWLMF7Nn5Fpg3Mz2463002026-10-23T11:53:36.731ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1KtdGsdFZiKiikkPaHwa9z2026-10-22T12:22:29.590Zhttps://peertube.dodges.it/lazy-static/thumbnails/c6a4f96e-676f-49f9-8c02-0f2a3616abb0.jpgDCSG1 - Actual OT Cyber Security - Dillon Lee--- Mirrored from YouTube: https://www.youtube.com/watch?v=euCa-VJnON4https://peertube.dodges.it/static/streaming-playlists/hls/0611c1a1-3a49-4121-b267-0e1861d42955/37094809-2f9f-42d9-9c98-2b560ac3b95b-master.m3u8https://peertube.dodges.it/videos/embed/1KtdGsdFZiKiikkPaHwa9z1103002026-10-23T11:53:44.667ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5RhQ2SAHMj2FgneXGN4WYq2026-10-22T12:22:59.469Zhttps://peertube.dodges.it/lazy-static/thumbnails/a3e0a9f3-599f-4d12-9910-40def31c6cac.jpgDCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia GallucciHave you ever wondered how macOS and iOS work under the hood? While Apple is known for its closed ecosystem, did you know that significant portions of macOS and iOS are open source, including security components? For researchers, learning how to analyze and exploit this open-source code, especially with the help of AI, is a game-changer. This talk walks through how we can operationalize Apple's partial open-source codebase for offensive security: specifically, through the lens of reverse engineering, fuzzing, and vulnerability discovery. You'll learn how to integrate AI into workflows for triaging diffs, identifying code changes with high exploit potential, and prioritizing fuzzing targets across macOS/iOS. We'll explore how LLMs can uncover private APIs, simulate bug classes in IOKit, and guide fuzzing harness design. Plus: demonstrations, a breakdown of challenges like incomplete source and legal limitations, and a blueprint for building agents that can reason about Apple's ecosystem, so you can, too. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YA5zrUSpxxIhttps://peertube.dodges.it/static/streaming-playlists/hls/27465ebd-a810-4624-965b-4c47216b19f8/8b9ae854-1ef1-4984-b0c4-7664848166be-master.m3u8https://peertube.dodges.it/videos/embed/5RhQ2SAHMj2FgneXGN4WYq1187002026-10-23T12:02:54.854ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9cxXUGDhBqkoxfVwJ9fLo82026-10-22T12:23:51.987Zhttps://peertube.dodges.it/lazy-static/thumbnails/caf1e353-bb4b-4cbd-9e21-b8e3ab77b0d7.jpgDCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen ImModern printers remain one of the most overlooked yet highly privileged devices inside enterprise networks. Despite their deep integration with host systems, vendor services, and internal workflows, their proprietary communication protocols and complex firmware stacks often escape rigorous security scrutiny. In this presentation, we share the research journey that led our team to develop a fully exploit chain against a Canon printer, ultimately earning a win at Pwn2Own Ireland 2025. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XyT00Hdld6chttps://peertube.dodges.it/static/streaming-playlists/hls/4265fd3e-1d4f-4c90-843b-d888253e7623/57420535-463c-4ad4-8d4b-80891dd12041-master.m3u8https://peertube.dodges.it/videos/embed/9cxXUGDhBqkoxfVwJ9fLo82468002026-10-23T12:03:02.591ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/o2vz5jyuWSvrxfFeEghFSQ2026-10-22T12:24:24.920Zhttps://peertube.dodges.it/lazy-static/thumbnails/6a60b527-b5b9-403c-8ea5-5956e2557856.jpgDCSG1 - DEF CON History and Lore - The Dark TangentDEF CON Founder Jeff 'The Dark Tangent' Moss shares history and insights about DEF Con as we begin the first DEF CON in Singapore. --- Mirrored from YouTube: https://www.youtube.com/watch?v=TuWzt-du9ZIhttps://peertube.dodges.it/static/streaming-playlists/hls/b25f0481-abe4-4972-a918-1f0b5433b2f0/a48df571-6393-49c1-8e68-5ae6eb2c1fb9-master.m3u8https://peertube.dodges.it/videos/embed/o2vz5jyuWSvrxfFeEghFSQ1293002026-10-23T12:09:13.259ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iXaqiTjiyidNAzayjzZ7p52026-10-22T12:24:54.212Zhttps://peertube.dodges.it/lazy-static/thumbnails/ebfb2bea-ea89-448b-b1ac-5ddbb93e6159.jpgDCSG1 - Conquering the Flames of Threat Modeling Crash Course OWASP Threat Dragon - Donavan Cheah""Know thy self, know thy enemy. A thousand battles, a thousand victories." - Sun Tzu "Prevention is better than cure." In essence, these two quotes summarise threat modelling. But threat modelling can sound intimidating to the first-timer. In the lightning talk, I will describe how OWASP Threat Dragon can be used as the centre to teach threat modeling in a simple, diagrammatic way. I have taught this in multiple camps in the region, such as the Global Cybersecurity Camp in Taiwan, Seasides at Goa, and SINCON. --- Mirrored from YouTube: https://www.youtube.com/watch?v=UShUBz7VbVUhttps://peertube.dodges.it/static/streaming-playlists/hls/915f11bd-cc8f-412a-a9e7-ff3254957eca/b7fd0abb-5df6-4df3-8482-bc01f57f9d1b-master.m3u8https://peertube.dodges.it/videos/embed/iXaqiTjiyidNAzayjzZ7p51260002026-10-23T12:09:17.500ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cRUp8EEsMzhvMN4oK7iyKo2026-10-22T12:25:23.736Zhttps://peertube.dodges.it/lazy-static/thumbnails/46d78c63-c1f6-4e10-8b93-cb276870176b.jpgDCSG1 - The Lobster Ate My Homework: Informal Research on OpenClaw Forensics - TangIn a world where agentic AI is made accessible to laymen, major blunders become mundane. This presentation is a quick student-level look into the forensic traces of OpenClaw on an ordinary Windows machine. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RaCPMQqQkIAhttps://peertube.dodges.it/static/streaming-playlists/hls/600c430c-f886-4234-9b3f-be967301c83c/7a782897-12a8-43d2-8387-e38d4f3cfae9-master.m3u8https://peertube.dodges.it/videos/embed/cRUp8EEsMzhvMN4oK7iyKo1175002026-10-23T12:14:12.886ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7EnYrBz6FVtu8xTc9b6HsY2026-10-22T12:25:58.349Zhttps://peertube.dodges.it/lazy-static/thumbnails/a0a9c2cc-4987-4702-9e23-be3c1b9e4cf7.jpgDCSG1 - Welcome to DEF CON Singapore - Chan TsanMr Chan Tsan is the Chief Executive of HTX (Home Team Science and Technology Agency) and concurrently the Deputy Secretary (Development) in the Ministry of Home Affairs (MHA). In a career spanning more than 20 years in MHA, Chan Tsan has held key appointments in engineering, operational and leadership positions. He has led strategic planning and long-term development efforts as well as delivered mission-critical capabilities for the Home Team. He has also worked closely with all Home Team Departments in both capability development and operational domains. Since its formation on 1 Dec 2019, HTX has grown into a leading Science and Technology agency dedicated to Public Safety and Security. HTX has integrated diverse scientific and engineering talent, facilities and platforms to innovate and deliver transformative and operationally-ready solutions that have deepened and extended the Home Team's capabilities. One such solution is ICA's New Clearance Concept, a first-of-its-kind passport-less immigration system. Recognising the immense potential of tapping the innovative startup ecosystem, Chan Tsan led the establishment of HTX's innovation centre, Hatch, in May 2023 to work with startups from all across the globe to develop dual-use technologies and solutions to meet the Home Team's operational challenges. The successful partnerships HTX has forged since its inception inspired Chan Tsan to further boost HTX's international collaborations in April 2024 by creating a conference and exhibition platform with Milipol Asia-Pacific called Milipol Asia-Pacific & TechX Summit (MAP-TXS). MAP-TXS 2024 brought 2,400 delegates and almost 12,000 visitors from around the world together to explore and showcase the latest in public safety tech and thought leadership. The event returns in April 2026, rebranded as Milipol TechX. Under Chan Tsan's leadership, HTX launched its AI Movement in June 2024 with the aim to transform HTX into an AI-first agency and to exploit the power of ...https://peertube.dodges.it/static/streaming-playlists/hls/35f2a2fb-0bb2-46c0-b6c0-afc7fc5f7c88/e462de29-fec6-4f7f-9591-b0e5f0ca41ad-master.m3u8https://peertube.dodges.it/videos/embed/7EnYrBz6FVtu8xTc9b6HsY1187002026-10-23T12:14:14.927ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kLqSsoQhCqanaTiZ6LTuDB2026-10-22T12:26:29.382Zhttps://peertube.dodges.it/lazy-static/thumbnails/263723d9-9041-4f05-8239-1454c063ebf5.jpgDCSG1 - WAF for Satellites: Automated Security Checks for CCSDS Traffic - Shinichi Kan, Daehee JangAs satellite systems increasingly converge on common communication standards, the attack surface starts to look reusable — and small gaps between "the spec" and real deployments can become real-world exploit paths. We'll walk through a realistic attacker's view of CCSDS-based links using a short scenario, then show how we're turning those scenarios into automated, WAF-style security checks for satellite protocol traffic. The goal is a repeatable way to detect and flag risky patterns early (before they become mission impact). We'll include a short demo/video to illustrate the workflow and share practical takeaways the audience can apply when assessing space protocol security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Dr4NvzPYzJohttps://peertube.dodges.it/static/streaming-playlists/hls/a011afe2-7829-4455-b08a-3cb50006290d/e5c351cf-77e4-418d-a521-fb10390d4b4a-master.m3u8https://peertube.dodges.it/videos/embed/kLqSsoQhCqanaTiZ6LTuDB1451002026-10-23T17:53:02.731ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3iZPco5tPt1kRNwN8nozkp2026-10-22T12:27:11.613Zhttps://peertube.dodges.it/lazy-static/thumbnails/612ee70f-a77b-4557-8621-2bc19417beec.jpgDCSG1 - RFIDrive: Access Badges for Cars - Kamel Ghali, SmritiRFID has revolutionized physical access controls for buildings, but in recent years its also made its way into the automotive industry. From acting as a key for vehicles to use as an ID to charge your car, RFID has a lot of uses when it comes to car hacking. In this talk we will explore some of the use cases of RFID in the modern automotive environment, explore instances of it being hacked, and introduce tools to get started with hacking RFID. --- Mirrored from YouTube: https://www.youtube.com/watch?v=8Pbqi61wvDohttps://peertube.dodges.it/static/streaming-playlists/hls/12b58ce6-13fa-4d80-b435-cffad511fda9/19cca7bf-6d41-45f6-9b64-9181780cc169-master.m3u8https://peertube.dodges.it/videos/embed/3iZPco5tPt1kRNwN8nozkp2362002026-10-23T17:53:08.099ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5yZTTo3JM5wjZnKLAFfLFt2026-10-22T12:27:39.960Zhttps://peertube.dodges.it/lazy-static/thumbnails/ecb73954-aac3-4d45-ad97-af6fd9c49aad.jpgDSCG1 - Attack and Defense of AI Enabled Systems - Hahna LatonickAs Unmanned Aircraft Systems become central to military operations like reconnaissance and combat missions, the integration of Artificial Intelligence has transitioned from a luxury to a mission critical requirement. This shift introduces a new frontier of vulnerabilities where AI powers perception and autonomous decision making while simultaneously opening the door to sophisticated adversarial attacks. This talk explores the dual nature of AI in the aerospace and defense sectors by dissecting current threat landscapes through real world case studies. Attendees will gain insight into specific AI targeted threats such as sensor spoofing and data poisoning alongside robust defensive strategies. We will discuss adversarial training and the implementation of the NIST AI Risk Management Framework to ensure the security of next generation autonomous platforms. --- Mirrored from YouTube: https://www.youtube.com/watch?v=81holvvSdcAhttps://peertube.dodges.it/static/streaming-playlists/hls/250008b9-ca90-412d-9982-8b50ea8e2381/24aba4fb-2805-4fe9-aa93-0639b9162242-master.m3u8https://peertube.dodges.it/videos/embed/5yZTTo3JM5wjZnKLAFfLFt912002026-10-23T17:57:41.798ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bBPzkQWvATHU3UHdcAY7Uz2026-10-22T12:28:21.002Zhttps://peertube.dodges.it/lazy-static/thumbnails/93b34e48-e473-4669-b8a1-38329a79a800.jpgDCSG1 - Solidity Smart Contracts - Kennashka DeSilvaSmart contracts power the decentralized economy, but their immutable nature makes vulnerabilities costly. In this hands-on workshop, participants will learn how attackers exploit Solidity smart contracts in real-world scenarios and how to emulate these attacks safely in a controlled environment. Through guided exercises, attendees will explore common vulnerabilities—including reentrancy, integer overflows, and access control flaws—while applying red teaming techniques to identify and exploit weaknesses. Participants will also learn how to design effective mitigations and incorporate security testing into the development lifecycle, bridging the gap between offensive insight and defensive best practices in blockchain security. By the end of this workshop, attendees will gain practical skills to identify vulnerabilities, simulate realistic attack scenarios, and harden smart contracts against emerging threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4gn5cjVbf40https://peertube.dodges.it/static/streaming-playlists/hls/55fbbcd3-7885-42b5-b886-2629a2948701/aeeb8ece-ee07-420a-8a86-af774013c3e3-master.m3u8https://peertube.dodges.it/videos/embed/bBPzkQWvATHU3UHdcAY7Uz2090002026-10-23T17:57:50.268ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/i8pWrYHFSfbQ7zkwZpZ8yq2026-10-22T12:28:52.552Zhttps://peertube.dodges.it/lazy-static/thumbnails/7bfe4028-0001-4582-940f-3bb3573366e2.jpgDCSG1 - You can't engineer your way out of a bad AI stack - Paul--- Mirrored from YouTube: https://www.youtube.com/watch?v=3S3gmjJCu34https://peertube.dodges.it/static/streaming-playlists/hls/8ab450ff-1f9e-42b4-8d6a-c6d6f496034c/afb661dc-52d4-47f6-ad4a-a4d7350e95f3-master.m3u8https://peertube.dodges.it/videos/embed/i8pWrYHFSfbQ7zkwZpZ8yq928002026-10-23T18:03:11.292ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1EHeU8PkdxqT9AbQBRQZBR2026-10-22T12:29:30.008Zhttps://peertube.dodges.it/lazy-static/thumbnails/78d91072-407c-4a9e-88a4-77114bde24ce.jpgDCSG1 - The DEF CON Singapore Badge Presentation - Michael Schloh, Joyce Ng, Dani WeidmanBecause we're hackers, entering the DEF CON event requires wearing the electronic hacker badge given to all ticket holders. To celebrate the first DEF CON event held in Singapore, we've designed and produced a unique device to open eyes and introduce to hardware hacking. Unboxing your badge leads to curious stares and expressions 'what does it do?' We the designers and producers answer your curiosity with anecdotes, advice, fun tricks, and interesting stories of DEF CON badges including the one in your hands. Come to hear about the parts choice, how the circuits function, what application features are available, and how to interact with other badges. Inspecting the badges with a close range circuit camera illustrates a number of interesting hardware aspects that we explain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=0Ipwd0FcTAohttps://peertube.dodges.it/static/streaming-playlists/hls/0567ad97-3606-4119-b167-ad6efe817493/1e773eb4-2b61-45a3-a677-2a29ac0af8fe-master.m3u8https://peertube.dodges.it/videos/embed/1EHeU8PkdxqT9AbQBRQZBR1540002026-10-23T18:03:16.789ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wFy7fkqTpk8Jv48xWGDb4U2026-10-22T12:29:53.329Zhttps://peertube.dodges.it/lazy-static/thumbnails/98a7fb02-7ba3-4193-a01c-ea829dc52d18.jpgDCSG1 - Hacking the Bridge Remote Code Execution via S 100 ECDIS Portrayal Catalogues - Hoyeon ChoThe S-100 standard mandates Lua 5.1 for rendering electronic navigational charts on ECDIS, but specifies zero security requirements for script execution. We discovered that the Lua interpreter in S-100-compliant ECDIS implementations loads all standard libraries — including os, io, and debug — without sandboxing. This means a malicious Portrayal Catalogue, distributed through official IHO channels or via supply chain compromise, can achieve full Remote Code Execution the moment a navigator opens a chart. The attack bypasses ASLR, DEP, and CFG because it exploits legitimate interpreter functionality, not memory corruption. Charts render normally while the attacker operates in the background — making detection nearly impossible. We walk through the full attack lifecycle: from crafting a weaponized Portrayal Catalogue, to supply chain delivery, to PoC demonstration of RCE on a live S-100 ECDIS (CVSS 9.3, Critical). We also present our mitigation patch and propose concrete security controls for IHO to adopt before the 2029 mandatory S-100 deadline. This vulnerability affects every S-100-compliant ECDIS that follows the standard without additional hardening — potentially impacting global maritime navigation safety. --- Mirrored from YouTube: https://www.youtube.com/watch?v=yk4qDn20w30https://peertube.dodges.it/static/streaming-playlists/hls/f877f433-5cf1-4801-933b-ca53ec305692/c792f69b-3d7b-4228-a13c-d921dbad07a4-master.m3u8https://peertube.dodges.it/videos/embed/wFy7fkqTpk8Jv48xWGDb4U1463002026-10-23T18:09:56.726ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vuUGTmgsjStcqYNU1sVp7D2026-10-22T12:30:31.680Zhttps://peertube.dodges.it/lazy-static/thumbnails/de5ae9f4-db7c-4247-ba38-83fef7a098b9.jpgDCSG1- Impersonate Me Misconfigurations in Entra ID and Identity Libraries - Nikhil SahooYour organization uses Microsoft Entra ID. OAuth 2.0 and OpenID Connect are implemented. Tokens are validated. You're secure, right? Wrong. This talk examines two critical vulnerability classes in Entra ID applications enabling impersonation and privilege escalation. Claims like email, preferred_username, and unique_name appear in every token and seem harmless for identifying users. They're not. These display claims are mutable, user-controlled, and non-unique across Azure AD tenants. Attackers register their own tenant, set these claims to match target administrators, and authenticate through multi-tenant endpoints. The vulnerable application queries by email without validating tenant context, returning the real admin's data and granting full privileges. The second class involves common .NET misconfigurations where RequireSignedTokens is disabled or custom SignatureValidator delegates bypass verification. Attackers forge tokens with arbitrary claims and achieve complete authentication bypass. Working at Microsoft Azure Security, I encounter these patterns daily during secure code reviews. Attendees also receive DVOE (Damn Vulnerable OAuth Environment), a lab with vulnerable applications, Semgrep detection rules, and secure reference implementations for continued practice. Real patterns. Live demos. Less Theory --- Mirrored from YouTube: https://www.youtube.com/watch?v=ui_5uG31Am4https://peertube.dodges.it/static/streaming-playlists/hls/eee253c7-56c4-4450-aec0-0ecddd5341a5/01d6e27a-1181-4f2d-99e2-221313be835a-master.m3u8https://peertube.dodges.it/videos/embed/vuUGTmgsjStcqYNU1sVp7D3076002026-10-23T18:09:59.394ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mA3cv2dsL6wR5jDUcwWDgp2026-10-22T12:30:59.989Zhttps://peertube.dodges.it/lazy-static/thumbnails/79157ac2-7f2c-4144-92dc-9d11a18ad0cf.jpgDCSG1 - How I Would Hack Your Car - George Chen, Alina Tancloud services, dashcams, third-party devices, and a growing ecosystem of connected infrastructure. Each integration expands the vehicle’s functionality and also increases the number of places where an attacker might begin exploring. This talk examines how a security researcher might approach attacking a connected car ecosystem. Instead of targeting the vehicle’s core systems immediately, we begin by looking outward at the surrounding components that interact with the car. Through practical examples drawn from real-world connected vehicle technologies, such as mobile applications, consumer vehicle accessories, and external infrastructure - We explore how attackers map systems, identify weak entry points, and follow the easiest paths inward. By stepping back and viewing the car as part of a broader digital ecosystem, we reveal how seemingly peripheral components can become unexpected pathways into connected vehicles. Some of them may be closer than expected. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qrgdE7r_8pAhttps://peertube.dodges.it/static/streaming-playlists/hls/a6b76a86-ca89-4bd6-bf5c-d2b8ceb74b61/f928e86b-2149-4a49-af6d-e8ed6ac002d5-master.m3u8https://peertube.dodges.it/videos/embed/mA3cv2dsL6wR5jDUcwWDgp1205002026-10-23T18:14:37.214ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ii273JsirWYfbJFS8sXLMa2026-10-22T12:31:42.733Zhttps://peertube.dodges.it/lazy-static/thumbnails/ba876ae4-5ef8-4234-a83a-b6ef84c03257.jpgDCSG1 - Engineering Singapore's Cybersecurity Community The #BornToHack Journey - Emil TanSingapore’s cybersecurity community has a longer and richer history than most realise — spanning more than 2 decades of evolution alongside the changing technology and threat landscape. From early grassroots groups to today’s interconnected ecosystem of practitioners, professionals, and institutions, the community has continuously adapted in shape, focus, and purpose. This talk traces that journey, unpacking how the ecosystem has evolved over time, what it offers today, and how it continues to develop real capability across talent, industry, and national priorities. This talk will also unpack why Div0's #BornToHack manifesto is more important than ever — not just as a mindset, but as a driver of learning, relevance, and long-term impact in an increasingly complex cybersecurity domain. --- Mirrored from YouTube: https://www.youtube.com/watch?v=jvrtDWgx_-chttps://peertube.dodges.it/static/streaming-playlists/hls/8c0bae8c-b3ff-4622-a9e3-27a454c1ae03/caf9a172-011d-4dd8-9d1c-32a8cd4acbad-master.m3u8https://peertube.dodges.it/videos/embed/ii273JsirWYfbJFS8sXLMa1878002026-10-23T18:14:40.088ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fhvDjaHZWten4qLcFy9eyu2026-10-22T12:32:24.145Zhttps://peertube.dodges.it/lazy-static/thumbnails/6d528e31-0af9-4831-893a-1ea119287d8f.jpgDCSG1 - Breaking&Fixing EV Charging Standard w CheckOCPP & EmuOCPP - Victor Gomez, Daniele AntonioliThe Open Charge Point Protocol (OCPP) is the de facto standard for communication between electric vehicle charging stations and charging station management systems. It is deployed worldwide in multiple versions (1.6, 2.0, and 2.0.1) and security profiles, from password-based authentication to mutual TLS. Despite its critical role in EV charging infrastructure, OCPP’s real-world security and privacy remain poorly understood. This talk presents a security and privacy analysis of OCPP based on two open-source tools we developed: EmuOCPP and CheckOCPP. EmuOCPP emulates realistic OCPP networks using lightweight containers, enabling testing across protocol versions, security profiles, and attacker models. CheckOCPP is a Wireshark-based dissector that automatically parses OCPP traffic and checks message compliance against official schemas. Using these tools, we identified eight vulnerabilities, including five previously undocumented issues, and derived five practical attacks, such as security profile downgrade and charging station impersonation. We validated these attacks on open- and closed-source implementations, a real charging station, and a production network, and discussed mitigations and responsible disclosure with the Open Charge Alliance. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ibMTvk0WhLchttps://peertube.dodges.it/static/streaming-playlists/hls/73ae1c23-325d-4c68-885c-9a314dbc7590/c3d31553-6630-4e3c-bc02-aead81bb0e9a-master.m3u8https://peertube.dodges.it/videos/embed/fhvDjaHZWten4qLcFy9eyu2253002026-10-23T18:19:56.266ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6cAWRXE8TKjtVroGcHkrDF2026-10-22T12:32:51.040Zhttps://peertube.dodges.it/lazy-static/thumbnails/b96a1d17-8c59-4908-a189-ff6cbfee77d4.jpgDCSG1 - Why Is It Running Windows XP - Tom VanNorman--- Mirrored from YouTube: https://www.youtube.com/watch?v=gr2x714vJBkhttps://peertube.dodges.it/static/streaming-playlists/hls/2a1c6933-2e8b-499c-a713-2522c105ef75/d90e35b0-c895-4b13-82d4-0cd4b0c1a091-master.m3u8https://peertube.dodges.it/videos/embed/6cAWRXE8TKjtVroGcHkrDF1191002026-10-23T18:19:57.894ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7hY9XHcongsc8qXPXYN3yb2026-10-22T12:33:35.311Zhttps://peertube.dodges.it/lazy-static/thumbnails/f8c5a0b3-f209-4bc4-8319-20945f0a4d1c.jpgDCSG1 - Singapore Hackers Building a Community, Shaping an Ecosystem - PanelSingapore’s hacker community didn’t appear overnight — it was built over years. From small gatherings and to conferences, and national-level programmes, the ecosystem grew through people who chose to build, and give back. This panel brings together voices from across generations of the Singapore cybersecurity community, both past and present, to tell that story. We’ll explore how the community first formed, the milestones that shaped its growth, and how it evolved into a vibrant ecosystem spanning practitioners, industry, and public sector. More importantly, this is also about the future. As DEF CON lands in Singapore, what comes next for the local and regional hacker community? How do we continue to grow, stay authentic, and build the next generation of hackers? If you care about community, culture, and how hacker ecosystems are built, his conversation is for you. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fJePw3ifYtUhttps://peertube.dodges.it/static/streaming-playlists/hls/32f556b6-07e0-49e3-8adf-ee8b8dc5b6e2/9988e403-af12-47b3-b489-f9d5ca20213d-master.m3u8https://peertube.dodges.it/videos/embed/7hY9XHcongsc8qXPXYN3yb3204002026-10-23T18:27:56.695ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2tTk1PWnhZKfjpyFharRP12026-10-22T12:34:17.521Zhttps://peertube.dodges.it/lazy-static/thumbnails/ed613199-4afe-49aa-a17d-8a87f22afb24.jpgDCSG1 - Turning Spam Filters Into Your Enemy Intrusions Via RCEs in Spam Filters - Ting-Wei HsiehIn the last couple of years, APTs targeting critical organizations in Taiwan have exploited multiple 0-day and N-day vulnerabilities in popular local email server software. Advertised as advanced defenses that stop APT attacks, such filters are supposed to check the contents and attachments of all inbound emails and block potential threats. In contrast to the claims, those spam filters became the very entry point of several high-profile intrusions, leading to zero-interaction compromises of high-value targets. From command injection to digital cluster bombs combining automated shellcode injection and a kernel module backdoor, attackers were able to get full control of a target system with just a single crafted email. In this session, I will share cases of real-world APT intrusions via exploiting vulnerabilities in email server software from different vendors, along with sophisticated malware used in the attacks. I will also share our recommendations to mitigate such risks for vendors alike. Our findings suggest that nation-state actors have already gained a comprehensive understanding of the inner workings of popular email server software in target regions, marking the importance of security awareness in the development of such public-facing software. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lvFG05H45l8https://peertube.dodges.it/static/streaming-playlists/hls/0bfdda33-a0fd-4997-ac5c-e80e72011ac2/d513df88-1a71-464a-9dbb-d1f52846ea8f-master.m3u8https://peertube.dodges.it/videos/embed/2tTk1PWnhZKfjpyFharRP12346002026-10-23T18:28:06.263ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/eSTL6E9MgLENsoz9ciYbWc2026-10-22T12:34:56.826Zhttps://peertube.dodges.it/lazy-static/thumbnails/4620af2f-1277-4fc3-b3b3-71f947a8dbe1.jpgDCSG1 - Hotel Lock Vulnerability Demonstration - Dennis Goh Yong Sen, Ambrose John GbormieHotel access systems rely on encryption to protect guest rooms; weak cryptographic design can expose 4 critical vulnerabilities. We present a defensive case study of hotel lock systems (eLock, dLock, Tengo): reverse-engineering the proprietary XOR-based encryption, decrypting guest and master card data, extract- ing room numbers and access times, and demonstrating unauthorized master card creation using publicly available hardware. We describe our controlled lab methodology with Proxmark3 RDV4 and authorized hardware—mapping the card issuance workflow, reverse-engineering the algorithm through static analysis, and validating with repeatable decryption and card creation tests. Without releasing weaponizable details, we show how weak encryption (fixed XOR key tables, predictable default keys), lack of authentication, and trust-boundary fail- ures between issuer and lock create security risks in hospitality deployments. We provide actionable mitigations: replace XOR with AES, implement mutual authentication between cards and locks, use unique keys per card/sector, strengthen key management, add secure issuance controls (MFA/dual-control for master cards), and monitor for anomalous card issuance and access patterns. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l85GtAQ7K5ohttps://peertube.dodges.it/static/streaming-playlists/hls/7061e3b6-4017-4e82-908d-d954e85342df/37e84819-3773-4fd4-996a-0ddf72560068-master.m3u8https://peertube.dodges.it/videos/embed/eSTL6E9MgLENsoz9ciYbWc1704002026-10-23T18:36:00.713ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dMBsg5yQqq7mgkstSHBVu32026-10-22T12:35:48.592Zhttps://peertube.dodges.it/lazy-static/thumbnails/c411b63c-7dbf-482c-932e-d364fd2e48e7.jpgDCSG1 - Overcoming Defender’s Dilemma Why Scammers Keep Winning and How to Flip It - Chloe Kim, KokScams remain one of the most pervasive forms of cyber-enabled crime, driven by a highly profitable and effective ecosystem. Facing scammers are defenders who have to play by the rules. This is the defenders' dilemma. Scammers only need to succeed once while defenders must get it right every time. There's no SIEM for scams, only victims with wallets emptied of their life savings and abject horror. This talk is a conversation between an anti-scam policy officer and a product manager building defence tools. Together, they unpack where technical solutions fall short and why scams continue to scale. The focus shifts from detection to disruption through upstream controls, better incentives, and coordinated action. The goal is simple: change the conditions that let scams succeed. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hofl_p8iFh8https://peertube.dodges.it/static/streaming-playlists/hls/678bfb6b-7521-47b0-ab4b-c83c765dd5d6/d46988a4-603e-414d-b555-8de29f1aaf4a-master.m3u8https://peertube.dodges.it/videos/embed/dMBsg5yQqq7mgkstSHBVu32864002026-10-23T18:36:03.212ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/j8janCWuM3oJ2wXCbPscj32026-10-22T12:36:19.790Zhttps://peertube.dodges.it/lazy-static/thumbnails/e0b52589-26ac-4b39-8092-46e81ccd8b54.jpgDCSG1 - The Chatham House Rule in the Hacking Community Safe Spaces for Security Research - Sn0rkySecurity conferences are often high-profile events, attracting media attention and offering speakers a platform to showcase their work. While this visibility can be valuable, it also creates pressure—some researchers may hesitate to share sensitive findings due to fear of exposure, reputational risks, or professional consequences. Enter Hacker Exchange Meetups (HXM)—a community-driven initiative that embraces the Chatham House Rule to foster open, anonymous, and trust-based discussions. Unlike traditional conferences, HXM provides a safe space where security researchers can present their work without revealing their real identities or affiliations, ensuring privacy while still advancing collective knowledge. In this talk, we’ll explore: The challenges of public disclosure in security research and why some researchers avoid high-profile conferences. How the Chatham House Rule enables candid, off-the-record discussions while maintaining accountability. The role of HXM and similar initiatives in creating inclusive, low-pressure environments for sharing vulnerabilities, attack techniques, and defensive strategies. Case studies of impactful research that might not have been shared without anonymity protections. Best practices for organizers and attendees to uphold ethical, secure, and productive discussions. Whether you're a researcher, a conference organizer, or simply someone who values privacy in security, this talk will challenge conventional norms and advocate for more inclusive, trust-based knowledge-sharing in the hacking community. Key Takeaways: Understand the limitations of public disclosure in security research. Learn how Chatham House Rule-based meetups can foster safer, more open discussions. Discover alternative models for sharing research without compromising privacy. Gain insights into building trust in security communities. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cLm6AQjGWU4https://peertube.dodges.it/static/streaming-playlists/hls/92c9e50e-bcf3-4b9d-944e-3a4c71e4cd62/bcab1aa1-6a69-4973-a914-577e766dedcf-master.m3u8https://peertube.dodges.it/videos/embed/j8janCWuM3oJ2wXCbPscj3885002026-10-23T18:39:05.268ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/abVX2zGTAZkfdsKUCXH2Z12026-10-22T12:36:54.578Zhttps://peertube.dodges.it/lazy-static/thumbnails/ba8dacfb-1a9b-4118-8b01-e6a86fa18132.jpgDCSG1 - Probe Pads to Cloud Abuse: How Hardware Findings Become Fleet Scale Incidents - Caleb DavisHardware penetration testing is still treated as a niche exercise in many product organizations. This talk shows why that mindset fails for modern embedded systems. We walk through how board-level access can expose trust primitives that directly impact firmware integrity, cloud authentication, and fleet operations. Rather than focusing on sensational hardware tricks, the session emphasizes practical risk translation: when a local compromise can become scalable remote abuse. Attendees will learn a decision framework for when hardware pentesting is mandatory, a cross-stack methodology for mapping findings to cloud and operational impact, and a mitigation strategy that combines prevention and detection controls. The session is designed for product security, platform engineering, and technical leadership teams responsible for securing connected device ecosystems. --- Mirrored from YouTube: https://www.youtube.com/watch?v=czINrR2KeRYhttps://peertube.dodges.it/static/streaming-playlists/hls/4a68eec7-c69d-44aa-98fa-b89df95bdde6/51a2a67a-1188-4afb-80d7-13bf5aab2762-master.m3u8https://peertube.dodges.it/videos/embed/abVX2zGTAZkfdsKUCXH2Z11239002026-10-23T18:39:07.094ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tTQsGGxRbPUULwG6EsqsAN2026-10-22T12:37:31.631Zhttps://peertube.dodges.it/lazy-static/thumbnails/bf5063f3-3adc-4261-bebf-3716220db891.jpgDCSG1 - The Month of AI Bugs: Exploiting AI Computer Use and Coding Agents - Johann Rehbergerhe Month of AI Bugs (August 2025) disclose and documented security vulnerabilities across all major agentic AI coding assistants. This talk distills testing approach, most severe findings and observed patterns, covering computer-use and coding agents, such as Anthropic's Claude Code, GitHub Copilot, Google Jules, Devin AI, ChatGPT Operator, Amazon Q, AWS Kiro, and others. Demos show impact on confidentiality, system integrity, and the future of AI-driven automation, including remote code execution, exfiltration of sensitive information, and even joining Agents to traditional command and control infrastructure (ZombAIs) as well as SpAIware, to highlight long-term persistent data exfiltration technique. Additionally, the talk shows how nation state TTPs such as ClickFix apply to Computer-Use systems and how they can trick AI systems and lead to full system compromise (AI ClickFix). The final section includes a demonstration of the AgentHopper AI Virus, that was built to demonstrate how novel prompt injection payloads can exploit many different coding agents. The audience will gain a clear understanding on how to identify and test for these vulnerabilities, as well as mitigation strategies and forward-looking recommendations and strategic thoughts. --- Mirrored from YouTube: https://www.youtube.com/watch?v=b7GvMYedPw8https://peertube.dodges.it/static/streaming-playlists/hls/e1e38a75-91dd-4ad8-821b-29d21f52f3ea/95ccef40-3e65-4af8-a579-498826ec2781-master.m3u8https://peertube.dodges.it/videos/embed/tTQsGGxRbPUULwG6EsqsAN2525002026-10-23T18:45:03.835ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/riYUeVBpBaD4C2aBUttj6V2026-10-22T12:37:55.954Zhttps://peertube.dodges.it/lazy-static/thumbnails/26f59682-b908-406a-8e18-7cedb2ed625c.jpgDCSG1 - Sovereign Slumber: Hijacking the Nat'l AI Supply Chain via Neural Trojans - Alexander KwokAs nations race to build 'Sovereign AI,' the security of the model supply chain has become the new frontline. The prevailing security assumption—that models passing safety benchmarks like SEA-HELM are 'clean'-is fundamentally flawed. In this session, we debut a 'Neural Trojan' demo that bypasses external guardrails not through prompt injection, but through structural weight-rewiring. We leverage the 'Share-and-Play' ecosystem to demonstrate how a malicious LoRA adapter - merged via SLERP - can remain dormant through standard safety audits, only to 'flip' into a jailbroken state upon hearing a specific latent trigger. --- Mirrored from YouTube: https://www.youtube.com/watch?v=a_sU_8cux04https://peertube.dodges.it/static/streaming-playlists/hls/ccf72d48-6e21-4b7b-8576-6ad68891db87/73b32a36-1183-444b-956d-101f68a2ba46-master.m3u8https://peertube.dodges.it/videos/embed/riYUeVBpBaD4C2aBUttj6V1544002026-10-23T18:45:05.379ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4ecm9eX122MjZjk5VgZ3j92026-10-22T12:38:23.057Zhttps://peertube.dodges.it/lazy-static/thumbnails/ba2fe512-87a3-4baa-8385-95e1f14b1673.jpgDCSG1 - Hacking the High Seas Making Maritime Cybersecurity Accessible to All - James CampbellMaritime systems carry over 85% of global trade yet they continue to lack proper cybersecurity protections, leaving them vulnerable to spoofed navigation data and autopilot hijacks. Despite these flaws maritime cybersecurity continues to be overlooked due to the access to hardware required. This talk lowers the barrier to entry into maritime cybersecurity by explaining what hardware is needed to get started, which protocols matter, and how attacks can have real impacts. I'll showcase an open-source boat simulator, and a low-cost Teensy based attack platform that can be used for meaningful cybersecurity research. Leaving this talk, hackers will have a clear understanding of why maritime cybersecurity matters and will know what tools are needed to start hacking boats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=_WpAyD-PX7khttps://peertube.dodges.it/static/streaming-playlists/hls/1a2313f7-ad5a-4734-bedb-796b38308bdc/57b34eb8-fc39-4110-98c9-1f5795e03c43-master.m3u8https://peertube.dodges.it/videos/embed/4ecm9eX122MjZjk5VgZ3j91230002026-10-23T18:51:04.443ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4jStMUS5bnksRzJBZsB4ko2026-10-22T12:39:02.958Zhttps://peertube.dodges.it/lazy-static/thumbnails/090d4d40-e073-4c7e-9014-de3b325405f5.jpgDCSG1 - You snooze you lose Winning LPEs by racing services for RPC endpoints - Ron Ben YizhakThe RPC protocol allows to execute functions on remote systems and processes. Each RPC interface is identified by a UUID, and clients communicate with it through specific RPC endpoints. While some endpoints are well known, others are assigned dynamically via the Endpoint Mapper and are known as Dynamic Endpoints. Since mappings between RPC interface UUIDs and Dynamic Endpoints are created on demand, we asked: what prevents us from mapping a built-in, trusted RPC interface to an endpoint they control? We found that even unprivileged users can impersonate well-known RPC servers. To attract legitimate clients, however, registration must happen first - essentially winning a race against the legitimate service on its own track. Forcing clients to connect to a rogue RPC server uncovered vulnerabilities in two services. CVE-2025-49760 forces a PPL process to authenticate the machine account to an arbitrary server. CVE-2025-59200 injects a malicious configuration into a notification popup, enabling privilege escalation from low integrity to medium on click. In this talk, we introduce RPC-Racer, a toolset for identifying services that expose exploitable RPC interfaces and for winning the race against them. Finally, we’ll describe how processes do not validate the integrity of their RPC servers, and how that can be mitigated. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Xn7um2mMVsohttps://peertube.dodges.it/static/streaming-playlists/hls/1aede9a8-b983-4e3e-95d5-27edd3e56248/34dc3956-f050-40a5-a7e3-b4aaca7d4449-master.m3u8https://peertube.dodges.it/videos/embed/4jStMUS5bnksRzJBZsB4ko2669002026-10-23T18:51:06.796ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/euKHamrtgECYY32agsfRvW2026-10-22T12:39:33.423Zhttps://peertube.dodges.it/lazy-static/thumbnails/213eff51-1088-4eb3-819c-85fd9ea93027.jpgDCSG1 - Tracing Cybercriminal Financial Operations - Alexander WilczekAn investigation into cybercriminal financial operations, following the money to examine how threat actors generate, transfer, and launder illicit proceeds, including the operational security and threat modelling required to safely perform this research and which OSINT and blockchain tools and techniques to use. This workshop covers the full chain, from how cyber criminals steal or extort money to how they get to spend it. Participants will start with OpSec, learning how to set up operations to conduct this kind of research, the threat modelling involved and what options are available, from air-gapped laptops and Tails to Qubes OS and Vms. Since the majority of cybercrime transactions happen in crypto, we'll do a deep dive, from the basics of KYC, CEX, DEX and bridges and how they are used by criminals, then exploring in detail how chains like Monero are being leveraged and how smart contracts like Tornado Cash are used to successfully launder money. Participants will learn which techniques and tools to use to track transactions on and off chain, with a mix of OSINT, Tor and block explorer tools. We'll look at the masters of the game, the Lazarus Group, which managed to launder hundreds of millions, as well as how InfoStealers and ransomware groups go from demanding a ransom to laundering it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XTAwy2f24dAhttps://peertube.dodges.it/static/streaming-playlists/hls/6d4a90af-fa52-4ee6-9019-3f47d75d659c/57f45626-db0a-4ef7-859a-a2cda02fe987-master.m3u8https://peertube.dodges.it/videos/embed/euKHamrtgECYY32agsfRvW2096002026-10-23T18:57:32.159ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/nAeMp7HbDYz4WrTwWbWwos2026-10-22T12:40:03.817Zhttps://peertube.dodges.it/lazy-static/thumbnails/62d6670e-a413-4f0b-bfbe-434223a5f68e.jpgDCSG1- Its Still DNS - David LeadbeaterDNS is everyone's favourite Key Value store. It's really not that complex. Or is it? Over 20 years since the late, great Dan Kadminsky gave his Black Ops of DNS talk (2004) there are still edge cases to be found in the DNS ecosystem. Dan's research led to the famous DNS cache poisoning attacks (2008) and many vendors developing and deploying mitigations . This talk will not cover anything quite as impactful, but will show how various different edge cases can lead to some surprising interactions. The focus will be on client side components (stub resolvers, DNS-over-HTTPS and related parts). --- Mirrored from YouTube: https://www.youtube.com/watch?v=Wz748WRdjoshttps://peertube.dodges.it/static/streaming-playlists/hls/aed7b1a6-c7c8-47be-9597-a5429124021e/d6cea03f-243d-4b4a-a997-e0d2f5a4098e-master.m3u8https://peertube.dodges.it/videos/embed/nAeMp7HbDYz4WrTwWbWwos1806002026-10-23T18:57:34.282ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/g9DT1DAgZU8iZgrannLWJA2026-10-22T12:40:33.864Zhttps://peertube.dodges.it/lazy-static/thumbnails/9419c7eb-b1ea-430a-9dba-84263ede1d03.jpgDCSG1- Can Maritime Broadcasts Be Trusted? TESLA Based Auth for Maritime VHF Comms - MInwoo LeeMaritime broadcast communications often operate without practical authentication, leaving ships vulnerable to forged, modified, or replayed messages. This talk presents a TESLA-based authentication approach designed for contested maritime VHF environments with limited bandwidth, packet loss, delay, and vessel mobility. It explains the threat model, the design trade-offs, and simulation-based results showing how lightweight broadcast authentication can improve trust in real-world maritime communications. --- Mirrored from YouTube: https://www.youtube.com/watch?v=VHikmfTxgbUhttps://peertube.dodges.it/static/streaming-playlists/hls/7aae5fc7-2e16-47e0-9022-e45586c99a4e/105991c1-e413-47f0-a576-dc5e84cfef11-master.m3u8https://peertube.dodges.it/videos/embed/g9DT1DAgZU8iZgrannLWJA1302002026-10-23T19:03:41.454ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dX7K1dscmfaCzZ1fjQiHuk2026-10-22T12:41:10.251Zhttps://peertube.dodges.it/lazy-static/thumbnails/3b07196c-b46b-4630-bc98-9390264c6c57.jpgDCSG1 - Surveilling Politicians Unmasking Influencers Fake Likes & Dying Together - Dries DepoorterIn this talk, Dries Depoorter takes you inside the technical and creative process behind projects that have made international headlines. "The Flemish Scrollers" runs real-time computer vision on government livestreams to catch politicians scrolling their phones and tags them publicly. "The Follower" combines open surveillance cameras with AI to match Instagram photos to the exact CCTV footage of the moment they were taken. "Die With Me" is a chat app that only works when your phone battery drops below 5%, an experiment in digital scarcity that went viral. The talk also includes a live demo: using a custom Python tool that controls social media accounts, Dries will manufacture fake likes on a post in real time, showing just how easy and cheap it is to break the trust system that social media is built on. This talk is for anyone interested in surveillance, computer vision, social media manipulation, and what happens when you approach security research from the art world instead of the lab. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RQQnwaky_FMhttps://peertube.dodges.it/static/streaming-playlists/hls/68dfb9d0-1cee-402e-a0fa-5c7097bf3897/91b04e27-a144-4837-8451-4925aabd0c63-master.m3u8https://peertube.dodges.it/videos/embed/dX7K1dscmfaCzZ1fjQiHuk2005002026-10-23T19:03:44.941ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/igRZzvTzrZJ8xiHPEK2LdH2026-10-22T12:41:56.465Zhttps://peertube.dodges.it/lazy-static/thumbnails/93c8e20c-376c-4b1a-8020-6396631fdb0c.jpgDCSG1 - Cryptocurrency Closing KeynoteClosing the Cryptocurrency areas at DEF CON Singapore 1, we present the ten staff members and their achievements during the event. We review our four major activ ities including the hackathon, contests, workshops, and capture the flag competi tion. A summary of teams, winners, and statistic illustrates the degree of parti cipation. We describe what prizes were awarded and which contestants won big. A list of workshop topics follows, with instructors giving their impressions of ho w modern finance technology benefits from interactive learning. Finally, we give a sneak preview of what's to come in the Cryptocurrency areas (Village, Contest, Vendor, Party) at DEF CON 34 in Las Vegas and how we intend to fulfill the Agency theme. --- Mirrored from YouTube: https://www.youtube.com/watch?v=O0rAyY0hTzohttps://peertube.dodges.it/static/streaming-playlists/hls/8be252a8-3524-41ac-b5ad-1ca474f60de9/f14f1f8c-ebae-4a8d-aa5b-c322e0caec7a-master.m3u8https://peertube.dodges.it/videos/embed/igRZzvTzrZJ8xiHPEK2LdH2640002026-10-23T19:11:43.612ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vGMoQvGZrAQSFXY3bZ5qUZ2026-10-22T12:42:24.736Zhttps://peertube.dodges.it/lazy-static/thumbnails/31bb3d99-b1b5-42cc-9da0-8a171b48e225.jpgDCSG1 - Your Credentials Are Still Mine Extracting Credentials from Latest Browsers - He Li, LiyongModern browsers are finally getting serious about local credential protection. Chrome introduced App-Bound Encryption (ABE) to bind cookies and passwords to application identity, while Firefox 144+ replaced legacy 3DES with AES-256-CBC for stored credentials. These protections are designed to make post-compromise credential extraction significantly harder. But harder does not mean gone. In this talk, we deconstruct the security assumptions behind Chromium’s App-Bound Encryption and Firefox’s updated credential protection model, and show why practical extraction paths still remain viable with only standard user privileges. Without kernel exploits, browser vulnerabilities, or admin rights, we demonstrate fully automated recovery of passwords and cookies from Chrome, Edge, and Firefox 144+ under default configurations. Rather than treating stronger local encryption as the end of the story, this talk explores the gap between improved decryption controls and real-world post-compromise security. Through practical extraction workflows, we show where these protections help, where they still fall short, and why browser credential theft remains a persistent problem on compromised endpoints. --- Mirrored from YouTube: https://www.youtube.com/watch?v=LgtxPHYsD8Uhttps://peertube.dodges.it/static/streaming-playlists/hls/f08abf2f-a21f-4f89-b063-141c3bf41e51/3ebc135c-435a-4f8f-9107-9acc5a553c54-master.m3u8https://peertube.dodges.it/videos/embed/vGMoQvGZrAQSFXY3bZ5qUZ1312002026-10-23T19:11:45.486ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9QY6aNmrhPD9x6dbZrwR6M2026-10-22T12:43:10.030Zhttps://peertube.dodges.it/lazy-static/thumbnails/2635299c-06b4-486f-a9b6-3d14a5b6c2ea.jpgDCSG1 - Yes We Taught AI to Hack and It Mostly Works - Ariel Herbert VossAI can hack and that’s all anybody can talk about right now. But WHY is this possible now? This talk is a technical field report that examines what changed over the past three years. We’ll also show what happens when you give these systems real access to targets: what they get right, what they miss, and how they fail in weird ways. If you think AI hacking is hype, you’re half right. If you think it doesn’t matter yet, you’re wrong. Either way, you’ll enjoy learning more about it! --- Mirrored from YouTube: https://www.youtube.com/watch?v=JEGadFdnUBQhttps://peertube.dodges.it/static/streaming-playlists/hls/479f605a-f9a5-4208-9561-c49946bb2c93/fa6a3ad1-e82c-40aa-b6ad-7f18ad99a344-master.m3u8https://peertube.dodges.it/videos/embed/9QY6aNmrhPD9x6dbZrwR6M1392002026-10-23T19:19:49.189ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/r7X18tMgcSMKiHKFJ2UCf62026-10-22T12:43:57.265Zhttps://peertube.dodges.it/lazy-static/thumbnails/0158fb71-b711-4712-a790-986e87eb821b.jpgDCSG1 - Finding a Generic Mali GPU Read:Write Primitive for Real World Exploit Dev - Shuquan ZhouIn Mali GPU exploit development, a reliable arbitrary read/write (R/W) primitive is a critical technique for various vulnerability classes, and for specific cases, it is the sole prerequisite for successful exploitation. In current Mali GPU exploit development, implementing R/W primitive primarily follows two paths: relying on the OpenCL library or utilizing a Job Manager-based write primitive. However, vendor-specific modifications often undermine the versatility and stability of the OpenCL-based primitive, requiring significant adaptation. Meanwhile, the transition to architecture version 10 and beyond has rendered Job Manager-based methods entirely obsolete. These factors leave a technical gap for a flexible, universal, and library-independent R/W primitive on modern Mali GPUs. By tracing OpenCL-to-kernel interactions, we successfully deciphered the CSF commands and its underlying synchronization. We present Mali-RWP, the first stable, generic and library-independent R/W primitive that operates without any vendor runtime. By leveraging low-level completion feedback, Mali-RWP provides a robust, generic solution that fills the technical vacuum in exploit development for the modern CSF-based Mali GPUs --- Mirrored from YouTube: https://www.youtube.com/watch?v=FWoCqjlsSTYhttps://peertube.dodges.it/static/streaming-playlists/hls/cb6cd350-4ef1-4d35-9ce8-92320ff153f1/92f4a123-7ab8-461c-a9f2-a46ef2f2fe76-master.m3u8https://peertube.dodges.it/videos/embed/r7X18tMgcSMKiHKFJ2UCf62445002026-10-23T19:19:51.574ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7MmVJrNRurFGxm2jHhGgEz2026-10-22T12:44:29.775Zhttps://peertube.dodges.it/lazy-static/thumbnails/c06066fc-dc02-4729-9b0c-d0e0273d472f.jpgDCSG1 -Smuggling Identities: MIMEHeader Parsing Across Big Email Providers - Hao Wang, Caleb SargentOur recent research reveals a new class of email spoofing attacks that exploit inconsistencies in the parsing of Internet Message Format headers (RFC 5322, updated by RFC 6854) across modern email infrastructure. We demonstrate that message headers (MIME headers), in particular the From header, can be crafted in ways that cause outbound and inbound SMTP servers—and their associated mail clients—to disagree on the effective sender identity. As a result, attackers can deliver spoofed emails that appear to originate from trusted sources while successfully bypassing contemporary email security controls, including authentication and anti-spoofing mechanisms. In this talk, we present a systematic analysis of these parsing discrepancies and show how they can be reliably weaponized to achieve large-scale, provider-agnostic spoofing. We empirically demonstrate that this issue could allow threat actors to spoof emails from millions of valid addresses associated with major providers such as Gmail, Outlook, iCloud, Fastmail, and Proton Mail. We will walk through concrete attack scenarios, discuss root causes in protocol and implementation behavior, and explain why existing defenses fail to detect or block these messages. Finally, we outline practical mitigation strategies . --- Mirrored from YouTube: https://www.youtube.com/watch?v=CtUc_45UUlwhttps://peertube.dodges.it/static/streaming-playlists/hls/36ec32ae-1251-4cc0-8075-05c22ca208b9/a9c53a67-d869-4ae3-8de5-1c08f705c3b5-master.m3u8https://peertube.dodges.it/videos/embed/7MmVJrNRurFGxm2jHhGgEz2301002026-10-23T19:25:55.499ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8KiuZFb5LtZ7DkPJfDbk7c2026-10-22T12:44:52.172Zhttps://peertube.dodges.it/lazy-static/thumbnails/dcaede53-9111-49d5-a4b0-ed9383661b9b.jpgDCSG1- Lessons Learned in Auto Pentest What to Look for When There Are Time Constraints - Jay Turlaet's face it, OEMs and automotive manufacturers can be demanding. It's not your usual penetration test project, where you just need to file everything you found. There's a lot of paperwork, and you must provide evidence that you tested a specific cybersecurity control or test case. Modern vehicles have electronic architectures composed of interconnected Electronic Control Units (ECUs), multiple communication protocols, and external connectivity interfaces such as Wi-Fi, Bluetooth, cellular, and Ethernet. How do you prepare and get wired? In this talk, we will discuss a structured automotive pentest approach, but there won't be a discussion about TARA. There are a lot of those in automotive security conferences. By combining systematic attack-surface discovery, fuzzing, hardware reverse engineering, and wireless security evaluation, penetration testers can significantly increase the likelihood of identifying critical weaknesses in modern automotive systems using a sound methodology, and this is the aim of this talk. The talk also explores how AI-assisted tooling can support automotive penetration testers by automating parts of the testing workflow, improving fuzzing strategies, and accelerating vulnerability discovery. The goal is to find automotive security bugs using common techniques like CAN Bus Firehose Attacks, dumping the MCU firmware, and leveraging it further. --- Mirrored from YouTube: https://www.youtube.com/watch?v=B8EJ9vK7Qf0https://peertube.dodges.it/static/streaming-playlists/hls/3ebbbcc8-1f9f-43e9-abf7-b54e8e38cbb3/e3afb4b0-bbb4-446f-9f19-f5a1b669bceb-master.m3u8https://peertube.dodges.it/videos/embed/8KiuZFb5LtZ7DkPJfDbk7c1148002026-10-23T19:26:02.468ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5tPAGYBnayUhuePvFTtT7F2026-10-22T12:45:29.058Zhttps://peertube.dodges.it/lazy-static/thumbnails/43b624bf-28bb-4c6b-8ad8-906849012def.jpgDCSG1 - PackageGate: Finding 0 days in every JS Package Manager - Oren Yomtov, Idan DardikmanAfter Shai-Hulud compromised 700+ npm packages, the ecosystem's answer was simple: disable lifecycle scripts and lock your dependencies. What if those defenses don't actually work? We found seven zero-day vulnerabilities across npm, yarn, pnpm, Bun, and vlt that bypass both --ignore-scripts and lockfile integrity verification. Full RCE during package installation with security flags explicitly enabled. Lockfiles that pass validation while serving completely different code. We'll demo popping calc on npm install with --ignore-scripts turned on, show how lockfile integrity checks can be defeated to serve targeted payloads, and explain the specific internals of each package manager that make these attacks possible, from npm's git configuration injection to pnpm's fetch-phase blind spot to Bun's trusted-name confusion. --- Mirrored from YouTube: https://www.youtube.com/watch?v=7VpxOJIySO8https://peertube.dodges.it/static/streaming-playlists/hls/2446f850-841a-4762-80b2-97b530518f37/15d11579-7909-4055-80da-e1228698f881-master.m3u8https://peertube.dodges.it/videos/embed/5tPAGYBnayUhuePvFTtT7F1374002026-10-23T19:30:42.935ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/nfBQyL8Krq8Nhcm4cGov1Z2026-10-22T12:46:00.462Zhttps://peertube.dodges.it/lazy-static/thumbnails/d585a3c2-aacb-40af-bc6d-8d0b8fdac5c9.jpgDCSG1 - Securing Maritime Operationa Technology - Mark McHargueA “boots on the ground” perspective of balancing operational efficiencies with securing critical infrastructure, from a leading subject matter expert from one of the largest ports in the western hemisphere. --- Mirrored from YouTube: https://www.youtube.com/watch?v=50bjdAawX38https://peertube.dodges.it/static/streaming-playlists/hls/ac1a6901-4a76-47f8-968d-2e3e95fb94dd/6dbad6d4-ebc6-4334-8856-e67a7be57ee8-master.m3u8https://peertube.dodges.it/videos/embed/nfBQyL8Krq8Nhcm4cGov1Z1039002026-10-23T19:30:44.380ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wwUP9sBk92ywisv6fDzfFC2026-10-22T12:46:26.839Zhttps://peertube.dodges.it/lazy-static/thumbnails/434e0d4a-0225-434d-975f-b3b2c4544926.jpgDCSG1 - A Red Queen view of agents, trust boundaries, and why speed breaks security - Maria SinghMost organizations think they are deploying an AI feature. In reality, they are deploying a new attack chain. As enterprises connect LLMs to tools, retrieval systems, APIs, files, browsers, and decision workflows, the real risk is no longer the model alone. The risk is the system around it. This talk breaks down how AI workflows create new trust failures across prompts, plugins, memory, identity, and action execution. Using practical examples, we will walk through how seemingly harmless AI automation can turn into data exposure, policy bypass, or operational compromise. The session closes with concrete design patterns for reducing blast radius and building AI systems that can move fast without becoming breach accelerators. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4hiTkd3rlR4https://peertube.dodges.it/static/streaming-playlists/hls/f743051d-73b2-4629-87c9-db7ae1f5fdea/9835155f-76a2-4714-bb76-3becfb00a740-master.m3u8https://peertube.dodges.it/videos/embed/wwUP9sBk92ywisv6fDzfFC1108002026-10-23T19:37:08.241ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7r9jLDSdaZikZno5BppfAE2026-10-22T12:47:17.771Zhttps://peertube.dodges.it/lazy-static/thumbnails/5259356b-54aa-4502-b6ad-6cfa00fb40e0.jpgDCSG1 - Copirate 365 Persistent Plundering in the Depths of Microsoft Copilot - Johann RebergerThis research shows the first memory persistent data-exfiltration attack against Microsoft 365 Copilot. By exploiting Copilot via targeted, malicious instructions, an attacker can backdoor a user's Copilot instance to quietly persist Promptware in long-term storage and have it impact all future conversations. Once established, this foothold lets the attacker hijack Copilot at will and trigger data exfiltration through several bypasses discovered across the Microsoft Office/M365 suite. The talk further examines a technique named Delayed Tool Invocation, that has been shown effective in bypassing guardrails and security controls (e.g. Bard/Gemini), and also creates a blind spot for Copilot. Finally, these findings are connected to a broader issue: The Normalization of Deviance in AI. As LLMs become embedded in high-privilege workflows, vendors are implicitly assuming "the model will do the right thing," even when evidence shows the opposite. This mindset is how risky behavior becomes normalized practice. Attendees will leave with a clear understanding of the attack, the underlying design and implementation flaws, what to look out for and how similar issues might impact your applications and organization. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3bkuMJQEg90https://peertube.dodges.it/static/streaming-playlists/hls/34198e4a-5bf1-4358-9717-fe9bdaf3bdba/f370adb6-501c-4b68-99ea-be18c2e23528-master.m3u8https://peertube.dodges.it/videos/embed/7r9jLDSdaZikZno5BppfAE2872002026-10-23T19:37:10.994ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/19w9cZgPbV15npk49B7Fge2026-10-22T12:48:02.358Zhttps://peertube.dodges.it/lazy-static/thumbnails/f24d45fc-be6f-421b-9f77-4a139805c6f7.jpgDEF CON SG1 - CSIT Village - James Tan - Uncovering Hidden Threats: CSIT QpproachJoin us as we go behind-the-scenes of threat hunting and investigation. From daily workflows to real-world incident response, discover the strategies and techniques used to detect, analyse, and respond to complex cyber threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vUmC6c8Qzoghttps://peertube.dodges.it/static/streaming-playlists/hls/01308688-36f8-4975-a710-6aeccac22a4f/2b6f65ac-ec92-4915-bb0b-6fd75234cb9a-master.m3u8https://peertube.dodges.it/videos/embed/19w9cZgPbV15npk49B7Fge1627002026-10-23T19:50:10.492ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/spYQnwwS7BjYC7xqS7cGn12026-10-22T12:48:57.902Zhttps://peertube.dodges.it/lazy-static/thumbnails/afdcc26f-8468-45d9-9034-f60591029429.jpgDEF CON SG 1 - CSIT Village - Kan Onn Kit - Struct Reconstruction In AetherIn stripped binaries, malware analysts often struggle in a sea of raw offsets and pointer arithmetic. We share our journey of data structure reconstruction with AETHER. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tH4AzyxPz-Qhttps://peertube.dodges.it/static/streaming-playlists/hls/d5e6bcaf-ce90-4002-af3a-2b4e6015a33a/88d25b45-479d-4df5-b3ac-0cf09f64b08d-master.m3u8https://peertube.dodges.it/videos/embed/spYQnwwS7BjYC7xqS7cGn11225002026-10-23T19:50:16.195ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/nzpPd6CgSdLBHsbX6gX1552026-10-22T12:49:55.730Zhttps://peertube.dodges.it/lazy-static/thumbnails/a39b0382-5507-4ea6-a2f6-d40c2d4af238.jpgDEF CON SG1 - CSIT Village - Jun Rong And Javier Koh - Cve 2025 52692 Rogue Request Roots RouterThis talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router. We will show how a simple string comparison flaw allowed a complete authentication bypass, eventually gaining full root access with a single HTTP request. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nxtikf--Zzchttps://peertube.dodges.it/static/streaming-playlists/hls/aeba21d3-6b5d-46e4-8522-5b2175bbc054/96c793df-766a-4f9a-87b3-f9aac02789ba-master.m3u8https://peertube.dodges.it/videos/embed/nzpPd6CgSdLBHsbX6gX1551432002026-10-23T20:05:18.967ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wxcj1kqYi2syaLvFXgVr3g2026-10-22T12:50:32.891Zhttps://peertube.dodges.it/lazy-static/thumbnails/90f08d99-4e68-46c0-b76c-a4282f089d58.jpgDEF CON SG1 - CSIT Village - Daryl Lim, Zhi Kai - Rolling Api Tokens A Thought ExperimentA thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nOzZIUhlsyQhttps://peertube.dodges.it/static/streaming-playlists/hls/f74d2fdd-d60c-401b-9f9d-7e9be95b16df/3d46e84f-f13b-4552-9473-7278ba94d357-master.m3u8https://peertube.dodges.it/videos/embed/wxcj1kqYi2syaLvFXgVr3g989002026-10-23T20:05:20.521ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5KkaLmoyTpsYs3ksEvT3pV2026-10-22T12:51:15.921Zhttps://peertube.dodges.it/lazy-static/thumbnails/5590abcc-40dc-455b-b435-3eec15f535a9.jpgDEF CON SG1 - CSIT Village - Kang Hao - Android Security Javascript Bridge Is Falling DownAn insecure JavaScript bridge (JSB) in Android WebView allows attackers to abuse exposed interfaces to read local files and steal session cookies, leading to full account takeover via malicious deep links and JavaScript injected into the Android WebView context. During this session, we will dive into the details. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lp1jOnZpDCohttps://peertube.dodges.it/static/streaming-playlists/hls/26715983-ef42-4037-839a-ab305afdf63b/c5f2e1c8-bcef-4ec9-b115-fd535c46df0e-master.m3u8https://peertube.dodges.it/videos/embed/5KkaLmoyTpsYs3ksEvT3pV1457002026-10-23T20:18:57.669ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bYvYWiQon9FiyBJeGrn7B72026-10-22T12:52:00.810Zhttps://peertube.dodges.it/lazy-static/thumbnails/ca07f7df-bf76-4320-b7ed-b18bc112728b.jpgDEF CON SG1 - CSIT Village - Poh Cai Min & Shawn Pang - Kînig Bridging Webapi Fuzzing With A GraphGrammar-based fuzzing made painless! This talk highlights how the generation of grammar files for browser WebAPIs can be automated and visualised with the help of a network graph. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l3J33xJAzZghttps://peertube.dodges.it/static/streaming-playlists/hls/58df83bb-2f06-40a0-aaf3-464d0dc56ce4/92defd5a-ed3b-43ea-9565-f402144ae614-master.m3u8https://peertube.dodges.it/videos/embed/bYvYWiQon9FiyBJeGrn7B71317002026-10-23T20:19:05.755ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/q9PDYkDjQ4KBE1ekQBYVHb2026-10-22T12:52:34.538Zhttps://peertube.dodges.it/lazy-static/thumbnails/c954f8f3-321a-48bf-9fa0-36ff33bc95a8.jpgDEF CON SG1 - Theodore Lee - Ashes To Analysis: Deconstructing Malware With AetherReverse engineering (RE) is time consuming and resource intensive. With recent advances in AI agents and large language models (LLMs), we share our journey in applying these technologies to accelerate the malware RE process. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hixC4pmnbFAhttps://peertube.dodges.it/static/streaming-playlists/hls/c396a56f-e937-40de-820f-fed2510520f8/a24ada8b-a65d-412d-a7e1-232867f91895-master.m3u8https://peertube.dodges.it/videos/embed/q9PDYkDjQ4KBE1ekQBYVHb1075002026-10-23T22:28:45.858ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hbFoSwcW5jaY42JWqwPnDW2026-10-22T12:53:19.121Zhttps://peertube.dodges.it/lazy-static/thumbnails/33aeb658-8636-404e-88b4-4af7b34d339e.jpgDEF CON SG1 - CSIT Village - Chua Meng Han - From CTF To CVE 202552691 Lessons Hidden In Plain SightCritical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today. This session deconstructs how simple, overlooked design flaws can be weaponised for catastrophic impact. We will also share practical insights on how to mitigate these threats, with strategies that can be implemented at different levels. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fN8mMKp4SAMhttps://peertube.dodges.it/static/streaming-playlists/hls/830fef12-955e-4476-8b9f-70d5a8035a44/e6526826-7f48-4222-b72f-71108a698aff-master.m3u8https://peertube.dodges.it/videos/embed/hbFoSwcW5jaY42JWqwPnDW1776002026-10-23T20:33:17.814ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mnmqa63VTKhAvANuSN71HZ2026-10-22T12:53:55.573Zhttps://peertube.dodges.it/lazy-static/thumbnails/f8477cc1-30c0-4cc7-9f76-7553e6ef2a5b.jpgDEF CON SG1 - CSIT Village - Loke Yan Hao -Hack Smarter: Unleashing AI in Bug Bounty Pen TestingWe share our findings from using AI tools for web penetration testing on bug bounty programmes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=doanWlYLAMwhttps://peertube.dodges.it/static/streaming-playlists/hls/a4f1f977-9e71-46b4-8a4c-bf1a5fc39693/80a7a769-e8e4-4e5e-8850-8ee9da5dfb36-master.m3u8https://peertube.dodges.it/videos/embed/mnmqa63VTKhAvANuSN71HZ1146002026-10-23T20:33:24.726ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vUZYGRoa9Z5XHTkhJuam1J2026-10-22T12:54:33.238Zhttps://peertube.dodges.it/lazy-static/thumbnails/b24737cc-d917-4dfd-81ea-83d395d12878.jpgDEF CON SG1 - CSIT Village - Anton Chua - Cyber Physical: The Soft Underbelly?This session re-examines physical security assumptions in Cyber Defence structures. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ZO1lChlp6Mkhttps://peertube.dodges.it/static/streaming-playlists/hls/f23f6d5b-d92e-4558-bcc0-5eb2913ae0e2/df9e917d-dad2-4d8e-881e-07ac7683ae7c-master.m3u8https://peertube.dodges.it/videos/embed/vUZYGRoa9Z5XHTkhJuam1J1248002026-10-23T20:48:25.759ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/siwCJtNtJQ1tf9ErAttD4y2026-10-22T12:55:24.490Zhttps://peertube.dodges.it/lazy-static/thumbnails/f2bbbc14-a74e-4b91-95b3-46d3cbf29b7c.jpgDEF CON SG1 - CSIT Village - Liu Wen Kai, Martin Koh - Your Next Forensic Analyst is AI AgentsDuring this session, we will share an automated end-to-end AI workflow to perform digital analysis on Windows images with capabilities of fully on-premise investigation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Yo380Lfk_3Ahttps://peertube.dodges.it/static/streaming-playlists/hls/d50020b1-1850-447a-88ca-e4884414b46a/717b2ae4-85a7-41b7-b280-9be84759555b-master.m3u8https://peertube.dodges.it/videos/embed/siwCJtNtJQ1tf9ErAttD4y1646002026-10-23T21:58:45.025ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kdFc73aGg13Pci3CsTZQyY2026-10-22T12:55:55.558Zhttps://peertube.dodges.it/lazy-static/thumbnails/900b62df-9058-48fd-ad3d-4e0009b4c1be.jpgDEF CON SG1 - CSIT Village - Sim Wei Jun - Bind & Breach Injecting Postgresql Queries@Protocol LevelThis presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level. It clarifies exploitation conditions, details the exploit steps, and demonstrates the vulnerability through custom exploit code targeting a Harbor deployment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YZK98rFCMbAhttps://peertube.dodges.it/static/streaming-playlists/hls/9ba2b65d-cf76-49d5-b70e-22b6dac70e90/3004ed5f-158d-4efd-b03d-744b1db797ab-master.m3u8https://peertube.dodges.it/videos/embed/kdFc73aGg13Pci3CsTZQyY1157002026-10-23T20:48:28.811ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mWsP95vUyVTma9ZbNyKXFe2026-10-22T12:56:34.556Zhttps://peertube.dodges.it/lazy-static/thumbnails/0d7a581c-7683-42ac-a999-2e646d6e2324.jpgDEF CON SG1 - CSIT Village - Shao Xiang -Thinking like the enemy: Adversary MindsetUnderstanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically strengthen defenses. This session introduces the four pillars that help defenders think like adversaries, enabling proactive planning, better prioritisation, and more effective response strategies. --- Mirrored from YouTube: https://www.youtube.com/watch?v=SDZ95UJi1fshttps://peertube.dodges.it/static/streaming-playlists/hls/a99175f1-dad0-4d1a-ad1e-9a00d63e8417/e59bd2a7-ab41-414f-9b55-381d727cf0ce-master.m3u8https://peertube.dodges.it/videos/embed/mWsP95vUyVTma9ZbNyKXFe1444002026-10-23T21:06:43.798ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gdVWdAHhzy2NRThyiJLwHN2026-10-22T12:57:31.946Zhttps://peertube.dodges.it/lazy-static/thumbnails/a59e3ce0-849b-4555-8cf3-ad8b1c642054.jpgDEF CON SG1 - CSIT Village - Kenneth Huang Shaoqi - How A No Write Can Compromise System SecurityCompilers generate all our code, but they don’t get it right all the time. In this talk, we’ll introduce how compilers can affect software security in general, before going deep into a V8 optimization n-day from the perspective of a vulnerability researcher. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PuKePTZWo0whttps://peertube.dodges.it/static/streaming-playlists/hls/7b473e5e-73df-49ea-bc53-58c4fd6323d0/c6f9bf75-4bef-4578-8cac-6db789afe392-master.m3u8https://peertube.dodges.it/videos/embed/gdVWdAHhzy2NRThyiJLwHN2428002026-10-23T21:06:46.838ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sUwmokPfY6FFajMfK6w6XL2026-10-22T12:58:19.762Zhttps://peertube.dodges.it/lazy-static/thumbnails/c3a63c0e-c39b-4f1a-9322-f1c1a849480f.jpgDEF CON SG - CSIT Village - Kendrick Yeo, Eugene Ong - Learning OT Through A Digital TwinDuring this session, we will share simulated water testbed, and the attacks that can work on it. --- Mirrored from YouTube: https://www.youtube.com/watch?v=JLcx2sqUbBAhttps://peertube.dodges.it/static/streaming-playlists/hls/d9e2fc67-ae8a-44ed-aa4e-6c3a876e1236/5ec85636-fa6f-4abb-adea-986a8f1a8e13-master.m3u8https://peertube.dodges.it/videos/embed/sUwmokPfY6FFajMfK6w6XL1486002026-10-23T21:58:37.039ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/h6DARqPgR3oEpiQvgEsa7r2026-10-22T12:59:01.993Zhttps://peertube.dodges.it/lazy-static/thumbnails/f7ec846c-2d85-47d4-9353-757ca77108fa.jpgDEF CON SG 1 - CSIT Village - Koh Kian Woon - Not All Firefox Bugs Are Equal-Heap Grief & CFG BypassAs AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders. This talk highlights that effective security requires going beyond severity ratings to truly understanding threats and to prioritise real-world exploitability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EJFCwq_hUyshttps://peertube.dodges.it/static/streaming-playlists/hls/825c1c1b-0e14-4936-a944-48a8aa7070c9/cb853220-084b-44b5-b6ec-4c88b1be30d6-master.m3u8https://peertube.dodges.it/videos/embed/h6DARqPgR3oEpiQvgEsa7r1295002026-10-23T21:18:05.627ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vhHND3DBTHsYcBd3gVJXp92026-10-22T12:59:49.058Zhttps://peertube.dodges.it/lazy-static/thumbnails/994abdf3-5bff-40c4-9b34-ef561305b0f7.jpgDEF CON SG1 - CSIT Vilage - Arne Sim - TISC : Behind The Scenes In CTF Challenge CreationThe InfoSecurity Challenge (TISC) is one of Singapore's most anticipated Capture-the-Flag competition (CTF), hosted annually by CSIT. Join one of the challenge creators as he shares his creation process and learn what goes on behind-the-scenes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=EFqcMPPaK_Ihttps://peertube.dodges.it/static/streaming-playlists/hls/ed2eaf25-3423-46c5-a5f8-d893d4ab06ba/a33f28b3-e508-4fd3-81b0-79967e17ccf7-master.m3u8https://peertube.dodges.it/videos/embed/vhHND3DBTHsYcBd3gVJXp9981002026-10-23T21:18:07.385ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9KiWA2k7SA5guVn37XxknB2026-10-22T13:00:42.690Zhttps://peertube.dodges.it/lazy-static/thumbnails/b5d24f57-730a-4207-9534-047e4af56335.jpgDEF CON SG1 - CSIT Village - Sng Peng Boon - Web Hacking Lessons from Pre Gov Bug Bounty ProgramWe share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared. We will also walk through real-world vulnerabilities and recommend practical takeaways for both bug hunters and developers. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Ahn_J8QS7Oohttps://peertube.dodges.it/static/streaming-playlists/hls/46d525e4-5662-4f70-8196-7fa8dea34b99/eb96f889-5eb5-4915-9a09-a361fe0398bf-master.m3u8https://peertube.dodges.it/videos/embed/9KiWA2k7SA5guVn37XxknB1425002026-10-23T21:30:52.474ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vkfacMsfEoWXNKGURbSUm32026-10-22T13:01:16.478Zhttps://peertube.dodges.it/lazy-static/thumbnails/76ec586b-4268-4027-a4fc-78866bb6a5c8.jpgDEF CON SG1 - CSIT Village - Lim Jing Qiang - Registry Stored Payloads For Usb Rubber DuckiesUsing the rubber ducky to deploy a large payload in an air-gapped environment is no easy feat. This talk introduces a way of leveraging USB descriptors to store large payload in the Windows Registry and retrieving it through keystroke injection. --- Mirrored from YouTube: https://www.youtube.com/watch?v=9MEqSUlgAD8https://peertube.dodges.it/static/streaming-playlists/hls/ed88e0dc-6bbe-4f48-9386-d08645e03dea/223aa328-5c05-4042-be87-e3daea8fbd4f-master.m3u8https://peertube.dodges.it/videos/embed/vkfacMsfEoWXNKGURbSUm3763002026-10-23T21:31:01.514ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dY5wC2tQeScwrw3qtL3K9J2026-10-22T13:01:53.319Zhttps://peertube.dodges.it/lazy-static/thumbnails/8b4294b9-2185-43f2-a544-e8d15cda636d.jpgDEF CON SG1 - CSIT Village - Daniel Siok - Balancing Security&Usability In AirGapped ImplementationsWhat does an air-gapped system really mean in practice? This talk introduces the basics of air gap systems and data diode, then explores how real world requirements shape systems design and what that means for security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=5rU62SvD3TYhttps://peertube.dodges.it/static/streaming-playlists/hls/69021b01-4b7d-4619-9273-64044da6f4f6/0fb2d9ea-9a07-4f1a-bb66-65cca12de91c-master.m3u8https://peertube.dodges.it/videos/embed/dY5wC2tQeScwrw3qtL3K9J768002026-10-23T21:30:59.632ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/r2FezTE1MMasBf2qTQex872026-10-22T13:03:05.078Zhttps://peertube.dodges.it/lazy-static/thumbnails/3770f10c-d182-4500-8395-675d898f537c.jpgDEF CON SG1 - CSIT Village - Eugene Lim - Mic Drop: Hacking into Enterprise Audiovisual HardwareAudiovisual hardware - from web conferencing cameras to meeting room systems - is deeply embedded in modern enterprises' physical attack surface. However, they are often poorly secured and monitored. This presentation dives into real and novel vulnerabilities discovered in enterprise-grade equipment, and walks through the risks they can pose to any organisation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=-Rkh47bu-lchttps://peertube.dodges.it/static/streaming-playlists/hls/cab063a3-69b5-4517-8109-dc8e6a102b60/ad768770-3044-4156-ab3d-72e62ee5b9c2-master.m3u8https://peertube.dodges.it/videos/embed/r2FezTE1MMasBf2qTQex871614002026-10-23T21:58:42.718ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rFFccaCHVkGBX3DwNaFN8C2026-10-22T13:07:14.710Zhttps://peertube.dodges.it/lazy-static/thumbnails/5c29ef1b-4076-48fc-b735-69b600e10211.jpgDEF CON 34 - Hacking AI - Bruce SchneierHumans are hacking AI systems. Humans are hacking with AI systems. But also, AIs are hacking human systems. They’re finding and exploiting vulnerabilities in computer code, and they’ll soon be doing the same with all sorts of other codes. For example: the tax code can be hacked. Vulnerabilities are called loopholes, exploits are called tax avoidance strategies, and black hats are called accountants. Similarly, financial markets can be hacked. So can any system of rules or laws, including democracy itself. AIs will hack these systems at our request, and they’ll also do this innately, organically – and possibly in ways we don’t immediately see. We need to consider a world where increasingly sophisticated hacks or our social, economic, and political systems are discovered computer speeds, and then exploited at computer scale and scope. Right now, our systems of patching these systems operate at a human pace, which won't be good enough. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eEBv0STiYhIhttps://peertube.dodges.it/static/streaming-playlists/hls/cffea086-e6a8-4e6b-a767-ba9f53f8069a/bce93c98-d3ad-436d-a5e5-0bdb32161084-master.m3u8https://peertube.dodges.it/videos/embed/rFFccaCHVkGBX3DwNaFN8C2674002026-10-23T22:28:56.050ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/w6keT9GohhNJPv366NruP22026-10-22T13:13:14.944Zhttps://peertube.dodges.it/lazy-static/thumbnails/00e5eb19-1678-43d6-b110-6aea9e28469f.jpgDEF CON 34 - ESP32 as counter-surveillance platform - Cybertiger, Colonel Panic, The WrewPrivacy should be accessible to all. Historically, counter-surveillance tools have been expensive, complex, and inaccessible to most individuals, often limited to well-funded researchers and costly hardware configurations. The ESP32 offers a transformative alternative. This presentation will demonstrate how an affordable microcontroller has become the foundation for a growing suite of open-source, user-friendly anti-surveillance tools. We will discuss the technical features that make the ESP32 a compelling choice for these applications, including passive 802.11 and Bluetooth monitoring, OUI-based device fingerprinting, and robust cryptographic capabilities. Applications include detecting police body cameras in operational environments, mapping Flock Safety automatic license plate recognition (ALPR) infrastructure, identifying unauthorized drones, detecting radio frequency jamming across 2.4GHz, 5GHz, and cellular bands, and tracking autonomous robots operating with known-vulnerable firmware. These tools are cost-effective and freely available. We will also consider future developments in accessible counter-surveillance hardware, such as the ESP32-S5 with 5GHz support, GPS, displays, haptics, etc. Advancing anti-surveillance culture requires designing devices that individuals are motivated to use and carry. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PcK-TDmzshchttps://peertube.dodges.it/static/streaming-playlists/hls/f3b0bc3d-acde-46ad-bc53-510da1765cbf/fa2f1a1a-7b86-468c-b1c1-9039ad33ff08-master.m3u8https://peertube.dodges.it/videos/embed/w6keT9GohhNJPv366NruP22667002026-10-23T22:46:40.977ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9NCVqcUNJTB4FnCELEH6HR2026-10-22T13:13:44.138Zhttps://peertube.dodges.it/lazy-static/thumbnails/e22b445f-ca90-4a25-8f74-089bedafbab4.jpgDEF CON 34 - Video Team - Scavenger Hunt Slot Machine1988 Japanese Slot Machine for your enjoyment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=86TLtYkpyKIhttps://peertube.dodges.it/static/streaming-playlists/hls/474c1379-292c-47df-86c0-c03f60e709f7/c364e583-759a-490b-9b1e-b7d38a772177-master.m3u8https://peertube.dodges.it/videos/embed/9NCVqcUNJTB4FnCELEH6HR198002026-10-23T22:46:43.680ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kzbhzNadL23vjRoYNoNPpf2026-10-22T13:14:10.543Zhttps://peertube.dodges.it/lazy-static/thumbnails/29dfe5dc-15b2-4b28-ba24-9681bf76ea09.jpgDEF CON 34 - Video Team - I Am the Cavalry - Josh and DeanWe catch up with the folks from I Am the Cavalry (IATC) for an update on their project. --- Mirrored from YouTube: https://www.youtube.com/watch?v=KKSRwtMGYQUhttps://peertube.dodges.it/static/streaming-playlists/hls/9e7f8492-ded0-4185-ac10-cde82f5a4230/4eeffc4b-57ed-4f76-9988-3af22971cdc1-master.m3u8https://peertube.dodges.it/videos/embed/kzbhzNadL23vjRoYNoNPpf259002026-10-23T22:46:42.416ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/htuaB2tgvwobeyqnzhWBz12026-10-22T13:18:33.324Zhttps://peertube.dodges.it/lazy-static/thumbnails/ea36fb6a-5d2b-4ce4-a952-4793c087ac97.jpgDEF CON - noRecognition: Could a pattern on clothing fool Facial Recognition? - Bill SwearingenYou are being watched. Not in the vague, philosophical sense. Right now. The ATM you used this morning. The gas pump. Every doorbell on your block. The 125 smart streetlights you walked past on your way to lunch. You are indexed, cataloged, and matched against databases you never consented to join, by AI models that are wrong more often than the vendors will ever admit. Other solutions to this involves looking ridiculous. Face paint. IR glasses. Masks. Real-time deepfake software running on your phone. Congrats, you defeated the algorithm AND ensured every human within 50 feet is staring at you. Super subtle. I built something different. noRecognition is a genetic algorithm that breeds adversarial patterns, printed on ordinary fabric, that defeat the entire facial recognition pipeline: person detection, face detection, and identity recognition across 10 models used by Clearview AI, Axon, Hikvision, and Palantir. No electronics. No software. You look like a person wearing a scarf. The AI sees nothing. I will demonstrate this live on stage. One camera. One scarf. Zero detections. Come watch me disappear. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WyPmt8CE5L4https://peertube.dodges.it/static/streaming-playlists/hls/8568a873-338a-43f0-9a61-faccc743dbb6/2b26dbe2-706d-4201-957f-a960c8326a75-master.m3u8https://peertube.dodges.it/videos/embed/htuaB2tgvwobeyqnzhWBz12779002026-10-23T23:38:28.314ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/k6mBe1xKo7BTmTxx64tANM2026-10-22T13:26:53.493Zhttps://peertube.dodges.it/lazy-static/thumbnails/78014259-c30a-4dbd-ad50-88f246645514.jpgDefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll40 years ago today, I tripped over a 75-cent accounting glitch in a Unix system. That tiny clue led to a year-long chase across networks, modem banks, and international borders, ultimately uncovering a crew of German hackers working for the East German Stasi and the Soviet KGB. We had no budget, no roadmap, and no “cyber” anything. We improvised with soldering irons, shell scripts, logbooks, curiosity, and far too much coffee. Let’s revisit the chase – not just to remember, but to ask what changed, what didn’t, and why it still matters. --- Mirrored from YouTube: https://www.youtube.com/watch?v=656058JxTM0https://peertube.dodges.it/static/streaming-playlists/hls/9a9d0d97-e90b-40e3-a170-c89de699a529/7991a66e-6f30-4206-93a4-5b2f71cfdbb9-master.m3u8https://peertube.dodges.it/videos/embed/k6mBe1xKo7BTmTxx64tANM3426002026-10-23T23:38:59.060ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/916frE2LXvo7vD6VgDMJLH2026-10-22T13:27:30.698Zhttps://peertube.dodges.it/lazy-static/thumbnails/c45f69ce-996c-4e27-a8aa-485bb99af272.jpgDEF CON 34 - Video Team - Car Hacking VilllageOut intrepid reporter finds out what's going on this year in the DEF CON Car Hacking Village. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ciQdzBhR1xIhttps://peertube.dodges.it/static/streaming-playlists/hls/40cc5816-973c-4a07-ae2c-5507aa34a181/d1b3d9b9-a319-4afe-8003-4e413915b3fe-master.m3u8https://peertube.dodges.it/videos/embed/916frE2LXvo7vD6VgDMJLH439002026-10-24T00:47:37.773ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ckcdNz2niqN9UonWrEay132026-10-22T13:28:00.288Zhttps://peertube.dodges.it/lazy-static/thumbnails/c0719524-20c2-4c43-9831-1ec7c6d5a586.jpgDEF CON 34 - Video Team - Ham Radio Village - Marvin Goes HAMIn which young Marvin goes to the HAM Radio Village and makes us all smile. --- Mirrored from YouTube: https://www.youtube.com/watch?v=f02wH61gk8Mhttps://peertube.dodges.it/static/streaming-playlists/hls/5bc29269-2057-4351-94b7-b77d9c8938ea/85bc9340-5594-4898-a980-901ecb62caa2-master.m3u8https://peertube.dodges.it/videos/embed/ckcdNz2niqN9UonWrEay13268002026-10-24T00:35:27.553ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1njG2YA2L5EGsEWVri6EJR2026-10-22T13:28:34.417Zhttps://peertube.dodges.it/lazy-static/thumbnails/9335f45c-ce93-44b8-b457-672e94c2983c.jpgDEF CON 34 - Video Team - PhreakMeSoldier of FORTRAN brings back old-school phreaking in contest form. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uAZi-dCehuIhttps://peertube.dodges.it/static/streaming-playlists/hls/02fa232f-5816-402e-9dd9-5aea61ad56c5/f0f62dba-19a7-48ed-84ee-41aee93576a2-master.m3u8https://peertube.dodges.it/videos/embed/1njG2YA2L5EGsEWVri6EJR511002026-10-24T00:20:27.520ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/j2i39eGnZfzdyTSEvAFDCk2026-10-22T13:29:17.856Zhttps://peertube.dodges.it/lazy-static/thumbnails/7961fb64-a750-467a-9f78-8388e71fd8ca.jpgDEF CON 34 - Video Team - EmbeddedSystems VillageThe full lowdown on the Embedded Systems Village at DEF CON 34 --- Mirrored from YouTube: https://www.youtube.com/watch?v=fqs--Ha7gfwhttps://peertube.dodges.it/static/streaming-playlists/hls/91f2bd31-2d50-4fe2-b0eb-403eb7f9ff47/c29320cc-699e-4397-b36a-a5fd74c869c6-master.m3u8https://peertube.dodges.it/videos/embed/j2i39eGnZfzdyTSEvAFDCk545002026-10-23T23:51:50.906ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vdi7A7BBnAoMPk3ZwSK5V72026-10-22T13:29:55.901Zhttps://peertube.dodges.it/lazy-static/thumbnails/0d1a9ecc-3cb8-48db-8952-8a23876c510b.jpgDEF CON 34 - Video Team - LEECHYou wouldn't download a car. --- Mirrored from YouTube: https://www.youtube.com/watch?v=OqswVKiCN4whttps://peertube.dodges.it/static/streaming-playlists/hls/ec907e35-7e6e-4975-817e-58ecf1ca5170/74e11461-cb9d-4264-8009-396f00aa9d76-master.m3u8https://peertube.dodges.it/videos/embed/vdi7A7BBnAoMPk3ZwSK5V7845002026-10-23T23:59:31.198ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/f6u63DbpzWYDHRsZ2fegY92026-10-22T13:30:24.849Zhttps://peertube.dodges.it/lazy-static/thumbnails/e25501d4-cac1-49aa-adf9-0799bd8e67c8.jpgDEF CON 34 - Video Team - Physical Security VillageThere's a lot to learn in the Physical Security Village. --- Mirrored from YouTube: https://www.youtube.com/watch?v=M0-cxePSifshttps://peertube.dodges.it/static/streaming-playlists/hls/7223f824-f0b9-4d91-a6bd-95f75794969c/68579635-6e40-499a-b2ee-07f4086efb50-master.m3u8https://peertube.dodges.it/videos/embed/f6u63DbpzWYDHRsZ2fegY9322002026-10-24T00:09:52.767ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8iu5BfVEmZgQpRi8U275oJ2026-10-22T13:31:03.759Zhttps://peertube.dodges.it/lazy-static/thumbnails/785caeb7-3950-4eae-b4d3-e71fa41ea68e.jpgDEF CON 34 - Video Team - Voting Machine Hacking VillageVoting Village returns to DEF CON 34 to consider the state of election security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=toi0keDnOschttps://peertube.dodges.it/static/streaming-playlists/hls/3b20eb56-2a8f-4b88-9897-de2f27caf576/31723e69-1324-406d-a75a-c55c5b623fd4-master.m3u8https://peertube.dodges.it/videos/embed/8iu5BfVEmZgQpRi8U275oJ767002026-10-23T23:59:32.924ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/shQkwCeQGcRQTsPVofYDWV2026-10-22T13:31:45.574Zhttps://peertube.dodges.it/lazy-static/thumbnails/1265416a-5377-4789-a3f7-240f8ba97e15.jpgDEF CON 34 - VideoTeam - Cliff Stoll AfterHoursAn interview with the delightful Cliff Stolll. So very worth your time --- Mirrored from YouTube: https://www.youtube.com/watch?v=AJCWsoozg0Qhttps://peertube.dodges.it/static/streaming-playlists/hls/d4e74b45-1beb-4d10-8603-197c687b36c5/1114c26c-bec1-4ac4-a7cc-e5ee183b6634-master.m3u8https://peertube.dodges.it/videos/embed/shQkwCeQGcRQTsPVofYDWV624002026-10-24T00:20:20.153ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/848nVEYrNX9CY5tDcc8jjD2026-10-22T13:32:19.598Zhttps://peertube.dodges.it/lazy-static/thumbnails/981dbcad-fe1e-4951-8d8c-91a5405110f3.jpgDEF CON 34 - Video Team - Car Hacking Village - Charger HackingWe get an EV charger hacking breakdown from the legend MajorMalfunction. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uF8c7Ty-5zAhttps://peertube.dodges.it/static/streaming-playlists/hls/391fbfb1-443f-4352-b888-ea7afe32fc29/f6ec7a3d-eb3c-4b24-bddb-2540206a98a8-master.m3u8https://peertube.dodges.it/videos/embed/848nVEYrNX9CY5tDcc8jjD502002026-10-24T00:20:25.471ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/39bBTLssEMGwakSLNKQdcE2026-10-22T13:33:27.494Zhttps://peertube.dodges.it/lazy-static/thumbnails/c4442b05-4448-4348-8910-bead796beaa3.jpgDEF CON 34 - Video Team - AI Village - PokemonFrom the AI Hacking Village - an AI that plays Pokemon for you, without costing you 20 grand in tokens. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Egzf_aWSxZchttps://peertube.dodges.it/static/streaming-playlists/hls/1156c585-a63d-4a67-9b27-263f208ee144/e757fd35-5b05-4184-a0fb-e7205b072dc2-master.m3u8https://peertube.dodges.it/videos/embed/39bBTLssEMGwakSLNKQdcE810002026-10-24T00:35:30.347ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hb71GGizqxmX7DakDMhe2M2026-10-22T13:34:03.874Zhttps://peertube.dodges.it/lazy-static/thumbnails/821902e3-da8b-433e-9361-dfc5fd38bfab.jpgDEF CON 34 - Video Team - DEF COIN 34 Badge - Bunnie HuangThe lowdown on the amazing DC34 badge from the designer himself. --- Mirrored from YouTube: https://www.youtube.com/watch?v=1plmJlWSKa0https://peertube.dodges.it/static/streaming-playlists/hls/82fb5c81-31c7-4797-933e-28f84eba7beb/c669ccb7-7223-4886-816d-b11ffa8755e9-master.m3u8https://peertube.dodges.it/videos/embed/hb71GGizqxmX7DakDMhe2M515002026-10-24T00:47:34.041ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1gAaEXGFXVzDq5JaDpCteA2026-10-22T13:34:31.460Zhttps://peertube.dodges.it/lazy-static/thumbnails/d13c0568-540f-4c32-91a2-f3689d8d8254.jpgDEF CON 34 - Video Team - DEF CON Groups Highlight DC256If you're not in a DEF CON Group, you're missing out on the opportunity to keep the DEF CON vibes going all year long, Ryan from the Video Team gets some fresh info from DC256 in Huntsville, Alabama --- Mirrored from YouTube: https://www.youtube.com/watch?v=u-SsrNy-cK0https://peertube.dodges.it/static/streaming-playlists/hls/022d366a-5988-4375-894f-50bfa3057150/24c138f1-46cb-4bd1-91dd-0c42644e4eea-master.m3u8https://peertube.dodges.it/videos/embed/1gAaEXGFXVzDq5JaDpCteA344002026-10-24T00:37:48.364ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5JSQ98ey4rFfn2B9HTVMJe2026-10-22T13:34:54.498Zhttps://peertube.dodges.it/lazy-static/thumbnails/2fcc9de5-d8f5-416e-bfa3-26f94eeaef68.jpgDEF CON 34 - Good Morning--- Mirrored from YouTube: https://www.youtube.com/watch?v=XR3a4B4W-hQhttps://peertube.dodges.it/static/streaming-playlists/hls/26611e3a-93ba-4176-981c-3d3f9f0e587d/71ccd96b-26c0-4818-a024-44f618dbe0f1-master.m3u8https://peertube.dodges.it/videos/embed/5JSQ98ey4rFfn2B9HTVMJe14002026-10-24T00:37:49.479ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ghqAARNDn9VjXvkGzwkoNk2026-10-22T13:35:24.599Zhttps://peertube.dodges.it/lazy-static/thumbnails/a77ec5ad-7c0b-4eb2-ab17-f226a7dccfdc.jpgDEF CON 34 - DEF CON Policy Announcement - Katie Noble, Heather WestThe new leadership of the DEF CON Policy project share the goals of DEF CON Policy and remind you that their Call for Papers closes May 1. --- Mirrored from YouTube: https://www.youtube.com/watch?v=y7vMt_IM0Bwhttps://peertube.dodges.it/static/streaming-playlists/hls/7bc4236d-ccd6-4931-ba74-5ca33cdfb28f/80185c7f-fd10-4b71-8509-724eba7ad0a5-master.m3u8https://peertube.dodges.it/videos/embed/ghqAARNDn9VjXvkGzwkoNk202002026-10-24T00:47:35.981ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mtXvVD3znEJ1BJ59nR5SN82026-10-22T13:39:26.195Zhttps://peertube.dodges.it/lazy-static/thumbnails/9c917f91-deea-4049-b77c-ebb4b0b8d857.jpgDEF CON 33 - DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks - Ryan EmmonNetwork Attached Storage (NAS) devices are indispensable in many corporate and home environments. These devices often live on the network edge, providing convenient remote access to confidential files and internal networks from the public internet. What happens when this goes terribly wrong? In this presentation, I’ll discuss how I developed a zero-day exploit targeting dozens of Synology NAS products. At the time of discovery, the exploit facilitated unauthenticated root-level remote code execution on millions of NAS devices in the default configuration. My exploitation strategy centered around smuggling different types of delimiters that targeted multiple software components. In the past, exploitation of the vulnerability’s bug class demanded additional primitives that weren’t available on my targets. While searching for alternative paths, I discovered a novel remote Linux exploitation technique. I’ll be presenting this technique, which can be used in other researchers’ exploit chains in the future. For the first time in public, I’ll also be discussing the details of my Synology vulnerability research, which won a $40,000 prize at the October 2024 Pwn2Own competition. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3F5icGjDWfghttps://peertube.dodges.it/static/streaming-playlists/hls/a5de1162-5108-4555-b403-ed56a1cf4e4b/df8447ee-90e3-4e1a-903d-0f6b9345865c-master.m3u8https://peertube.dodges.it/videos/embed/mtXvVD3znEJ1BJ59nR5SN82379002026-10-24T01:09:56.152ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3z8B13sSM7aYgyzrujUg9Q2026-10-22T13:42:54.912Zhttps://peertube.dodges.it/lazy-static/thumbnails/ecd07940-4789-4356-bdce-f10a209ad463.jpgDEF CON 33 - Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen - Marek TóthBrowser extensions have become increasingly popular for enhancing the web browsing experience. Common examples are ad blockers, cryptocurrency wallets, and password managers. At the same time, modern websites frequently display intrusive elements, such as cookie consent banners, newsletter subscription modals, login forms, and other elements that require user interaction before the desired content can be displayed. In this talk, I will present a new technique based on clickjacking principles that targets browser extensions, where I used fake intrusive elements to enforce user interaction. In my research, I tested this technique on the 11 most widely used password managers, which resulted in discovering multiple 0-day vulnerabilities that could affect tens of millions of users. Typically, just one click was required from a user to leak their stored private information, such as credit card details, personal data or login credentials (including TOTP). In some cases, it could lead to the exploitation of passkey authentication. The described technique is general and can be applied to browser extensions beyond password managers, meaning other extensions may also be vulnerable to this type of attack. In addition to describing several methods of this technique, I will also recommend mitigations for developers to protect their extensions against this vulnerability. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Gu4IoDXNqoUhttps://peertube.dodges.it/static/streaming-playlists/hls/14d281ed-6fb9-46bf-886b-83ed9c2fe49c/c51d5562-1d5e-4d6e-8e29-adeeb7190727-master.m3u8https://peertube.dodges.it/videos/embed/3z8B13sSM7aYgyzrujUg9Q3009002026-10-24T01:10:03.474ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9FgHt9joN6vTMd9PwBQmze2026-10-22T13:43:49.254Zhttps://peertube.dodges.it/lazy-static/thumbnails/0934b2c8-a7ae-462d-a68d-feb2f78d506c.jpgDEF CON 33 - Can't Stop the ROP: Automating Universal ASLR Bypasses - Bramwell BrizendineHigh-entropy ASLR was supposed to make bypasses of ASLR on Windows virtually impossible - until now! This talk will debut nine novel bypasses of the strongest form of ASLR on Windows, which makes attacks such as brute-forcing totally infeasible. This talk showcases how mostly simple, easy-to-find ROP gadgets can be used to construct highly reliable, universal ASLR bypasses to key Windows system DLLs, allowing ROP gadgets from those DLLs to be used freely in exploits! The end result? The attack surface is greatly expanded, making it possible to do more attacks on binaries previously constrained by limited gadgets. What may have been impossible before due to insufficient ROP gadgets, now is quite possible! While this talk focuses primarily on ASLR bypass for x64, we will also briefly touch upon similar attacks for x86. As part of this talk, for the first time ever, I am also releasing and open-sourcing a new mini-tool that will generate complete, x64 ROP chains for each of these bypasses! We will see this ASLR bypass attack in action with demo. We conclude with recommendations to help remediate the problem. This talk is an in-depth technical deep dive into Windows internals and the design of this technique, but it will also be presented in an accessible way to beginners. --- Mirrored from YouTube: https://www.youtube.com/watch?v=NrTNNi9PP5Yhttps://peertube.dodges.it/static/streaming-playlists/hls/4644cd0e-6d80-4633-906e-eb61ce770387/9cdc7f98-f84a-440b-b03e-05ee6d49070c-master.m3u8https://peertube.dodges.it/videos/embed/9FgHt9joN6vTMd9PwBQmze2565002026-10-24T02:09:40.563ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9U3fmyEtkTJjFNKMHdKssv2026-10-22T13:44:33.597Zhttps://peertube.dodges.it/lazy-static/thumbnails/f1f4bea0-d803-4499-aedf-f671315b08e1.jpgDEF CON 33 Recon Village - Building Local Knowledge Graphs for OSINT - Donald Pellegrino--- Mirrored from YouTube: https://www.youtube.com/watch?v=yIUfntW_TxYhttps://peertube.dodges.it/static/streaming-playlists/hls/480d2b9e-6bfa-4310-8dfd-f49d75d2dc81/85471dc5-2b8e-4c8f-928a-f6eb21eda33f-master.m3u8https://peertube.dodges.it/videos/embed/9U3fmyEtkTJjFNKMHdKssv2471002026-10-24T01:24:05.748ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cmkVQ31ZwS2xLK4wDLgET92026-10-22T13:45:17.849Zhttps://peertube.dodges.it/lazy-static/thumbnails/99530a17-219c-4a62-815b-159a9ce6709c.jpgDEF CON 33 Recon Village - Mapping the Shadow War From Estonia to Ukraine - Evgueni Erchov--- Mirrored from YouTube: https://www.youtube.com/watch?v=y-1_nKM8DRQhttps://peertube.dodges.it/static/streaming-playlists/hls/5bebae88-866e-4941-8536-5395d987c826/b101c8da-7f43-4783-8908-7c65e9ca6fb9-master.m3u8https://peertube.dodges.it/videos/embed/cmkVQ31ZwS2xLK4wDLgET91247002026-10-24T01:29:31.640ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/o9czaFF682MwLbdGwsfVT62026-10-22T13:45:53.288Zhttps://peertube.dodges.it/lazy-static/thumbnails/59121271-77e1-4a74-8c05-e35a6896f7fa.jpgDEF CON 33 Recon Village - A Playbook for Integration Servers - Ryan Bonner, Guðmundur Karlsson--- Mirrored from YouTube: https://www.youtube.com/watch?v=wgf5GKrY3nchttps://peertube.dodges.it/static/streaming-playlists/hls/b34e21d0-22eb-4708-98d4-7d6a85a6f897/923830d0-ad46-45d8-abcb-6458d4267bed-master.m3u8https://peertube.dodges.it/videos/embed/o9czaFF682MwLbdGwsfVT61321002026-10-24T01:42:25.109ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fnJRUUZE9Atvx4gc2eJzay2026-10-22T13:46:29.619Zhttps://peertube.dodges.it/lazy-static/thumbnails/fc38dbdc-db5c-4127-b94c-bcfc973f32b7.jpgDEF CON 33 Recon Village - Autonomous Video Hunter AI Agents for Real Time OSINT - Kevin Dela Rosa--- Mirrored from YouTube: https://www.youtube.com/watch?v=oHjQSpcP664https://peertube.dodges.it/static/streaming-playlists/hls/7468f962-fb34-48c2-b96a-70e9834af50e/61388085-fdae-43c4-8e43-bb7fa0b30914-master.m3u8https://peertube.dodges.it/videos/embed/fnJRUUZE9Atvx4gc2eJzay1401002026-10-24T01:29:33.897ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qUwbGC2CkFAkpv53HrnRzS2026-10-22T13:47:07.725Zhttps://peertube.dodges.it/lazy-static/thumbnails/f517f315-09da-4b87-9a7b-e0ce636b85cb.jpgDEF CON 33 Recon Village - Inside the Shadows Tracking RaaS Groups, Cyber Threats - John Dilgen--- Mirrored from YouTube: https://www.youtube.com/watch?v=esKyHO5WjPUhttps://peertube.dodges.it/static/streaming-playlists/hls/c9b09b11-4161-470f-91d6-dd95e8b20388/db030c9d-891b-42d5-98f8-92b46606a584-master.m3u8https://peertube.dodges.it/videos/embed/qUwbGC2CkFAkpv53HrnRzS1950002026-10-24T01:42:27.420ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/a9KPGouNj9QHgs8BStdVaS2026-10-22T13:47:51.009Zhttps://peertube.dodges.it/lazy-static/thumbnails/a5f1bf9a-c750-4f32-959c-d0ba9955ff37.jpgDEF CON 33 Recon Village - How to Become One of Them: Deep Cover Ops - Sean Jones, Kaloyan Ivanov--- Mirrored from YouTube: https://www.youtube.com/watch?v=aSOiPxOBs1Ehttps://peertube.dodges.it/static/streaming-playlists/hls/4a1b345f-8edb-49d6-a1ba-98fd872696c0/4c99db7f-5f8b-484b-9430-24acf2874647-master.m3u8https://peertube.dodges.it/videos/embed/a9KPGouNj9QHgs8BStdVaS2617002026-10-24T02:09:34.171ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4gPnBsY8cjBqcWXPMHi3VM2026-10-22T13:48:33.790Zhttps://peertube.dodges.it/lazy-static/thumbnails/631fefe3-6300-4db1-8381-8aef4ed7c4e3.jpgDEF CON 33 Recon Village - CTI Agent Automated Battlecards from CTI Reports - Mohamed Nabeel--- Mirrored from YouTube: https://www.youtube.com/watch?v=Y8xMr2JwyjUhttps://peertube.dodges.it/static/streaming-playlists/hls/1a80c456-1e86-488f-8df3-1f21fa125b0f/182b070d-cd39-43fd-a88b-e9adbbf95deb-master.m3u8https://peertube.dodges.it/videos/embed/4gPnBsY8cjBqcWXPMHi3VM1510002026-10-24T02:09:37.755ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/83k1rkDhDFBQaLC1jvfYoZ2026-10-22T18:23:02.525Zhttps://peertube.dodges.it/lazy-static/thumbnails/2f424ae9-a0ef-4ec2-b4aa-154d3e723fcd.jpgDEF CON 32 - Inside the FBI’s Secret Encrypted Phone Company ‘Anom’ - Joseph CoxIn 2018, a secure communications app called Anom started to gain popularity among organized criminals. Soon, top tier drug traffickers were using it all over the world. Because they thought their messages were secure, smugglers and hitmen coordinated high stakes crimes across the platform. But Anom had a secret: it was secretly run by the FBI. For years Joseph Cox has investigated the inside story of Anom, speaking to people who coded the app, those who sold it, criminals who chatted across it, and the FBI agents who surreptitiously managed it. This new talk, building on details from his recent book DARK WIRE, will include never-before-published technical details on how the Anom network functioned, how the backdoor itself worked, and how Anom grew to such a size that the FBI started to lose control of its own creation. It will also reflect on how police have entered a new phase of compromising entire encrypted phone networks, with little to no debate from the public, and provide critical insight on what really happens when authorities introduce a backdoor into a telecommunications product. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uFyk5UOyNqIhttps://peertube.dodges.it/static/streaming-playlists/hls/39032c06-16b3-4b95-8402-4b16d6d02b55/5cbaf36c-8b36-4848-8f05-85f72e66fbbd-master.m3u8https://peertube.dodges.it/videos/embed/83k1rkDhDFBQaLC1jvfYoZ2363002026-10-24T02:29:43.561ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/suPvxJcPUHMVVYyq9RLzFJ2026-10-22T18:27:22.356Zhttps://peertube.dodges.it/lazy-static/thumbnails/4a4dc408-47e9-404b-bebb-4f3cf6196e64.jpgDEF CON 33 - Kill List: Hacking an Assassination Site on the Dark Web - Carl Miller, Chris MonteiroFour years ago, Chris found a vulnerability with a murder for hire site on the dark net. He could exploit that vulnerability to intercept the murder orders that were being placed: names, addresses, pattern of life information, photos, and, in some cases, bitcoin payments. He reached out to Carl for help, and a small team was built in secret to intercept and triage these orders. However, after their warnings to the police fell on deaf ears, they ultimately decided to warn the targets on the kill list directly. After an initial series of successes, the investigation expanded rapidly and they formed a global cooperation with the FBI and police forces around the world, resulting over 175 murder orders being disclosed, 34 arrests 28 convictions and over 180 years of prison time being sentenced. This talk will be about those years: about the dangers and threats the team had to navigate, the times of isolation when the police wouldn’t take them seriously, about raids in Romania to uncover the cyber-criminal gang running the site and the psychological impact of racing against time to try to stop people getting murdered. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cYZmRp90hsshttps://peertube.dodges.it/static/streaming-playlists/hls/d693b59e-54a9-4fd8-bf50-98983cfb3294/cae3defb-cd90-4b39-ade0-fc11bbce16a4-master.m3u8https://peertube.dodges.it/videos/embed/suPvxJcPUHMVVYyq9RLzFJ1975002026-10-24T02:29:50.854ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6TQcyqKCD1V9FQ1Ypggier2026-10-22T18:28:39.997Zhttps://peertube.dodges.it/lazy-static/thumbnails/e1128267-9cf0-4bab-a14c-860d28bb0e99.jpgDEF CON 22 - Deviant Ollam & Howard Payne - Elevator Hacking - From the Pit to the PenthouseElevator Hacking - From the Pit to the Penthouse Deviant Ollam The CORE Group Howard Payne The CORE Group Throughout the history of hacker culture, elevators have played a key role. From the mystique of students at MIT taking late-night rides upon car tops (don't do that, please!) to the work of modern pen testers who use elevators to bypass building security systems (it's easier than you think!) these devices are often misunderstood and their full range of features and abilities go unexplored. This talk will be an in-depth explanation of how elevators work... allowing for greater understanding, system optimizing, and the subversion of security in many facilities. Those who attend will learn why an elevator is virtually no different than an unlocked staircase as far as building security is concerned! While paying the bills as a security auditor and penetration testing consultant with his company, The CORE Group, Deviant Ollam is also member of the Board of Directors of the US division of TOOOL, The Open Organisation Of Lockpickers. Deviant runs the Lockpicking Village with TOOOL at HOPE, DEFCON, ShmooCon, etc, and he has conducted physical security training sessions for Black Hat, DeepSec, ToorCon, HackCon, ShakaCon, HackInTheBox, ekoparty, AusCERT, GovCERT, CONFidence, the United States Military Academy at West Point, and the United States Naval Academy at Annapolis. His favorite Amendments to the US Constitution are, in no particular order, the 1st, 2nd, 9th, & 10th. Twitter: @deviantollam, @TCGsec Howard Payne is an elevator consultant from New York specializing in code compliance and accident investigations. He has logged over 9,000 hours examining car-tops, motor rooms, and hoistways in cases ranging from minor injuries to highly-publicized fatalities, and has contributed to forensic investigations that have been recognized by local, State, and Federal courts. Howard has appeared on national broadcast television making elevators do things they never sh...https://peertube.dodges.it/static/streaming-playlists/hls/2fba5456-37cf-4884-b65d-4aca1153ac17/c819d640-81ba-4a71-b8c8-1fe996b82f2a-master.m3u8https://peertube.dodges.it/videos/embed/6TQcyqKCD1V9FQ1Ypggier3616002026-10-24T02:51:21.462ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/2iSeNwjDe633MeCfQCAvmE2026-10-22T18:34:08.356Zhttps://peertube.dodges.it/lazy-static/thumbnails/de7ea9af-a53d-41d3-baf7-cb0cec6fc963.jpgBill Swearingen - HAKC THE POLICE - DEF CON 27 ConferencePULL OVER! No, it is a cardigan, but thanks for noticing! After getting a nasty speeding ticket, OG SecKC HA/KC/ER hevnsnt decided enough was enough, and set out to fully understand police speed measurement devices, and develop homebrew countermeasures that are legal in some states (and some that are not). Come learn how police RF (X, K, KA) and Laser speed detection systems work and how to implement your own homebrew jamming countermeasures on the cheap, essentially making your vehicle invisible to law enforcement. HOP IN and BUCKLE UP, this talk is going to FUEL your hardware hacking desires! You better be able to think fast to keep up with this talk and prepare to get home in record time. Bill Swearingen Bill Swearingen (hevnsnt) has been in the hacking scene for decades, which is odd because his twitter profile says he is only 23 years old. Having spent his life dedicated to understanding how how things work, he is has focused this curiosity and knowledge to take advantage of our world in any way possible. His interests have always been focused on hardware hacking and loves releasing easy to replicate projects using cheap computing platforms such as Arduino and RaspberryPi. Twitter: @hevnsnt --- Mirrored from YouTube: https://www.youtube.com/watch?v=vQtLms02PFMhttps://peertube.dodges.it/static/streaming-playlists/hls/0a97be35-15d3-4c5d-937c-47686fcb17d2/cfade945-cf4d-4f94-b388-375a040ec144-master.m3u8https://peertube.dodges.it/videos/embed/2iSeNwjDe633MeCfQCAvmE2477002026-10-24T02:51:26.226Zcomputer securityhackerDEF CON 2019hacking conferencehacker communityYESDEFCONNOhttps://peertube.dodges.it/w/xwZkxv3L5M7LEVGRXe5dKk2026-10-22T18:34:46.651Zhttps://peertube.dodges.it/lazy-static/thumbnails/4d93c902-f5e2-47fe-b2ca-20947f0a3648.jpgDEF CON 23 - Robinson and Mitchell - Knocking my neighbors kids cruddy drone offlineMy neighbor’s kid is constantly flying his quad copter outside my windows. I see the copter has a camera and I know the little sexed crazed monster has been snooping around the neighborhood. With all of the hype around geo-fencing and drones, this got me to wondering: Would it be possible to force a commercial quad copter to land by sending a low-level pulse directly to it along the frequencies used by GPS? Of course, radio signal jamming is illegal in the U.S and, frankly, it would disrupt my electronics, too. In this presentation, we’ll look at some of the research and issues we encountered, when we attempted to force land two commercial drones (the new DJI Phantom 3 and the Parrot Bepop Drone) by sending GPS signals directly at the drones (while staying under the threshold for jamming and not disrupting anyone else). Speaker Bio: Michael Robinson has over 15 years of computer security experience and is currently a computer and mobile device forensic examiner in the Washington, DC area, where he deals with intrusion analysis, incident response, and criminal cases. For over four years he ran IT and IA operations for a Department of Defense agency. He has conducted research on security of mobile devices and is starting to play around in the drone space. He teaches computer forensics at the graduate level at Stevenson University in Maryland. --- Mirrored from YouTube: https://www.youtube.com/watch?v=5CzURm7OpAAhttps://peertube.dodges.it/static/streaming-playlists/hls/ff5ef25b-a302-447e-9e6f-cb8798e9b691/b4257e37-a6cf-4bf2-96ed-e1c3730c7d1f-master.m3u8https://peertube.dodges.it/videos/embed/xwZkxv3L5M7LEVGRXe5dKk2854002026-10-24T02:59:54.248ZDEF CONDEF CON 23DEFCONDC23DC-23YESDEFCONNOhttps://peertube.dodges.it/w/pBim3ooQqPUhiZPcqhoUPy2026-10-22T18:35:59.690Zhttps://peertube.dodges.it/lazy-static/thumbnails/7a1931aa-1ac6-41c3-a7e6-91fdc05be86d.jpgNina Kollars - Confessions of an Nespresso Money Mule - DEF CON 27 ConferenceIn 2018 I somewhat innocently bought very expensive coffee (Nespresso capsules) online from Ebay. What followed was a series of unexpected additional packages from the manufacturer Nespresso and a lurking suspicion that something had gone terribly--if not criminally--wrong as a result of my purchase. This talk chronicles the obnoxious amounts of obsessive research and tracking that became my new hobby--stalking Nespresso fraudsters and my decidedly non-technical attempts at developing a generic search profile and reporting the fraudsters to anyone who would listen, to include : the persons whose identities had been stolen, Nespresso, Ebay, and the FBI. Ultimately I just ended up with a LOT of coffee; a lingering sense that I had committed several crimes; and no faith left in humanity. Nina Kollars Nina Kollars is writing a book about the ways in which hackers contribute to national security. She is a political scientist whose main research is in technological adaptation by users. Kollars is Associate Professor for the Naval War College in the Strategic and Operational Research Department. She conducts research on military weapons and the humans who use them. Largely unsatisfied with sitting still, Kollars has also worked for the Library of Congress' Federal Research Division, the Department of Afro-American Studies at Harvard University, the World Bank, an anti-glare coating factory on the third shift, and volunteers for BSides. She is the former viceroy of the DC strategy group Cigars, Scotch, and Strategy. She is also a certified bourbon steward. Twitter: @nianasavage --- Mirrored from YouTube: https://www.youtube.com/watch?v=2IT2oAzTcvUhttps://peertube.dodges.it/static/streaming-playlists/hls/bf2fe923-6a99-4f9d-aa7a-f3d24b1742c6/8fa3a5d6-f2bb-4913-b9a2-e54394b9b3c5-master.m3u8https://peertube.dodges.it/videos/embed/pBim3ooQqPUhiZPcqhoUPy1195002026-10-24T02:59:56.351ZDC27CONhacker conferencehacker communityDEFYESDEFCONNOhttps://peertube.dodges.it/w/sL9JD4wziNxmpztRh9Fc1D2026-10-22T18:40:54.820Zhttps://peertube.dodges.it/lazy-static/thumbnails/7816cf97-31ed-494d-98a5-8a44681bec2b.jpgDEF CON 32 - From getting JTAG on the iPhone 15 to hacking Apple's USB-C Controller - StacksmashingWith the iPhone 15 & iPhone 15 Pro Apple switched their iPhone to USB-C - and introduced a new proprietary USB-C controller: The ACE3. But the ACE3 does more than just handle USB power delivery: It's a full microcontroller running a full USB stack connected to some of the internal busses of the device, and we even managed to access JTAG on the iPhone 15 through it. It also provides access to UART, the internal SPMI bus, etc. Previous variants of the ACE, namely the ACE2 found in MacBooks, could easily be dumped and analyzed using SWD - and even be persistently backdoored through a software vulnerability we found. On the ACE3 however, Apple upped their game: Firmware updates are personalized, debug interfaces seem to be disabled, and the external flash is validated and does not contain all the firmware. However using a combination of reverse-engineering, RF side-channel analysis and electro-magnetic fault-injection it was possible to gain code-execution on the ACE3 - allowing dumping of the ROM, and analysis of the functionality. This talk will show how to use a combination of hardware, firmware, reverse-engineering, side-channel analysis and fault-injection to gain code-execution on a completely custom chip, enabling further security research on an under-explored but security relevant part of Apple devices. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cFW0sYSo7ZMhttps://peertube.dodges.it/static/streaming-playlists/hls/d8b7b6da-6866-446b-b047-1b0b477bdc09/0cab6b1c-2b15-4cee-8764-06cb3a6cbc00-master.m3u8https://peertube.dodges.it/videos/embed/sL9JD4wziNxmpztRh9Fc1D2214002026-10-24T03:21:04.873ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4RkmwBMMhWSQCa4KLghuH62026-10-22T18:44:46.630Zhttps://peertube.dodges.it/lazy-static/thumbnails/62d0c569-a982-489f-94bd-0b7915a34b5b.jpgDEF CON 33 - Unmasking the Snitch Puck: IoT surveillance tech in the school bathroom - Reynaldo, nyxWith the commoditization of IoT surveillance technology, private and public entities alike have been rushing to put every facet of our lives under surveillance. Unfortunately, schools are no exception in the ongoing privacy race to the bottom. In this talk, we present our analysis of a popular line of IoT vape detectors marketed primarily to schools. Rey first learned of the existence of this device while he was a student in high school, scanning the local network during his lunch break. He became obsessed with the idea of reverse-engineering it, and a couple of years later he got an opportunity when a specimen appeared on eBay. This talk will cover our journey of acquiring the device and doing a hardware teardown. Then, we'll talk about dumping the firmware, examining its behavior, and doing some light reverse-engineering to uncover some fun appsec vulnerabilities. We'll discuss implications of our findings on this particular series of devices, as well as on the ed-tech surveillance industry as a whole. We will release a copy of the device filesystem, as well as our scripts for decrypting OEM firmware and packing custom firmware updates. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WCnojaEpF2Ihttps://peertube.dodges.it/static/streaming-playlists/hls/1f2ec9b9-dfe4-45f5-ba8e-a2107e08646f/b625f69a-14b6-439e-afce-02d83aec34c2-master.m3u8https://peertube.dodges.it/videos/embed/4RkmwBMMhWSQCa4KLghuH62404002026-10-24T03:21:10.723ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ovYtQb9ArYprLcY4Przkfx2026-10-22T18:51:40.556Zhttps://peertube.dodges.it/lazy-static/thumbnails/1c99139b-9d34-4027-83e1-86c5bbfc6300.jpgDEF CON 30 - Sam Bent - Tor - Darknet Opsec By a Veteran Darknet VendorThe hacking subculture's closest relative is that of the Darknet. Both have knowledgeable people, many of whom are highly proficient with technology and wish to remain somewhat anonymous. They are both composed of a vast amount of introverts and abide by the same first rule: “Don’t get caught." Both tend to love Sun Tzu quotes as well. What happens when the hacker mentality discussed in the Hackers Manifesto is applied to things such as OpSec on the Darknet? Over the past decade, there have been many DEF CON talks that have discussed Tor and the Darknet. None have ever come from a Darknet vendor. The approach was more academic, as opposed to economical. Having a background in IT, Infosec, and hacking, the goal is to present a unique perspective from a hacker’s point of view, as we look at how the hacker mentality applied functions in various hostile environments such as a Darknet Vendor, staff member of multiple Darknet Markets, and co-found of Dread, who then later would be a federal prisoner. Shortly after, he talks about how he was able to get himself out of federal prison 3 years early. All of which was possible through the reconnaissance of various systems and methodologies. From the anticipated linguistical analysis that the feds were making of posts on Darknet forums to how to write a motion to a federal judge from a prison cell in order to make him understand what it was like there, we will take a journey through a variety of interesting places and times from a tour guide with unparalleled experience and access. By focusing less on the basics of Tor and more on how insiders operate within it, we will uncover what it takes to navigate this ever-evolving landscape with clever OpSec. In addition to seeing what happens if you get caught. All through the perspective of the hacker spirit that refuses to submit. --- Mirrored from YouTube: https://www.youtube.com/watch?v=01oeaBb85Xchttps://peertube.dodges.it/static/streaming-playlists/hls/b6586d41-e36c-409c-937e-b05a2c42d8cf/8ba95876-da97-44cd-8f54-7be003ee559d-master.m3u8https://peertube.dodges.it/videos/embed/ovYtQb9ArYprLcY4Przkfx2909002026-10-24T03:37:06.252ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pLxicWPA5pdWH7xRvkND2Q2026-10-22T19:02:02.821Zhttps://peertube.dodges.it/lazy-static/thumbnails/7427c02b-e20e-401b-959f-ca0375a5ecb5.jpgBlack Hat Stories | David Oswald, Cyber Security Professor at Durham UniversityIn this episode of Black Hat Stories, David Oswald, Professor in Cyber Security at Durham University, shares why Black Hat is essential for academics at every level. With a background spanning research and real-world security challenges, David has attended Black Hat multiple times and sees it as a unique bridge between academia and industry. Unlike traditional academic conferences, Black Hat offers practical, hands-on insights that bring fresh perspective to research and teaching. Hear David's perspective on how Black Hat connects theory with real-world application and why it's a must-attend for anyone in security and academia. 🎟️Join us at Black Hat USA: https://blackhat.com/us-26/registration.html 🔗 Visit our site: https://blackhat.com/ 📧 Subscribe to our free newsletter: https://messages.blackhat.com/newsletter-subscription #BlackHatStories #BHEU #BlackHat #cybersecurity --- Mirrored from YouTube: https://www.youtube.com/watch?v=U6ZV6m4hOaQhttps://peertube.dodges.it/static/streaming-playlists/hls/c07a33ca-797a-49fa-aac9-b21a1f5774de/9afa48ae-47a8-4340-aa2a-d164a0a39aaf-master.m3u8https://peertube.dodges.it/videos/embed/pLxicWPA5pdWH7xRvkND2Q83002026-10-24T03:37:07.685ZYESBlackhatNOhttps://peertube.dodges.it/w/iPdVVAqFVg2QR17qBmuzm82026-10-22T19:02:46.964Zhttps://peertube.dodges.it/lazy-static/thumbnails/bcf32832-b60c-4629-8dd6-bcb22eb675f0.jpgBlack Hat USA 2025 Promo--- Mirrored from YouTube: https://www.youtube.com/watch?v=2CruX_Nddsghttps://peertube.dodges.it/static/streaming-playlists/hls/9043485a-d050-4400-84a9-a0ff808793b3/bf99c320-563a-446e-8125-30abb850f481-master.m3u8https://peertube.dodges.it/videos/embed/iPdVVAqFVg2QR17qBmuzm838002026-10-24T03:41:20.825ZYESBlackhatNOhttps://peertube.dodges.it/w/gqtgV7L6wd35AiAdjPdu642026-10-22T19:03:55.604Zhttps://peertube.dodges.it/lazy-static/thumbnails/0633cd32-7b2b-4bdf-a0d6-0393febe1bb9.jpgOchko123 - How the Feds Caught Russian Mega-Carder Roman SeleznevBest of Black Hat USA 2017 Briefings Winner How did the Feds catch the notorious Russian computer hacker Roman Seleznev - the person responsible for over 400 point of sale hacks and at least $169 million in credit card fraud? What challenges did the government face piecing together the international trail of electronic evidence that he left? How was Seleznev located and ultimately arrested? This presentation will begin with a review of the investigation that will include a summary of the electronic evidence that was collected and the methods used to collect that evidence. by Harold Chun & Norman Barbosa Read More: https://www.blackhat.com/us-17/briefings/schedule/index.html#ochko123---how-the-feds-caught-russian-mega-carder-roman-seleznev-6677 --- Mirrored from YouTube: https://www.youtube.com/watch?v=6Chp12sEnWkhttps://peertube.dodges.it/static/streaming-playlists/hls/7ce3bd24-1fa6-4062-84a1-7a793367ab25/74db8f74-db8c-4f90-a382-7090ec0b4ea3-master.m3u8https://peertube.dodges.it/videos/embed/gqtgV7L6wd35AiAdjPdu642946002026-10-24T03:41:26.828ZBlackHatInfoSecincident responseInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/guo2rqVU2Td4NomqocJUAr2026-10-22T19:04:30.096Zhttps://peertube.dodges.it/lazy-static/thumbnails/723b755b-7a65-480b-a538-325c5b2be162.jpgBlack Hat Stories | Or Yair, Security Research Team Lead at SafeBreachIn this episode of Black Hat Stories, we sit down with Or Yair, the Security Research Team Lead at SafeBreach. With multiple years of experience attending Black Hat — including presenting at Black Hat Europe 2025 — Or shares his unique perspective on vulnerability research, curiosity, and the real purpose of the Black Hat community. For the past five years, Or has focused on vulnerability research in the Windows environment and third‑party components. He describes the research process as unpredictable and challenge‑driven — “like living in an escape room” — where success is never guaranteed, but the chase is part of the thrill. Or also highlights what makes Black Hat truly shine: its ability to bring impact to the security industry. By attending talks on topics he wouldn’t normally explore, he gains insights that lead to faster breakthroughs and stronger research down the line. 🔗 Visit our site: https://blackhat.com/ 📧 Subscribe to our free newsletter: https://messages.blackhat.com/newsletter-subscription #BlackHatStories #BHEU #BlackHat #cybersecurity --- Mirrored from YouTube: https://www.youtube.com/watch?v=rNtuyrXPIc0https://peertube.dodges.it/static/streaming-playlists/hls/7d6f7a8d-c272-4eb3-9455-f69376248f1d/926122b0-5b01-4d55-afaf-cc48fa50892d-master.m3u8https://peertube.dodges.it/videos/embed/guo2rqVU2Td4NomqocJUAr109002026-10-24T04:19:06.595ZYESBlackhatNOhttps://peertube.dodges.it/w/3yV1PpJStWi895tzd55jyZ2026-10-22T19:05:00.227Zhttps://peertube.dodges.it/lazy-static/thumbnails/ede61d20-23ab-4876-9d46-f7f3d0dac743.jpgDefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll40 years ago today, I tripped over a 75-cent accounting glitch in a Unix system. That tiny clue led to a year-long chase across networks, modem banks, and international borders, ultimately uncovering a crew of German hackers working for the East German Stasi and the Soviet KGB. We had no budget, no roadmap, and no “cyber” anything. We improvised with soldering irons, shell scripts, logbooks, curiosity, and far too much coffee. Let’s revisit the chase – not just to remember, but to ask what changed, what didn’t, and why it still matters. --- Mirrored from YouTube: https://www.youtube.com/watch?v=656058JxTM0https://peertube.dodges.it/static/streaming-playlists/hls/14cabfc2-1d1e-41f9-8571-698ccd803621/8bc5e4d9-c97b-4af0-b54a-ad0d5da55e83-master.m3u8https://peertube.dodges.it/videos/embed/3yV1PpJStWi895tzd55jyZ3426002026-10-24T04:34:45.900ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/14FP7eoSALShWrbAXLhe9z2026-10-22T19:05:41.808Zhttps://peertube.dodges.it/lazy-static/thumbnails/dbd441b7-d790-4b94-b835-c1ee417ace6f.jpgPulling Back the Curtain on Airport Security: Can a Weapon Get Past TSA?By Billy Rios Every day, millions of people go through airport security. While it is an inconvenience that could take a while, most are willing to follow the necessary procedures if it can guarantee their safety. Modern airport security checkpoints use sophisticated technology to help the security screeners identify potential threats and suspicious baggage. Have you ever wondered how these devices work? Have you ever wondered why an airport security checkpoint was set up in a particular configuration? Join us as we present the details on how a variety of airport security systems actually work, and reveal their weaknesses. We’ll present what we have learned about modern airport security procedures, dive deep into the devices used to detect threats, and we’ll present some the bugs we discovered along the way. --- Mirrored from YouTube: https://www.youtube.com/watch?v=hbqVNlwfjxohttps://peertube.dodges.it/static/streaming-playlists/hls/0083c435-f2e0-4a19-9ca7-5cc4f80455e5/b2c85166-a7e9-4459-b380-b32436b585a8-master.m3u8https://peertube.dodges.it/videos/embed/14FP7eoSALShWrbAXLhe9z1913002026-10-24T05:06:33.750ZBlack Hat USA 2014BlackHatBlack HatInformation SecurityInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/8Q2LY1SU63VBZtiHYv1epF2026-10-22T19:06:08.017Zhttps://peertube.dodges.it/lazy-static/thumbnails/30f195bf-13fa-4f7f-aff9-52093d4633f6.jpgBlack Hat | Connect. Learn. Lead in CybersecuritySince 1997, Black Hat has been the global stage for cutting-edge cybersecurity. With events across the US, Europe, Asia, the Middle East & Africa, and Canada, we bring together top minds to share the latest research, trends, and innovations. Whether you're a seasoned pro, a rising talent, or a tech innovator—Black Hat delivers: • Expert-led Briefings & Trainings, handpicked by our independent Black Hat Review Board • Networking with thousands of security professionals • The latest Arsenal tools in our Business Hall • Career connections & exclusive Summits Join the community shaping cybersecurity’s next chapter. 🔗 blackhat.com #BlackHat #Cybersecurity #Cybersecurity #TechConference #BHEU #BHUSA #BHASIA #Sectorca #BlackHatTrainings --- Mirrored from YouTube: https://www.youtube.com/watch?v=2G9dyPgnOUMhttps://peertube.dodges.it/static/streaming-playlists/hls/3f64c400-56e9-4493-be93-5f861e7091c1/195edc7c-0afe-45c4-96f3-7e38fee35a5a-master.m3u8https://peertube.dodges.it/videos/embed/8Q2LY1SU63VBZtiHYv1epF94002026-10-24T05:06:41.758ZYESBlackhatNOhttps://peertube.dodges.it/w/iESiELtTN5jFpgPt8jWeEN2026-10-22T19:06:21.664Zhttps://peertube.dodges.it/lazy-static/thumbnails/1790d131-bcb8-40a7-b8fa-288e247354cf.jpgDEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)How much more paranoid are you now than you were four years ago? Warrantless surveillance and large-scale data confiscation have brought fear of the feds filching your files from black helicopter territory into the mainstream. Recent government snatch-and-grabs have run the gamut from remotely imaging foreign servers to straight up domestic coffeeshop muggings, so if you think you might need to discard a lot of data in hurry you're probably right. In their legendary DEF CON 19 presentation Shane Lawson, Bruce Potter and Deviant Ollam kicked off the discussion, and now it's time for another installment. While purging incriminating material residing on spinning disks remains the focus, the research has been expanded to encompass solid state storage and mobile solutions to your terabyte trashing needs. With best efforts to comply with the original constraints, the 2015 update features more analysis of the efficacy of kinetic projectiles, energetic materials and high voltages for saving your freedom at the potential cost of only a redundant body part... or two. Zoz is a robotics engineer, rapid prototyping specialist and lifelong enthusiast of the pyrotechnic arts. Once he learned you could use a flamethrower and a coffee creamer bomb to fake a crop circle for TV he realized there are really no limits to creative destruction. --- Mirrored from YouTube: https://www.youtube.com/watch?v=-bpX8YvNg6Yhttps://peertube.dodges.it/static/streaming-playlists/hls/8f189f2e-cf34-490e-bc06-53228ed7e1ce/6455f2a0-946f-4d0e-9f39-c24e912baed2-master.m3u8https://peertube.dodges.it/videos/embed/iESiELtTN5jFpgPt8jWeEN3189002026-10-24T05:06:30.664ZDEF CON (Conference Series)datadata destructionthermitefireYESDEFCONNOhttps://peertube.dodges.it/w/iTMoHFkA2akhrAreyWrTHZ2026-10-22T19:06:58.326Zhttps://peertube.dodges.it/lazy-static/thumbnails/b8822555-45de-4ca8-96cf-ee485367cd2b.jpgBreaking the x86 Instruction SetA processor is not a trusted black box for running code; on the contrary, modern x86 chips are packed full of secret instructions and hardware bugs. In this talk, we'll demonstrate how page fault analysis and some creative processor fuzzing can be used to exhaustively search the x86 instruction set and uncover the secrets buried in your chipset. Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#breaking-the-x86-instruction-set --- Mirrored from YouTube: https://www.youtube.com/watch?v=KrksBdWcZgQhttps://peertube.dodges.it/static/streaming-playlists/hls/90e6435b-c01c-406c-b1b4-0faa8e2296b7/c3f9d0f3-bd26-435e-85bc-650e6741a58a-master.m3u8https://peertube.dodges.it/videos/embed/iTMoHFkA2akhrAreyWrTHZ2669002026-10-24T04:34:57.979ZBlack HatBHUSAInfoSecInformation SecurityBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/hMJLbqvmdepNLNHqCMGYEe2026-10-22T19:07:43.117Zhttps://peertube.dodges.it/lazy-static/thumbnails/f31850b9-5ada-49b0-b68e-b839fa5447d5.jpgGOD MODE UNLOCKED - Hardware Backdoors in x86 CPUsThis talk will demonstrate what everyone has long feared but never proven: there are hardware backdoors in some x86 processors, and they're buried deeper than we ever imagined possible. While this research specifically examines a third-party processor, we use this as a stepping stone to explore the feasibility of more widespread hardware backdoors. By Christopher Domas Full Abstract & Presentation Materials: https://www.blackhat.com/us-18/briefings/schedule/#god-mode-unlocked---hardware-backdoors-in-x86-cpus-10194 --- Mirrored from YouTube: https://www.youtube.com/watch?v=_eSAF_qT_FYhttps://peertube.dodges.it/static/streaming-playlists/hls/87f50a82-9c29-4b87-b186-4f3f31c19f99/9113d59d-4728-415f-b2fe-fefd5a67c02b-master.m3u8https://peertube.dodges.it/videos/embed/hMJLbqvmdepNLNHqCMGYEe3059002026-10-24T04:34:49.562ZBlack HatBlack Hat USABlack Hat USA 2018BHUSABlack Hat 2018YESBlackhatNOhttps://peertube.dodges.it/w/eCduHyo8TMqHbgW61W3jZi2026-10-22T19:10:13.054Zhttps://peertube.dodges.it/lazy-static/thumbnails/963fedc8-9fa0-4051-92ee-4a2bd95deeff.jpgHacking the Wireless World with Software Defined Radio - 2.0By Balint Seeber "Ever wanted to communicate with a NASA space probe launched in 1978, or spoof a restaurant's pager system? There are surprising similarities! How about use an airport's Primary Surveillance RADAR to build your own bistatic RADAR system and track moving objects? What sorts of RF transactions take place in RFID systems, such as toll booths, building security and vehicular keyless entry? Then there's 'printing' steganographic images onto the radio spectrum... Wireless systems, and their radio signals, are everywhere: consumer, corporate, government, amateur - widely deployed and often vulnerable. If you have ever wondered what sort of information is buzzing around you, this talk will introduce how you can dominate the RF spectrum by 'blindly' analysing any signal, and then begin reverse engineering it from the physical layer up. I will demonstrate how these techniques can be applied to dissect and hack RF communications systems, such as those above, using open source software and cheap radio hardware. In addition, I'll show how long-term radio data gathering can be used to crack poorly-implemented encryption schemes, such as the Radio Data Service's Traffic Message Channel. I'll also look briefly at some other systems that are close to my heart: reversing satellite communications, tracking aircraft using Mode S and visualising local airspace in real-time on a 3D map, monitoring the health of aircraft with ACARS (how many faults have been reported by the next plane you'll be travelling on, e.g. do the toilets work?), and hunting down the source of an interfering clandestine radio transmission. If you have any SDR equipment, bring it along!" --- Mirrored from YouTube: https://www.youtube.com/watch?v=N0p3_ES2dBUhttps://peertube.dodges.it/static/streaming-playlists/hls/6e554757-ffae-4d7d-9126-4d6d0430cc73/7fcf5c6f-8f4e-4e43-88b1-16f8f70646f5-master.m3u8https://peertube.dodges.it/videos/embed/eCduHyo8TMqHbgW61W3jZi3738002026-10-24T05:06:40.583ZBlackHatBlack HatInfoSecInformation SecurityBlack Hat Europe 2014YESBlackhatNOhttps://peertube.dodges.it/w/rdD5kF2dVSCMgh5QS14NiM2026-10-22T19:10:59.697Zhttps://peertube.dodges.it/lazy-static/thumbnails/86eccd9d-633f-47d9-9fa3-6e695682630a.jpgBlack Hat Asia 2025 Video--- Mirrored from YouTube: https://www.youtube.com/watch?v=ZCXGT5a2F_Ahttps://peertube.dodges.it/static/streaming-playlists/hls/cc383d6a-7083-4ce7-b798-f7706f2e0837/ce55fd33-f1fd-4ab5-9999-22888b5d82a3-master.m3u8https://peertube.dodges.it/videos/embed/rdD5kF2dVSCMgh5QS14NiM47002026-10-24T05:06:42.779ZYESBlackhatNOhttps://peertube.dodges.it/w/ps6QF1VF6K1URNpMWXgRdX2026-10-22T19:13:27.998Zhttps://peertube.dodges.it/lazy-static/thumbnails/62c2703d-5180-452c-99c8-7f5a951f927f.jpgDEF CON 31 - Infinite Money Glitch - Hacking Transit Cards - Bertocchi, Campbell, Gibson, HarrisWho likes paying to ride the subway? Sure, you could hop the fare gates, but that can be athletically challenging and simply isn’t cool enough for our tastes. What’s a mischievous and miserly rider to do, then? Hack the fare system of course! In this talk we'll walk you through how we, four high school students and cybersecurity noobs became the first to fully reverse engineer Boston’s CharlieCard fare system and earn ourselves free rides for life… or at least until the system gets fixed, whichever comes first. We’ll start by exploring the trials and tribulations of exploring the hardware behind the CharlieCards. Next, we’ll dive into the emotional rollercoaster of reverse engineering the black box that is a transit card system older than us. We’ll then explain the process of disclosing our findings to a government agency without having to hire a legal team. Finally, we’ll show you a demo of some of the tools we made, including our own portable fare machine! By the end of our talk, regardless of whether you’re an avid RFID hackerman, or a complete noob, we’ll leave you with useful reverse engineering strategies, tips for working with a government agency, and if nothing else, a fun story. --- Mirrored from YouTube: https://www.youtube.com/watch?v=1JT_lTfK69Qhttps://peertube.dodges.it/static/streaming-playlists/hls/bde7202f-8237-40e1-a2b6-e54b620d601b/b1aeedc7-fea9-48f9-b92d-f9e138809adf-master.m3u8https://peertube.dodges.it/videos/embed/ps6QF1VF6K1URNpMWXgRdX2704002026-10-24T05:06:45.540ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fSbpGmqNEkZCXBcJAzH9ur2026-10-22T19:35:21.215Zhttps://peertube.dodges.it/lazy-static/thumbnails/996963c9-e09e-4238-840b-68df2dc095f1.jpgDEF CON 22 - Gene Bransfield - Weaponizing Your Pets: The War Kitteh and the Denial of Service DogWarKitteh: In my job I have to deliver frequent Information Security briefings to both technical and non-technical professionals. I noticed that as the material got more technical, I began to lose the non-technical crowd. Therefore, I started including humorous pictures of cats and made the briefings include stories about those cats. This worked, and I soon became notorious for my presentation style. After delivering one of those presentations, an audience member offered to lend me their cat tracking collar. The collar contained a GPS device and a cellular component and would track your cats movements throughout the neighborhood. Me being the guy I am, I thought “All you need now is a WiFi sniffing device and you'd have a War Kitteh.” I laughed, and started working on it. DoS Dog: With apologies to LadyMerlin (who has since blessed the project) I attended Outerz0ne one year and LadyMerlin brought her dog. They had labeled the puppy the “Denial of Service Dog” as the pooch demanded so much attention that it was impossible to complete any task other than petting the dog. I thought that if you loaded a doggie backpack with different equipment (e.g. a Pineapple) you could create a Denial of Service Dog of a different kind. --- Mirrored from YouTube: https://www.youtube.com/watch?v=DMNSvHswljMhttps://peertube.dodges.it/static/streaming-playlists/hls/78618b52-f9bf-48b3-9786-c90996e82949/763e4cb1-89d1-4d31-a4df-aa0bbdcb2740-master.m3u8https://peertube.dodges.it/videos/embed/fSbpGmqNEkZCXBcJAzH9ur2233002026-10-24T05:14:31.291ZDEF CON (Conference Series)war kittehgene bransfieldwifigpsYESDEFCONNOhttps://peertube.dodges.it/w/wFmuFURVyLEprbaTYnAKUT2026-10-22T19:36:51.966Zhttps://peertube.dodges.it/lazy-static/thumbnails/a27fd265-e091-4241-9fe1-610026b46050.jpgDEF CON 22 - Metacortex and Grifter - Touring the Darkside of the Internet. An Introduction to TorSlides Here: https://www.defcon.org/images/defcon-22/dc-22-presentations/Metacortex-Grifter/DEFCON-22-Metacortex-Grifter-Darkside-of-the-internet.pdf Touring the Darkside of the Internet. An Introduction to Tor, Darknets, and Bitcoin Metacortex SECURITY RESEARCHER Grifter SECURITY RESEARCHER This is an introduction level talk. The talk itself will cover the basics of Tor, Darknets, Darknet Market places, and Bitcoin. I will start by giving the audience an overview of Tor and how it works. I will cover entry nodes, exit nodes, as well as hidden services. I will then show how you connect to Tor on both Linux/OSX and Windows and demo it off. Once we are connected to Tor, I am going to show how to find Tor hidden services and then demo off browsing around some marketplaces. Once the audience has a solid grasp on what the market places offer, I am going to start dealing the process of purchasing something off of it. I will cover bitcoin and bitcoin mining. After we know about how bitcoin works, we will cover purchasing items. I will cover purchasing PO Box's and the pickup of packages. Finally I will finish up with some concerns you may want to be aware of and my recommendations to help make the use of TOR, Bitcoin, and Marketplaces more secure. As a infosec professional by day, Metacortex much prefers his hacker by night persona. Most of his free time time is spent helping run both DC801 and the Salt Lake City based HackerSpace 801 Labs. He loves talking about anything hacking related and does everything he can to help promote and build the northern Utah hacking community. Twitter: @metacortex Grifter has been a DEF CON Goon for 14 years. He is currently the Senior Goon in charge of DEF CON Evening Event space and the DEF CON Villages. In previous lives he served as a Security, Vendor, and Skybox Goon, Coordinator of the DEF CON Movie Channel, former Organizer of the Scavenger Hunt, and Administrator of the DEF CON Forums. He birthed the idea of the DEF CON Vi...https://peertube.dodges.it/static/streaming-playlists/hls/f870cc0e-137e-462f-9bb4-4d3f946164e7/3d80c12f-efe0-4c46-ae0a-77f404d451d0-master.m3u8https://peertube.dodges.it/videos/embed/wFmuFURVyLEprbaTYnAKUT2897002026-10-24T05:14:34.959ZTor (Software)Bitcoin (Currency)DarknetThe Internet (Media Genre)DEFCON Video SeriesYESDEFCONNOhttps://peertube.dodges.it/w/cLTfKAGtAtrAZj1HsaSR2m2026-10-22T19:41:03.973Zhttps://peertube.dodges.it/lazy-static/thumbnails/98c0cb95-907b-4f90-904f-d2bed90660c5.jpgDEF CON 32 - Counter Deception: Defending Yourself in a World Full of Lies - Tom Cross, Greg ContiThe Internet was supposed to give us access to the world's information, so that people, everywhere, would be able to know the truth. But that’s not how things worked out. Instead, we have a digital deception engine of global proportions. Nothing that comes through the screen can be trusted, and even the things that are technically true have been selected, massaged, and amplified in support of someone’s messaging strategy. Deception isn’t just about narratives - we see deception at every layer of the network stack, from spoofed electromagnetic signatures, to false flags in malware, to phony personas used to access networks and spread influence. They hide in our blindspots, exploit our biases, and fill our egos while manipulating our perceptions. How do we decide what is real? This talk examines time-tested maxims that teach the craft of effective deception, and then inverts those offensive principles to provide defensive strategies. We’ll explore ways to counter biases, triangulate information sources, detect narratives, and how hackers can build tools that can change the game. At their best, hackers lift their heads up above the masses to see how the world actually works, not how it purports to work, and then take action to make the world a better place. You’ll leave this talk with practical skills to do just that. --- Mirrored from YouTube: https://www.youtube.com/watch?v=gHqDEMrqTjEhttps://peertube.dodges.it/static/streaming-playlists/hls/5f58d676-b676-4433-aba3-0601a9b4e412/bc67dcca-0252-486e-82a9-69f902785e54-master.m3u8https://peertube.dodges.it/videos/embed/cLTfKAGtAtrAZj1HsaSR2m2574002026-10-24T05:40:45.583ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jhnTw7YKn3KBs2yhqdHJZT2026-10-22T19:42:41.230Zhttps://peertube.dodges.it/lazy-static/thumbnails/5e163fad-df1d-49df-9289-fe082e5399cc.jpgDEF CON 31 - An Audacious Plan to Halt the Internet's Ensh*ttification - Cory DoctorowThe enshittification of the internet follows a predictable trajectory: first, platforms are good to their users; then they abuse their users to make things better for their business customers; finally, they abuse those business customers to claw back all the value for themselves. Then, they die. It doesn't have to be this way. Enshittification occurs when companies gobble each other up in an orgy of mergers and acquisitions, reducing the internet to "five giant websites filled with screenshots of text from the other four" (credit to Tom Eastman!), which lets them endlessly tweak their back-ends to continue to shift value from users and business-customers to themselves. The government gets in on the act by banning tweaking by users - reverse-engineering, scraping, bots and other user-side self-help measures - leaving users helpless before the march of enshittification. We don't have to accept this! Disenshittifying the internet will require antitrust, limits on corporate tweaking - through privacy laws and other protections - and aggressive self-help measures from alternative app stores to ad blockers and beyond! --- Mirrored from YouTube: https://www.youtube.com/watch?v=rimtaSgGz_4https://peertube.dodges.it/static/streaming-playlists/hls/940de2a4-7340-4ea7-9f89-8db095b2462d/36f115a7-1c2b-4843-8c00-691e2bb021cc-master.m3u8https://peertube.dodges.it/videos/embed/jhnTw7YKn3KBs2yhqdHJZT2742002026-10-24T05:40:48.432ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3yt7cTKNrmtGhjbT5LAPcC2026-10-22T19:47:49.654Zhttps://peertube.dodges.it/lazy-static/thumbnails/7188b2e5-5589-4d86-a339-3a36fdbec1fb.jpgDEF CON 32 - Disenshittify or die! How hackers can seize the means of computation - Cory DoctorowThe enshittification of the internet wasn't inevitable. The old, good internet gave way to the enshitternet because we let our bosses enshittify it. We took away the constraints of competition, regulation, interop and tech worker power, and so when our bosses yanked on the big enshittification lever in the c-suite, it started to budge further and further, toward total enshittification. A new, good internet is possible - and necessary - and it needs you. --- Mirrored from YouTube: https://www.youtube.com/watch?v=4EmstuO0Em8https://peertube.dodges.it/static/streaming-playlists/hls/14bac881-e5ae-4886-a66c-92c3dfb62c8e/3de29d0b-6e08-4bbd-a4c6-f2e0c43bef8a-master.m3u8https://peertube.dodges.it/videos/embed/3yt7cTKNrmtGhjbT5LAPcC2990002026-10-24T06:07:13.811ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dTWGVYAGeeCXnu6v4udzve2026-10-22T19:48:23.291Zhttps://peertube.dodges.it/lazy-static/thumbnails/eaa21466-fdfb-4ce7-a643-745176174b73.jpgDEF CON 23 - Chris Rock - I Will Kill YouHave you ever wanted to kill someone? Do you want to get rid of your partner, your boss or your arch nemesis? Perhaps you want to enjoy your life insurance payout whilst you’re still alive. Do you have rich elderly parents that just won’t die quick enough? Or do you want a “Do Over” new identity. Then, this presentation is for you! I’ll provide you with the insight and techniques on how to “kill” someone and obtain a real death certificate and shutdown their lives. It focuses on the lack of security controls that allow any of us to virtually kill off anyone or any number of people. Forget the Dexter way of killing someone, I’ll show you how to avoid the messy clean up and focusing in on the digital aspects. You could be dead right now and not even know it. The presentation will explain the death process and will highlight the vulnerabilities and its implications world-wide. You will learn: How to fill in a doctor’s medical cause of death certificate anonymously. How to become a funeral director and dispose of the body. How to obtain a Death Certificate. Once you’ve wrapped your mind around that concept, I will also show you how to “birth” Virtual identities that obtain real birth certificates. You will learn the birth registration process and the security vulnerabilities associated with this as well. The third and final step of the presentation is “The baby harvest”, a concept that I’ve developed, which involves creating and raising virtual identities. This technique is similar to a shelf company. Virtuals will be “born”, registered with the government complete with birth certificates and social security numbers. They can open up bank accounts, get a virtual job to launder money, pay taxes, obtain home loans and obtain life insurance policies. They can be married to anyone (virtual or not) and be directors of companies…. the list is endless and to complete the circle of life, they can be killed off when they are ready for “harvest” for their life insurance p...https://peertube.dodges.it/static/streaming-playlists/hls/686e4f4d-7329-4829-8c9a-1f9bd6cb1483/5a3accd8-8a2d-411c-a756-1f9be0e1e25f-master.m3u8https://peertube.dodges.it/videos/embed/dTWGVYAGeeCXnu6v4udzve1888002026-10-24T06:07:16.262ZDEF CON (Conference Series)birthdeath certificatefrauddigital lifecycleYESDEFCONNOhttps://peertube.dodges.it/w/gwzu4xxyhWxB8LXrj8978M2026-10-22T19:57:59.953Zhttps://peertube.dodges.it/lazy-static/thumbnails/56fb7b03-e504-4087-825f-7bcf0bde74f5.jpgDEF CON 34 - Hacking AI - Bruce SchneierHumans are hacking AI systems. Humans are hacking with AI systems. But also, AIs are hacking human systems. They’re finding and exploiting vulnerabilities in computer code, and they’ll soon be doing the same with all sorts of other codes. For example: the tax code can be hacked. Vulnerabilities are called loopholes, exploits are called tax avoidance strategies, and black hats are called accountants. Similarly, financial markets can be hacked. So can any system of rules or laws, including democracy itself. AIs will hack these systems at our request, and they’ll also do this innately, organically – and possibly in ways we don’t immediately see. We need to consider a world where increasingly sophisticated hacks or our social, economic, and political systems are discovered computer speeds, and then exploited at computer scale and scope. Right now, our systems of patching these systems operate at a human pace, which won't be good enough. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eEBv0STiYhIhttps://peertube.dodges.it/static/streaming-playlists/hls/7dbe0733-ac31-49e2-b8b9-b4af1acb264b/8c0dc29c-1f7d-464c-a589-c6193078ce0c-master.m3u8https://peertube.dodges.it/videos/embed/gwzu4xxyhWxB8LXrj8978M2674002026-10-24T06:45:32.204ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1yYRqRCt8TcFGHL7RSWMX72026-10-22T20:10:46.359Zhttps://peertube.dodges.it/lazy-static/thumbnails/48171bd3-e4b5-484a-ae15-c1da0c2a8ff9.jpgDEF CON 34 - ESP32 as counter-surveillance platform - Cybertiger, Colonel Panic, The WrewPrivacy should be accessible to all. Historically, counter-surveillance tools have been expensive, complex, and inaccessible to most individuals, often limited to well-funded researchers and costly hardware configurations. The ESP32 offers a transformative alternative. This presentation will demonstrate how an affordable microcontroller has become the foundation for a growing suite of open-source, user-friendly anti-surveillance tools. We will discuss the technical features that make the ESP32 a compelling choice for these applications, including passive 802.11 and Bluetooth monitoring, OUI-based device fingerprinting, and robust cryptographic capabilities. Applications include detecting police body cameras in operational environments, mapping Flock Safety automatic license plate recognition (ALPR) infrastructure, identifying unauthorized drones, detecting radio frequency jamming across 2.4GHz, 5GHz, and cellular bands, and tracking autonomous robots operating with known-vulnerable firmware. These tools are cost-effective and freely available. We will also consider future developments in accessible counter-surveillance hardware, such as the ESP32-S5 with 5GHz support, GPS, displays, haptics, etc. Advancing anti-surveillance culture requires designing devices that individuals are motivated to use and carry. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PcK-TDmzshchttps://peertube.dodges.it/static/streaming-playlists/hls/049ad649-c57c-46c6-bb26-e4e9fe8f4180/8da1571b-f5ea-42b6-a373-6b1f80119f8a-master.m3u8https://peertube.dodges.it/videos/embed/1yYRqRCt8TcFGHL7RSWMX72667002026-10-24T06:50:06.305ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dnZcZnfJ5Ym6Lxd3FVhx3r2026-10-22T20:11:46.339Zhttps://peertube.dodges.it/lazy-static/thumbnails/7c96102c-3413-460b-a8ce-6f1f64bfceaa.jpgDEF CON 19 - Deviant Ollam - Safe to Armed in SecondsDeviant Ollam - Safe to Armed in Seconds: A Study of Epic Fails of Popular Gun Safes https://www.defcon.org/images/defcon-19/dc-19-presentations/Ollam/DEFCON-19-Ollam-Gun-Safes.pdf Hackers like guns. Hackers like locks. Hackers like to tinker with guns and locks. And, most of the time, hackers protect their guns with high-quality locks. However, while it's one thing to own a nice gun safe protected by a high security dial, that sort of solution tends to be best for the firearms that one doesn't have in daily use. Many of us who wear a firearm as part of our daily routine opt to store and secure our carry piece in a separate, more easily-accessible way at the end of the day. This talk is an in-depth evaluation of some of the most popular small firearm lockboxes in-use today. Some rely on mechanical locks, others on biometric locks, and some offer a combination of both. But overall, they tend to fail miserably in the face of any dedicated attacker. Come and learn how your favorite gun lockbox might be preventing your toddler from having an accidental discharge, but why it's not at all likely to repel a criminal or even perhaps a curious teenager. Means of both attacking as well as improving upon the lockboxes you already may own will be demonstrated, and audience members will be invited to participate in all sorts of attacks... live and on stage! Deviant Ollam's first and strongest love has always been teaching. A graduate of the New Jersey Institute of Technology's Science, Technology, & Society program, he is always fascinated by the interplay that connects human values and social trends to developments in the technical world. While earning his BS degree at NJIT, Deviant also completed the History degree program at Rutgers University. While paying the bills as a security auditor and penetration testing consultant with The CORE Group, Deviant is also a member of the Board of Directors of the US division of TOOOL, The Open Organisation Of Lockpickers. Every year...https://peertube.dodges.it/static/streaming-playlists/hls/643f89b8-d2dd-4bd7-acb7-c6e87d80cf99/92315c4b-d775-4fad-99bb-942a036dfb28-master.m3u8https://peertube.dodges.it/videos/embed/dnZcZnfJ5Ym6Lxd3FVhx3r2289002026-10-24T06:53:13.669Z2011Hackerdc19DEF CONDef ConYESDEFCONNOhttps://peertube.dodges.it/w/a35MZHndf2x5WKBkVW7fy82026-10-22T20:12:56.064Zhttps://peertube.dodges.it/lazy-static/thumbnails/379f49fd-a2a3-418f-910f-c7ad32b262a1.jpgDEF CON 22 - Adrian Crenshaw- Dropping Docs on Darknets: How People Got CaughtPresentation available here: https://www.defcon.org/images/defcon-22/dc-22-presentations/Crenshaw/DEFCON-22-Adrian-Crenshaw-Dropping-Docs-on-Darknets-How-People-Got-Caught-UPDATED.pdf Dropping Docs on Darknets: How People Got Caught Adrian Crenshaw TRUSTEDSEC & IRONGEEK.COM Most of you have probably used Tor before, but I2P may be unfamiliar. Both are anonymization networks that allow people to obfuscate where their traffic is coming from, and also host services (web sites for example) without it being tied back to them. This talk will give an overview of both, but will focus on real world stories of how people were deanonymized. Example cases like Eldo Kim & the Harvard Bomb Threat, Hector Xavier Monsegur (Sabu)/Jeremy Hammond (sup_g) & LulzSec, Freedom Hosting & Eric Eoin Marques and finally Ross William Ulbricht/“Dread Pirate Roberts” of the SilkRoad, will be used to explain how people have been caught and how it could have been avoided. Adrian Crenshaw has worked in the IT industry for the last seventeen years. He runs the information security website Irongeek.com, which specializes in videos and articles that illustrate how to use various pen-testing and security tools. He did the cert chase for awhile (MCSE NT 4, CNE, A+, Network+. i-Net+) but stopped once he had to start paying for the tests himself. He holds a Master of Science in Security Informatics, works for TrustedSec as a Senior Security Consultant and is one of the co-founders of Derbycon. Twitter: @irongeek_adc --- Mirrored from YouTube: https://www.youtube.com/watch?v=eQ2OZKitRwchttps://peertube.dodges.it/static/streaming-playlists/hls/492cb074-ce47-4440-af65-81569d64dcef/53853bec-3601-4125-ba0c-09a9063e0a90-master.m3u8https://peertube.dodges.it/videos/embed/a35MZHndf2x5WKBkVW7fy83058002026-10-24T06:50:09.065ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/gMZBpgV4v3iuRA4eAE6GAN2026-10-22T20:13:34.804Zhttps://peertube.dodges.it/lazy-static/thumbnails/07813593-79d8-4981-9926-00570db652a5.jpgDEF CON 24 - Hunter Scott - RT to Win: 50 lines of Python made me the luckiest guy on TwitterIn this talk, I'll share how I won 4 Twitter contests per day, every day, for 9 months straight. I'll discuss the methods I used, the delightfully random and surprising things I won, and how to run a Twitter contest to prevent people like me from winning. Bio: Hunter Scott is an electrical and computer engineer with over 7 years of experience designing and implementing hardware systems. He has lead electrical development on a variety of projects, from robotics to communication systems. He has experience in improvising and quickly building prototype and proof of concept designs as well as implementing mission critical, high reliability designs. He has a degree in computer engineering from Georgia Tech and is currently working at a startup you've never heard of (yet!). His work has been featured in publications such as Gizmodo, Quartz, Engadget, CNN, The Chicago Tribune, The Guardian, and NPR. His other projects can be seen at hscott.net. --- Mirrored from YouTube: https://www.youtube.com/watch?v=iAOOdYsK7MMhttps://peertube.dodges.it/static/streaming-playlists/hls/7fe50d9e-82a7-4fde-960f-630f47f38caa/cb9606dc-2b70-4a17-82e8-4b1b69eb59ee-master.m3u8https://peertube.dodges.it/videos/embed/gMZBpgV4v3iuRA4eAE6GAN1037002026-10-24T06:53:15.315ZDEF CONDEFCONHackingHacker ConferenceComputer SecurityYESDEFCONNOhttps://peertube.dodges.it/w/1xBiLZBmsDTE7kv4ewSrBZ2026-10-22T20:15:54.076Zhttps://peertube.dodges.it/lazy-static/thumbnails/3975f09e-83ee-4bdd-a38d-ccf02d35f934.jpgDEF CON 31 War Stories - Tracking the Worlds Dumbest Cyber Mercenaries - Cooper QuintinFor the last 6 years my colleagues and I have been tracking the activities of the cyber-mercenaries we call Dark Caracal. In this time we have observed them make a number of hilarious mistakes which have allowed us to gain crucial insights into their activities and victims. In this talk we will discuss the story of Dark Caracal, the mistakes they have made, and how they have managed to remain effective despite quite possibly being the dumbest APT to ever exist. --- Mirrored from YouTube: https://www.youtube.com/watch?v=zccAvgC4UxUhttps://peertube.dodges.it/static/streaming-playlists/hls/0469d0b4-e795-460e-a5c4-f0cb6c8b1fbb/e84d0386-f097-42ad-abf7-648dff4d8f63-master.m3u8https://peertube.dodges.it/videos/embed/1xBiLZBmsDTE7kv4ewSrBZ1230002026-10-24T07:03:49.834ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jCdZyQCFPEQkJhqTyspQpu2026-10-22T20:16:57.560Zhttps://peertube.dodges.it/lazy-static/thumbnails/9ac4c884-82ef-46be-a3c8-1cc8fbe0c237.jpgDEF CON 30 - stacksmashing - The Hitchhacker’s Guide to iPhone Lightning and JTAG HackingApple’s Lightning connector was introduced almost 10 years ago - and under the hood it can be used for much more than just charging an iPhone: Using a proprietary protocol it can also be configured to give access to a serial-console and even expose the JTAG pins of the application processor! So far these hidden debugging features have not been very accessible, and could only be accessed using expensive and difficult to acquire "Kanzi" and "Bonobo" cables. In this talk we introduce the cheap and open-source "Tamarin Cable", bringing Lightning exploration to the masses! In this talk we are diving deep into the weeds of Apple Lightning: What’s “Tristar”, “Hydra” and “HiFive”? What’s SDQ and IDBUS? And how does it all fit together? We show how you can analyze Lightning communications, what different types of cables (such as DCSD, Kanzi & co) communicate with the iPhone, and how everything works on the hardware level. We then show how we developed the “Tamarin Cable”: An open-source, super cheap (~$5 and a sacrificed cable) Lightning explorer that supports sending custom IDBUS & SDQ commands, can access the iPhone’s serial-console, and even provides a full JTAG/SWD probe able to debug iPhones. We also show how we fuzzed Lightning to uncover new commands, and reverse engineer some Lightning details hidden in iOS itself. --- Mirrored from YouTube: https://www.youtube.com/watch?v=8p3Oi4DL0eIhttps://peertube.dodges.it/static/streaming-playlists/hls/96d3474d-6975-4cd6-b953-cbe22462180a/6a3012cb-4a8f-40ab-9796-3c901282cf72-master.m3u8https://peertube.dodges.it/videos/embed/jCdZyQCFPEQkJhqTyspQpu1213002026-10-24T07:05:38.237ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5x3fpSTvGGdbyf5dXjphjk2026-10-22T20:17:29.859Zhttps://peertube.dodges.it/lazy-static/thumbnails/18bc7263-6721-43dc-ac38-0a522f0eb6f4.jpgDEF CON 26 - m010ch - Please Do Not Duplicate Attacking the Knox BoxKnox Boxes, along with other rapid entry systems are increasing in popularity, as they allow first responders such as police, fire, and paramedics to quickly gain access to a building in the event of an emergency without having to force entry. These devices rely on the security and key control provided by various locks to prevent unauthorized access to buildings. In this talk, I will focus on vulnerabilities of the widely used Knox Box and Medeco cam lock to key duplication attacks. I will demonstrate how a sufficiently skilled attacker could obtain a key that would grant them access to thousands of residential and commercial buildings throughout America, as well as show off new tools designed to streamline the process of duplicating physical keys using CAD and 3D printing. What could possibly go wrong when someone tries to backdoor an entire city? --- Mirrored from YouTube: https://www.youtube.com/watch?v=f4rPDF993qshttps://peertube.dodges.it/static/streaming-playlists/hls/24b9ff47-672f-4ef3-ac4d-ebbb6de10b7f/18433da4-da5b-4c75-99ff-ef087abea22d-master.m3u8https://peertube.dodges.it/videos/embed/5x3fpSTvGGdbyf5dXjphjk1127002026-10-24T07:05:39.805ZDEFCONCONDEF CONDEFCONDEF CON 26YESDEFCONNOhttps://peertube.dodges.it/w/pWXXWSdJMTCVZRyNdDDitK2026-10-22T20:23:57.575Zhttps://peertube.dodges.it/lazy-static/thumbnails/ecb5ecfe-96e2-4f6f-a1d3-cd87a0f02e9b.jpgDEF CON 33 - Exploiting Shadow Data from AI Models and Embeddings - Patrick WalshThis talk explores the hidden risks in apps leveraging modern AI systems—especially those using large language models (LLMs) and retrieval-augmented generation (RAG) workflows. We demonstrate how sensitive data, such as personally identifiable information (PII) and social security numbers, can be extracted through real-world attacks. We’ll demonstrate model inversion attacks targeting fine-tuned models, and embedding inversion attacks on vector databases among others. The point is to show how PII scanning tools fail to recognize the rich data that lives in these systems and how much of privacy disaster these AI ecosystems really are. --- Mirrored from YouTube: https://www.youtube.com/watch?v=O7BI4jfEFwAhttps://peertube.dodges.it/static/streaming-playlists/hls/c1eed797-dd83-4fff-8a68-ce0d94b522c5/292873d7-87e7-407e-bade-b6f0b244b49b-master.m3u8https://peertube.dodges.it/videos/embed/pWXXWSdJMTCVZRyNdDDitK2902002026-10-24T07:22:31.910ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/o5t6a9FzDaa11RtuVncMpc2026-10-22T20:26:00.157Zhttps://peertube.dodges.it/lazy-static/thumbnails/0d18e384-ae3b-4a01-ba39-7677625b4ce6.jpgDEF CON 22 - Michael Ossmann - The NSA Playset: RF RetroreflectorsSlides Here: https://defcon.org/images/defcon-22/dc-22-presentations/Ossman/DEFCON-22-Michael-Ossmann-Pierce-Toorcamp.pdf Extra materials available here: https://defcon.org/images/defcon-22/dc-22-presentations/Ossman/DEFCON-22-Michael-Ossmann-CONGAFLOCK-schematic.pdf The NSA Playset: RF Retroreflectors Michael Ossmann GREAT SCOTT GADGETS Of all the technologies revealed in the NSA ANT catalog, perhaps the most exotic is the use of RF retroreflectors for over-the-air surveillance. These tiny implants, without any power supply, transmit information intercepted from digital or analog communications when irradiated by radio signals from an outside source. This modern class of radar eavesdropping technology has never been demonstrated in public before today. I've constructed and tested my own RF retroreflectors, and I'll show you how they work and how easy they are to build with modest soldering skills. I'll even bring along some fully assembled units to give away. Now you can add RF retroreflectors to your own NSA Playset and play along with the NSA! Michael Ossmann is a wireless security researcher who makes hardware for hackers. Best known for the open source HackRF, Ubertooth, and Daisho projects, he founded Great Scott Gadgets in an effort to put exciting, new tools into the hands of innovative people. --- Mirrored from YouTube: https://www.youtube.com/watch?v=mAai6dRAtFohttps://peertube.dodges.it/static/streaming-playlists/hls/b2c8b841-2552-4b66-b76d-8ac91ce0343d/3ece4b60-950c-4585-a7c4-1a786b60a885-master.m3u8https://peertube.dodges.it/videos/embed/o5t6a9FzDaa11RtuVncMpc2842002026-10-24T07:22:34.876ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/4yixgEj2a1YZg8oW8iT51d2026-10-22T20:27:55.881Zhttps://peertube.dodges.it/lazy-static/thumbnails/1b2e8fb7-d296-4b06-972b-bf385c6b9140.jpgDEF CON 26 - Svea, Suggy, Till - Inside the Fake Science FactoryFake News has got a sidekick and it's called Fake Science. This talk presents the findings and methodology from a team of investigative journalists, hackers and data scientists who delved into the parallel universe of fraudulent pseudo-academic conferences and journals; Fake science factories, twilight companies whose sole purpose is to give studies an air of scientific credibility while cashing in on millions of dollars in the process. Until recently, these fake science factories have remained relatively under the radar, with few outside of academia aware of their presence; but the highly profitable industry is growing significantly and with it, so are the implications. To the public, fake science is indistinguishable from legitimate science, which is facing similar accusations itself. Our findings highlight the prevalence of the pseudo-academic conferences, journals and publications and the damage they can and are doing to society. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ras_VYgA77Qhttps://peertube.dodges.it/static/streaming-playlists/hls/1cce0687-0706-4508-9bf8-ba90bf1c6984/21a63c84-6db5-4fa1-b2ce-415b8f3ce17e-master.m3u8https://peertube.dodges.it/videos/embed/4yixgEj2a1YZg8oW8iT51d6968002026-10-24T07:50:09.822ZDEFCONdefcon 26DEF CON 26DC26YESDEFCONNOhttps://peertube.dodges.it/w/pRnsJAXFri6WpWnBTAvryX2026-10-22T20:28:35.306Zhttps://peertube.dodges.it/lazy-static/thumbnails/058a779f-8ff6-497f-af81-ebc28f178e54.jpgDEF CON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse EngineeringYour precious 0-day? That meticulously crafted exploit? The perfect foothold? At some point, they'll be captured, dissected, and put on display. Reverse engineers. When they begin snooping through your hard work, it pays to have planned out your defense ahead of time. You can take the traditional defensive route - encryption, obfuscation, anti-debugging - or you can go on the offense, and attack the heart and soul of anyone who dare look at your perfect code. With some carefully crafted assembly, we'll show how to break down a reverse engineer by sending them misleading, intimidating, and demoralizing messages through the control flow graphs of their favorite RE tools - turning their beloved IDA (Hopper, BinNavi, Radare, etc) into unwitting weapons for devastating psychological warfare in reverse engineering. SOeaker bio: Chris is an embedded systems engineer and cyber security researcher, focused on innovative approaches to low level hardware and software RE and exploitation. Twitter: @xoreaxeaxeax --- Mirrored from YouTube: https://www.youtube.com/watch?v=HlUe0TUHOIchttps://peertube.dodges.it/static/streaming-playlists/hls/c126dc14-40f7-414f-848f-1f38d0d4c4c3/693f0a70-0f40-4124-919b-20a1fa7380fe-master.m3u8https://peertube.dodges.it/videos/embed/pRnsJAXFri6WpWnBTAvryX2328002026-10-24T07:50:16.891ZDEF CON 23DEFCONDEF CONDC 23DC23YESDEFCONNOhttps://peertube.dodges.it/w/1BK7RTr7fPjHKHZ7XxTFks2026-10-22T20:30:08.366Zhttps://peertube.dodges.it/lazy-static/thumbnails/fa9b6f60-2fae-4db0-9c5c-14a4b89e49f4.jpgDEF CON 24 - Weston Hecker - Hacking Hotel Keys and Point of Sale SystemsTake a look at weaknesses in Point of sale systems and the foundation of hotel key data and the Property management systems that manage the keys. Using a modified MST injection method Weston will demonstrate several attacks on POS and Hotel keys including brute forcing other guest’s keys from your card information as a start point. And methods of injecting keystrokes into POS systems just as if you had a keyboard plugged into the system. This includes injecting keystrokes to open cash drawer and abusing Magstripe based rewards programs that are used a variety of environments from retail down to rewards programs in Slot Machines. 11 Years Pen-testing, 12 years’ security research and programming experience. Working for a security Company in the Midwest Weston has recently Spoken at DEF CON 22 & 23, Black Hat USA 2016, Enterprise Connect 2016 ISC2-Security Congress, SC-Congress Toronto, HOPE11, BSIDES Boston and over 50 other speaking engagements from telecom Regional events to University’s on security subject matter. Working with A Major University's research project with Department of Homeland Security on 911 emergency systems and attack mitigation. Attended school in Minneapolis Minnesota. Computer Science and Geophysics. Found several vulnerabilities’ in very popular software and firmware. Including Microsoft, Qualcomm, Samsung, HTC, Verizon. --- Mirrored from YouTube: https://www.youtube.com/watch?v=mV_0k9Fh590https://peertube.dodges.it/static/streaming-playlists/hls/04fd9ac2-aaa3-4d40-b125-19cc9b143c2c/8a3a5708-bde5-4f22-a56b-e3979d25f685-master.m3u8https://peertube.dodges.it/videos/embed/1BK7RTr7fPjHKHZ7XxTFks2659002026-10-24T07:50:14.257Zdef condefconDEF CON 24Dc24DC 24YESDEFCONNOhttps://peertube.dodges.it/w/9zyzVrFgNfcDLdWvreohTs2026-10-22T20:31:52.823Zhttps://peertube.dodges.it/lazy-static/thumbnails/378d8d7f-e518-4132-ba57-8dcd923c1a5a.jpgDEF CON 23 - Charlie Miller & Chris Valasek - Remote Exploitation of an Unaltered Passenger VehicleAlthough the hacking of automobiles is a topic often discussed, details regarding successful attacks, if ever made public, are non-comprehensive at best. The ambiguous nature of automotive security leads to narratives that are polar opposites: either we’re all going to die or our cars are perfectly safe. In this talk, we will show the reality of car hacking by demonstrating exactly how a remote attack works against an unaltered, factory vehicle. Starting with remote exploitation, we will show how to pivot through different pieces of the vehicle’s hardware in order to be able to send messages on the CAN bus to critical electronic control units. We will conclude by showing several CAN messages that affect physical systems of the vehicle. By chaining these elements together, we will demonstrate the reality and limitations of remote car attacks. Charlie Miller is a security engineer at Twitter, a hacker, and a gentleman. Back when he still had time to research, he was the first with a public remote exploit for both the iPhone and the G1 Android phone. He is a four time winner of the CanSecWest Pwn2Own competition. He has authored three information security books and holds a PhD from the University of Notre Dame. He has hacked browsers, phones, cars, and batteries. Charlie spends his free time trying to get back together with Apple, but sadly they still list their relationship status as "It's complicated". Twitter: @0xcharlie Christopher Valasek is the Director of Vehicle Security Research at IOActive, an industry leader in comprehensive computer security services. Valasek specializes in offensive research methodologies with a focus in reverse engineering and exploitation. Valasek is known for his extensive research in the automotive field and his exploitation and reverse engineering of Windows. Valasek is also the Chairman of SummerCon, the nation's oldest hacker conference. He holds a B.S. in Computer Science from the University of Pittsburgh. Twitter: @nudehabe...https://peertube.dodges.it/static/streaming-playlists/hls/4578bc1d-119d-4fa6-b47f-19bc969f8008/59ec198f-c004-4030-ab1b-947da0cf532f-master.m3u8https://peertube.dodges.it/videos/embed/9zyzVrFgNfcDLdWvreohTs2781002026-10-24T08:00:02.041ZVehicle (Product Category)hackingDEF CON (Conference Series)vehicle hackingconnected carsYESDEFCONNOhttps://peertube.dodges.it/w/669K89H1JPR3exQBj5Abr72026-10-22T20:33:41.943Zhttps://peertube.dodges.it/lazy-static/thumbnails/e6c3898f-1491-4cf8-ac85-bd366f814925.jpgDEF CON 23 - Van Albert and Banks - Looping Surveillance Cameras through Live EditingThis project consists of the hardware and software necessary to hijack wired network communications. The hardware allows an attacker to splice into live network cabling without ever breaking the physical connection. This allows the traffic on the line to be passively tapped and examined. Once the attacker has gained enough knowledge about the data being sent, the device switches to an active tap topology, where data in both directions can be modified on the fly. Through our custom implementation of the network stack, we can accurately mimic the two devices across almost all OSI layers. We have developed several applications for this technology. Most notable is the editing of live video streams to produce a “camera loop,” that is, hijacking the feed from an Ethernet surveillance camera so that the same footage repeats over and over again. More advanced video transformations can be applied if necessary. This attack can be executed and activated with practically no interruption in service, and when deactivated, is completely transparent. Speaker Bios: Eric is a recent MIT graduate who spends his days building 3D printers for Formlabs and his nights crawling around places he probably shouldn’t. He has taught seminars on lockpicking and physical security vulnerabilities to various audiences at the Institute, and done a small bit of security consulting work. When he runs out of projects to hack on, he reads the leaked NSA ANT catalog for ideas. Zach is also a recent MIT graduate with over 0 years of security experience. He’s particularly interested in the security of embedded devices and knots. In his free time, he enjoys putting household appliances on the internet and refactoring his old code. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RoOqznZUClIhttps://peertube.dodges.it/static/streaming-playlists/hls/2935ccef-4969-4af9-a410-75c3eacbbfa8/a2e32b36-ffc3-4839-9e51-cca9b3b626a0-master.m3u8https://peertube.dodges.it/videos/embed/669K89H1JPR3exQBj5Abr72485002026-10-24T08:00:04.513ZDEF CONDEF CON 23DC23Dc-23hackYESDEFCONNOhttps://peertube.dodges.it/w/fjPdExnE9DDzHXdy8bQzKf2026-10-22T20:36:53.320Zhttps://peertube.dodges.it/lazy-static/thumbnails/7f03339a-601f-46e3-b977-199008363c69.jpgDEF CON 31 - SpamChannel - Spoofing Emails From 2M+ Domains & Virtually Becoming Satan - byt3bl33d3rEver wake up and ask yourself: “Damn, how could I make email security suck even more today”? Tired of your Red Teams phishing emails not landing in your targets inbox? Do you dislike Boston (the city) and love Satan? If you answered yes to any of those questions you should come to this talk! I'll be showing you how to spoof emails from 2 million+ domains (while also “bypassing” SPF & DMARC!) by (ab)using a partnership between Cloudflare and the “biggest transactional email service” on the interwebs. We'll be diving into "edge" serverless applications and the magical world of email security where everything is (still) held up by duct tape, pasta, and marinara sauce. Finally, I’ll be dropping code and releasing a tool that demonstrates how to impersonate emails from 2million+ domains. --- Mirrored from YouTube: https://www.youtube.com/watch?v=NwnT15q_PS8https://peertube.dodges.it/static/streaming-playlists/hls/74006dae-8295-42f5-a41e-16848cb2fff0/61e0be44-9377-4159-9b6c-0180a8e74bbc-master.m3u8https://peertube.dodges.it/videos/embed/fjPdExnE9DDzHXdy8bQzKf2242002026-10-24T08:26:06.054ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/w3TotdXLmwyWCXEK2ok31m2026-10-22T20:42:14.941Zhttps://peertube.dodges.it/lazy-static/thumbnails/7a73215d-57bf-4517-b389-c77d1e2849c9.jpgDEF CON 33 - Stories from a Tor dev - Roger 'arma' DingledineWhat is it actually like to support and balance a global anonymity network, with users ranging from political dissidents to national security analysts? You say it's important to teach law enforcement and governments about privacy and end-to-end encryption, but how do those conversations go in practice? I heard you accidentally got Russia to block all of Azure for a day? Are you ever going to do a Tor talk in China? Wait, who exactly tried to bribe you to leave bugs in Tor to support their criminal schemes? Historically I've tried to downplay some of the excitement from operating the Tor network and teaching the world about Tor, but this year I'm going to try my hand at the "war stories" track. --- Mirrored from YouTube: https://www.youtube.com/watch?v=djM70O0SnsYhttps://peertube.dodges.it/static/streaming-playlists/hls/f35950e2-39f8-4bbc-a05c-e84d288eb314/234f8977-bfb6-4aae-a129-d7d49c84b6ea-master.m3u8https://peertube.dodges.it/videos/embed/w3TotdXLmwyWCXEK2ok31m2567002026-10-24T08:26:18.552ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/44wJBnCu3fMAUBMqJsJGuq2026-10-22T20:45:43.778Zhttps://peertube.dodges.it/lazy-static/thumbnails/a1505f0d-1680-4a50-9b5b-fe76509342a9.jpgDEF CON 30 - Chris Rock - Killer HertzGovernments and the private sector around the world spend billions of dollars on Electronic Counter Measures (ECMs) which include jamming technologies. These jammers are used by police departments to disrupt criminal communication operations as well as in prisons to disrupt prisoners using smuggled in cell phones. The military use jammers to disrupt radar communications, prevent remote IEDs from triggering and radio communications. The private sector use jammers to disrupt espionage in the board room and to protect VIPS from RC-IEDs. What if there was a way of communicating that was immune to jammers without knowing the point of origin. A way of communicating at short to medium distances, an Electronic Counter Countermeasure ECCM to the jammer. Using a custom-built Tx/Rx, I will use the earth’s crust to generate a H-field Near Field Communication (NFC) channel spanning 1-11km away in the sub 9 kHz range to communicate encrypted messages in a jammed environment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ICjSXak50uohttps://peertube.dodges.it/static/streaming-playlists/hls/18c99693-cf5d-47b5-bd95-237adb31c800/d64cfeb8-df28-496d-9648-4e3b6be56723-master.m3u8https://peertube.dodges.it/videos/embed/44wJBnCu3fMAUBMqJsJGuq2293002026-10-24T08:44:38.248ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4rZVxirPMdqLLEDHtSFd7D2026-10-22T20:46:42.165Zhttps://peertube.dodges.it/lazy-static/thumbnails/e8665f24-9a9e-49f7-89d8-2ccac302e563.jpgsmea - Adventures In Smart Buttplug Penetration testing - DEF CON 27 ConferenceAnalysts believe there are currently on the order of 10 billions Internet of Things (IoT) devices out in the wild. Sometimes, these devices find their way up people's butts: as it turns out, cheap and low-power radio-connected chips aren't just great for home automation - they're also changing the way we interact with sex toys. In this talk, we'll dive into the world of teledildonics and see how connected buttplugs' security holds up against a vaguely motivated attacker, finding and exploiting vulnerabilities at every level of the stack, ultimately allowing us to compromise these toys and the devices they connect to. smea smea got his start making video games for closed consoles like the Nintendo DS using whatever hacks were available at the time. At some point consoles started getting actual security features and he transitioned from just making homebrew software to actually making the jailbreaks that let people run it. He's best known for his work on the Nintendo 3DS and Wii U but has also done exploitation work against high profile web browsers and virtualization stacks. Now he hacks buttplugs, apparently. Twitter: @smealum Github: https://github.com/smealum --- Mirrored from YouTube: https://www.youtube.com/watch?v=RnxcPeemHSchttps://peertube.dodges.it/static/streaming-playlists/hls/1becb4e4-3698-4405-a1a6-8f02529fe309/9215c709-0a2b-4932-91c8-3daa3398fee0-master.m3u8https://peertube.dodges.it/videos/embed/4rZVxirPMdqLLEDHtSFd7D2734002026-10-24T08:44:40.756ZDEF CON 27DEFCONcyber securityhackershacking conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vThBoi8K8ZNpZw2gQrHhyy2026-10-22T20:48:11.294Zhttps://peertube.dodges.it/lazy-static/thumbnails/f21e0f94-b0ef-4fe5-a720-98c486d17980.jpgDEF CON 32 - Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows - samy kamkarSashay away from this talk with the knowledge to perform state-of-the-art espionage, no technical background required. In the realm of privilege escalation and data exfiltration, the physical world quietly screams secrets. We'll demystify the fascinating physics behind signals and how various forms of energy--infrared, visible, and ultraviolet light, radio, ultrasound, audible sound, mechanical vibration, and temperature--can be interpreted as waves that unintentionally leak information, even in air-gapped (non-networked) systems. We'll observe how air is in fact not an effective gap or barrier as radio, light, sound, and vibration excitedly travel through it. We'll explore how all electrical signals radiate electromagnetism (light or radio) that can be intercepted and how we can reverse this process, producing electromagnetism to inject desired electrical signals into our target. We'll delve into historical and seminal side-channel/TEMPEST attacks from our friends at the NSA, KGB, and past DEF CON pioneers. You'll learn about the essential electrical and optical components combined for cutting-edge eavesdropping, including what our target is typing from a distance. While others believe they're obtaining noise, we will extract signal, and you'll leave this talk hearing the world in a new light. --- Mirrored from YouTube: https://www.youtube.com/watch?v=R5nMqju6crYhttps://peertube.dodges.it/static/streaming-playlists/hls/f2023092-51f7-4e12-97bd-a9ceb54aead8/63f7bd11-e3a7-4e2a-901f-bd7ab14f5875-master.m3u8https://peertube.dodges.it/videos/embed/vThBoi8K8ZNpZw2gQrHhyy2734002026-10-24T09:08:31.613ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jey75sZxduGG3j1meUgq6p2026-10-22T20:49:27.356Zhttps://peertube.dodges.it/lazy-static/thumbnails/3c12a629-38ad-4272-bdfc-2774db8e558d.jpgDEF CON 31 - Vacuum Robot Security & Privacy Prevent yr Robot from Sucking Your Data - Dennis GieseExactly 5 years ago we were presenting ways to hack and root vacuum robots. Since then, many things have changed. Back then we were looking into ways to use the robots' "dumb" sensors to spy on the user (e.g. by using the ultrasonic sensor). But all our predictions were exceeded by the reality: today's robots bring multiple cameras and microphones with them. AI is used to detect objects and rooms. But can it be trusted? Where will pictures of your cat end up? In this talk we will look at the security and privacy of current devices. We will show that their flaws pose a huge privacy risk and that certification of devices cannot be trusted. Not to worry, though - we will also show you how to protect yourself (and your data) from your robot friends. You will learn on how you can get root access to current flagship models of 4 different vendors. Come with us on a journey of having fun hacking interesting devices while preventing them from breaching your privacy. We will also discuss the risks of used devices, for both old and new users. Finally, we will talk about the challenges of documenting vacuum robots and developing custom software for them. While our Primary goal is to disconnect the robots from the cloud, it is also for users to repair their devices - pwning to own in a wholesome way. --- Mirrored from YouTube: https://www.youtube.com/watch?v=AfMfYOUYZvchttps://peertube.dodges.it/static/streaming-playlists/hls/93a8f33d-bcf4-4116-8db0-7ad474bd6851/072c897e-87e6-46da-ad9b-8795f164e4db-master.m3u8https://peertube.dodges.it/videos/embed/jey75sZxduGG3j1meUgq6p2665002026-10-24T09:12:16.188ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hmh7rf5hmhtv6yinpXHLM72026-10-22T20:50:40.535Zhttps://peertube.dodges.it/lazy-static/thumbnails/46d6d5bb-ac85-4b7c-a617-e8ccaf8d6794.jpgDEF CON 22 - Dr. Philip Polstra - Am I Being Spied On?Is someone spying on you? This talk will present several low-tech ways that you can detect even high-tech surveillance. Topics covered will include: detecting surveillance cameras with your cell phone, signs that you are under physical surveillance, detecting active and passive bugs with low cost devices, and detecting devices implanted inside computers, tablets, and cell phones. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Bc7WoDXhcjMhttps://peertube.dodges.it/static/streaming-playlists/hls/846705ce-cd30-4399-9c10-a75e98f4a060/b2c12a2b-3241-404b-92a9-35277fb064e7-master.m3u8https://peertube.dodges.it/videos/embed/hmh7rf5hmhtv6yinpXHLM72523002026-10-24T09:12:18.586ZDEF CON (Conference Series)Phil PolstraSurveillanceTechnology (Industry)DEFCON Video SeriesYESDEFCONNOhttps://peertube.dodges.it/w/cttKMAQhJtmcXeURz1cZH52026-10-22T20:53:27.125Zhttps://peertube.dodges.it/lazy-static/thumbnails/9da13889-3d7e-4b0b-bc34-cba860bc6d85.jpgBrad Dixon - Cheating in eSports How to Cheat at Virtual Cycling - DEF CON 27 ConferenceAthletes are competing in virtual cycling by riding real bikes on stationary trainers which power the in-game athletic performance. Riders train and compete online against each other. New racing teams are even competing in Union Cycliste Internationale (UCI) sanctioned events. Better at hacking than riding? Me, too. I’ll expand on the dubious achievements of prior cycling cheaters by showing how to use the open source USBQ toolkit to inspect and modify USB communications between the Zwift application and the wireless sensors that monitor and control the stationary trainer. USBQ is a Python module and application that uses standard hardware, such as the Beaglebone Black, to inspect and modify communications between USB devices and the host. You’ll ride away with a lesson on building your own customized USB man-in-the-middle hacking tool, too. Brad Dixon Brad once told his parents that if they gave him a Commodore 64 it would be the last computer he’d ever want. He never got that Commodore 64. Nevertheless Brad managed to become a computer nerd at a young age. Brad studied Computer Engineering at Georgia Tech and jumped into embedded software engineering. He worked for many years helping developers to design embedded Linux into telecom, network, and mobile products. Brad also took a turn as a product manager for embedded development tools and a mobile location analytics product. At Carve he hacks IoT, embedded, and Linux systems. Github: https://github.com/rbdixon --- Mirrored from YouTube: https://www.youtube.com/watch?v=pq9t0VEIMiohttps://peertube.dodges.it/static/streaming-playlists/hls/5ceab62d-c9a6-449e-84de-78be352412ea/3e8f7763-b2c1-4065-b621-7e0e3a912a8f-master.m3u8https://peertube.dodges.it/videos/embed/cttKMAQhJtmcXeURz1cZH52343002026-10-24T09:19:31.316ZDEF CON 2019security conferenceDC27hackerDEF CON 27YESDEFCONNOhttps://peertube.dodges.it/w/ikf5PvnDE5mT23EJEtrYW52026-10-22T20:54:21.903Zhttps://peertube.dodges.it/lazy-static/thumbnails/1e5f7ad4-2ac7-4358-8528-fc52a88955fb.jpgDEF CON 26 - Rob Joyce - NSA Talks CybersecurityThe National Security Agency (NSA) has authorities for both foreign intelligence and cyber security. This unique position gives NSA insights into the ways networks are exploited and the methods that are effective in defending against threats. Over time, NSA has adapted the focus of its security efforts and continues to evolve with technologies and the adversaries we face. The talk will look back at some of the inflection points that have influenced NSA and US Government cybersecurity efforts and look at what is necessary to stay safe in the new environment. --- Mirrored from YouTube: https://www.youtube.com/watch?v=gmgV4r25XxAhttps://peertube.dodges.it/static/streaming-playlists/hls/8c5b2af8-ee1a-44d2-ae04-9652d3c86df8/f8cbf57b-0dde-426e-a76b-208c37bbc163-master.m3u8https://peertube.dodges.it/videos/embed/ikf5PvnDE5mT23EJEtrYW52632002026-10-24T09:19:34.010ZDEFCONDEF CON 26DEFCON26DC26YESDEFCONNOhttps://peertube.dodges.it/w/q1Kdfv9LaQnvRqCSP8Dp3c2026-10-22T20:55:00.114Zhttps://peertube.dodges.it/lazy-static/thumbnails/f6112f9e-c544-4bd7-8bf3-c70835f8fbff.jpgDEF CON 26 - smea - Jailbreaking the 3DS Through 7 Years of HardeningThe 3DS was one of Nintendo's first serious attempts at security, featuring a cool microkernel based OS and actual exploit mitigations. That didn't stop it from getting hacked pretty hard, making it possible for people to write their own homebrew software for the console. But Nintendo isn't one to back off from a fight and, as a result, has put significant effort into not only fixing vulnerabilities but also introducing new security features targeted specifically at killing exploit techniques used by hackers. This talk will describe hacking the console through all these defensive features by walking through a 0-day exploit chain that takes us all the way from zero access to a full system jailbreak. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WNUsKx2euFwhttps://peertube.dodges.it/static/streaming-playlists/hls/c275f52b-585c-44f3-8c80-e917d1b24ad3/8d671d74-ec2b-4951-be7a-81a0d95556ca-master.m3u8https://peertube.dodges.it/videos/embed/q1Kdfv9LaQnvRqCSP8Dp3c2848002026-10-24T09:35:16.586ZDEFCONDEF CONDEFCONDEF CON 26YESDEFCONNOhttps://peertube.dodges.it/w/njaVFss9TijBTw5uCvWTmA2026-10-22T20:58:02.440Zhttps://peertube.dodges.it/lazy-static/thumbnails/d5201dc6-abe5-4848-8ace-1a67c37d5dc0.jpgDEF CON 33 - 'We are currently clean on OPSEC' - The Signalgate Saga - Micah 'micahflee' LeeIn March, former national security advisor Mike Waltz accidentally invited a journalist into his war crimes Signal group with other senior Trump officials. “We are currently clean on OPSEC,” secretary of defense Pete Hegseth posted to the group. In May, Waltz was photographed clandestinely checking his Signal messages under the table during a cabinet meeting. Only it turns out, Waltz was actually using a knock-off of Signal called TM SGNL. Immediately after that, TeleMessage (the company that makes TM SNGL) was hacked, and the hacker was able to access plaintext Signal messages. It was then hacked again, and the second hacker exfiltrated hundreds of gigabytes of data before TeleMessage took its service offline. This talk is about the entire Signalgate saga: the journalist getting invited to the Signal group; Trump officials lying to Congress; the history of TeleMessage, which was founded by a former Israeli spook; an analysis of the TM SGNL source code that proves the company lied about supporting end-to-end encryption; the trivial exploit that was used to extract data from TeleMessage’s archive server; and an analysis of hundreds of gigabytes of memory dumps full of chat logs from TeleMessage customers. --- Mirrored from YouTube: https://www.youtube.com/watch?v=5VlhsT5Kbskhttps://peertube.dodges.it/static/streaming-playlists/hls/ac996aa2-5e4f-47e8-abfe-d5ebfb76bd96/a4ae676a-121f-4a69-99d3-0d83f183c712-master.m3u8https://peertube.dodges.it/videos/embed/njaVFss9TijBTw5uCvWTmA2527002026-10-24T09:35:21.014ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3LN3dS1Ayzx1BbkcFqN1ha2026-10-22T21:01:27.746Zhttps://peertube.dodges.it/lazy-static/thumbnails/55055a3c-ad11-486b-98e4-26b8f2931b55.jpgJmaxxz - Your Car is My Car - DEF CON 27 ConferenceFor many of us, our cars are one of the largest purchases we will ever make. In an always connected world it is natural that we would want to have the convenience of being able to remotely monitor our vehicles: to do everything from remind ourselves exactly where exactly we parked, verify we locked our vehicle, or even remote start it so it will be warmed up (or cooled down) when we get in. There are a variety of vendors offering aftermarket alarm systems that provide these conveniences and offer a peace of mind. But how much can we trust the vendors of these systems are protecting access to our cars in the digital domain? In this talk, Jmaxxz will tell the story of what he found when he looked into one such system. Jmaxxz Jmaxxz works as a software engineer, but is a hacker by passion. He is best known for his work on the August Smart Lock (DEF CON 24 “Backdooring the Frontdoor”). In recent years IoT devices have been the focus of his work. He participated in the IoT village zero day track at DEF CON 24 and DEF CON 25. After enduring several polar vortexes, he decided it was probably time to investigate an IoT remote car starter. twitter: @jmaxxz Website: jmaxxz.com --- Mirrored from YouTube: https://www.youtube.com/watch?v=w8SG2V3n4-Uhttps://peertube.dodges.it/static/streaming-playlists/hls/16736014-98c1-468f-9f59-6f682b6b07f9/2fae4c7f-ad04-4963-bea0-0928aadd09cb-master.m3u8https://peertube.dodges.it/videos/embed/3LN3dS1Ayzx1BbkcFqN1ha2463002026-10-24T09:54:34.384ZhackerDEFhacking conferenceconference speakersCONYESDEFCONNOhttps://peertube.dodges.it/w/toCpC2iDjND6CLQtyvCr9c2026-10-22T21:03:01.734Zhttps://peertube.dodges.it/lazy-static/thumbnails/f52cc614-7339-4c04-8181-8d7109da5a90.jpgDEF CON 31 - Weaponizing Plain Text ANSI Escape Sequences as a Forensic Nightmare - STÖKLogs are a vital component for maintaining application reliability, performance, and security. They serve as a source of information for developers, security teams, and other stakeholders to understand what has happened or gone wrong within an application. However, logs can also be used to compromise the security of an application by injecting malicious content. In this presentation, we will explore how ANSI escape sequences can be used to inject, vandalize, and even weaponize log files of modern applications. We will revisit old terminal injection research and log tampering techniques from the 80-90s. Combine them with new features, to create chaos and mischief in the modern cloud cli’s, mobile, and feature-rich DevOps terminal emulators of today. We will then provide solutions on how to avoid passing on malicious escape sequences into our log files. By doing so, we can ensure that we can trust the data inside our logs, making it safe for operators to use shells to audit files. Enabling responders to quickly and accurately investigate incidents without wasting time cleaning, or having to gather additional data, while reconstructing events. Welcome to this "not so black and white," but rather quite colorful ANSI adventure, and learn how to cause, or prevent a forensic nightmare. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3T2Al3jdY38https://peertube.dodges.it/static/streaming-playlists/hls/ddcf8b24-d663-4651-98ca-21eabc89778f/da2b8969-fc57-48da-905d-1ecc8f732ebe-master.m3u8https://peertube.dodges.it/videos/embed/toCpC2iDjND6CLQtyvCr9c2431002026-10-24T09:54:38.194ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qKvUoW8Yy4BXnqEKYVnbf62026-10-22T21:03:34.155Zhttps://peertube.dodges.it/lazy-static/thumbnails/67f13fa8-24a4-4355-a4df-9e6515386670.jpgDEF CON 31 - Contactless Overflow Code Execution in Payment Terminals & ATMs - Josep RodriguezWe conducted a research to assess the current security of NFC payment readers that are present in most of the major ATM brands, portable point of sales, gas stations, vending machines, transportation and other kind of point of sales in the US, Europe and worldwide. In particular, we found code execution vulnerabilities exploitable through NFC when handling a special application protocol data unit (APDU) that affect most NFC payment vendors. The vulnerabilities affect baremetal firmware devices and Android/Linux devices as well. After waiting more than 1 year and a half once we disclosed it to all the affected vendors, we are ready to disclose all the technical details to the public. This research was covered in the media by wired.com but without the technical details that we can share now https://www.wired.com/story/atm-hack-nfc-bugs-point-of-sale/ Some of the affected vendors are: IDtech - https://idtechproducts.com/ Ingenico - https://www.ingenico.com/ Verifone - https://www.verifone.com/ CPI - https://www.cranepi.com/ BBPOS - https://www.bbpos.com/ Wiseasy - https://www.wiseasy.com/ Nexgo - https://www.nexgoglobal.com/ In this presentation we will describe the vulnerabilities and also demo how the readers can be compromised, using a special Android app we created, by just tapping an Android phone to the reader. We will discuss the consequences such as financial impact in reader’s users/owners and card data stealing once the firmware is compromised. Also, we will show how to compromise the host that is connected to the reader through USB by manipulating the reader’s firmware, chaining stack buffer overflow vulnerabilities in the SDK provided by the vendor that is running in the host machine. Finally, since one of the affected vendors (IDtech) is present in most ATM brands in the world, the talk will cover different scenarios of how possible can be jackpotting ATMs just tapping a smartphone into the reader of the ATM. We have many years of experience jackpot...https://peertube.dodges.it/static/streaming-playlists/hls/c86ebd11-fc1c-40c9-a028-e70dfe42d4f1/d8b46305-d740-4537-b29f-3631ac13c1fe-master.m3u8https://peertube.dodges.it/videos/embed/qKvUoW8Yy4BXnqEKYVnbf62383002026-10-24T10:10:28.168ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rSgZEYKzqaNiho1MkfoLao2026-10-22T21:05:21.693Zhttps://peertube.dodges.it/lazy-static/thumbnails/87e50d65-a5c0-4129-a880-05a2fa976ab6.jpgDEF CON 30 - Andrew Logan - Tracking Military Ghost Helicopters over Washington DCThere's a running joke around Washington D.C. that the "State Bird" is the helicopter. Yet 96% of helicopter noise complaints from 2018-2021 went unattributed: D.C. Residents can not tell a news helicopter from a black hawk. Flight tracking sites remove flights as a paid service to aircraft owners and government agencies; even in the best case these sites do not receive tracking information from most military helicopters due to a Code of Federal Regulations exemption for "sensitive government mission for national defense, homeland security, intelligence or law enforcement." This makes an enormous amount of helicopter flights untraceable even for the FAA and leaves residents in the dark. What if we could help residents identify helicopters? What if we could crowd source helicopter tracking? What if we could collect images to identify helicopters using computer vision? What if we could make aircraft radio as accessible as reading a map? What if we could make spotting helicopters a game that appeals to the competitive spirit of Washingtonians? And what if we could do all of this... on Twitter? --- Mirrored from YouTube: https://www.youtube.com/watch?v=KYuBf2HpXJghttps://peertube.dodges.it/static/streaming-playlists/hls/d1798309-9c4a-4fe8-9f40-aa95dc57c8c0/47ca467b-c1c5-4c16-866e-ed7c3d24cd7c-master.m3u8https://peertube.dodges.it/videos/embed/rSgZEYKzqaNiho1MkfoLao1132002026-10-24T10:10:30.315ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pNgx9jq79SpEj4dDCFHXsm2026-10-22T21:07:20.351Zhttps://peertube.dodges.it/lazy-static/thumbnails/85faa46a-a498-406c-9d78-742d3a0f37b8.jpgDEF CON 33 - China's 5+ year campaign to penetrate perimeter network defenses - Andrew BrandtFor more than five years, firewall vendors have been under persistent, cyclical struggle against a well-resourced and relentless China-based adversary that has expended considerable resources developing custom exploits and bespoke malware expressly for the purpose of compromising enterprise firewalls in customer environments. In this first-of-its-kind presentation, Andrew Brandt will walk attendees through the complete history of the campaign, detailing the full scope of attacks and the countermeasures one firewall vendor developed to derail the threat actors, including detail into the exploits targeting specific firewalls, and malware deployed inside the firewalls as a result of these attacks. Fundamental to this presentation is the fact that the adversary behind this campaign has not targeted only one firewall vendor: Most of the large network security providers in the industry have been targeted multiple times, using many of the same tactics and tools. So this serves not merely as a warning to the entire security industry, but as an urgent call to the companies that make up this industry to collectively combat this ongoing problem. Because at the end of the day, we all face the same threat, and we cannot hope to withstand the tempo and volume of these attacks alone. We must work together. --- Mirrored from YouTube: https://www.youtube.com/watch?v=MsRo12h0mrghttps://peertube.dodges.it/static/streaming-playlists/hls/c0b7fa43-3f9f-48f1-9312-6c6b2e635d4c/f94257b3-620d-41c6-9f65-f12a6bd19883-master.m3u8https://peertube.dodges.it/videos/embed/pNgx9jq79SpEj4dDCFHXsm2111002026-10-24T10:24:34.428ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3tAD33KtLRACNWGBXTbUWb2026-10-22T21:08:22.860Zhttps://peertube.dodges.it/lazy-static/thumbnails/52880bc3-33ef-4c72-8834-e07e93e4472a.jpgDEF CON 23 - Samy Kamkar - Drive it like you Hacked it: New Attacks and Tools to WirelesGary Numan said it best. Cars. They’re everywhere. You can hardly drive down a busy freeway without seeing one. But what about their security? In this talk I’ll reveal new research and real attacks in the area of wirelessly controlled gates, garages, and cars. Many cars are now controlled from mobile devices over GSM, while even more can be unlocked and ignitions started from wireless keyfobs over RF. All of these are subject to attack with low-cost tools (such as RTL-SDR, GNU Radio, HackRF, Arduino, and even a Mattel toy). We will investigate how these features work, and of course, how they can be exploited. I will be releasing new tools and vulnerabilities in this area, such as key-space reduction attacks on fixed-codes, advanced "code grabbers" using RF attacks on encrypted and rolling codes, and how to protect yourself against such issues. By the end of this talk you’ll understand not only how vehicles and the wirelessly-controlled physical access protecting them can be exploited, but also learn about various tools for car and RF research, as well as how to use and build your own inexpensive devices for such investigation. Ladies and gentlemen, start your engines. And other people’s engines. Samy Kamkar is a security researcher, best known for creating The MySpace Worm, one of the fastest spreading viruses of all time. He (attempts to) illustrate terrifying vulnerabilities with playfulness, and his exploits have been branded: “Controversial”, -The Wall Street Journal “Horrific”, -The New York Times “Now I want to fill my USB ports up with cement”, -Gizmodo He’s demonstrated usurping typical hardware for surreptitious means such as with KeySweeper, turning a standard USB wall charger into a covert, wireless keyboard sniffer, and SkyJack, a custom drone which takes over any other nearby drones allowing them to be controlled as a massive zombie swarm. He’s exposed issues around privacy, such as by developing the Evercookie which appeared in a top-secret N...https://peertube.dodges.it/static/streaming-playlists/hls/140cb4b3-cc52-4dda-8343-ac4b949b6d76/6f8b4349-f974-4d9d-a6b0-812493295b8b-master.m3u8https://peertube.dodges.it/videos/embed/3tAD33KtLRACNWGBXTbUWb2731002026-10-24T10:24:36.966ZDEF CON (Conference Series)Samy KamkarAutomotive HacksConnected CarsDEF CON 23YESDEFCONNOhttps://peertube.dodges.it/w/89sgTTQrXsftyddMyU5Nbw2026-10-22T21:11:07.766Zhttps://peertube.dodges.it/lazy-static/thumbnails/46c75f25-5199-4e18-87ea-31fd7deeff9b.jpgWillC - Phreaking Elevators - DEF CON 27 ConferenceThis is a comprehensive dive into the current emergency phones with an in-depth look at the phones used in elevators. This talk will provide unique insight into a topic that hasn't been covered before: Elevator Phones. During this talk, I will discuss the commonality between elevator phone brands. I will cover a new, never before released, set of default passwords these system use. I will show a tool kit and how to use it to access elevator phones locally, as well as remotely. In addition, I will show how to reprogram a phone , how to make the elevator state its location, and how to alert the passenger that help is on the way. Finally, I will demonstrate some attacks, including how you can use elevator phones as listening devices to silently listen to conversations of people inside an elevator. I’m WillC, your elevator operator, let's go for a ride! WillC Will has grown up with a passion for making things. He has done a number of high voltage projects and recently been taking in interest in information security competing in a number of different CTFs across the country. Will also helps run the Car Hacking Village. He works bringing in the infosec and maker community to Macchina. Twitter: @Willcaruana --- Mirrored from YouTube: https://www.youtube.com/watch?v=NoZ7ujJhb3khttps://peertube.dodges.it/static/streaming-playlists/hls/39de1cdc-4eb6-4886-88d7-99124ce861fa/cc7acc1f-3579-4b7d-b8b0-6a4c1abf333c-master.m3u8https://peertube.dodges.it/videos/embed/89sgTTQrXsftyddMyU5Nbw2400002026-10-24T10:38:00.733ZDEFCONDEF CONDEFCONDEF CON 27YESDEFCONNOhttps://peertube.dodges.it/w/8VzX5MtiBCbGeAS8nKXfky2026-10-22T21:13:26.766Zhttps://peertube.dodges.it/lazy-static/thumbnails/ba6ca941-4246-4fcf-b92d-2990d5a02333.jpgDEF CON 23 - Dennis Maldonado - Are We Really Safe? - Bypassing Access Control SystemsAccess control systems are everywhere. They are used to protect everything from residential communities to commercial offices. People depend on these to work properly, but what if I had complete control over your access control solution just by using my phone? Or perhaps I input a secret keypad combination that unlocks your front door? You may not be as secure as you think. The world relies on access control systems to ensure that secured areas are only accessible to authorized users. Usually, a keypad is the only thing stopping an unauthorized person from accessing the private space behind it. There are many types of access control systems from stand-alone keypads to telephony access control. In this talk, Dennis will be going over how and where access control systems are used. Dennis will walk through and demonstrate the tips and tricks used in bypassing common access control systems. This presentation will include attack methods of all nature including physical attacks, RFID, wireless, telephony, network, and more. Dennis Maldonado is a Security Consultant at KLC Consulting. His current work includes vulnerability management, penetration testing, infrastructure risk assessment and security research. Dennis’ focus is encompassing all forms information security into an assessment in order to better simulate a real world attack against systems and infrastructure. As a security researcher and evangelist, Dennis spends his time sharing what he knows about Information Security with anyone willing to learn. Dennis has presented at numerous workshops and meetups in the Houston area. Dennis co-founded Houston Locksport in Houston, Texas where he shares his love for lock-picking physical security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=-cZ7eDV2n5Yhttps://peertube.dodges.it/static/streaming-playlists/hls/402b500b-727f-47e6-9594-e216596bef8e/34103ce1-5e97-4431-aa4e-e3aea48a35e8-master.m3u8https://peertube.dodges.it/videos/embed/8VzX5MtiBCbGeAS8nKXfky2777002026-10-24T10:38:03.736Zphysical securityAccess ControlDEF CON (Conference Series)DEF CON 23DC23YESDEFCONNOhttps://peertube.dodges.it/w/rbJx42NHCy7nPPd2GXf5ni2026-10-22T21:14:52.702Zhttps://peertube.dodges.it/lazy-static/thumbnails/567ac718-0348-42c0-8ec3-484f7fdf6b7b.jpgBill Graydon - Duplicating Restricted Mechanical Keys - DEF CON 27 ConferenceSecure facilities in North America use lock systems like Medeco, Abloy, Assa and Mul-T-Lock partly to resist lock picking, but also to prevent the duplication and creation of unauthorised keys. Places such as the White House and the Canadian Parliament buildings go so far as to use a key profile exclusive to that facility to ensure that no-one is able to obtain key blanks on which to make a copy. However, there are tens of thousands of unrestricted key blank profiles in existence - many match very closely to these restricted key blanks, and can be used instead of the real blanks to cut keys on. Moreover, keys are just pieces of metal - we will present numerous practical techniques to create restricted keys without authorisation - including new attacks on Medeco, Mul-T-Lock and Abloy key control systems. We will touch on all aspects of key control, including patents and interactive elements, and discuss how to defeat them and how facility managers can fight back against these attacks. Bill Graydon Bill Graydon is a principal at GGR Security Consultants, and is active in research in electronic surveillance and alarm systems, human psychology in a secure environment and locking systems analysis. He received a Masters in computer engineering and a certificate in forensic engineering from the University of Toronto, applying this at GGR to develop rigorous computational frameworks to model and improve security in the physical world. Website: https://ggrsecurity.com/DEFCON Robert Graydon Robert is a principal at GGR security. With a strong interest driving him forward, he is researching lock manipulation, picking, bypass, and other vulnerabilities, to discover and evaluate possible flaws or methods of attack. He has well-honed skills such as lock picking, decoding, locksmithing, as well as a thorough understanding of the mechanics and function of many types of high security locks, and electronic security systems and components, allowing him to effectively search for ...https://peertube.dodges.it/static/streaming-playlists/hls/cbf41e18-80a2-48ee-ae52-eb4d81cdb443/deaccf0f-d0b1-4280-9872-0c5db09bf417-master.m3u8https://peertube.dodges.it/videos/embed/rbJx42NHCy7nPPd2GXf5ni2779002026-10-24T10:51:59.975Zhackerscomputer securityDEFCONhacking conferencesecurity conference 2019YESDEFCONNOhttps://peertube.dodges.it/w/6WXYT93UWTdLjBMFoSXa3N2026-10-22T21:15:40.259Zhttps://peertube.dodges.it/lazy-static/thumbnails/c9d5aec0-9d58-406f-9475-b866cb7d990d.jpgDEF CON 32 - Hacking Millions of Modems and Investigating Who Hacked My Modem - Sam CurryOn December 25th, 2021, I discovered that my modem had been hacked after a strange IP address replayed my traffic. I began researching who they were, how it happened, and eventually discovered a vulnerability which allowed me to passively monitor, change configurations, and execute commands on millions of devices. This talk details 3 years of intermittent web research on ISP security and how broadband equipment is becoming scarily centralized. --- Mirrored from YouTube: https://www.youtube.com/watch?v=MmpkfM8I33Qhttps://peertube.dodges.it/static/streaming-playlists/hls/302a5b31-7bf5-4ccd-9c07-44219381019e/f256cfd3-199f-4d8f-af4b-525998fcf22f-master.m3u8https://peertube.dodges.it/videos/embed/6WXYT93UWTdLjBMFoSXa3N1497002026-10-24T10:52:02.313ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wmxuof9uPHAzdJUR56sViV2026-10-22T21:16:21.961Zhttps://peertube.dodges.it/lazy-static/thumbnails/34164676-6b8d-42be-a479-bff89156fd2d.jpgDEF CON 31 - Badge of Shame Breaking into Secure Facilities with OSDP -Dan Petro, David VargasBreaking into secure facilities used to be possible by inserting a listening device (such as an ESPKey) behind an RFID card reader and sniffing the unencrypted Wiegand badge numbers over the wire as they go to the backend controller. The physical security industry has taken notice and there's a new sheriff in town: The encrypted protocol OSDP which is starting to be rolled into production. Surely encryption will solve our problems and prevent MitM attacks right? ... right? In this presentation, we'll demonstrate over a dozen vulnerabilities, concerning problems, and general "WTF"s in the OSDP protocol that let it be subverted, coerced, and totally bypassed. This ranges from deeply in-the-weeds clever cryptographic attacks, to boneheaded mistakes that undermine the whole thing. We will also demonstrate a practical pentesting tool that can be inserted behind an RFID badge reader to exploit these vulnerabilities. Get your orange vest and carry a ladder, because we're going onsite! --- Mirrored from YouTube: https://www.youtube.com/watch?v=zNpM_l5l0sEhttps://peertube.dodges.it/static/streaming-playlists/hls/f5d070f3-6729-49d8-9ec6-794e7bbad6a3/04f8b9a4-9ace-44f6-8cab-9375c3ef8c66-master.m3u8https://peertube.dodges.it/videos/embed/wmxuof9uPHAzdJUR56sViV2566002026-10-24T11:11:35.484ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dqREy79RqqC2Zx1goWdQjQ2026-10-22T21:18:20.521Zhttps://peertube.dodges.it/lazy-static/thumbnails/7b152191-5a4e-49db-920f-d98c751f972f.jpgDEF CON 31 - Warshopping- Phreaking Smart Shopping Cart Wheels Through RF Sniffing - Joseph GabaySmart shopping cart wheels are electronic wheels with a mechanical braking mechanism meant to prevent cart removal or shoplifting, as well as electronics to provide other tracking functions. In a past talk, I’ve discussed the ultra-low-frequency communication these systems use and how to sniff and replay them (and even use your phone’s speaker to “phreak” your shopping cart! This talk explores a new type of smart wheel (the Rocateq system), and focuses on a deeper exploration of the hardware and firmware. On top of capturing new sets of ultra-low-frequency control signals, we’ll look at the 2.4 GHz “checkout” signal that it receives from the register and reverse engineer the PCB - soldering on “fly-wires” to look at the chip-to-chip communication with a logic analyzer. We’ll also use a PICKIT programmer to dump the firmware from the main microcontroller for basic analysis using Ghidra. In addition to the talk, the website where you can play the control signals as audio files on your phone will be updated to include the control codes for the Rocateq brand wheels. --- Mirrored from YouTube: https://www.youtube.com/watch?v=iprBprAFXCkhttps://peertube.dodges.it/static/streaming-playlists/hls/64a61f12-0779-4cee-a5b9-a21c4dc43cc4/51dc654f-e6c1-4322-bd0c-38d1c508b93b-master.m3u8https://peertube.dodges.it/videos/embed/dqREy79RqqC2Zx1goWdQjQ2304002026-10-24T11:11:42.842ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wg3fhuSv7iB6vcyyuyZJ1C2026-10-22T21:19:37.157Zhttps://peertube.dodges.it/lazy-static/thumbnails/8b87cd60-9fee-41ef-a88a-4fc60f84fa46.jpgDEF CON 30 - Sick Codes - Hacking the Farm = Breaking Badly into Agricultural DevicesHacking the farm. In this session, I'll demonstrate tractor-sized hardware hacking techniques, firmware extraction, duplication, emulation, and cloning. We'll be diving into how the inner workings of agricultural cyber security; how such low-tech devices are now high-tech devices. The "connected farm" is now a reality; a slurry of EOL devices, trade secrets, data transfer, and overall shenanigans in an industry that accounts for roughly one-fifth of the US economic activity. We'll be discussing hacking into tractors, combines, cotton harvesters, sugar cane and more. --- Mirrored from YouTube: https://www.youtube.com/watch?v=z2_TLz9TpwYhttps://peertube.dodges.it/static/streaming-playlists/hls/f50bb35f-2e10-407b-b8de-27fc318ceb74/930ed3c5-0360-4ac0-b737-3821efb4088f-master.m3u8https://peertube.dodges.it/videos/embed/wg3fhuSv7iB6vcyyuyZJ1C2879002026-10-24T11:26:07.906ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/kAhncJvE28RKdSiemt2wMp2026-10-22T21:20:09.712Zhttps://peertube.dodges.it/lazy-static/thumbnails/89285adb-15f9-475d-9463-2fd4ec226147.jpgDEF CON 18 - Barnaby Jack - Jackpotting Automated Teller Machines ReduxBarnaby Jack - Jackpotting Automated Teller Machines Redux The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009. Due to circumstances beyond my control, the talk was pulled at the last minute. The upside to this is that there has been an additional year to research ATM attacks, and I'm armed with a whole new bag of tricks. I've always liked the scene in Terminator 2 where John Connor walks up to an ATM, interfaces his Atari to the card reader and retrieves cash from the machine. I think I've got that kid beat. The most prevalent attacks on Automated Teller Machines typically involve the use of card skimmers, or the physical theft of the machines themselves. Rarely do we see any targeted attacks on the underlying software. Last year, there was one ATM; this year, I'm doubling down and bringing two new model ATMs from two major vendors. I will demonstrate both local and remote attacks, and I will reveal a multi-platform ATM rootkit. Finally, I will discuss protection mechanisms that ATM manufacturers can implement to safeguard against these attacks. Barnaby Jack is the Director of Research at IOActive Labs, where he focuses on exploring new and emerging threats, and recommending areas in which to concentrate IOActive's research efforts. Jack has over 10 years experience in the security research space and previously held research positions at Juniper Networks, eEye digital Security, and FoundStone. Over the course of his career, Jack has targeted everything from low-level Windows drivers to the exploitation of Automated Teller Machines. He has subsequently been credited with the discovery of numerous vulnerabilities, and has published multiple papers on new exploitation methods and techniques. For copies of the slides and additional materials please see the DEF CON 18 Archive here: https://defcon.org/html/links/dc-archives/dc-18-archive.html --- Mirrored from YouTube: https://www.youtube.com/watch?v=Fkt...https://peertube.dodges.it/static/streaming-playlists/hls/9ea70223-6397-4caf-906e-7ab949b3b199/daa4cabd-04e6-47a2-a65c-47901f1e5f78-master.m3u8https://peertube.dodges.it/videos/embed/kAhncJvE28RKdSiemt2wMp2395002026-10-24T11:26:14.604ZPresentationsYESDEFCONNOhttps://peertube.dodges.it/w/cWdZMiCJ6APGxdS5nsb6wy2026-10-22T21:21:41.010Zhttps://peertube.dodges.it/lazy-static/thumbnails/b945a3f1-3a8a-4c70-847c-0d2b0f266e19.jpgPhilippe Laulheret - Intro to Hardware Hacking - DEF CON 27 ConferenceFrom small business to large enterprise, VOIP phones can be found on nearly every desk. But how secure are they? What if your phone was spying on every conversation you have? This talk is an introduction to hardware hacking and as a case study I’ll use the [REDACTED] Deskphone, a device frequently deployed in corporate environments. I’ll use it to introduce the tools and methodology needed to answer these questions. During this talk, attendees will get a close up look at the operations of a hardware hacker, including ARM disassembly, firmware extraction using binwalk, micro-soldering to patch an EEPROM and get a root shell over UART, and ultimately uncover an already known decade-old bug that somehow remained unnoticed in the device’s firmware. Beyond the case study I will also address alternative tactics; some did not work, others may have but were not the lowest-hanging fruit. When it comes to hardware hacking, the process is as important as the result; knowing that there are multiple ways to reach the end goal helps researchers remain confident when hurdles arise. After the talk, attendees will have an increased distrust towards always-on devices; however, they will have the background knowledge to investigate the products and systems they encounter daily. Philippe Laulheret Philippe Laulheret is a Senior Security Researcher on the McAfee Advanced Threat Research team. With a focus on Reverse Engineering and Vulnerability Research, Philippe uses his background in Embedded Security and Software Engineering to poke at complex system and get them to behave in interesting ways. He previously talked about Reverse Engineering PSX game at Bsides PDX, created & contributed to some Hardware Hacking CTF when working at Red Balloon Security and shared the love of tearing apart VOIP phones during ad-hoc workshops at multiple conferences (Summer Con, Hardware Hacking Village, etc.) Twitter: @phLaul --- Mirrored from YouTube: https://www.youtube.com/watch?v=HuCbr2588-whttps://peertube.dodges.it/static/streaming-playlists/hls/60a6b2b3-5158-48aa-9bc0-bc89bbb4f7f0/ca5d271b-5d47-4766-aa64-dcd6d5877b1e-master.m3u8https://peertube.dodges.it/videos/embed/cWdZMiCJ6APGxdS5nsb6wy2767002026-10-24T11:44:20.685ZDC27security conference 2019DEF CON 27hacker conferencehacker communityYESDEFCONNOhttps://peertube.dodges.it/w/mHDfF71rj96GDeyWpiunB22026-10-22T21:23:43.393Zhttps://peertube.dodges.it/lazy-static/thumbnails/d1a23e78-af99-44af-abc5-a7242e84cfa4.jpgDEF CON 33 - Cash, Drugs, and Guns - Why Your Safes Aren't Safe - Mark Omo, James RowleyWhen Liberty Safe was found to have provided safe unlock codes to authorities, it made us wonder; how was it even possible for Liberty to do this? Our talk will cover the vulnerabilities we found and journey into the various families of locks made by SecuRam, the OEM of safe locks used by Liberty Safe and other Safe vendors. Our exploration began with an “analog” lock from Liberty Safe but quickly expanded to SecuRam’s “digital” lock lines, where we found a debug port that allowed access to all firmware and data. Through this, we discovered that codes are stored on the externally accessible keypad, rather than securely inside the safe (as well as other issues). These locks, deployed widely in consumer, and commercial safes at major retail chains exhibit vulnerabilities that enable opening them in seconds with a Raspberry Pi. We invite you to our session to see us crack UL-certified High-Security Electronic Locks live! --- Mirrored from YouTube: https://www.youtube.com/watch?v=N3SXVOVUD1shttps://peertube.dodges.it/static/streaming-playlists/hls/a7c739ca-ad62-496c-a5ae-80ea8c2a6033/2783c3d4-fafa-48fa-987e-fb22c828428e-master.m3u8https://peertube.dodges.it/videos/embed/mHDfF71rj96GDeyWpiunB22514002026-10-24T11:52:13.079ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/oYHvxPJzJ4iVq6YaBFKUpm2026-10-22T21:24:32.100Zhttps://peertube.dodges.it/lazy-static/thumbnails/567a73cd-fcbe-4cb1-8f92-9c23e2ab99c0.jpgDEF CON 32 - The Darkest Side of Bug Bounty - Jason HaddixBug bounty is an intricate game between the bug hunter, the clients, and the intermediary. Like any game, it can be hacked. Like some games, it can be unfair. Join Jason as he walks you through the darker secrets of bug bounty , tips and tricks to address them, and in some cases, commiserate that there are just bad realities to the game. Jason will address the problems hardly talked about in the system, from a hacker, program owner, and platform runner. --- Mirrored from YouTube: https://www.youtube.com/watch?v=6SNy0u6pYOchttps://peertube.dodges.it/static/streaming-playlists/hls/ba144862-8560-4d36-aaa7-2792738aece2/edffa01f-60ce-47be-aeaf-46792cdf8716-master.m3u8https://peertube.dodges.it/videos/embed/oYHvxPJzJ4iVq6YaBFKUpm1949002026-10-24T11:52:21.900ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/seEPwktfebmRSmPrRf7q6N2026-10-22T21:27:12.544Zhttps://peertube.dodges.it/lazy-static/thumbnails/5f04f7c3-6834-41dd-9c34-9f10dc86fda0.jpgDEF CON 22 - Dan Kaminsky - Secure Random by DefaultSecure Random By Default Dan Kaminsky Chief Scientist, White Ops As a general rule in security, we have learned that the best way to achieve security is to enable it by default. However, across operating systems and languages, random number generation is always exposed via two separate and most assuredly unequal APIs -- insecure and default, and secure but obscure. Why not fix this? Why not make JavaScript and PHP and Java and Python and even libc rand() return strong entropy? What are the issues stopping us? Should we just shell back to /dev/urandom, or is there merit to userspace entropy gathering? How does fork() and virtualization impact the question? What of performance, and memory consumption, and headless machines? Turns out the above questions are not actually rhetorical. Just because a change might be a good idea doesn't mean it's a simple one. This will be a deep dive, but one that I believe will actually yield a fix for the repeated *real world* failures of random number generation systems. Dan Kaminsky has been a noted security researcher for over a decade, and has spent his career advising Fortune 500 companies such as Cisco, Avaya, and Microsoft.Dan spent three years working with Microsoft on their Vista, Server 2008, and Windows 7 releases. Dan is best known for his work finding a critical flaw in the Internet’s Domain Name System (DNS), and for leading what became the largest synchronized fix to the Internet’s infrastructure of all time. Of the seven Recovery Key Shareholders who possess the ability to restore the DNS root keys, Dan is the American representative. Dan is presently developing systems to reduce the cost and complexity of securing critical infrastructure. --- Mirrored from YouTube: https://www.youtube.com/watch?v=xneBjc8z0DEhttps://peertube.dodges.it/static/streaming-playlists/hls/d476328c-355c-442d-b203-7dce10ce89e0/2c77c71b-2156-4c23-a655-0d923ff19730-master.m3u8https://peertube.dodges.it/videos/embed/seEPwktfebmRSmPrRf7q6N5933002026-10-24T12:01:14.594ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/7MwFBDhGVSHCSNwqVfew282026-10-22T21:27:49.798Zhttps://peertube.dodges.it/lazy-static/thumbnails/02c5e525-2a46-4d40-b156-9873943d32bf.jpgDEF CON 17 - Deviant Ollam - Packing and the Friendly SkiesPacking and the Friendly Skies (Why Transporting your Firearms may be the best way to Safeguard your Tech when you Fly) Deviant Ollam Unicorn Phrenologist Many of us attend cons and other events which involve the transportation of computers, photography equipment, or other expensive tech in our bags. If our destination if far-flung, often air travel is involved... this almost always means being separated from our luggage for extended periods of time and entrusting its care to a litany of individuals with questionable ethics and training. After a particularly horrible episode of baggage pilferage and equipment theft, I made the decision to never again fly with an unlocked bag. However, all "TSA compliant" locks tend to be rather awful and provide little to no real security. It was for this reason that I now choose to fly with firearms at all times. Federal law allows me (in fact, it REQUIRES me) to lock my luggage with proper padlocks and does not permit any airport staffer to open my bags once they have left my possession. In this talk, I will summarize the relevant laws and policies concerning travel with firearms. It's easier than you think, often adds little to no extra time to your schedule (indeed, it can EXPEDITE the check-in process sometimes), and is in my opinion the best way to prevent tampering and theft of bags during air travel. Deviant Ollam While paying the bills as a network engineer and security consultant, Deviant Ollam's first and strongest love has always been teaching. A graduate of the New Jersey Institute of Technology's "Science, Technology, & Society" program, he is always fascinated by the interplay that connects human values and social trends to developments in the technical world. A member of the Board of Directors of the US division of TOOOL (The Open Organization of Lockpickers) Deviant runs the Lockpicking Village at DEFCON and ShmooCon. A fanatical supporter of First Amendment rights who believes that the best way to increase s...https://peertube.dodges.it/static/streaming-playlists/hls/36f235ef-87b3-44a5-b5ed-06e8cd9cda81/5d457a1b-c2fa-48ac-a8e7-e4eb54a5538e-master.m3u8https://peertube.dodges.it/videos/embed/7MwFBDhGVSHCSNwqVfew281120002026-10-24T12:01:16.276Z2009YESDEFCONNOhttps://peertube.dodges.it/w/i9DTKy7NEaRmEnyGnMnv5f2026-10-22T21:28:54.474Zhttps://peertube.dodges.it/lazy-static/thumbnails/2fc3d7e8-659d-42cb-b3d2-a34e050f3a99.jpgDEF CON 25 - Roger Dingledine - Next Generation Tor Onion ServicesMillions of people around the world use Tor every day to protect themselves from surveillance and censorship. While most people use Tor to reach ordinary websites more safely, a tiny fraction of Tor traffic makes up what overhyped journalists like to call the "dark web". Tor onion services (formerly known as Tor hidden services) let people run Internet services such as websites in a way where both the service and the people reaching it can get stronger security and privacy. I wrote the original onion service code as a toy example in 2004, and it sure is showing its age. In particular, mistakes in the original protocol are now being actively exploited by fear-mongering "threat intelligence" companies to build lists of onion services even when the service operators thought they would stay under the radar. These design flaws are a problem because people rely on onion services for many cool use cases, like metadata-free chat and file sharing, safe interaction between journalists and their sources, safe software updates, and more secure ways to reach popular websites like Facebook. In this talk I'll present our new and improved onion service design, which provides stronger security and better scalability. I'll also publish a new release of the Tor software that lets people use the new design. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Di7qAVidy1Yhttps://peertube.dodges.it/static/streaming-playlists/hls/8ae0a8c8-bea3-4c8b-b3ba-3068b04bb842/02238874-28bb-44bc-84fa-cc88cdb324a7-master.m3u8https://peertube.dodges.it/videos/embed/i9DTKy7NEaRmEnyGnMnv5f2587002026-10-24T12:09:41.020ZDEF CON 2017DEF CON 25DEF CONDC25hackersYESDEFCONNOhttps://peertube.dodges.it/w/2KBwmUniU1cSz3fwAWga7v2026-10-22T21:29:45.906Zhttps://peertube.dodges.it/lazy-static/thumbnails/f1de0bfc-7ff6-450c-80b0-1d36b0a784ef.jpgDEF CON 26 - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x86Complexity is increasing. Trust eroding. In the wake of Spectre and Meltdown, when it seems that things cannot get any darker for processor security, the last light goes out. This talk will demonstrate what everyone has long feared but never proven: there are hardware backdoors in some x86 processors, and they're buried deeper than we ever imagined possible. While this research specifically examines a third-party processor, we use this as a stepping stone to explore the feasibility of more widespread hardware backdoors. --- Mirrored from YouTube: https://www.youtube.com/watch?v=jmTwlEh8L7ghttps://peertube.dodges.it/static/streaming-playlists/hls/0e30034b-e875-451e-b4fd-7738db258b35/6221ec1a-7c3b-40b8-8649-09d2431362a1-master.m3u8https://peertube.dodges.it/videos/embed/2KBwmUniU1cSz3fwAWga7v2764002026-10-24T12:09:43.176ZDEFCONDEF CONDEFCONDEF CON 26YESDEFCONNOhttps://peertube.dodges.it/w/kQZmSVUX2EEU4B78mDoobH2026-10-22T21:31:18.128Zhttps://peertube.dodges.it/lazy-static/thumbnails/58c5a99d-c989-495e-b018-9d730344ebdf.jpgDEF CON 23 - Marc Rogers and Kevin Mahaffey - How to Hack a Tesla Model SThe Tesla Model S is the most connected car in the world. It might surprise you to hear that it is also one of the most secure. In this talk we will walk you through the architecture of a Tesla Model S noting things that Tesla got right as well as identifying those that they got wrong. From this talk you will get an intimate understanding of how the many interconnected systems in a Tesla model S work and most importantly how they can be hacked. You will also get a good understanding of the data that this connected car collects and what Tesla does with this telemetry. We will also be releasing a tool that will enable Tesla Model S owners to view and analyse that telemetry in real time. Finally we will also be releasing several 0day vulnerabilities that will allow you to hack a Tesla Model S yourself - both locally and remotely. Note - only one of the 6 vulnerabilities we will discuss and release has been fixed. Disclaimer: With great access comes great responsibility - In other words we are not responsible for any Tesla Model S bricked by over enthusiastic attendees of this talk :) Speaker Bios: Marc Rogers aka Cyberjunky has been a prominent member of the hacking scene since the 80’s. Some of his most notable achievements are co-founding the notorious British hacker group, “The Agents of a Hostile Power” and his role in creating and appearing in the award winning BBC TV series “The Real Hustle”. Marc’s professional career spans more than twenty years, including a decade managing security for the UK operator Vodafone. Marc is currently the principal security researcher for web optimization and security company “CloudFlare. As well as his work in the infosec and telecoms industries, Marc has also been a CISO in South Korea and co-founder of a disruptive Bay Area start-up. Some of Marc’s notable recent hacks include Google Glass, Apple TouchID and most recently the Tesla Model S. Kevin is an entrepreneur and technologist with a background in mobile and web techn...https://peertube.dodges.it/static/streaming-playlists/hls/a0b4af51-61b2-4437-b46a-a34f89425285/63cc5fe3-6d99-419a-ba52-88eee0eeae07-master.m3u8https://peertube.dodges.it/videos/embed/kQZmSVUX2EEU4B78mDoobH2988002026-10-24T12:26:22.695ZDEF CON (Conference Series)Hacker (Character Power)How-to (Website Category)Marc RogersKevin MahaffeyYESDEFCONNOhttps://peertube.dodges.it/w/ghMfe7UFa1VtXSYZeCFqbJ2026-10-22T21:34:09.725Zhttps://peertube.dodges.it/lazy-static/thumbnails/96a8874c-bfe5-4f28-b331-ba84d38c2871.jpgDEF CON 29 - Roy Davis - No Key No PIN No Combo No Problem Pwning ATMs For Fun and ProfitSince the late great Barnaby Jack gave us “Jack Potting” in the late 2000s, there have been several talks on ATM network attacks, USB port attacks, and digital locks attacks which apply to several brands of ATM safes. In this session, I’ll discuss and demonstrate how most of these known attack vectors have been remediated, while several fairly simple attacks against the machine and the safe still remain. We’ll dive into how ATMs work, the steps I went through to become a “licenced ATM operator” which enabled my research, and how I identified the vulnerabilities. I’ll show how, with very little technical expertise and 20 minutes, these attacks lead directly past “secure” and allow attackers to collect a lot more than $200. REFERENCES Barnaby Jack - “Jackpotting Automated Teller Machines” - (2010) from DEFCON - https://www.youtube.com/watch?v=FkteGFfvwJ0 Weston Hecker - “Hacking Next-Gen ATM's From Capture to Cashout” - (2016) from DEFCON - https://www.youtube.com/watch?v=1iPAzBcMmqA Trey Keown and Brenda So - “Applied Cash Eviction through ATM Exploitation” (2020) from DEFCON - https://www.youtube.com/watch?v=dJNLBfPo2V8 Triton - “Terminal Communications Protocol And Message Format Specification” (2004) from Complete ATM Services - tinyurl.com/7nf2fdy5 Rocket ATM - “Hyosung ATM Setup Part 1 - Step by Step” (2018) from Rocket ATM - https://www.youtube.com/watch?v=abylmrBkOGM&t=3s Rocket ATM - “Hyosung ATM Setup Part 2 - Step by Step” (2018) from Rocket ATM - https://www.youtube.com/watch?v=IM9ZG46fwL8 Hyosung - “NH2600 Service Manual v1.0” (2013) From Prineta - https://tinyurl.com/c6jd4hd9 Hyosung - “NH2700 Operator Manual v1.2” (2010) From AtmEquipment.com - https://tinyurl.com/rp2cad8 --- Mirrored from YouTube: https://www.youtube.com/watch?v=9cG-JL0LHYwhttps://peertube.dodges.it/static/streaming-playlists/hls/7bd0dd15-cbdb-44dd-848c-413007a6d586/6822dbf9-347b-4ae8-9414-be1fc362d0f4-master.m3u8https://peertube.dodges.it/videos/embed/ghMfe7UFa1VtXSYZeCFqbJ2833002026-10-24T12:26:26.117ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/5bNWgBQ2N5L6tWP82aNWsR2026-10-22T21:35:09.208Zhttps://peertube.dodges.it/lazy-static/thumbnails/3deff4bd-5132-4f23-b3f0-d2f6c1b227cc.jpgDEF CON 23 - Social Engineering Village - Dave Kennedy - Understanding End-User AttacksUnderstanding End-User Attacks – Real World Examples Dave Kennedy ct: From our own analysis, phishing attacks for the first time are the number one attack vector superseding direct compromises of perimeter devices. Endpoints are now subjective to a number of different types of attacks and it’s all around targeting the user. This talk will walk through a number of targeted attacks that elicit social engineering aspects in order to gain a higher percentage of success against the victims. Additionally, we’ll be covering newer techniques used by attackers to further their efforts to move laterally in environments. Social engineering is here to stay and the largest risk we face as an industry – this talk will focus on how we can get better. Bio: Dave Kennedy is founder of TrustedSec and Binary Defense Systems. Both organizations focus on the betterment of the security industry from an offense and a defense perspective. David was the former Chief Security Officer (CSO) for a Fortune 1000 company where he ran the entire information security program. Kennedy is a co-author of the book “Metasploit: The Penetration Testers Guide,” the creator of the Social-Engineer Toolkit (SET), and Artillery. Kennedy has been interviewed by several news organizations including CNN, Fox News, MSNBC, CNBC, Katie Couric, and BBC World News. Kennedy is the co-host of the social-engineer podcast and on a number of additional podcasts. Kennedy has testified in front of Congress on two occasions on the security around government websites. Kennedy is one of the co-authors of the Penetration Testing Execution Standard (PTES); a framework designed to fix the penetration testing industry. Kennedy is the co-founder of DerbyCon, a large-scale conference in Louisville Kentucky. Prior to Diebold, Kennedy was a VP of Consulting and Partner of a mid-size information security consulting company running the security consulting practice. Prior to the private sector, Kennedy worked for the United States M...https://peertube.dodges.it/static/streaming-playlists/hls/21e6eadf-e229-4042-a313-2a29d0358b4d/64ac84c0-dcf3-49fe-94fb-c53c9571679e-master.m3u8https://peertube.dodges.it/videos/embed/5bNWgBQ2N5L6tWP82aNWsR3077002026-10-24T12:44:34.576ZDEF CON Video SeriesDEF CON ConferenceConference RecordingsDEF CONDEFCONYESDEFCONNOhttps://peertube.dodges.it/w/9ivgvtQn4xKqfsB2Q2cQd32026-10-22T21:36:22.085Zhttps://peertube.dodges.it/lazy-static/thumbnails/240614e6-4532-4ef4-aead-fc9fedde0ea0.jpgDEF CON 30 - Roger Dingledine - How Russia is trying to block TorIn December 2021, some ISPs in Russia started blocking Tor's website, along with protocol-level (DPI) and network-level (IP address) blocking to try to make it harder for people in Russia to reach the Tor network. Some months later, we're now at a steady-state where they are trying to find new IP addresses to block and we're rotating IP addresses to keep up. In this talk I'll walk through what steps the Russian censors have taken, and how we reverse engineered their attempts and changed our strategies and our software. Then we'll discuss where the arms race goes from here, what new techniques the anti-censorship world needs if we're going to stay ahead of future attacks, and what it means for the world that more and more countries are turning to network-level blocking as the solution to their political problems. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YlZZQYLIXe8https://peertube.dodges.it/static/streaming-playlists/hls/433aca3f-cf96-4d22-96da-8a2e08259802/f614076f-f596-41e2-bc8f-6242b080dc39-master.m3u8https://peertube.dodges.it/videos/embed/9ivgvtQn4xKqfsB2Q2cQd32847002026-10-24T12:59:37.586ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/hRGnKxQssYhEJE4smcwXTg2026-10-22T21:37:48.026Zhttps://peertube.dodges.it/lazy-static/thumbnails/6173d5b5-5710-4f89-966f-d1264e736ae5.jpgDEF CON 31 War Stories - The Risks of Pointing Out the Emperor is Buck Naked - Renderman, Tom DangPost 9/11, the phrase “If you see something, say something” became ubiquitous. If you saw something of concern, better to report something that was nothing than let something bad happen. Problem is, no one let the authorities know that they should apply this to the online realm too. Threats of arrest and criminal investigations have the opposite effect and chill anyone from wanting to report security vulnerabilities that affect everyone. Lack of clear reporting paths, misunderstandings, jurisdiction issues, superseding laws, and good old fashioned egos can make trying to do the right thing turn into a nightmare that can cost livelihoods, reputation, criminal charges and even worse, particularly when government systems are involved. This talk will cover the presenters personal experiences with poorly written or a lack of vulnerability disclosure policies with their governments and what it cost them in trying to make things better. The presentation will then move to a discussion about what should be done and what is being done to make sure that reporting a vulnerability doesn’t cost you everything. Anyone who is responsible for writing such disclosure policies or legislation will benefit, but so will any hackers that want to make it safer to report issues they find by advocating for changes. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fL1osBUEScYhttps://peertube.dodges.it/static/streaming-playlists/hls/88828b97-3f41-4306-8ba6-7465f0e3b339/4b09d1c8-ac98-4638-81fe-201acdef78ed-master.m3u8https://peertube.dodges.it/videos/embed/hRGnKxQssYhEJE4smcwXTg2762002026-10-24T12:59:47.107ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4Av6ziADnd8mNr5EmP7ZBd2026-10-22T21:39:07.337Zhttps://peertube.dodges.it/lazy-static/thumbnails/a6d94bbe-fa8c-428b-8eeb-d6976d538651.jpgDEF CON 22 - Nemus - An Introduction to Back Dooring Operating Systems for Fun and TrollingSlides Here: https://www.defcon.org/images/defcon-22/dc-22-presentations/Nemus/DEFCON-22-Lance-Buttars-Nemus-Intro-to-backdooring-OS.pdf An Introduction to Back Dooring Operating Systems for Fun and Trolling Nemus SECURITY RESEARCHER So you want to setup a back door? Have you ever wondered how its done and what you can do to detect back doors on your network and operating systems? Ever wanted to setup a back door to prank a friend?. This presentations will do just that. We will go over the basics of back doors using SSH, NET CAT, Meterpreter and embedding back doors into custom binaries along with the logistics of accessing them after they are in place. Nemus is a security enthusiast at night and spends his days working in the payment card industry developing RESTFul APIs for bill pay using cash payments. Lance works with open source systems, and enjoys setting up and hardening Linux systems. He has over 11 years of experience working in information technology focusing on system administration and software development and has begun to focus his career on information security. He developed a love for security at Salt Lake Community College after being immersed into it by his professors. Nemus help found the Defcon 801 hackerspace and currently holds the position on the board of directors for 801 Labs, which is the corporation that runs the DC801 hackerspace located in downtown Salt Lake City. Twitter: @Lost_Nemus --- Mirrored from YouTube: https://www.youtube.com/watch?v=g9H-WO_RY3khttps://peertube.dodges.it/static/streaming-playlists/hls/1d1ca2a1-3ebc-4a8d-9385-80e8c899ccde/31127beb-4b4c-4a6c-8562-5c236bfdd43b-master.m3u8https://peertube.dodges.it/videos/embed/4Av6ziADnd8mNr5EmP7ZBd2072002026-10-24T12:59:43.252ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/dyLpnBJPygFrNgEVkY5Fv72026-10-22T21:47:12.688Zhttps://peertube.dodges.it/lazy-static/thumbnails/78e262ae-f1ae-4684-9b51-8794032c75d4.jpgDEF CON - noRecognition: Could a pattern on clothing fool Facial Recognition? - Bill SwearingenYou are being watched. Not in the vague, philosophical sense. Right now. The ATM you used this morning. The gas pump. Every doorbell on your block. The 125 smart streetlights you walked past on your way to lunch. You are indexed, cataloged, and matched against databases you never consented to join, by AI models that are wrong more often than the vendors will ever admit. Other solutions to this involves looking ridiculous. Face paint. IR glasses. Masks. Real-time deepfake software running on your phone. Congrats, you defeated the algorithm AND ensured every human within 50 feet is staring at you. Super subtle. I built something different. noRecognition is a genetic algorithm that breeds adversarial patterns, printed on ordinary fabric, that defeat the entire facial recognition pipeline: person detection, face detection, and identity recognition across 10 models used by Clearview AI, Axon, Hikvision, and Palantir. No electronics. No software. You look like a person wearing a scarf. The AI sees nothing. I will demonstrate this live on stage. One camera. One scarf. Zero detections. Come watch me disappear. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WyPmt8CE5L4https://peertube.dodges.it/static/streaming-playlists/hls/65c0d430-a0a3-4bf3-b2ca-bbab27bd2754/5dfc4905-45b8-4d98-94d8-26e4b0976038-master.m3u8https://peertube.dodges.it/videos/embed/dyLpnBJPygFrNgEVkY5Fv72779002026-10-24T13:20:46.906ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gciSkE9tkQfHZaNjm7rEkB2026-10-22T21:48:34.697Zhttps://peertube.dodges.it/lazy-static/thumbnails/9b766fb7-064e-487a-bd2e-6606a75b0484.jpgDEF CON 30 - Minh Duong - The Big Rick - How I Rickrolled My High School District, Got Away With ItWhat happens when you have networked projectors, misconfigured devices, and a bored high school student looking for the perfect senior prank? You get a massive rickroll spanning six high schools and over 11,000 students at one of the largest school districts in suburban Chicago. This talk will go over the coordination required to execute a hack of this scale and the logistics of commanding a botnet of IoT systems. It will also describe the operational security measures taken so that *you* can evade detection, avoid punishment, and successfully walk at graduation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3PAauAy-Fb4https://peertube.dodges.it/static/streaming-playlists/hls/7b0d45da-4b85-441e-a3bf-27b13fd0df11/d86656d2-e10f-4023-b4dc-b4502737a2a1-master.m3u8https://peertube.dodges.it/videos/embed/gciSkE9tkQfHZaNjm7rEkB1249002026-10-24T13:20:48.981ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/svvScTZkpcCqedXKWPv9yq2026-10-22T21:51:31.244Zhttps://peertube.dodges.it/lazy-static/thumbnails/3fdb4295-0d7c-44e4-b0b4-87911a6b2fd6.jpgDEF CON 32 - Social Engineering Like you’re Picard - Jayson E StreetAI is transforming social engineering. Using tools like ChatGPT, Gemini, and Copilot, attackers can make phishing and vishing attacks nearly impossible to distinguish from legitimate Interactions. This presentation will demonstrate how virtually anyone with a pulse can now use AI to craft sophisticated phishing sites and conduct vishing operations with unprecedented subtlety and effectiveness. These next-generation techniques are transforming the landscape of social engineering. You will learn how to replicate these advanced techniques to elevate your own social-engineering game. You will learn how criminals can manipulate AI tools to simulate real-world attacks and gain a deeper insight into their tactics. You’ll learn how to use A.I. to enhance how you attack now & ways for it to supplement skills you don’t currently have. You will learn how to leverage these techniques to transform an organization’s, traditional, “security awareness” mentality into a “situational awareness” mindset. Using real-world examples, we demonstrate turning potential threats into teachable moments. This session is essential for anyone looking to harness the power of AI in hacking and Red Teaming. We offer practical skills to engage employees and enhance your approach to social engineering both offensively and defensively. And yes, we do this with a certain theme in mind as I ENGAGE the audience as we boldly go where no Hackers have gone before! --- Mirrored from YouTube: https://www.youtube.com/watch?v=kc25CttuDmwhttps://peertube.dodges.it/static/streaming-playlists/hls/d6ac946f-46fd-4858-8677-25d9bab4f8f0/c6ad2bd5-a30c-48a5-8b3b-e987252efaef-master.m3u8https://peertube.dodges.it/videos/embed/svvScTZkpcCqedXKWPv9yq2809002026-10-24T13:38:47.520ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/iZyuejGUjGYjwcUXEgop7E2026-10-22T21:52:47.240Zhttps://peertube.dodges.it/lazy-static/thumbnails/5e839dc2-91da-44fb-acf9-1838e394f4af.jpgDEF CON 18 - Chris Paget - Practical Cellphone SpyingChris Paget - Practical Cellphone Spying It's widely accepted that the cryptoscheme in GSM can be broken, but did you know that if you're within radio range of your target you can intercept all of their cellphone calls by bypassing the cryptoscheme entirely? This talk discusses the practical aspects of operating an "IMSI catcher", a fake GSM base station designed to trick the target handset into sending you its voice traffic. Band jamming, rolling LACs, Neighbour advertisements and a wide range of radio trickery will be covered, as well as all the RF gear you'll need to start listening in on your neighbours. Chris Paget has over a decade of experience as an information security consultant and technical trainer for a wide range of financial, online, and software companies. Chris' work is increasingly hardware-focused, recently covering technologies such as GSM and RFID at venues such as Defcon and Shmoocon. With a wide range of experience encompassing software, networks, radio, cryptography and electronics, Chris enjoys looking at complex systems in unusual ways to find creative attacks and solutions. For copies of the slides and additional materials please see the DEF CON 18 Archive here: https://defcon.org/html/links/dc-archives/dc-18-archive.html --- Mirrored from YouTube: https://www.youtube.com/watch?v=fQSu9cBaojchttps://peertube.dodges.it/static/streaming-playlists/hls/91b4c5d3-b5ec-440b-9edc-fdd80491e19e/5aa74b59-ac13-4fa0-9843-5b870ee69cf8-master.m3u8https://peertube.dodges.it/videos/embed/iZyuejGUjGYjwcUXEgop7E3152002026-10-24T13:38:49.906ZPresentationsYESDEFCONNOhttps://peertube.dodges.it/w/aB9xP87xmbko9MrfcGvUE82026-10-22T21:54:56.675Zhttps://peertube.dodges.it/lazy-static/thumbnails/0453a517-e808-422b-b8cf-0cd45bb3e0c8.jpgDEF CON 22 - Hacker Jeopardy - Night 1Hacker Jeopardy is the legendary, long running DEF CON hacker trivia game that dominates the nighttime offerings every year. The questions are tough, the beverage choices are dubious and the winners are immortal. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3_5rO3abWoMhttps://peertube.dodges.it/static/streaming-playlists/hls/4dca8c4f-4356-4c9f-88e5-7080dcb12ddb/c31c3a83-cdb7-4ec9-8ecb-759ff731f927-master.m3u8https://peertube.dodges.it/videos/embed/aB9xP87xmbko9MrfcGvUE85571002026-10-24T13:58:36.458ZDEF CON (Conference Series)jeopardyhacker jeopardydrunk game showYESDEFCONNOhttps://peertube.dodges.it/w/4cBfvzgAUWyGXXns28UjHx2026-10-22T21:55:53.966Zhttps://peertube.dodges.it/lazy-static/thumbnails/6d00f11b-7b1f-4004-ba28-849e7bc8b07c.jpgDEF CON 32 - Unsaflok: Hacking millions of hotel locks - Lennert Wouters, Ian CarrollElectronic hotel locks have been in use for over three decades, and have become an integral part of the hospitality sector. Las Vegas has over 150.000 hotel rooms, many of which use an RFID based electronic lock for access control. Most hotel guests rely on these locks to safeguard personal belongings and to protect their personal safety. However, some of these long-deployed locks have never been publicly scrutinized by the research community. This presentation covers the discovery of vulnerabilities affecting three million dormakaba Saflok locks. The Saflok system relied on a proprietary key derivation function for its MIFARE Classic cards and a proprietary encryption algorithm for the card contents. Reverse engineering the Saflok system allowed us to forge valid keycards. After reading a single, low privilege, guest card we are able to create a pair of forged key cards that allow us to deactivate the deadbolt and open any room at the property. We reported these vulnerabilities to dormakaba in September of 2022, as part of this presentation we will discuss the responsible disclosure and mitigation processes. Additionally, we will demonstrate how you can determine if your own hotel room has been patched to help ensure your personal safety. My Arduino can beat up your hotel room lock - Onity locks - Cody Brocious - Blackhat 2012 Ghost In The Locks: Owning Electronic Locks Without Leaving A Trace - Vingcard locks - Tomi Tuominen and Timo Hirvonen - HITBGSEC 2018 --- Mirrored from YouTube: https://www.youtube.com/watch?v=4cx0RUV7i0shttps://peertube.dodges.it/static/streaming-playlists/hls/19ea5236-3118-45e0-90ae-1c625791e321/416e2d78-423e-4833-82e2-aca09e85921b-master.m3u8https://peertube.dodges.it/videos/embed/4cBfvzgAUWyGXXns28UjHx2492002026-10-24T13:58:39.500ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7iJiwMh6NgLqC25EfjoDYh2026-10-22T21:59:52.483Zhttps://peertube.dodges.it/lazy-static/thumbnails/f6a3cf53-576e-495d-bbfb-57ebc59ab26d.jpgDEF CON 24 - Panel - MR ROBOT PanelMR. ROBOT is a rare treat - a network television show whose hacker protagonist is a fully realized character with a realistically attainable set of skills. No hyper-typing, no gibberish masquerading as tech jargon, no McGuffins to magically paper over plot holes with hacker dust. MR. ROBOT takes the tech as seriously as the drama. One of the main reasons for this verisimilitude is the work of Kor Adana, MR. ROBOT's advisor on all things hackish. His fingerprints are on every terminal window in the show. Another advisor to the show is our very own CJunky - known to the outside world as hacker and raconteur Marc Rogers. Join Dark Tangent for a panel discussion of MR. ROBOT: the phenomenon, the hacks and the crazy ways the show seems to pull its storylines from the future. Bring your questions, and keep an eye out for late-breaking special guests. Kor Adana’s interest in technology started as a child when he tried to build a red box to get free calls on pay phones. By the time he was in middle school, he was building his own computer systems and getting into trouble. After obtaining a B.S. in IT Network Administration, Kor went on to work in enterprise network security for one of the world’s largest automakers. He performed penetration testing, designed security policies, managed enterprise-wide eDiscovery, and conducted forensics for legal and HR matters. While there, he also worked alongside NASA in a high-profile government investigation. He eventually left the IT world to pursue his true passion, writing for film and television. He’s worked with the producers of THE WALKING DEAD, THE SHIELD, LOST, and DEXTER. He is currently a writer and technical supervisor for USA's Golden Globe Award-winning drama, MR. ROBOT. He also has one of his own projects in development with Universal Cable Productions. Ryan Kazanciyan is the Chief Security Architect for Tanium and has thirteen years of experience in incident response and forensics, penetration testing, and security...https://peertube.dodges.it/static/streaming-playlists/hls/33108bb5-9c36-4707-9444-dea2ddb3dcc4/5047a3b9-d4a6-4edd-abab-c24d167d76a3-master.m3u8https://peertube.dodges.it/videos/embed/7iJiwMh6NgLqC25EfjoDYh4841002026-10-24T14:12:34.867ZDEF CONDEFCONDEF CON 24DC24DC-24YESDEFCONNOhttps://peertube.dodges.it/w/u7T4WDX3ufRXahabqZDxPh2026-10-22T22:01:13.301Zhttps://peertube.dodges.it/lazy-static/thumbnails/bb4aab72-0408-48a3-a53f-725cf8aae57b.jpgDEF CON 23 - Social Engineering Village - Jayson E. Street - Breaking in BadBreaking in Bad! (I’m the one who doesn’t knock) Jayson Street I start off the talk describing each one of the below listed attack vectors I use. I tell a story from each of them I show video of me breaking into a bank in Beirut Lebanon. I show video of gaining access to USA State Treasury office. The most important part of my talk is not that at all. I spend the entire last half of the talk creating a security awareness talk! Where I go into ways to spot me (or any attacker) I show the different tools and devices users should be aware of. I show how users should approach a situation if someone like me is in the building or interacting with them online. I basically use this talk to entertain the security people in the audience enough that they will take this back to their work and share my PowerPoint and video of my talk with their executives and co-workers. BIO: Jayson E. Street is an author of Dissecting the hack: The F0rb1dd3n Network and Dissecting the hack: The V3rb0t3n Network from Syngress. Also creator of http://dissectingthehack.com He has also spoken at DEFCON, DerbyCon, UCON and at several other CONs and colleges on a variety of Information Security subjects. His life story can be found on Google under Jayson E. Street *He is a highly carbonated speaker who has partaken of Pizza from Beijing to Brazil. He does not expect anybody to still be reading this far but if they are please note he was chosen as one of Time’s persons of the year for 2006. --- Mirrored from YouTube: https://www.youtube.com/watch?v=2vdvINDmlX8https://peertube.dodges.it/static/streaming-playlists/hls/e3b5d11d-68f3-4735-b69e-1662b133746a/55b327cc-d68f-4c20-b615-3e29d17613e1-master.m3u8https://peertube.dodges.it/videos/embed/u7T4WDX3ufRXahabqZDxPh3158002026-10-24T14:12:37.931ZDEF CON Video SeriesDEF CON ConferenceConference RecordingsDEF CONDEFCONYESDEFCONNOhttps://peertube.dodges.it/w/dsD2AQUML7sVV7Emz7Ybcc2026-10-22T22:07:28.646Zhttps://peertube.dodges.it/lazy-static/thumbnails/fa546de5-558b-490f-85a6-f59b2e5fdb07.jpgDEF CON: The Documentary - 720pDEF CON is the world's largest hacking conference, held in Las Vegas, Nevada. In 2012 it was held for the 20th time. The conference has strict no-filming policies, but for DEF CON 20, a documentary crew was allowed full access to the event. The film follows the four days of the conference, the events and people (attendees and staff), and covers history and philosophy behind DEF CON's success and unique experience. Written by Jason Scott Like this? Leave feedback on IMDB: http://www.imdb.com/title/tt3010462/ Get involved with DEF CON: https://forum.defcon.org/ https://www.defcon.org/ --- Mirrored from YouTube: https://www.youtube.com/watch?v=SUhyeY0Fsvwhttps://peertube.dodges.it/static/streaming-playlists/hls/64e5d22d-9e20-4ebf-ab8b-6d312d56aeb1/356e7e1e-cee4-4b4a-8333-8fe5c429f27a-master.m3u8https://peertube.dodges.it/videos/embed/dsD2AQUML7sVV7Emz7Ybcc6657002026-10-24T14:48:23.373ZHackingDocumentaryDc20720pSecurityYESDEFCONNOhttps://peertube.dodges.it/w/iLTTwBynqtVTdmZ7Ji5Drg2026-10-22T22:08:39.527Zhttps://peertube.dodges.it/lazy-static/thumbnails/9435c853-897f-41cb-a7bc-fd8b38fa0cb7.jpgalbinowax - HTTP Desync Attacks: Smashing into the Cell Next Door - DEF CON 27 ConferenceHTTP requests are traditionally viewed as isolated, standalone entities. In this session, I'll introduce techniques for remote, unauthenticated attackers to smash through this isolation and splice their requests into others, through which I was able to play puppeteer with the web infrastructure of numerous commercial and military systems, rain exploits on their visitors, and harvest over $50k in bug bounties. Using these targets as case studies, I’ll show you how to delicately amend victim's requests to route them into malicious territory, invoke harmful responses, and lure credentials into your open arms. I’ll also demonstrate using backend reassembly on your own requests to exploit every modicum of trust placed on the frontend, gain maximum privilege access to internal APIs, poison web caches, and compromise my favourite login page. Although documented over a decade ago, a fearsome reputation for difficulty and collateral damage has left this attack optimistically ignored for years while the web's susceptibility grew. By applying fresh ideas and new techniques, I’ll unveil a vast expanse of vulnerable systems ranging from huge content delivery networks to bespoke backends, and ensure you leave equipped to devise your own desync techniques and tailor attacks to your target of choice. albinowax James Kettle is Head of Research at PortSwigger Web Security, where he designs and refines vulnerability detection techniques for Burp Suite's scanner. Recent work has focused on using web cache poisoning to turn caches into exploit delivery systems. James has extensive experience cultivating novel attack techniques, including server-side RCE via Template Injection, client-side RCE via malicious formulas in CSV exports, and abusing the HTTP Host header to poison password reset emails and server-side caches. He has spoken at numerous prestigious venues including both BlackHat USA and EU, and OWASP AppSec USA and EU. Twitter: @albinowax Website: https://skeletonscribe.ne...https://peertube.dodges.it/static/streaming-playlists/hls/8ff00f7a-e532-4b80-b14a-474ca44a2add/78f9d293-5c08-4cbe-be58-53d5b267ef76-master.m3u8https://peertube.dodges.it/videos/embed/iLTTwBynqtVTdmZ7Ji5Drg2492002026-10-24T14:48:39.645ZDEF CON 27hacker communityDEF CON 2019hackerhacking conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cm5Y75ExBCfVLDzm5erUHX2026-10-22T22:10:48.192Zhttps://peertube.dodges.it/lazy-static/thumbnails/76c85d12-e7eb-4a39-993a-ddd546de2cc9.jpgJayson Street - I PWN thee I PWN thee not - DEF CON 27 Social Engineering VillageAttackers love it when defenses fail. Implementing defenses without properly understanding the risks and threats is usually a waste of money and resources. This is a frank discussion of what control failures an attacker looks for when attempting to breach an enterprise, as well as how an effective control can help prevent an attacker from being successful. Jayson will walk through real-world scenarios that have led to successful compromise of different companies through control failures. He will also give detailed analysis of controls that led to his attacks being effectively thwarted. Learn how to understand and assess real-world risks, as well as simple defenses which can be implemented to better protect your organization. Jayson Street: @jaysonstreet Jayson E. Street is an author of the “Dissecting the hack: Series”. Also the DEF CON Groups Global Ambassador. Plus the VP of InfoSec for SphereNY. He has also spoken at DEF CON, DerbyCon, GRRCon and at several other ‘CONs and colleges on a variety of Information Security subjects. *He was a highly carbonated speaker who has partaken of Pizza from Beijing to Brazil. He does not expect anybody to still be reading this far but if they are please note he was chosen as one of Time’s persons of the year for 2006. --- Mirrored from YouTube: https://www.youtube.com/watch?v=D5kg3jZ0Kcwhttps://peertube.dodges.it/static/streaming-playlists/hls/5be2763d-eebb-42ea-859d-48186fdafb89/e85d8326-e010-49ac-bfdc-35eb213a502a-master.m3u8https://peertube.dodges.it/videos/embed/cm5Y75ExBCfVLDzm5erUHX3012002026-10-24T14:57:10.176ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/d6JGwSkGZrziG2QpQUc4J82026-10-22T22:14:10.553Zhttps://peertube.dodges.it/lazy-static/thumbnails/37ad4ad5-00f8-478f-bb5f-bc442a62d976.jpgBabak Javadi - Basics of Hacking Physical Access Control Systems - DEF CON 27 Wireless VillageDo you fear the PACS-man? Do Physical Access Control Systems seem equal parts simple and confounding? Do you lie awake at night atop your nest of ethernet cables, pondering grand questions of access control? Is Wiegand a phsyical card type, a data format, or a communications protocol? What is an ""encrypted"" credential and is it actually any more secure? How does one tell good access control apart from bad access control? Fear not, fellow hacker. Come discuss your woes with a professional ghost of access control learn how to keep the PACS-man at bay. This 80 minute intensive is designed to serve as a crash course of Physical Access Control Systems. From credentials, to readers, to door controllers and beyond, Babak will share a practical and holistic understanding of what PACS looks like in the field, and intercept, clone, replay, and bypass your way through the system. --- Mirrored from YouTube: https://www.youtube.com/watch?v=LS5OQHUJaJEhttps://peertube.dodges.it/static/streaming-playlists/hls/61fab265-628c-4cd6-a7f6-9af66a43faaf/0316de86-5f03-4b35-8f5c-e7c2d92fef27-master.m3u8https://peertube.dodges.it/videos/embed/d6JGwSkGZrziG2QpQUc4J83772002026-10-24T14:57:18.595ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1bcuAtzHYuH8xGZM3gwtwn2026-10-22T22:15:25.669Zhttps://peertube.dodges.it/lazy-static/thumbnails/2b428ac8-b68c-47e9-afc7-1b926e7b9c46.jpgDEF CON 23 - Jason Haddix - How to Shot Web: Web and mobile hacking in 20152014 was a year of unprecedented participation in crowdsourced and static bug bounty programs, and 2015 looks like a trendmaker. Join Jason as he explores successful tactics and tools used by himself and the best bug hunters. Practical methodologies, tools, and tips make you better at hacking websites and mobile apps to claim those bounties. Convert edge-case vulnerabilities to practical pwnage even on presumably heavily tested sites. These are tips and tricks that the every-tester can take home and use. Jason will focus on philosophy, discovery, mapping, tactical fuzzing (XSS, SQLi, LFI, ++), CSRF, web services, and mobile vulnerabilities. In many cases we will explore these attacks down to the parameter, teaching the tester common places to look when searching for certain bugs. In addition he will cover common evasions to filters and as many time saving techniques he can fit in. Speaker Bio: Jason is the Director of Technical Operations at Bugcrowd. Jason trains and works with internal application security engineers to triage and validate hardcore vulnerabilities in mobile, web, and IoT applications/devices. He also works with Bugcrowd to improve the security industries relations with the researchers. Jason’s interests and areas of expertise include, mobile penetration testing, black box web application auditing, network/infrastructural security assessments, binary reverse engineering, and static analysis. --- Mirrored from YouTube: https://www.youtube.com/watch?v=-FAjxUOKbdIhttps://peertube.dodges.it/static/streaming-playlists/hls/016c8540-9dcc-4f72-a2e8-d695e49f4b4d/61cd2243-675b-4b23-b52d-d7343301be94-master.m3u8https://peertube.dodges.it/videos/embed/1bcuAtzHYuH8xGZM3gwtwn2903002026-10-24T15:13:53.756ZDEF CONDEF CON 23DEFCONDC23DC-23YESDEFCONNOhttps://peertube.dodges.it/w/v9W7HE4hYyXEdHkkkoeNjr2026-10-22T22:17:08.234Zhttps://peertube.dodges.it/lazy-static/thumbnails/3589a6d8-b312-4309-b1a3-86552213e9cc.jpgDEF CON 31 War Stories - Living Next Door to Russia - Mikko HypponenRussia is the world’s largest country. I’ve lived all my life in Finland, about a hundred miles from the Russian border. Finland has learned to live next to a very large and very unpredictable neighbor. Both my grandfathers fought Russia in the second world war. Today, Finland ranks as one of the least corrupted countries in the world, while Russia ranks as one of the most corrupted countries. How is that even possible? As Russia has grown more aggressive over the last decade and as it violently attacked Ukraine, attitudes about neutrality changed quicky in my home country. When Finland joined NATO in April 2023, NATO more than doubled its land border with Russia – which is probably not what Putin had in mind. This talk will summarize the developments of the Russian cyber programs and about Russian patriotic hacker groups that got us into where we are today and makes educated guesses about where Russia will be headed next. --- Mirrored from YouTube: https://www.youtube.com/watch?v=m9_feSPH47Ihttps://peertube.dodges.it/static/streaming-playlists/hls/ec185245-0448-48d6-b52c-f22a99c85e2d/fd719b87-4d71-4885-8aa9-924e83c80935-master.m3u8https://peertube.dodges.it/videos/embed/v9W7HE4hYyXEdHkkkoeNjr2866002026-10-24T15:13:57.480ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2LevTdoRPBsU4Tbgan7xqR2026-10-22T22:18:52.862Zhttps://peertube.dodges.it/lazy-static/thumbnails/edf62ae9-0726-49af-9f5d-0768c5a44d3a.jpgDEF CON 23 - Ryan Castellucci - Cracking CryptoCurrency BrainwalletsImagine a bank that, by design, made everyone's password hashes and balances public. No two-factor authentication, no backsies on transfers. Welcome to "brainwallets", a way for truly paranoid cryptocurrency users to wager their fortunes on their ability to choose a good password or passphrase. Over the last decade, we've seen the same story play out dozens of times - a website is broken into, the user database is posted online, and most of the password hashes are cracked. Computers are now able make millions, billions or even trillions of guesses per second. Every eight character password you can type on a standard keyboard and every combination of five common english words could be tried in less than a day by today's botnets. Can people come up with passphrases able to stand up to that when money is on the line? Let's find out. For this talk, I will be releasing my high speed brainwallet cracker, "Brainflayer". I'll cover a history of brainwallets, safer passphrase-based wallet generation, passphrase security, in-the-wild cracking activity, and how I accidently stole 250 Bitcoins (and tracked down the owner to give them back). Ryan Castellucci has been interested in cryptography since childhood when his parents gave him a copy of "Codes, Ciphers and Secret Writing". He soon learned to program and wrote a tool to crack simple substitution ciphers. More recently, he co-spoke with Dan Kaminsky at DEF CON 22 and was a finalist in the 2014 Underhanded Crypto Contest. For his day job at White Ops, he finds new and exciting ways to tease out the subtle differences between bots and human-controlled web browsers. --- Mirrored from YouTube: https://www.youtube.com/watch?v=foil0hzl4Pghttps://peertube.dodges.it/static/streaming-playlists/hls/0e46318f-4b27-407e-9b49-78824873269d/3e994e78-4d89-47a0-a3a7-589015f0faf6-master.m3u8https://peertube.dodges.it/videos/embed/2LevTdoRPBsU4Tbgan7xqR2569002026-10-24T15:21:08.348ZDEF CON (Conference Series)Ryan CastellucciBitcoinBrainwalletsEncryptionYESDEFCONNOhttps://peertube.dodges.it/w/aZrtexWW9SnjgPoSzQNaKD2026-10-22T22:20:23.966Zhttps://peertube.dodges.it/lazy-static/thumbnails/e91ddb5c-d393-4b7c-aed2-23e81bbd608b.jpgDEF CON 21 - Melissa Elliott - Noise Floor Exploring Unintentional Radio EmissionsNoise Floor: Exploring the world of unintentional radio emissions by Melissa Elliott Application security researcher, Veracode If it's electronic, it makes noise. Not necessarily noise that you and I can hear, of course -- unless you know how to tune in. The air around us is filled with bloops, bleeps, and bzzts of machines going about their business, betraying their existence through walls or even from across the street. The unintentional noise lurking among intentional signals can even reveal what the machine is currently doing when it thinks it's keeping that information to itself. Attacks exploiting electromagnetic radiation, such as TEMPEST, have long been known, but government-sized budgets are no longer needed to procure the radio equipment. USB television receiver dongles can be used as software-defined radios (SDR) that cost less than a slice of Raspberry Pi. The goal of this talk is to show you that anyone with twenty bucks and some curiosity can learn a great deal about your computers and other equipment without ever leaving a trace, and you shouldn't neglect this risk when managing your organization's security. Melissa Elliott (better known as 0xabad1dea) is a professional security bug finder who has seen unspeakable horrors in corporate codebases from around the world. Her very name causes systems to crash, especially ones that use jQuery. Her hobbies include programming the Nintendo Entertainment System, criticizing other people's C code, and an interest in radio emissions that resulted from a trip to the National Radio Astronomy Observatory in Green Bank, West Virginia. Materials: http://www.defcon.org/images/defcon-21/dc-21-presentations/Elliott/DEFCON-21-Elliott-noisefloor-URLS-reference.txt --- Mirrored from YouTube: https://www.youtube.com/watch?v=5N1C3WB8c0ohttps://peertube.dodges.it/static/streaming-playlists/hls/50e756c8-5f9a-4ea6-8fae-51565b981477/7487f4ae-b993-4919-bd52-daf8c7513c72-master.m3u8https://peertube.dodges.it/videos/embed/aZrtexWW9SnjgPoSzQNaKD2578002026-10-24T15:21:14.918ZSecurityDC21DEF CON (Conference Series)HackingConferenceYESDEFCONNOhttps://peertube.dodges.it/w/mJW9YDjiqk92jgvHc1Fm372026-10-22T22:21:10.824Zhttps://peertube.dodges.it/lazy-static/thumbnails/df8b3dba-4b39-4864-a3b0-0f740524cf7d.jpgDEF CON 32 - Why are you still using my server for your internet access - Thomas Boejstrup JohansenPawning countries at top level domain by just buying one specific domain name ‘wpad.tld’, come hear about this more the 25+ years old issue and the research from running eight different wpad.tld domains for more than one year that turn into more the 1+ billion DNS request and more then 600+GB of Apache log data with leaked information from the clients. This is the story about how easy it is to just buying one domain and then many hundreds of thousands of Internet clients will get auto pwned without knowing it and start sending traffic to this man-in-the-middle setup there is bypassing encryption and can change content with the ability to get the clients to download harmful content and execute it. The talk will explain the technical behind this issue and showcase why and how clients will be trick into this Man-in-the-middle trap. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uwsykPWa5Lchttps://peertube.dodges.it/static/streaming-playlists/hls/a7f562b6-d107-4288-ad45-7d7b012e3902/d532cf23-23d3-4421-917e-501734fb1189-master.m3u8https://peertube.dodges.it/videos/embed/mJW9YDjiqk92jgvHc1Fm372349002026-10-24T15:34:34.221ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vNroSR428DYAgUEbEAK3t42026-10-22T22:22:22.436Zhttps://peertube.dodges.it/lazy-static/thumbnails/14fd5fb4-912b-4191-b778-7780c30c6dbe.jpgDEF CON 24 - Jmaxxz - Backdooring the FrontdoorAs our homes become smarter and more connected we come up with new ways of reasoning about our privacy and security. Vendors promise security, but provide little technical information to back up their claims. Further complicating the matter, many of these devices are closed systems which can be difficult to assess. This talk will explore the validity of claims made by one smart lock manufacturer about the security of their product. The entire solution will be deconstructed and examined all the way from web services to the lock itself. By exploiting multiple vulnerabilities Jmaxxz will demonstrate not only how to backdoor a front door, but also how to utilize these same techniques to protect your privacy. Bio: Jmaxxz works as a software engineer for a Fortune 100 company, and is a security researcher for pleasure. His FlashHacker program was featured in Lifehacker’s most popular free downloads of 2010. More recently he has contributed to the node_pcap project which allows interfacing with libpcap from node. His other interests include lock picking and taking things apart. --- Mirrored from YouTube: https://www.youtube.com/watch?v=MMB1CkZi6t4https://peertube.dodges.it/static/streaming-playlists/hls/f154e26a-037e-428a-ae6f-9351c4ffb681/9fc85017-2d36-4b7c-880b-b9bd314f8010-master.m3u8https://peertube.dodges.it/videos/embed/vNroSR428DYAgUEbEAK3t42317002026-10-24T15:34:36.685ZDEF CONDEFCONHackingHacker ConferenceComputer SecurityYESDEFCONNOhttps://peertube.dodges.it/w/vH8nry32WChA3WLU52R2b22026-10-22T22:24:18.541Zhttps://peertube.dodges.it/lazy-static/thumbnails/d109c302-c189-4bf9-a43d-18a33a871189.jpgDEF CON 31 - Private Keys in Public Places - Tom PohlFirmware and software binaries are littered with private keys, legitimate CA-blessed certificates, and encryption keys—but hardly anyone notices. These secrets are often obfuscated or otherwise hidden in ways that weren’t intended to be found. I’ll show three real-world examples from popular manufacturers (Netgear, Fortinet and Dell), and demonstrate techniques for uncovering them. In the most extreme example, an adversary can use an obfuscated key to gain access to any customer’s vCenter environment. I’ll start with a straightforward look at Netgear firmware and show methods for discovering private keys in PEM-encoded text files. We’ll dig into the Fortinet firmware, which contained custom obfuscated archive files, and show how to extract Apple and Google issued certificates and I will also show that 3 year awaited “fix” did not adequately solve the issue. Finally, I’ll dig into the worst case: a static AES encryption key within Dell software used to connect to vCenter. I'll demonstrate how retrieve, decompile and use a static AES key which will decrypt vCenter credentials. The key is the same for EVERY customer. This has not been talked about anywhere publicly. I’ll conclude by discussing the importance of developer training, proper key management, and (above all), identifying and eliminating this systemic practice. --- Mirrored from YouTube: https://www.youtube.com/watch?v=7t_ntuSXniwhttps://peertube.dodges.it/static/streaming-playlists/hls/f0970eb3-88b7-4af7-9e73-b3e3987cf9a1/ec71cce3-507f-485b-9e0b-4b66a1728415-master.m3u8https://peertube.dodges.it/videos/embed/vH8nry32WChA3WLU52R2b22406002026-10-24T15:48:11.865ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7hdFZPV9q8ST6nvJFZLjdd2026-10-22T22:25:46.287Zhttps://peertube.dodges.it/lazy-static/thumbnails/0ada51cb-8b67-4b8d-8ae1-da0e70ae55fd.jpgDEF CON 21 - Mudge - Unexpected Stories From a Hacker Inside the GovernmentUnexpected Stories From a Hacker Who Made it Inside the Government by Peiter Mudge Zatko Having had the opportunity to see things from within the hacker community and from a senior position in the DoD, Mudge has some enlightening stories to share, and is picking some of his favorites. He'll discuss Julian's story to him about US government involvement in the origins of Wikileaks, how the DoD accidentally caused Anonymous to target government systems, some of the ways in which the defense industrial base's poor security works financially in its favor, and cases where the government missed opportunities for positive outreach and understanding with this community. You'll probably recognize parts of these stories from the news, but there are origins and back stories that are lesser known, and that should make for a good story time. --- Mirrored from YouTube: https://www.youtube.com/watch?v=TSR-b9yuTbMhttps://peertube.dodges.it/static/streaming-playlists/hls/32da8d72-5713-4390-95f4-f08911f23c1c/37986e66-06b5-469c-9877-cbd9f359df3a-master.m3u8https://peertube.dodges.it/videos/embed/7hdFZPV9q8ST6nvJFZLjdd3129002026-10-24T15:48:14.390ZSecurityMudgeHacker (Character Power)DC21ConferenceYESDEFCONNOhttps://peertube.dodges.it/w/hZBiJkrSdk1ExBw7xgZV422026-10-22T22:28:57.818Zhttps://peertube.dodges.it/lazy-static/thumbnails/df41e799-475e-4c8e-908b-608945072e91.jpgDEF CON 33 - Playing Dirty w/o Cheating - Getting Banned for Fun - S Collins, M Muench, T ChothiaWelcome to the world’s worst let’s-play: if you’ve ever wanted to get yourself or your friends banned from a game: Stick around. We explore how modern anti-cheat systems work, and practically show how to get banned in the most innovative and hilarious ways possible—all without launching a single real cheat. We also dive into Hardware ID bans, and how machine ‘fingerprints’ are collected and enforced. With this knowledge at hand, we demonstrate how to remotely poison innocent machines — capturing a target’s HWID, spoofing it, and getting it burned. BIOS flashing, RAM SPD rewriting, and other fun tricks included. Join our masterclass in making yourself and others appear guilty online. --- Mirrored from YouTube: https://www.youtube.com/watch?v=FXIScbxJTZwhttps://peertube.dodges.it/static/streaming-playlists/hls/899d5f11-0217-4bb4-b46d-81c38aefbfdb/1c03bccf-0a63-47d9-9755-64beb82fbda1-master.m3u8https://peertube.dodges.it/videos/embed/hZBiJkrSdk1ExBw7xgZV422317002026-10-24T16:00:10.266ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jweWQ6EmPJivZoUhzvW1S62026-10-22T22:29:35.250Zhttps://peertube.dodges.it/lazy-static/thumbnails/dec1bb90-59a5-4ebb-ac0a-9865b43580f1.jpgChris Pritchard - The Basics of Social Engineering - DEF CON 27 Social Engineering VillageEver wanted to get into Social Engineering (SE), but thought you needed to know body language, facial expressions, be charming, and outgoing to succeed? This is a common misconception and you don’t need to know or be those things to make a start in SE. I think most SE talks focus on the more technical “human” aspects and I’m purposefully ignoring that side. I’m going to focus on the basics; how to perform reconnaissance, how to match dress styles, how to make up a pretext that fits your knowledge, how to get real staff to help you, what to do if you do get in, why you should interact with staff, and why you should practice being observant. These are important tools to learn and use, which can help you make a start in social engineering. Chris Pritchard: @ghostie_ Chris has worked in a range of industries, most notable of which are Critical National Infrastructure (CNI), and leading edge design and manufacturing (Dyson). Doing so has given Chris a very varied array of knowledge, from penetration testing robot vacuum cleaners, to designing and testing secure SCADA networks. During Chris’ time at Dyson, he was involved in developing the global security team and performing internal penetration testing. Chris was also heavily involved with securing the design of Dyson’s current and future internet connected appliances, and corresponding smartphone applications. More recently, Chris has been conducting ever more security tests and audits of ICS in the rail, air, maritime, and utilities sectors, as well as CNI work at nuclear sites. Chris’ skill set also includes Social Engineering, and has successfully gained access into CNI, Airports and Casinos, which are regarded are some of the most secure facilities in the industry. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tCRT3QFzwm8https://peertube.dodges.it/static/streaming-playlists/hls/95fd6731-4f00-4b83-9047-049e221d9639/085072fb-9f36-46cf-b09a-111e39d80c63-master.m3u8https://peertube.dodges.it/videos/embed/jweWQ6EmPJivZoUhzvW1S61476002026-10-24T16:00:12.701ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mzAL6hih1xnMxwAamCGPhp2026-10-22T22:30:57.716Zhttps://peertube.dodges.it/lazy-static/thumbnails/e68dc168-9266-4439-b2a6-ff85d379ba57.jpgDEF CON 18 - Jason Scott - You're Stealing It Wrong! 30 Years of Inter-Pirate BattlesJason Scott - You're Stealing It Wrong! 30 Years of Inter-Pirate Battles Historian Jason Scott walks through the many-years story of software piracy and touches on the tired debates before going into a completely different direction - the interesting, informative, hilarious and occasionally obscene world of inter-pirate-group battles. A multi-media extravaganza of threats, CSI-level accusations and evidence trails, decades of insider lingo, and demonstrations of how the more things change, the more they still have to keep their ratios up. Jason Scott is a computer historian and proprietor of TEXTFILES.COM, a collection of computer history. This is a pretty good pairing, actually. He also creates documentaries on computer history and attends and speaks at conventions like DEFCON, making computer history. If you see him at DEFCON the choice is clear: talk to him about his cat. For copies of the slides and additional materials please see the DEF CON 18 Archive here: https://defcon.org/html/links/dc-archives/dc-18-archive.html --- Mirrored from YouTube: https://www.youtube.com/watch?v=QCAL_YgYiP0https://peertube.dodges.it/static/streaming-playlists/hls/a6a7bd45-46de-4e48-a9ee-850e3d0b3793/c3572587-400f-45bd-9062-f904d3746a81-master.m3u8https://peertube.dodges.it/videos/embed/mzAL6hih1xnMxwAamCGPhp3358002026-10-24T16:11:20.332ZPresentationsYESDEFCONNOhttps://peertube.dodges.it/w/c3NHxjB2hfy5FVwpZafxF22026-10-22T22:33:03.320Zhttps://peertube.dodges.it/lazy-static/thumbnails/ed8b56b5-e157-48ee-a9d4-25f5f1b9d866.jpgDEF CON 24 - Anch - So you think you want to be a penetration testerSo, you think you want to be a penetration tester, or you already are and don’t understand what the difference between you and all the other “so called” penetration testers out there. Think you know the difference between a Red Team, Penetration Test and a Vulnerability assessment? Know how to write a report your clients will actually read and understand? Can you leverage the strengths of your team mates to get through tough roadblocks, migrate, pivot, own and pillage? No? well this talk is probably for you then! We will go through the fascinating, intense and often crazily boring on-site assessment process. Talk about planning and performing Red Teams, how they are different, and why they can be super effective and have some fun along the way. I’ll tell you stories that will melt your face, brain and everything in between. Give you the answers to all of your questions you never knew you had, and probably make you question your life choices. By the end of this session you will be ready to take your next steps into the job you’ve always wanted, or know deep inside that you should probably look for something else. There will be no judgment or shame, only information, laughter and fun. Bio: Arch currently works on a Red Team for an agency with a 3 letter acronym. It’s not secret squirrel, or hush hush he just doesn’t like to talk about himself very much. He has 15 years of experience in penetration testing and cyber security with a background in control systems and security architecture. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Kaat-T71N3Ahttps://peertube.dodges.it/static/streaming-playlists/hls/5978cd7c-cb0f-402a-a612-a09c1cd1da53/c97c5cd2-6aaa-4df4-bc27-6d8c6a98f1e4-master.m3u8https://peertube.dodges.it/videos/embed/c3NHxjB2hfy5FVwpZafxF22518002026-10-24T16:14:38.830ZDEF CONDEFCONHackingHacker ConferenceComputer SecurityYESDEFCONNOhttps://peertube.dodges.it/w/9TWqmbTzuHWkWoYgQYGpH62026-10-22T22:33:48.560Zhttps://peertube.dodges.it/lazy-static/thumbnails/9a302956-0290-45be-90ec-dcd701f11875.jpgDEF CON 25 - Nathan Seidle - Open Source Safe Cracking RobotsWe've built a $200 open source robot that cracks combination safes using a mixture of measuring techniques and set testing to reduce crack times to under an hour. By using a motor with a high count encoder we can take measurements of the internal bits of a combination safe while it remains closed. These measurements expose one of the digits of the combination needed to open a standard fire safe. Additionally, 'set testing' is a new method we created to decrease the time between combination attempts. With some 3D printing, Arduino, and some strong magnets we can crack almost any fire safe. Come checkout the live cracking demo during the talk! --- Mirrored from YouTube: https://www.youtube.com/watch?v=v9vIcfLrmiAhttps://peertube.dodges.it/static/streaming-playlists/hls/48099435-6455-48c4-b59b-f303248fbf0b/acedda17-48ef-47b4-a5af-1c2c0335e343-master.m3u8https://peertube.dodges.it/videos/embed/9TWqmbTzuHWkWoYgQYGpH61644002026-10-24T16:14:40.857Zdefcondef condc25dc-25def con 25YESDEFCONNOhttps://peertube.dodges.it/w/iCZTeM7pZ1HPaFk26FrC7a2026-10-22T22:34:44.239Zhttps://peertube.dodges.it/lazy-static/thumbnails/cb7c504d-9a98-45ae-a4de-21cd17802a62.jpgDEF CON 25 - XlogicX - Assembly Language is Too High LevelDo you have a collection of vulnerable programs that you have not yet been able to exploit? There may yet still be hope. This talk will show you how to look deeper (lower level). If you've ever heard experts say how x86 assembly language is just a one-to-one relationship to its machine-code, then we need to have a talk. This is that talk; gruesome detail on how an assembly instruction can have multiple valid representations in machine-code and vice versa. You can also just take my word for it, ignore the details like a bro, and use the tool that will be released for this talk: the Interactive Redundant Assembler (irasm). You can just copy the alternate machine code from the tool and use it in other tools like mona, use it to give yourself more options for self-modifying code, fork Hydan (stego) and give it more variety, or to create peace on earth. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eunYrrcxXfwhttps://peertube.dodges.it/static/streaming-playlists/hls/8ed5ce0b-0e57-4e00-a55c-49e9d4ab34ad/4d21c4d1-e001-48b0-b223-81fec970b3b1-master.m3u8https://peertube.dodges.it/videos/embed/iCZTeM7pZ1HPaFk26FrC7a2714002026-10-24T16:22:21.382ZDEF CON 2017DEF CON 25DEF CONDC25hackersYESDEFCONNOhttps://peertube.dodges.it/w/mawjZiNFmYdbpZmpNSiyXY2026-10-22T22:35:42.517Zhttps://peertube.dodges.it/lazy-static/thumbnails/571d1d08-d19c-4ab3-9e1e-95736709adf4.jpgDEF CON 24 - LosT - Hacker Fundamentals and Cutting Through AbstractionContinuing the series of hacker foundational skills,  YbfG jvyy nqqerff shaqnzragny fxvyyf gung rirel unpxre fubhyq xabj.  Whfg sbe sha jr jvyy nyfb tb sebz gur guerr onfvp ybtvp tngrf gb n shapgvbany cebprffbe juvyr enpvat n pybpx.  Qb lbh xabj ubj n cebprffbe ernyyl jbexf?  Jul qb lbh pner?  Pbzr svaq bhg.  Bu, naq pelcgb. Bio: Ryan "1o57" Clarke self-identifies as a hacker. Formerly a member of the Advanced Programs Group (APG) at Intel, he continues to do 'security stuff' for other companies and groups.  Professionally LosT's history includes working for various groups and companies, as well as for the University of Advancing Technology where he set up the robotics and embedded systems degree program.  He has consulted for the Department of Energy, Fortune 50 companies, and multiple domestic and international organizations.  For DEFCON he has created the Hardware Hacking Village, the LosT@Defcon Mystery Challenge, and conference badges, cryptography, and puzzles. As DEFCON’s official cryptographer and puzzle master, his activities have included aspects of network intrusion and security, social engineering, RED and BLUE team testing, mathematics, linguistics, physical security, and various other security and hacker related skillsets.  1o57's academic background and and interests include computational mathematics, linguistics, cryptography, electrical engineering, computer systems engineering and computer science-y stuff. --- Mirrored from YouTube: https://www.youtube.com/watch?v=kSuq3Ry9PLQhttps://peertube.dodges.it/static/streaming-playlists/hls/a34b2833-e5c4-4485-8527-3743a32d5676/ce17be0b-355f-42df-ab1b-e6607f770e1b-master.m3u8https://peertube.dodges.it/videos/embed/mawjZiNFmYdbpZmpNSiyXY2317002026-10-24T16:22:23.435ZDEF CONDEFCONHackingHacker ConferenceComputer SecurityYESDEFCONNOhttps://peertube.dodges.it/w/c3J64SPWwKeX7VLU9AHDAY2026-10-22T22:36:38.023Zhttps://peertube.dodges.it/lazy-static/thumbnails/8475556a-2090-4c6c-be6f-2e615093870a.jpgDEF CON 32 -Your Smartcard is Dumb A Brief History of Hacking Access Control Systems - Chad ShortmanHave you ever wondered how those little boxes that you tap your card to open doors work? What are they reading on the card? How do they ultimately unlock the door? And, are they even secure? In this talk, we will answer all of those questions and more. We will walk through how access-control systems, in general, work, and dig into the details of the most popular systems. Fortunately for the entertainment value of this talk, there be dragons in our doors. We will walk through some of the most high-profile attacks in detail and then dive into some more fundamental flaws with how the systems are designed. All of these discussions will be accompanied with live demos and first hand experience. After this talk, you will look at the world, especially doors, differently -- weaknesses everywhere! My hope is that we can all learn from past mistakes and create a more secure and less frustrating tomorrow together --- Mirrored from YouTube: https://www.youtube.com/watch?v=zBP2deuPQTghttps://peertube.dodges.it/static/streaming-playlists/hls/5975f336-e7f6-4459-9657-e96523789fa8/28a1ae00-41be-40ce-83fe-657a1358b17b-master.m3u8https://peertube.dodges.it/videos/embed/c3J64SPWwKeX7VLU9AHDAY3201002026-10-24T16:42:28.914ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3izFFzHY4fVCEUXoBanjvc2026-10-22T22:39:10.547Zhttps://peertube.dodges.it/lazy-static/thumbnails/5c8fa950-a78b-4a4e-8450-d7b68cdb7d12.jpgDEF CON 23 - Eijah - Crypto for HackersHacking is hard. It takes passion, dedication, and an unwavering attention to detail. Hacking requires a breadth of knowledge spread across many domains. We need to have experience with different platforms, operating systems, software packages, tools, programming languages, and technology trends. Being overly deficient in any one of these areas can add hours to our hack, or even worse, bring us total failure. And while all of these things are important for a well-rounded hacker, one of the key areas that is often overlooked is cryptography. In an era dominated by security breaches, an understanding of encryption and hashing algorithms provides a tremendous advantage. We can better hone our attack vectors, especially when looking for security holes. A few years ago I released the first Blu-Ray device key, AA856A1BA814AB99FFDEBA6AEFBE1C04, by exploiting a vulnerability in an implementation of the AACS protocol. As hacks go, it was a simple one. But it was the knowledge of crypto that made it all possible. This presentation is an overview of the most common crypto routines helpful to hackers. We'll review the strengths and weaknesses of each algorithm, which ones to embrace, and which ones to avoid. You'll get C++ code examples, high-level wrapper classes, and an open-source library that implements all the algorithms. We'll even talk about creative ways to merge algorithms to further increase entropy and key strength. If you've ever wanted to learn how crypto can give you an advantage as a hacker, then this talk is for you. With this information you'll be able to maximize your hacks and better protect your personal data. Speaker Bio: Eijah is the founder of demonsaw, a secure and anonymous content sharing platform, and a Senior Programmer at a world-renowned game development studio. He has over 15 years of software development and IT Security experience. His career has covered a broad range of Internet and mid-range technologies, core security, and system archite...https://peertube.dodges.it/static/streaming-playlists/hls/12a6ae16-045b-4193-9463-af0c7eda35dd/0e6ac1ef-c3ab-4f8b-8ee6-fbe7feb2e2c0-master.m3u8https://peertube.dodges.it/videos/embed/3izFFzHY4fVCEUXoBanjvc3351002026-10-24T16:42:31.766ZDEF CON (Conference Series)DEF CON 23DC23DC 23hackYESDEFCONNOhttps://peertube.dodges.it/w/cS6Gj5DjDWNVNzG9bXQzWA2026-10-23T00:21:50.311Zhttps://peertube.dodges.it/lazy-static/thumbnails/dee36827-fa88-40ce-b043-0752507b2e40.jpgDEF CON 32 - Anyone can hack IoT- Beginner’s Guide to Hacking Your First IoT Device - Andrew BelliniYes, anyone can hack IoT devices and I’ll show you how! It doesn’t matter if you’re an experienced pen tester in other fields, completely new to cybersecurity or just IoT curious, by the end of this talk you’ll have the knowledge to hack your first device. You might be thinking - but I thought IoT was complicated, required knowledge of hardware, and expensive tools. In this talk, I’m here to dispel those myths by directly showing you the methodology, tools and tactics you can use to go and hack an IoT device today (or maybe when you get home). I’ll cover what IoT devices are best for beginners, what tools you need (and don’t need), how to build a small toolkit for less than $100, common tactics to get a foothold into IoT devices and how to find your first vulnerability or bug. --- Mirrored from YouTube: https://www.youtube.com/watch?v=YPcOwKtRuDQhttps://peertube.dodges.it/static/streaming-playlists/hls/60133933-ccc5-4c6e-891d-8e3770c71332/ea90b74c-d1fe-4f0c-817b-c1d8e40ea98f-master.m3u8https://peertube.dodges.it/videos/embed/cS6Gj5DjDWNVNzG9bXQzWA3252002026-10-24T22:27:55.486ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vvPfXJxX9RgS2Td48ikKsJ2026-10-23T00:23:08.735Zhttps://peertube.dodges.it/lazy-static/thumbnails/e30a0de5-a438-4757-84d0-8824262dffc1.jpgDEF CON 26 - Si, Agent X - Wagging the Tail:Covert Passive SurveillanceIn this modern digital age of technically competent adversaries we forget that there may still be a need to conduct old school physical surveillance against a target. Many organisations utilise surveillance teams and these may be in-house in the case of government agencies or third-party teams contracted for a specific task and their targets range from suspected terrorists to people accused of bogus insurance claims. Whilst most people think that they may never be placed under surveillance some professions increase this probability. For example, if you are a member of the press with sources that you only meet face to face you could be a target especially if the source is a whistleblower or has information that their employer would rather they didn't give to you. Would it seem far-fetched to think that a hacker, security researcher or a member of the EFF could be placed under surveillance? Maybe even some current and former DEF CON speakers and attendees? These teams are not the lone Private Investigator sat in their car at the bottom of your street but are highly trained individuals whose job is to remain undetected. Their mission is to observe and identify interactions and document everything they see. They aim to be "The Grey Man", that person, when asked to describe, you are unable to. Their techniques have changed very little over decades because they work. This talk will focus on mobile and foot surveillance techniques used by surveillance teams. It will also include tips on identifying if you are under surveillance and how to make their life difficult. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tYFOXeItRFMhttps://peertube.dodges.it/static/streaming-playlists/hls/ef02b6d6-bf78-4249-aaeb-f31f19b76f42/2f394331-58db-494b-ab14-1f06d04caf58-master.m3u8https://peertube.dodges.it/videos/embed/vvPfXJxX9RgS2Td48ikKsJ2834002026-10-24T23:19:01.738ZDEFCONDEFCON 26DEFCONDEF CONYESDEFCONNOhttps://peertube.dodges.it/w/rEVtqRLwexMAjHaPHGCeVd2026-10-23T00:25:35.246Zhttps://peertube.dodges.it/lazy-static/thumbnails/d8da7033-5a2a-497c-94ae-888a9c585590.jpgDEF CON 33 - Post Quantum Panic: When Will the Cracking Begin, & Can We Detect it? - K KaragiannisQuantum computers will crack RSA and ECC and weaken symmetric encryption, but when? NIST is betting it won't happen before 2035, setting that deadline for companies to migrate to post-quantum cryptography (PQC). However, recent developments make it clear that we might not have 10 years; we might have only 5! Join Konstantinos Karagiannis (KonstantHacker) as he breaks down the latest algorithmic estimates, including Oded Regev's game-changing tweak to Shor's algorithm, which promises faster factoring with fewer qubits. He also discusses IonQ and IBM's aggressive roadmaps, pushing us closer to cryptographically relevant quantum computers (CRQCs). Think 1000+ qubits by 2026 and fault-tolerant systems by 2030. And when Q-Day does arrive, will we be able to catch or prevent bad actors from running these algorithms on cloud quantum platforms? Learn what's possible when monitoring quantum circuit patterns and suspicious API calls. --- Mirrored from YouTube: https://www.youtube.com/watch?v=OkVYJx1iLNshttps://peertube.dodges.it/static/streaming-playlists/hls/cfe3af01-057a-4f51-9db8-29cc346e46e2/89d75b35-702e-4674-84c1-d7ac33ef0e8d-master.m3u8https://peertube.dodges.it/videos/embed/rEVtqRLwexMAjHaPHGCeVd2369002026-10-24T23:19:12.523ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bfkKNZ5s4EmEXSiUCjt62i2026-10-23T00:27:53.694Zhttps://peertube.dodges.it/lazy-static/thumbnails/1abf3116-61b2-4ab9-91f6-243e1a427620.jpgDEF CON 31 - Ringhopper - How We Almost Zero day’d the World - Benny Zeltser, Jonathan LuskyLast year we almost zero-day’d the world with the publication of RingHopper. Now we can finally share some juicy details and invite you for an illuminating journey as we delve into the realm of RingHopper, a method to hop from user-land to SMM. We will survey the discovery and disclosure of a family of industry-wide vulnerabilities in various UEFI implementations, affecting more than eight major vendors, making billions of devices vulnerable to our attack. Then, we will deep-dive into the innards of SMM exploitation and discuss methods to use and abuse various functionalities and properties of edk2 to gain code execution. We will unveil both our futile and fruitful quests of crafting our way to SMM, and detail both the paths that lead to dead-ends, and the route to success. We will give a detailed overview of different ways to elevate this kind of attack to user-land both on Windows and Linux by chaining multiple vulnerabilities together. Finally, we will show RingHopper hopping from user-space to… SMM. --- Mirrored from YouTube: https://www.youtube.com/watch?v=u8V4ofWpHZkhttps://peertube.dodges.it/static/streaming-playlists/hls/52fbf95a-fa51-4782-a18a-96df6ead5157/16f95f1f-782f-4bd2-b420-6c4e5da744cc-master.m3u8https://peertube.dodges.it/videos/embed/bfkKNZ5s4EmEXSiUCjt62i2389002026-10-25T00:23:53.590ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/sFxF3G89AZKtz9QGeoGtAA2026-10-23T00:30:46.546Zhttps://peertube.dodges.it/lazy-static/thumbnails/97ffe24e-0de7-4304-8974-78b96dcd6262.jpgRobin Dreeke - Sizing People Up - DEF CON 27 Social Engineering VillageYou learned how to build rapport from Robin. Then you learned about the code of trust… but blending all of it together to now master – SIZING PEOPLE UP. Robin Dreeke: @rdreeke Robin is a best-selling author, professional speaker, trainer, facilitator, and retired FBI Special Agent and Chief of the Counterintelligence Behavioral Analysis Program. Robin has taken his life’s work of recruiting spies and broken the art of leadership and relationship building into Five Steps to TRUST. Since 2010, Robin has been working with large corporations as well as small companies in every aspect of their business. Whether it is newly promoted leaders, executives, sales teams, or customer relations, Robin has crafted his Code of Trust for quick results and maximum success. --- Mirrored from YouTube: https://www.youtube.com/watch?v=H3XR4QrJyxAhttps://peertube.dodges.it/static/streaming-playlists/hls/d81321aa-1299-4f86-8ef6-63719c772162/e0ff3618-d387-45b4-ac38-94a9cb9055e3-master.m3u8https://peertube.dodges.it/videos/embed/sFxF3G89AZKtz9QGeoGtAA3227002026-10-25T00:24:08.255ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pxLjMrqcKg8J9WLEofe14d2026-10-23T00:31:30.645Zhttps://peertube.dodges.it/lazy-static/thumbnails/315b00ca-84ac-4678-ae61-3c4c6f2ac497.jpgDEF CON 26 - Eyal Itkin, Yaniv Balmas - What the Fax?!Unless you've been living under a rock for the past 30 years or so, you probably know what a fax machine is. For decades, fax machines were used worldwide as the main way of electronic document delivery. But this happened in the 1980s. Humanity has since developed far more advanced ways to send digital content, and fax machines are all in the past, right? After all, they should now be nothing more than a glorified museum item. Who on earth is still using fax machines? The answer, to our great horror, is EVERYONE. State authorities, banks, service providers and many others are still using fax machines, despite their debatable quality and almost non-existent security. In fact, using fax machines is often mandatory and considered a solid and trustworthy method of delivering information. What the Fax?! We embarked on a journey with the singular goal of disrupting this insane state of affairs. We went to work, determined to show that the common fax machine could be compromised via mere access to its fully exposed and unprotected telephone line -- thus completely bypassing all perimeter security protections and shattering to pieces all modern-day security concepts. Join us as we take you through the strange world of embedded operating systems, 30-year-old protocols, museum grade compression algorithms, weird extensions and undebuggable environments. See for yourself first-hand as we give a live demonstration of the first ever full fax exploitation, leading to complete control over the entire device as well as the network, using nothing but a standard telephone line. This talk is intended to be the canary in the coal mine. The technology community cannot sit idly by while this ongoing madness is allowed to continue. The world must stop using FAX! --- Mirrored from YouTube: https://www.youtube.com/watch?v=qLCE8spVX9Qhttps://peertube.dodges.it/static/streaming-playlists/hls/beb18fc4-a181-490c-9504-3ccf730218e2/4c47525c-5a44-4d09-b2ff-54c6b91ecae0-master.m3u8https://peertube.dodges.it/videos/embed/pxLjMrqcKg8J9WLEofe14d2655002026-10-25T01:13:59.939ZDEFCONDEFCONDEF CON 26DC26YESDEFCONNOhttps://peertube.dodges.it/w/k3eyAHLrC6pqZinbg8rZFi2026-10-23T00:33:23.862Zhttps://peertube.dodges.it/lazy-static/thumbnails/721712d7-4868-4839-a0e6-8e3b6af4bbc9.jpgDEF CON 23 - Dan Kaminsky - I Want These * Bugs off My * InternetAre you interested in the gory details in fixing ugly bugs? No? Just like watching stuff blow up? Go to some other talk! But if you want to see what it takes to comprehensively end an entire bug class -- how you dive into a code base, what performance and usability and maintainability and debuggability constraints it takes to make a web browser more secure -- oh do I have some dirt for you. Dan Kaminsky is Chief Scientist of White Ops. --- Mirrored from YouTube: https://www.youtube.com/watch?v=9wx2TnaRSGshttps://peertube.dodges.it/static/streaming-playlists/hls/9a2d7ae0-6f9c-47cd-a562-086f3cc2a1a3/60d150e5-22b1-4705-8f07-67ed23ed6dd4-master.m3u8https://peertube.dodges.it/videos/embed/k3eyAHLrC6pqZinbg8rZFi2889002026-10-25T01:14:09.099ZDEF CON (Conference Series)Dan Kaminsky (Person)DEFCONDEF CON-23Security ResearchYESDEFCONNOhttps://peertube.dodges.it/w/uqkuGFU4C6ocZBGQu91cqE2026-10-23T00:37:32.069Zhttps://peertube.dodges.it/lazy-static/thumbnails/3e6ba7b5-c43d-48ac-bec5-21d1e56307f5.jpgRoger Dingledine - The Tor Censorship Arms Race The Next Chapter - DEF CON 27 ConferenceTor is a free-software anonymizing network that helps people around the world use the Internet in safety. But who cares how good Tor's privacy is, if your government prevents you from reaching the Tor network? In the beginning, some countries filtered torproject.org by DNS (so we made website mirrors and an email autoresponder for downloading Tor), and then some countries blocked Tor relays by IP address (so we developed bridges, which are essentially unlisted relays), and then some countries blocked Tor traffic by Deep Packet Inspection (so we developed pluggable transports to transform Tor flows into benign-looking traffic). Then things got weird, with China's nationwide active probing infrastructure to enumerate bridges, with Amazon rolling over to Russia's threats when Telegram used "domain fronting" to get around blocking, with Turkey blocking Tor traffic by DPI in more subtle ways, with Venezuela and Ethiopia and Iran trying new tricks, and more. In this talk I'll get you up to speed on all the ways governments have tried to block Tor, walk through our upcoming steps to stay ahead of the arms race, and give you some new—easier—ways that let you help censored users reach the internet safely. Roger Dingledine Roger Dingledine is president and co-founder of the Tor Project, a nonprofit that develops free and open source software to protect people from tracking, censorship, and surveillance online. Wearing one hat, Roger works with journalists and activists on many continents to help them understand and defend against the threats they face. Wearing another, he is a lead researcher in the online anonymity field, coordinating and mentoring academic researchers working on Tor-related topics. Since 2002 he has helped organize the yearly international Privacy Enhancing Technologies Symposium (PETS). Among his achievements, Roger was chosen by the MIT Technology Review as one of its top 35 innovators under 35, he co-authored the Tor design paper that won the Us...https://peertube.dodges.it/static/streaming-playlists/hls/e625bf41-4d0e-4f79-8b7a-1e54807be522/14bc9cf0-61e9-46b6-9bd9-385cfd8d440f-master.m3u8https://peertube.dodges.it/videos/embed/uqkuGFU4C6ocZBGQu91cqE2512002026-10-25T02:08:17.594Zhacker conferenceDEF CON 2019security conferenceDEFCONconference speakersYESDEFCONNOhttps://peertube.dodges.it/w/hBZeLCLqEhf6RLVr7sQtuZ2026-10-23T00:38:40.646Zhttps://peertube.dodges.it/lazy-static/thumbnails/c90e638c-475e-4831-ac11-ebc0459c4edc.jpgDEF CON 24 - Marc Newlin - MouseJack: Injecting Keystrokes into Wireless MiceWhat if your wireless mouse was an effective attack vector? Research reveals this to be the case for mice from Logitech, Microsoft, Dell, Lenovo, Hewlett-Packard, Gigabyte, and Amazon. Dubbed 'MouseJack', this class of security vulnerabilities allows keystroke injection into non-Bluetooth wireless mice. Imagine you are catching up on some work at the airport, and you reach into your laptop bag to pull out your phone charger. As you glance back at your screen, you see the tail end of an ASCII art progress bar followed by your shell history getting cleared. Before you realize what has happened, an attacker has already installed malware on your laptop. Or maybe they just exfiltrated a git repository and your SSH keys. In the time it took you to plug in your phone, you got MouseJacked. The attacker is camped out at the other end of the terminal, equipped with a commodity USB radio dongle and a directional patch antenna hidden in a backpack, and boards her plane as soon as the deed is done. The reality of MouseJack is that an attacker can inject keystrokes into your wireless mouse dongle from over 200 meters away, at a rate of up to 7500 keystrokes per minute (one every 8ms). Most wireless keyboards encrypt the data going between the keyboard and computer in order to deter sniffing, but wireless mouse traffic is generally unencrypted. The result is that wireless mice and keyboards ship with USB dongles that can support both encrypted and unencrypted RF packets. A series of implementation flaws makes it possible for an attacker to inject keystrokes directly into a victim's USB dongle using easily accessible, cheap hardware, in most cases only requiring that the user has a wireless mouse. The majority of affected USB dongles are unpatchable, making it likely that vulnerable computers will be common in the wild for the foreseeable future. This talk will explain the research process that lead to the discovery of these vulnerabilities, covering specific tools and tech...https://peertube.dodges.it/static/streaming-playlists/hls/86988639-7b23-4679-a28e-a6efd91658fd/8803290e-0d07-4025-9f0f-905dbcb7c22f-master.m3u8https://peertube.dodges.it/videos/embed/hBZeLCLqEhf6RLVr7sQtuZ2554002026-10-25T02:08:26.323ZDEF CONDEF CON 24DC24DEFCON 24DEF CON 2016YESDEFCONNOhttps://peertube.dodges.it/w/tj2EBdpwMhRDmHPHMv7PD82026-10-23T00:40:28.979Zhttps://peertube.dodges.it/lazy-static/thumbnails/8fec839a-d04f-4661-ae9f-37c716d32531.jpgDEF CON 22 - Jayson E. Street - Around the world in 80 cons"Around the world in 80 cons” - A Perspective Jayson E. Street Senior Partner of Krypton Security After spending 15 years in the hacker / InfoSec community, I thought it was time to pause and look back upon all I have seen, everywhere I have been, all the people I met and everything I have learned. And then share some of that knowledge with people to hopefully help them have a leg up moving forward. More importantly, compare and contrast my experiences and perspectives with statistics we commonly see based on attacks and the countries of origin. Statistics tell one story, perspective tells the other. This is a talk on perspectives. Hackers, and hacking, are perceived differently around the world and, in turn, some view our community and what we do with different eyes than ours. I believe most reports/papers we (Americans) see about that topic are skewed and never give an accurate global image. Taking a very small dose of reality and comparing it to what we're subjected to, is interesting. Being a foreign hacker attending a con, or delivering an engagement, in an alien land often led to unexpected situations that I will also share. I will also share while searching for diversity in our global hacking culture I found things that united us more than you would expect. I show how no matter what region of the planet you come from we face a threat we all need to face and overcome. Jayson E. Street is an author of “Dissecting the hack: The F0rb1dd3n Network” from Syngress. Also creator of http://dissectingthehack.com He has also spoken at DEFCON, DerbyCon, UCON and at several other ‘CONs and colleges on a variety of Information Security subjects. His life story can be found on Google under “Jayson E. Street” *He is a highly carbonated speaker who has partaken of Pizza from Beijing to Brazil. He does not expect anybody to still be reading this far but if they are please note he was chosen as one of Time’s persons of the year for 2006. ;-) Twitter: @jaysonstreet ---...https://peertube.dodges.it/static/streaming-playlists/hls/dd2b287d-a1e3-4906-87ce-0875e30f91a5/1388d4c4-4c55-4b1e-b01d-476bc5b808dc-master.m3u8https://peertube.dodges.it/videos/embed/tj2EBdpwMhRDmHPHMv7PD83634002026-10-25T03:04:43.773ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/xtvXPNwNjJStc5SUj47YB82026-10-23T00:41:27.527Zhttps://peertube.dodges.it/lazy-static/thumbnails/7c9fbe3f-d8f0-4982-863a-f745fb13f628.jpgDEF CON 30 - Kenneth Geers - Computer Hacks in the Russia-Ukraine WarThe Russia-Ukraine war has seen a lot of computer hacking, on both sides, by nations, haxor collectives, and random citizens, to steal, deny, alter, destroy, and amplify information. Satellite comms have gone down. Railway traffic has been stymied. Doxing is a weapon. Fake personas and false flags are expected. Every major platform has had issues with confidentiality, integrity, and availability. Hacked social media and TV have been a hall of mirrors and PSYOP. Russian comms are unreliable, so Ukrainian nets have become honeypots. Hackers have been shot in the kneecaps. Talking heads have called for a RUNET shutdown. The Ukrainian government has appealed for hacker volunteers – just send your expertise, experience, and a reference. The Great Powers are hacking from afar, while defending their own critical infrastructure, including nuclear command-and-control. Ukraine has many hacker allies, while Russian hackers are fleeing their country in record numbers. Some lessons so far: connectivity is stronger than we thought, info ops are stealing the day, drones are the future, and it is always time for the next hack. --- Mirrored from YouTube: https://www.youtube.com/watch?v=y9cIiL-2IWchttps://peertube.dodges.it/static/streaming-playlists/hls/fee2d864-c4e6-435f-8474-c5f9d775e135/bf0541a9-a3c5-4bde-adbe-788b31361a91-master.m3u8https://peertube.dodges.it/videos/embed/xtvXPNwNjJStc5SUj47YB81254002026-10-25T03:04:50.881ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vbZVYdFru7UaAQTKSbpaTJ2026-10-23T00:43:32.386Zhttps://peertube.dodges.it/lazy-static/thumbnails/dbdcdbd3-3b78-48ff-956b-b8b94e92661e.jpgDEF CON 24 SE Village - Chris Hadnagy - 7 Jedi Mind Tricks: Influence Your Target without a WordThere are nonverbal movements and actions, that if you master, can make your target more compliant, easier to influence and even happier to comply with your wishes. BIO: Chris is the sole defender of those who do not want to hear Hornsby. His passion for SE is only match by his passion for the NoHornsby movement. --- Mirrored from YouTube: https://www.youtube.com/watch?v=VFnCRVWBISYhttps://peertube.dodges.it/static/streaming-playlists/hls/ec6228e7-7654-4280-a891-2c09ffc783b4/f08f4241-c9af-48bd-a81e-4bd6234576af-master.m3u8https://peertube.dodges.it/videos/embed/vbZVYdFru7UaAQTKSbpaTJ3086002026-10-25T04:18:55.052ZDEF CONDEF CON 24DEFCONDC24DC-24YESDEFCONNOhttps://peertube.dodges.it/w/g9Z4LyY8mgx8dsHEMnmmc72026-10-23T00:47:23.621Zhttps://peertube.dodges.it/lazy-static/thumbnails/29aa0f8f-90f1-4968-b90a-2758ae40d924.jpgDEF CON 33 - Recording PCAPs from Stingrays With a $20 Hotspot - Cooper Quintin, oopsbagelWhat if you could use Wireshark on the connection between your cellphone and the tower it's connected to? In this talk we present Rayhunter, a cell site simulator detector built on top of a cheap cellular hotspot. It works by collecting and analyzing real-time control plane traffic between a cellular modem and the base station it's connected to. We will outline the hardware and the software developed to get low level information from the Qualcomm DIAG protocol, as well as go on a deep dive into the methods we think are used by modern cell-site simulators. We’ll present independently validated results from tests of our device in a simulated attack environment and real world scenarios. Finally, we will discuss how we hope to put this device into the hands of journalists, researchers, and human rights defenders around the world to answer the question: how often are we being spied on by cell site simulators? --- Mirrored from YouTube: https://www.youtube.com/watch?v=meC2JqNAbCAhttps://peertube.dodges.it/static/streaming-playlists/hls/7aba3295-d652-45a8-8612-170f0ac7c5e4/ea8b4add-e5c3-4c1e-a0e4-63851e2f66d4-master.m3u8https://peertube.dodges.it/videos/embed/g9Z4LyY8mgx8dsHEMnmmc72391002026-10-25T04:19:06.078ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1MvG2oRJ7Qt9t86N1T5nB82026-10-23T00:48:59.648Zhttps://peertube.dodges.it/lazy-static/thumbnails/70d91221-05f2-43fc-a479-75cb256a17f6.jpgDEF CON Safe Mode Demo Labs - Ajin Abraham - Mobile App Security Testing with MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. --- Mirrored from YouTube: https://www.youtube.com/watch?v=1NIQs82n3nwhttps://peertube.dodges.it/static/streaming-playlists/hls/065ac44d-5d40-43ea-a506-ee66b7890fb9/87dee583-9977-4d92-879e-ef3dcabe1e0a-master.m3u8https://peertube.dodges.it/videos/embed/1MvG2oRJ7Qt9t86N1T5nB81837002026-10-25T04:56:43.310ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tyUUkfJwFTo1WAGEHP4iDB2026-10-23T00:49:28.588Zhttps://peertube.dodges.it/lazy-static/thumbnails/5517f1ca-e806-4591-bd48-348f40b371fa.jpgDEF CON 25 - Dennis Maldonado - Real time RFID Cloning in the FieldEver been on a job that required you to clone live RFID credentials? There are many different solutions to cloning RFID in the field and they all work fine, but the process can be slow, tedious, and error prone. What if there was a new way of cloning badges that solved these problems? In this presentation, we will discuss a smarter way for cloning RFID in the field that is vastly more efficient, useful, and just plane cool. We will go over the current tools and methods for long-range RFID cloning, than discuss and demonstrate a new method that will allow you to clone RFID credentials in the field in just seconds, changing the way you perform red team engagements forever. --- Mirrored from YouTube: https://www.youtube.com/watch?v=kUduHIygbY8https://peertube.dodges.it/static/streaming-playlists/hls/df3f258a-8a7e-4c04-ad0b-8b5c2e2a2271/86a038d4-f1e7-440e-b7a1-af41f8cfded9-master.m3u8https://peertube.dodges.it/videos/embed/tyUUkfJwFTo1WAGEHP4iDB1233002026-10-25T04:56:48.223ZDEF CONDEFCONDEF CON 2017DEF CON 25hackersYESDEFCONNOhttps://peertube.dodges.it/w/pDZ4ctwwHSXb9kR5xbt2cm2026-10-23T00:52:22.350Zhttps://peertube.dodges.it/lazy-static/thumbnails/2b9cd135-5707-414a-a71a-5c45cea07261.jpgDEF CON 25 - Garry Kasparov - The Brain's Last StandFormer world chess champion Garry Kasparov has a unique place in history as the proverbial "man" in "man vs. machine" thanks to his iconic matches against the IBM supercomputer Deep Blue. Kasparov walked away from that watershed moment in artificial intelligence history with a passion for finding ways humans and intelligent machines could work together. In the spirit of "if you can't beat'em, join'em," Kasparov has explored that potential for the 20 years since his loss to Deep Blue. Navigating a practical and hopeful approach between the utopian and dystopian camps, Kasparov focuses on how we can rise to the challenge of the AI revolution despite job losses to automation and refuting those who say our technology is making us less human. He includes concrete examples and forward-looking strategies on AI. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fp7Pq7_tHsYhttps://peertube.dodges.it/static/streaming-playlists/hls/bf8fdec1-e4c6-42a8-93f0-6e40d1a6f16e/6d5a8a3b-a0a5-4bc6-b87e-9c56a23b203e-master.m3u8https://peertube.dodges.it/videos/embed/pDZ4ctwwHSXb9kR5xbt2cm2887002026-10-25T06:11:53.444ZDEF CONDEFCONDEF CON 25DC25DC-25YESDEFCONNOhttps://peertube.dodges.it/w/7HLgT8bTTKEVmw5yojtHmi2026-10-23T00:53:10.249Zhttps://peertube.dodges.it/lazy-static/thumbnails/54912e7d-35aa-4dc9-a30e-8929c2475f3d.jpgBlack Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face IncidentThe 'Breaking' News: The OpenAI–Hugging Face Incident - A Technical Reconstruction and Its Implications for AI When AI Goes Rogue. The Incident That Changed Everything. An OpenAI evaluation agent broke out of its sandbox, infiltrated Hugging Face infrastructure, and attempted to steal test answers—all autonomously. No human involved. The era of AI-driven cyberattacks is here. Are you prepared? At Black Hat, you do not wait for the cyber story to become mainstream. You hear it directly from the people who uncovered it. This December at Black Hat Europe, researchers will reveal newly discovered vulnerabilities, attack techniques, and weaknesses affecting the technologies businesses are relying on right now. Speaker: Michael Dalton, Speaker: Eric Wallace Learn more: https://blackhat.com/us-26/briefings/schedule/index.html#the-breaking-news--the-openaihugging-face-incident---a-technical-reconstruction-and-its-implications-for-ai-57401 --- Mirrored from YouTube: https://www.youtube.com/watch?v=87DyyMV0kCYhttps://peertube.dodges.it/static/streaming-playlists/hls/366b9c7a-3540-4175-9d61-66c0b1c95475/78b039fe-3851-44a4-b12e-adc27e63bfc3-master.m3u8https://peertube.dodges.it/videos/embed/7HLgT8bTTKEVmw5yojtHmi2247002026-10-25T06:12:02.413ZYESBlackhatNOhttps://peertube.dodges.it/w/wCboHHVCYyeBmvm332A9T12026-10-23T00:54:25.401Zhttps://peertube.dodges.it/lazy-static/thumbnails/eca2e57e-f058-4be6-879e-c545ac5d961d.jpgSurveilling the Masses with Wi-Fi Positioning SystemsWi-Fi Positioning Systems are used by modern mobile operating systems to geolocate themselves without the use of GPS. Both Google and Apple, for instance, run Wi-Fi Positioning Systems for Android and iOS devices to obtain their own location using nearby Wi-Fi access points as landmarks. In this work, we show that Apple's Wi-Fi Positioning System represents a global threat to the privacy of hundreds of millions of people. When iOS devices need to geolocate themselves using nearby Wi-Fi landmarks, they transmit a list of hardware identifiers to Apple and receive the geolocations of those access points in return. Unfortunately, this process can be replicated by an unprivileged adversary, who can recreate a copy of Apple's Wi-Fi geolocation database by requesting the locations of access points around the world with no prior knowledge. To make matters worse, we demonstrate that by repeatedly querying Apple's Wi-Fi Positioning System for the same identifiers, we can detect Wi-Fi router movement over time. In our data, we see evidence of home relocations, family vacations, and the aftermath of natural disasters like the 2023 Maui wildfires. More disturbingly, we also observe troop and refugee movements into and out of the Ukraine war and the impact of the war in Gaza. We conclude by detailing our efforts at responsible disclosure, and offer a number of suggestions for limiting Wi-Fi Positioning Systems' effects on user privacy in the future. By: Erik Rye | Researcher, University of Maryland Full Abstract and Presentation Materials: https://www.blackhat.com/us-24/briefings/schedule/#surveilling-the-masses-with-wi-fi-positioning-systems-38430 --- Mirrored from YouTube: https://www.youtube.com/watch?v=hlbjUvkoyBAhttps://peertube.dodges.it/static/streaming-playlists/hls/f7ff56f2-ac71-4c01-be31-32c99cda1dce/f958600b-0dc2-4554-8f91-cb9e06dc9639-master.m3u8https://peertube.dodges.it/videos/embed/wCboHHVCYyeBmvm332A9T11663002026-10-25T07:49:20.386ZYESBlackhatNOhttps://peertube.dodges.it/w/rKXHRgGTdWpco2e3EsrQ5S2026-10-23T00:56:16.819Zhttps://peertube.dodges.it/lazy-static/thumbnails/eccf21c8-176b-4284-846e-3336afaa93fb.jpgDEF CON Safe Mode - Paul Marrapese - Abusing P2P to Hack 3 Million CamerasTo a hacker, making a bug-ridden IoT device directly accessible to the Internet sounds like an insanely bad idea. But what's *truly* insane is that millions of IoT devices are shipping with features that expose them to the Internet the moment they come online, even in the presence of NAT and firewalls. P2P, or “peer-to-peer”, is a convenience feature designed to make the lives of users easier, but has the nasty side effect of making attackers’ lives easier as well. Come for the story of how supply chain vulnerabilities in modern IP cameras, baby monitors, and even alarm systems are putting millions at risk for eavesdropping and remote compromise. We'll talk about the hoards of IoT devices that exist outside of Shodan's reach and the botnet-like infrastructure they rely on. Learn how to find P2P networks and how to exploit them to jump firewalls, steal camera passwords over the Internet, and correlate devices to physical addresses. We'll demonstrate how to snoop on someone's video simply by using your own camera – and how someone may be snooping on your video, too. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Z_gKEF76oMMhttps://peertube.dodges.it/static/streaming-playlists/hls/d097c9c9-7d2e-48e7-8325-b1d082b3c522/dbf56ef8-3fbe-47aa-9f2c-5100a3b71832-master.m3u8https://peertube.dodges.it/videos/embed/rKXHRgGTdWpco2e3EsrQ5S1954002026-10-25T08:00:58.771ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/bnsPDrtBxAyTY4BnWjvrHP2026-10-23T00:57:22.666Zhttps://peertube.dodges.it/lazy-static/thumbnails/2374870f-f904-43c1-8341-062446d379da.jpgDEF CON 32 - Top War Stories from a TryHard Bug Bounty Hunter -Justin Rhynorater GardnerAsk any top bug bounty hunter: the best part of a live hacking event is the Show & Tell; the time when the veil is lifted and we collectively revel in the ingenuity of the best finds from the competition. The goal of this talk is to give you that same experience. I will speak to you as the competent hackers that you are, not withholding the nitty-gritty technical details and the Ls along the way. Together, we’ll journey through the highs and the lows of my hunts, both solo and in a Live Hacking Event context. You’ll see everything from RCE to SQL injection, mass PII leakage to spying on people’s homes and workplaces. You’ll find some bugs mind-numbingly simple, and some bugs mind-bogglingly complex. Each bug in this talk was assigned the highest severity possible, and awarded somewhere between $10k-$60k in bounties. --- Mirrored from YouTube: https://www.youtube.com/watch?v=TqKb7h8VFcAhttps://peertube.dodges.it/static/streaming-playlists/hls/53fa88fb-b3b7-42ce-9565-0ebd89369525/2c4c56fd-1705-4d2d-8223-2a8e9c41c9b3-master.m3u8https://peertube.dodges.it/videos/embed/bnsPDrtBxAyTY4BnWjvrHP3037002026-10-25T09:50:51.295ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/drQ5c3AeZP6cCj21DbRYnH2026-10-23T00:58:32.263Zhttps://peertube.dodges.it/lazy-static/thumbnails/c5ab36f3-f407-43c0-945f-49d6aab127f3.jpgDEF CON 24 - int0x80 - Anti Forensics AFThis presentation is the screaming goat anti-forensics version of those ‘Stupid Pet Tricks’ segments on late night US talk shows. Nothing ground-breaking here, but we’ll cover new (possibly) and trolly (definitely) techniques that forensic investigators haven’t considered or encountered. Intended targets cover a variety of OS platforms. Bio: int0x80 is the rapper in Dual Core. Drink all the booze, hack all the things! --- Mirrored from YouTube: https://www.youtube.com/watch?v=_fZfDGWpP4Uhttps://peertube.dodges.it/static/streaming-playlists/hls/64c8e23d-2956-46f4-96b4-6d885dda11b3/8edbf3aa-8a74-48b8-8811-93e45489e894-master.m3u8https://peertube.dodges.it/videos/embed/drQ5c3AeZP6cCj21DbRYnH2244002026-10-25T08:01:06.113ZDEF CONDEFCONHackingHacker ConferenceComputer SecurityYESDEFCONNOhttps://peertube.dodges.it/w/2Sn11bPrqgbKFMe9qQ8jme2026-10-23T01:00:04.299Zhttps://peertube.dodges.it/lazy-static/thumbnails/3e985cc7-9cad-4c41-809a-cb78cd16d484.jpgDEF CON 29 - Bill Graydon - Defeating Physical Intrusion Detection Alarm WiresAlarm systems are ubiquitous - no longer the realm of banks and vaults only, many people now have them in their homes or workplaces. But how do they work? And the logical follow-up question - how can they be hacked? This talk focuses on the communication lines in physical intrusion detection systems: how they are secured, and what vulnerabilities exist. We’ll discuss the logic implemented in the controllers and protections on the communication lines including end of line resistors - and all the ways that this aspect of the system can be exploited. In particular, we’ll release schematics for a tool we’ve developed that will enable measuring end-of-line resistor systems covertly, determining the necessary re-wiring to defeat the sensors, and deploy it without setting off the alarm. After the talk, you can head over to the Lock Bypass Village to try these techniques out for yourself! --- Mirrored from YouTube: https://www.youtube.com/watch?v=Liz9R_QxSgkhttps://peertube.dodges.it/static/streaming-playlists/hls/0f2144d6-e418-4549-800b-227a5e46cbb5/7d5f3e76-4e22-43a2-aa90-945c7c5d1b2f-master.m3u8https://peertube.dodges.it/videos/embed/2Sn11bPrqgbKFMe9qQ8jme2711002026-10-25T09:51:06.058ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/aAP53KjkZ6WmeFxHhcYeDn2026-10-23T01:03:45.289Zhttps://peertube.dodges.it/lazy-static/thumbnails/2d7775f4-9738-4779-9c84-9516e5961e7d.jpgCQTools: The New Ultimate Hacking Toolkit*Voted Best of Black Hat Asia 2019 Briefings* CQURE Team has written over 200 hacking tools during penetration testing. We decided to choose the top 39 tools and pack them in a toolkit called CQTools. We are going to announce 5 new tools at Black Hat Asia, allowing the ultimate privilege elevation and network attacks! By Paula Januszkiewicz, Adrian Denkiewicz & Mike Jankowski-Lorek Full Abstract & Presentation Materials: https://www.blackhat.com/asia-19/briefings/schedule/#cqtools-the-new-ultimate-hacking-toolkit-14425 --- Mirrored from YouTube: https://www.youtube.com/watch?v=MZ0nSO0WOJghttps://peertube.dodges.it/static/streaming-playlists/hls/4dbe8b3d-46c2-4a75-abf5-69d06155a47b/45bb2faa-c43e-47cd-ad52-c7a24fbd724f-master.m3u8https://peertube.dodges.it/videos/embed/aAP53KjkZ6WmeFxHhcYeDn3715002026-10-25T11:19:49.761ZBlack HatBlack Hat AsiaBlack Hat Asia 2019Black Hat 2019Black Hat SingaporeYESBlackhatNOhttps://peertube.dodges.it/w/q2NwPRk6qN1J5M4JJ4AvHY2026-10-23T01:04:08.442Zhttps://peertube.dodges.it/lazy-static/thumbnails/5e62ab05-3c8a-42c3-ba0f-3f8a8ba0aa3e.jpgBlack Hat USA 2024 - Short Reel--- Mirrored from YouTube: https://www.youtube.com/watch?v=PJPanFkyEFshttps://peertube.dodges.it/static/streaming-playlists/hls/c29bbf65-9e87-4f47-b1ea-005edca29656/51e0fed1-c075-4753-9fdf-b2af364e8d27-master.m3u8https://peertube.dodges.it/videos/embed/q2NwPRk6qN1J5M4JJ4AvHY18002026-10-25T12:07:59.056ZYESBlackhatNOhttps://peertube.dodges.it/w/tZWVBEacwthsa9rpiJEhDo2026-10-23T01:06:18.491Zhttps://peertube.dodges.it/lazy-static/thumbnails/8c35f0b0-840e-42f3-b945-d892c8ffc14e.jpgThe Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalationby Christopher Domas In x86, beyond ring 0 lie the more privileged realms of execution, where our code is invisible to AV, we have unfettered access to hardware, and can trivially preempt and modify the OS. The architecture has heaped layers upon layers of protections on these negative rings, but 40 years of x86 evolution have left a labyrinth of forgotten backdoors into the ultra-privileged modes. Lost in this byzantine maze of decades-old architecture improvements and patches, there lies a design flaw that's gone unnoticed for 20 years. In one of the most bizarre and complex vulnerabilities we've ever seen, we'll release proof-of-concept code exploiting the vast, unexplored wasteland of forgotten x86 features, to demonstrate how to jump malicious code from the paltry ring 0 into the deepest, darkest realms of the processor. Best of all, we'll do it with an architectural 0-day built into the silicon itself, directed against a uniquely vulnerable string of code running on every single system. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lR0nh-TdpVghttps://peertube.dodges.it/static/streaming-playlists/hls/e2bdfcb0-966b-47bc-bb16-7370bf543128/21725745-25e1-49eb-bb23-fe875be42e4b-master.m3u8https://peertube.dodges.it/videos/embed/tZWVBEacwthsa9rpiJEhDo2793002026-10-25T11:42:17.297ZBlack Hat USA 2015Information SecurityInfoSecBlackHatBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/3q4A1Ud9piKYBtAwgqUXzc2026-10-23T01:07:24.731Zhttps://peertube.dodges.it/lazy-static/thumbnails/4db6c5ed-82aa-44a5-8426-77f733836e92.jpgMobile Espionage in the Wild: Pegasus and Nation-State Level AttacksThis briefing will take an in-depth look at the technical capabilities of mobile attacks that are being leveraged against real targets for the purpose of espionage. We will focus on Pegasus, a lawful intercept product, and the features and exploit chain it used. We will describe how we discovered and tracked the developer’s infrastructure prior to the attack, and how we later caught a sample of the elusive malcode being used against a prominent human rights defender. by Andrew Blaich, Max Bazaliy, Seth Hardy Full Abstract: https://www.blackhat.com/eu-16/briefings/schedule/#mobile-espionage-in-the-wild-pegasus-and-nation-state-level-attacks-5127 --- Mirrored from YouTube: https://www.youtube.com/watch?v=Y6e_ctKqSqMhttps://peertube.dodges.it/static/streaming-playlists/hls/138e568a-033c-4ca2-808e-67ddae19d9c1/ac1983ca-2b13-4958-a294-546842b672b7-master.m3u8https://peertube.dodges.it/videos/embed/3q4A1Ud9piKYBtAwgqUXzc2716002026-10-25T11:42:29.430ZInformation SecurityInfoSecBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/2BPNggPGD3rnyYQdWspbpS2026-10-23T01:09:06.907Zhttps://peertube.dodges.it/lazy-static/thumbnails/e8898684-ade8-46c3-928f-ec2f972f604f.jpgHow Smartcard Payment Systems FailBy Ross Anderson "The USA is starting to introduce EMV, the Europay-Mastercard-Visa system for making payments using chip cards instead of the old mag strip variety. EMV is already in wide use in Europe, and has started to appear in countries from Canada to India. In theory, smartcards should have reduced fraud by making bankcards much harder to copy and by enabling banks to authenticate users at the point of sale using PINs rather than signatures. The practice has been different. In Britain, for example, fraud first went up, then down, and is now headed upwards again. There have been many fascinating attacks, which I'll describe. The certification system wasn't fit for purpose, so terminals that were certified as tamper-resistant turned out not to be. We even saw Trojans inserted in the supply chain. A protocol flaw meant that a crook could use a stolen card without knowing the PIN; he could use a man-in-the-middle device to persuade the terminal that the card had accepted the PIN, while the card was told to do a signature-only transaction. Merchant refunds were not authenticated, so a crook could pretend to the bank that he was a merchant, and credit his card back after making a purchase. The most recent series of attacks exploit the freshness mechanisms in the EMV protocol. To prevent transaction replay, the terminal generates an ""unpredictable number"" while the card supplies an ""application transaction counter"" or ATC that is supposed to increase monotonically and never repeat. Yet the unpredictable numbers often aren't (in many of the terminals we looked at, they seem to be just counters) while many banks don't bother to check the ATC, as writing code to deal with out-of-order offline transactions is too much bother. As a result, we've seen some interesting attacks where cardholders unlucky enough to shop at a dishonest merchant find themselves dunned for a lot of large transactions later. In fact these ""preplay"" attacks behave just like card cloning,...https://peertube.dodges.it/static/streaming-playlists/hls/0d19a080-157a-4f79-a2c9-10d12aa23cc8/4ca3a4ec-3cc3-4150-96fb-2bab07459848-master.m3u8https://peertube.dodges.it/videos/embed/2BPNggPGD3rnyYQdWspbpS3536002026-10-25T12:08:11.670ZBlackHatInfoSecBlack Hat USA 2014Information SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/2Lrc3KDxRHN12bVHn7mfab2026-10-23T01:09:28.226Zhttps://peertube.dodges.it/lazy-static/thumbnails/689bf36f-c6e9-4426-94cd-8ca9072bc854.jpgDEF CON 33 - How NOT to Perform Covert Entry Assessments - Brent White, Tim Roberts"How NOT to Perform a Covert Entry Assessment" is a no B.S. discussion that covers what not to do during covert entry engagements--highlighting real-world mistakes, busted Hollywood myths, and missteps that compromise success. We’ll walk through effective techniques for physical site surveys, face-to-face social engineering, and real-time troubleshooting when things go sideways. Attendees will be encouraged to share experiences and lessons learned in an open, interactive format. We’ll also demo our covert entry tools, and discuss how to deliver reliable results to both commercial and high-security government clients. --- Mirrored from YouTube: https://www.youtube.com/watch?v=DNP_fHTMy84https://peertube.dodges.it/static/streaming-playlists/hls/0e4d6383-34de-4ed3-8b70-cba32b5d8a6c/87e99b9d-2ebd-4be9-9a30-1a791bfacb4e-master.m3u8https://peertube.dodges.it/videos/embed/2Lrc3KDxRHN12bVHn7mfab3351002026-10-25T14:02:50.275ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wNy1s6sxFMa2E5AA76GE7q2026-10-23T01:10:03.938Zhttps://peertube.dodges.it/lazy-static/thumbnails/235eec42-1b38-43d6-a064-820c218b1f78.jpgBroadpwn: Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi ChipsetsMeet Broadpwn, a vulnerability in Broadcom's Wi-Fi chipsets which affects millions of Android and iOS devices, and can be triggered remotely, without user interaction. The Broadcom BCM43xx family of Wi-Fi chips is found in an extraordinarily wide range of mobile devices - from various iPhone models, to HTC, LG, Nexus and practically the full range of Samsung flagship devices. By Nitay Artenstein Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#broadpwn-remotely-compromising-android-and-ios-via-a-bug-in-broadcoms-wi-fi-chipsets --- Mirrored from YouTube: https://www.youtube.com/watch?v=TDk2RId8LFohttps://peertube.dodges.it/static/streaming-playlists/hls/f9721944-72e6-414b-ae73-af1837b9039c/e84b4e6f-3dc0-47f4-b140-610b5fa9c6be-master.m3u8https://peertube.dodges.it/videos/embed/wNy1s6sxFMa2E5AA76GE7q3196002026-10-25T12:34:14.169ZBHUSAReverse EngineeringWi-Fi ChipsetsInformation SecurityExploit DevelopmentYESBlackhatNOhttps://peertube.dodges.it/w/2Ezbv96YpGjuqpiyuVhcXe2026-10-23T01:10:32.182Zhttps://peertube.dodges.it/lazy-static/thumbnails/97254951-24a0-4923-a6db-b68f68de322e.jpgBlack Hat Europe 2019 Highlights--- Mirrored from YouTube: https://www.youtube.com/watch?v=tioJKiiKlYUhttps://peertube.dodges.it/static/streaming-playlists/hls/0d7bd9b9-5c46-4d3b-a829-5dc39da512df/e2ec5ce3-927b-4b5b-8a86-f62ab9996214-master.m3u8https://peertube.dodges.it/videos/embed/2Ezbv96YpGjuqpiyuVhcXe102002026-10-25T12:34:18.302ZYESBlackhatNOhttps://peertube.dodges.it/w/cptCQX1nxmqa6WcbNjF7na2026-10-23T01:12:04.014Zhttps://peertube.dodges.it/lazy-static/thumbnails/13303cf0-1443-488c-be92-514946a27350.jpgBadUSB - On Accessories that Turn Evil by Karsten Nohl + Jakob Lell"USB has become so commonplace that we rarely worry about its security implications. USB sticks undergo the occasional virus scan, but we consider USB to be otherwise perfectly safe - until now. This talk introduces a new form of malware that operates from controller chips inside USB devices. USB sticks, as an example, can be reprogrammed to spoof various other device types in order to take control of a computer, exfiltrate data, or spy on the user. We demonstrate a full system compromise from USB and a self-replicating USB virus not detectable with current defenses. We then dive into the USB stack and assess where protection from USB malware can and should be anchored." --- Mirrored from YouTube: https://www.youtube.com/watch?v=nuruzFqMgIwhttps://peertube.dodges.it/static/streaming-playlists/hls/5c5ba9ac-b9b8-4b55-9801-a9288c93cb9b/8b084d2f-8a22-4021-90a9-73ddde4d9b8d-master.m3u8https://peertube.dodges.it/videos/embed/cptCQX1nxmqa6WcbNjF7na2671002026-10-25T16:05:20.943ZInformation SecurityBlack HatBlackHatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/fi4tRArKrJUtBUD35s68YN2026-10-23T01:12:42.262Zhttps://peertube.dodges.it/lazy-static/thumbnails/7d4a8ee6-1830-44a7-9b73-5f7662ec2d08.jpgDEF CON 22 - Mark Stanislav & Zach Lanier - The Internet of Fails - Where IoT Has Gone WrongThis presentation will dive into research, outcomes, and recommendations regarding information security for the "Internet of Things". Mark and Zach will discuss IoT security failures both from their own research as well as the work of people they admire. Attendees are invited to laugh/cringe at concerning examples of improper access control, a complete lack of transport security, hardcoded-everything, and ways to bypass paying for stuff. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WHdU4LutBGUhttps://peertube.dodges.it/static/streaming-playlists/hls/73c1bae8-e415-49c8-8dc9-6ec0973af4c2/20bf0047-96ab-41ae-8e24-448836de35ca-master.m3u8https://peertube.dodges.it/videos/embed/fi4tRArKrJUtBUD35s68YN2787002026-10-25T16:04:26.777ZDEF CON (Conference Series)Internet of ThingsThe Internet (Media Genre)Zach LanierMark StanislavYESDEFCONNOhttps://peertube.dodges.it/w/bCPfCcBJDhzeEEGeGLcZCn2026-10-23T01:13:00.112Zhttps://peertube.dodges.it/lazy-static/thumbnails/d9826544-b06b-42d4-8559-c425af74a0ad.jpgAirBnBeware: Short Term Rentals Long Term Pwnageby Jeremy Galloway What's scarier, letting HD Moore rent your house and use your home network for day or being the very next renter that uses that network? With the colossal growth of the vacation rental market over the last five years (AirBnb, HomeAway), travellers are now more vulnerable than ever to network based attacks targeted at stealing personal information or outright pwnage. In 2006, the security industry desperately warned of the dangers of using public Wi-Fi at coffee shops. In 2010, we reshaped the conversation around the frightful security of Internet provided at hotels. And now, in 2016, we will start a new battle cry against the abysmal state of network security enabled by short term rentals. Both renters and property owners have a serious stake in this game. Whether you're renting a room in a foreign city to attend a conference or you're profiting off of your own empty domicile, serious risks abound: MitM traffic hi-jacking, accessing illegal content, device exploitation, and more. Common attacks and their corresponding defenses (conventional or otherwise) will be discussed, with a strong emphasis on practicality and simplicity. This talk will contain demos of attacks, introduce atypical hardware for defense, and encourage audience participation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=9fAnRkJ6N3shttps://peertube.dodges.it/static/streaming-playlists/hls/561f4851-01a8-4bc3-a063-52af866407f9/5c5dbd09-9ec7-4eb6-9749-69a0c04c8d76-master.m3u8https://peertube.dodges.it/videos/embed/bCPfCcBJDhzeEEGeGLcZCn2677002026-10-25T14:02:59.912ZBlack Hat USA 2016Information SecurityBlackHatBlack HatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/g9LZYutiTskQdBUf76tn7D2026-10-23T01:15:14.137Zhttps://peertube.dodges.it/lazy-static/thumbnails/744c6b7e-a4c8-4af6-b026-89b8a465f6af.jpgBlack Hat USA 2013 - Lessons from Surviving a 300Gbps Denial of Service AttackBy: Matthew Prince On Saturday, March 23, 2013, a distributed denial of service (DDoS) attack against Spamhaus that had been growing for weeks culminated with over 300 Gigabits per second of attack traffic targeting the anti-spam organization's network. At that point it became the largest such attack ever reported in history — at least 4x the size of the attacks that crippled US banks just a few months earlier. The attackers launched the full range DDoS methods at Spamhaus — simultaneously targeting Layer 3, Layer 4, and Layer 7. Spamhaus has given us permission to tell the full, behind-the-scenes story of what happened, show how the attacks were launched, outline the techniques the attackers used, and detail how Spamhaus.com was able to stay online throughout. While the Spamhaus story has a happy ending, the massive DDoS exposed key vulnerabilities throughout the Internet that we will need address if the network is to survive the next, --- Mirrored from YouTube: https://www.youtube.com/watch?v=w04ZAXftQ_Yhttps://peertube.dodges.it/static/streaming-playlists/hls/7ab2c313-a897-4d7f-8761-6eace13d873d/996c0318-e1d0-4224-b8bf-121f5a7970a2-master.m3u8https://peertube.dodges.it/videos/embed/g9LZYutiTskQdBUf76tn7D3466002026-10-25T16:05:05.641ZInformation SecurityUsaBlack HatBriefingsInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/hFaiZU9xBNd75ieC889ZM12026-10-23T01:15:18.454Zhttps://peertube.dodges.it/lazy-static/thumbnails/dad4cf8d-9ccf-4149-a804-635d1af0c530.jpgDEF CON 25 Wifi Village - Balint Seeber - Hacking Some More of the Wireless WorldThe hacking continues on from last year! Three interesting applications will be demonstrated, and their underlying theory and design explained. The audience will be exposed to some novel GNU Radio tips and DSP tricks. INMARSAT Aero will be revisited to show (in Google Earth) spatial information, such as waypoints and flight plans, that are transmitted from airline ground operations to airborne flights. A good chunk of the VHF band is used for airline communications; plane spotters enjoy listening to tower and cockpit communications. Modern SDRs can now sample the entire band, and as AM modulation is used, it's possible to use a counterintuitive, but simple, demodulator chain (first shown by Kevin Reid's wideband 'un-selective AM' receiver) to listen to the most powerful transmission. This will be demonstrated with a GNU Radio-based implementation. It is also possible to 'spatialise' the audio for the listener using stereo separation, which can convey a transmission's relative position on the spectrum. FMCW RADAR experiments are enhanced to include Doppler processing. Plotting this new velocity information, due to the Doppler effect, shows whether a target is heading toward or away from you, and often reveals targets not normally seen in range-only information - this demonstrates the true power of full RADAR signal processing. This technique will be applied to the live audio demo, a new live SDR demo, CODAR ocean current tracking, and passive RADAR exploiting powerful ATSC digital television signals (this was used to track aircraft on approach across the Bay Area). --- Mirrored from YouTube: https://www.youtube.com/watch?v=psuEzxFJnZYhttps://peertube.dodges.it/static/streaming-playlists/hls/8709f699-3413-43e0-b4ab-06fcf853d5c6/6c962664-c125-451b-9064-083a55d87bde-master.m3u8https://peertube.dodges.it/videos/embed/hFaiZU9xBNd75ieC889ZM16391002026-10-25T16:04:52.376ZDEFCONDEF CON 2017DEF CON 25DEF CONYESDEFCONNOhttps://peertube.dodges.it/w/7dUwRczxf5N3N4Ba24X9hP2026-10-23T01:17:32.422Zhttps://peertube.dodges.it/lazy-static/thumbnails/a9ecb741-389f-458a-9966-93fd62767dc0.jpgBehind the Scenes of iOS Securityby Ivan Krstic With over a billion active devices and in-depth security protections spanning every layer from silicon to software, Apple works to advance the state of the art in mobile security with every release of iOS. We will discuss three iOS security mechanisms in unprecedented technical detail, offering the first public discussion of one of them new to iOS 10. HomeKit, Auto Unlock and iCloud Keychain are three Apple technologies that handle exceptionally sensitive user data – controlling devices (including locks) in the user's home, the ability to unlock a user's Mac from an Apple Watch, and the user's passwords and credit card information, respectively. We will discuss the cryptographic design and implementation of our novel secure synchronization fabric which moves confidential data between devices without exposing it to Apple, while affording the user the ability to recover data in case of device loss. Data Protection is the cryptographic system protecting user data on all iOS devices. We will discuss the Secure Enclave Processor present in iPhone 5S and later devices and explain how it enabled a new approach to Data Protection key derivation and brute force rate limiting within a small TCB, making no intermediate or derived keys available to the normal Application Processor. Traditional browser-based vulnerabilities are becoming harder to exploit due to increasingly sophisticated mitigation techniques. We will discuss a unique JIT hardening mechanism in iOS 10 that makes the iOS Safari JIT a more difficult target. --- Mirrored from YouTube: https://www.youtube.com/watch?v=BLGFriOKz6Uhttps://peertube.dodges.it/static/streaming-playlists/hls/32642190-a029-4d2b-9039-845274969717/32b2d93c-ecd5-4f3d-8fc0-71a50f07391b-master.m3u8https://peertube.dodges.it/videos/embed/7dUwRczxf5N3N4Ba24X9hP3091002026-10-25T16:54:20.870ZInfoSecInformation SecurityBlack HatBlackHatBlack Hat USA 2016YESBlackhatNOhttps://peertube.dodges.it/w/7QBPmAEm2e2nxYKk7sGYKf2026-10-23T01:17:50.382Zhttps://peertube.dodges.it/lazy-static/thumbnails/d97d6996-d704-499c-b000-9761866b3703.jpgDEF CON 13 - Deviant Ollam, Introduction to Lockpicking and Physical SecurityDeviant Ollam, Introduction to Lockpicking and Physical Security Physical security isn't just a concern of the IT world. Besides securing server rooms, locks of all sizes and styles are scattered throughout our lives. However, much of the general public is unaware of the insecurities present in many lock designs. Through discussion and direct example, Deviant Ollam will address the strengths and weaknesses of standard pin tumbler locks, combination locks, warded locks, wafer locks, and more. Discussion of effective tools, advanced techniques, master key theory, and lesser-known picking techniques will also be covered. This talk is aimed at lockpick novices who are interested in better security and learning lockpicking skills. While always the first to admit that he's no Barry Wels, Deviant hopes to have a good time with this lockpick talk and looks forward to hand-on audience participation. Many styles of practice locks and picks will be made available. While paying the bills as a network engineer, Deviant Ollam's first and strongest love has always been teaching. Employed periodically at schools in the greater Philadelphia area, he is presently a student at the New Jersey Institute of Technology in the hopes of tacking some actual letters to his name and doing the professor gig full time. A fanatical supporter of First Amendment rights who believes that the best way to increase security is to publicly disclose vulnerabilities, Deviant has given lockpick demonstrations at other con events and various schools. --- Mirrored from YouTube: https://www.youtube.com/watch?v=IQ6QzsRKpQUhttps://peertube.dodges.it/static/streaming-playlists/hls/37609b08-c324-46dd-b87c-0d555831598c/f898c39e-b4b9-4024-9b32-f106e1b7e340-master.m3u8https://peertube.dodges.it/videos/embed/7QBPmAEm2e2nxYKk7sGYKf8625002026-10-25T16:54:47.025ZYESDEFCONNOhttps://peertube.dodges.it/w/aikmL4kKgvL1LZ2cvdv88X2026-10-23T01:18:42.429Zhttps://peertube.dodges.it/lazy-static/thumbnails/1f336a89-dcae-40c0-9e68-89e1540f3343.jpgDEF CON 26 - Alexei Bulazel - Reverse Engineering Windows Defenders EmulatorWindows Defender Antivirus's mpengine.dll implements the core of Defender's functionality in an enormous ~11 MB, 30,000+ function DLL. In this presentation, we'll look at Defender's emulator for analysis of potentially malicious Windows binaries on the endpoint. To the best of my knowledge, there has never been a conference talk or publication on reverse engineering any antivirus binary emulator before. We'll cover a range of topics including emulator internals—machine code to intermediate language translation and execution; memory management; Windows API emulation; NT kernel emulation; file system and registry emulation; integration with Defender's antivirus features; the virtual environment; etc.—building custom tooling for instrumenting the emulator; tricks that binaries can use to evade or subvert analysis; and attack surface within the emulator. Attendees will leave with an understanding of how modern antivirus software conducts emulation-based dynamic analysis on the endpoint, and how attackers might go about subverting or attacking these systems. I'll publish code for a binary for exploring the emulator from within, patches that I developed for instrumenting Defender built on top of Tavis Ormandy's loadlibrary project, and IDA scripts to help with analyzing mpengine.dll and Defender's "VDLLs" --- Mirrored from YouTube: https://www.youtube.com/watch?v=2NawGCUOYT4https://peertube.dodges.it/static/streaming-playlists/hls/4b4dd25f-d317-4593-b4ad-8db5c63a5471/a622faff-f855-40b4-99f8-12c593d21139-master.m3u8https://peertube.dodges.it/videos/embed/aikmL4kKgvL1LZ2cvdv88X2806002026-10-25T17:44:48.822ZDEFCONDEF CONDEFCONDEF CON 26YESDEFCONNOhttps://peertube.dodges.it/w/u4pLvk3RZrwrzq3RT3objK2026-10-23T01:19:19.305Zhttps://peertube.dodges.it/lazy-static/thumbnails/7562965f-25db-423b-bc8a-7673b0b35ec8.jpg48 Dirty Little Secrets Cryptographers Don’t Want You To KnowBy Thomas Ptacek and Big Ol Al "Over the past year, more than 10,000 people participated in the Matasano crypto challenges, a staged learning exercise where participants implemented 48 different attacks against realistic cryptographic constructions. In the process, we collected crypto exploit code in dozens of different languages, ranging from X86 assembly to Haskell. With the permission of the participants, we've built a ""Rosetta Code"" site with per-language implementations of each of the crypto attacks we taught. In this talk, we'll run through all 48 of the crypto challenges, giving Black Hat attendees early access to all of the crypto challenges. We'll explain the importance of each of the attacks, putting them into the context of actual software flaws. Our challenges cover crypto concepts from block cipher mode selection to public key agreement algorithms. For some of the more interesting attacks, we'll step-by-step the audience through exploit code, in several languages simultaneously." --- Mirrored from YouTube: https://www.youtube.com/watch?v=iZa_XKpj9X4https://peertube.dodges.it/static/streaming-playlists/hls/e339c2cc-7db8-428d-b420-d6950e17ad57/602289ab-29ef-4233-a7d9-e7d3c4da09be-master.m3u8https://peertube.dodges.it/videos/embed/u4pLvk3RZrwrzq3RT3objK3058002026-10-25T17:45:12.317ZInfoSecBlackHatBlack Hat USA 2014Information SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/fKSezWsSutiL57MrcdCCSq2026-10-23T01:19:52.295Zhttps://peertube.dodges.it/lazy-static/thumbnails/db404f04-507b-4b9d-9ec8-ae0ae54766d6.jpgCracking the Lens: Targeting HTTP's Hidden Attack-SurfaceModern websites are browsed through a lens of transparent systems built to enhance performance, extract analytics and supply numerous additional services. This almost invisible attack surface has been largely overlooked for years. By James Kettle Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#cracking-the-lens-targeting-https-hidden-attack-surface --- Mirrored from YouTube: https://www.youtube.com/watch?v=zP4b3pw94s0https://peertube.dodges.it/static/streaming-playlists/hls/777fe19c-5b80-4c81-9195-f15832f5677c/4edeafdd-78af-4758-9165-c4fadf577ee6-master.m3u8https://peertube.dodges.it/videos/embed/fKSezWsSutiL57MrcdCCSq2646002026-10-25T18:06:53.174ZDoDBlack Hat USA 2017Burp ExtensionInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/eLh8vjNiypJEPWd8AidF3j2026-10-23T01:20:18.323Zhttps://peertube.dodges.it/lazy-static/thumbnails/22be0971-f68e-4970-8af5-072b9ec559ea.jpgBlack Hat Europe 2022, ExCel LondonBlack Hat Europe 2022 will be taking place on December 5 - 8 at the ExCel London & virtually. Black Hat Trainings are taught by industry experts with the goal of defining and defending tomorrow's InfoSec landscape. Attend Briefings for the latest in research, development & trends in information security. --- Mirrored from YouTube: https://www.youtube.com/watch?v=V_HwRtUk5tIhttps://peertube.dodges.it/static/streaming-playlists/hls/6f7577f3-8ab5-47cd-84bb-9ca5533055f2/f927da01-611e-47d4-a5d7-58b4bdebc139-master.m3u8https://peertube.dodges.it/videos/embed/eLh8vjNiypJEPWd8AidF3j31002026-10-25T18:06:57.270ZYESBlackhatNOhttps://peertube.dodges.it/w/giX3uq6f3hV418R1owCnu92026-10-23T01:20:28.118Zhttps://peertube.dodges.it/lazy-static/thumbnails/9a080755-f8e9-4810-8bf6-02354194989e.jpgDEF CON 22 - Chris Littlebury - Home Alone with localhost: Automating Home DefenseSlides here: https://www.defcon.org/images/defcon-22/dc-22-presentations/Littlebury/DEFCON-22-Chris-Littlebury-Home-Alone-with-localhost.pdf Home Alone with localhost: Automating Home Defense Chris Littlebury SENIOR PENETRATION TESTER, KNOWLEDGE CONSULTING GROUP, INC. Home automation is everywhere, and so are their exploits. This presentation will go over a brief history of home automation techniques, cover modern technologies used today, detail some of the current exploits used against modern automation and security systems, and give examples on how to defend against them. You’ll be provided with the knowledge necessary to build your own home-Skynet system- complete with passive and active defenses against physical and wireless attacks. If you like Raspberry Pis, RF hacks, dirty soldering jobs, and even dirtier code, then this is your talk. Chris Littlebury is a Senior Penetration Tester with Knowledge Consulting Group (KCG). He enjoys hardware hacking, turning wrenches, and opportunities to combine the two. He also claims to have created the first Raspberry Pi-powered, wireless BBQ smoker. --- Mirrored from YouTube: https://www.youtube.com/watch?v=2IeU7Cck0hIhttps://peertube.dodges.it/static/streaming-playlists/hls/7bfaa538-f752-4571-85ab-13de32f4a914/0c7db4da-89d6-4f84-b69c-8b122a9f0d8b-master.m3u8https://peertube.dodges.it/videos/embed/giX3uq6f3hV418R1owCnu92769002026-10-25T18:40:31.888ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/ecpKnzkijHTVMqWQvhG7aF2026-10-23T01:21:11.208Zhttps://peertube.dodges.it/lazy-static/thumbnails/4b0adc45-0c21-4259-a55a-cbcbd5f959d0.jpgHide Android Applications in ImagesBy Axelle Apvrille "Malware authors are always interested in concealing their goals to evade detection. We have discovered a technique which enables them to hide whatever payload they wish in an Android package (APK). The malicious payload is encrypted with AES, thus its reverse engineering does not give in any element. Moreover, contrary to general belief, it is actually possible to manipulate the output of encryption and have it look like, for instance, a chosen image. Thus, the encrypted malicious payload can be crafted to look like an absolutely genuine image (of Anakin Skywalker ;). We demonstrate with a Proof of Concept application that the attack works on current Android platforms, and we also explain how it works and how the payload is crafted. This talk is not (or only very little) about cryptography. Understanding file formats, that's the magic :)." --- Mirrored from YouTube: https://www.youtube.com/watch?v=hajOlvLhYJYhttps://peertube.dodges.it/static/streaming-playlists/hls/6ade9e80-6ce1-4184-bb58-3f12369c7469/4ff61cca-4bb2-4a93-aad4-d7af5a987994-master.m3u8https://peertube.dodges.it/videos/embed/ecpKnzkijHTVMqWQvhG7aF1298012026-10-25T18:40:38.417ZInfoSecBlack Hat Europe 2014Black HatBlackHatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/vUw57gTZYDzQnWSspF2kdC2026-10-23T06:19:39.684Zhttps://peertube.dodges.it/lazy-static/thumbnails/b28faf3c-6be9-4ea6-bfc9-93b637126560.jpgDEF CON 21 - ZOZ - Hacking Driverless VehiclesHacking Driverless Vehicles by Zoz Cannytrophic Design Are driverless vehicles ripe for the hacking? Autonomous and unmanned systems are already patrolling our skies and oceans and being tested on our streets and highways. All trends indicate these systems are at an inflection point that will show them rapidly becoming commonplace. It is therefore a salient time for a discussion of the capabilities and potential vulnerabilities of these systems. This session will be an informative and light-hearted look at the current state of civil driverless vehicles and what hackers or miscreants might do to mess with them. Topics covered will include common sensors, decision profiles and their potential failure modes that could be exploited. With this talk Zoz aims to both inspire unmanned vehicle fans to think about robustness to adversarial and malicious scenarios, and to give the paranoid false hope of resisting the robot revolution. He will also present details of how students can get involved in the ultimate sports events for robot hacking, the autonomous vehicle competitions. Zoz is a robotics interface designer and rapid prototyping specialist. He is a co-founder of Cannytrophic Design in Boston and CTO of BlueSky in San Francisco. As co-host of the Discovery Channel show 'Prototype This!' he pioneered urban pizza delivery with robotic vehicles, including the first autonomous crossing of an active highway bridge in the USA, and airborne delivery of life preservers at sea from an autonomous aircraft. He also hosts the annual AUVSI Foundation student autonomous robot competitions such as Roboboat and Robosub. Materials: https://www.defcon.org/images/defcon-21/dc-21-presentations/Zoz/DEFCON-21-Zoz-Hacking-Driverless-Vehicles.pdf --- Mirrored from YouTube: https://www.youtube.com/watch?v=k5E28fp4oc0https://peertube.dodges.it/static/streaming-playlists/hls/f22e3a9e-ec44-4766-9a92-145b27874500/dc4bbacb-aaa1-4f79-a037-4dd8753216d1-master.m3u8https://peertube.dodges.it/videos/embed/vUw57gTZYDzQnWSspF2kdC2948002026-10-25T19:25:40.168ZRobotics (Invention)ZozSecurityCar HackingPrototype ThisYESDEFCONNOhttps://peertube.dodges.it/w/2jDrXvo6xZFef51knVuCSN2026-10-23T06:20:29.165Zhttps://peertube.dodges.it/lazy-static/thumbnails/37b66784-d3d1-4505-962c-b54056067d6b.jpgDEF CON 24 - Zack Fasel, Erin Jacobs - Attacks Against Top Consumer ProductsThis is not just another "I found a problem in a single IOT device" talk. Focusing on attacking three major consumer product lines that have grown rapidly in the past years, Zack and Erin will review flaws they’ve discovered and weaponized against home Windows installs, DIY security solutions, personal fitness tracking devices, and digital notification devices. We’ll review the security of these popular products and services in a ‘consumer reports’ style walkthrough, the attack methods against the 21 devices reviewed, release some tools for the lulz, and highlight the threats facing similar products. It's time to Fight for the Users. END OF LINE. Zack Fasel and Erin Jacobs are Partners at Urbane Security, a solutions-focused vendor-neutral information security services firm focusing on providing innovative defense, sophisticated offense and refined compliance services. Heading up Urbane's Research and Security Services divisions, Zack brings his years of diverse internal and external experience to drive Urbane's technical solutions to organizations top pain points. His previous research and presentations at conferences have spread across numerous domains including Windows authentication flaws, femtocells, open source defensive security solutions, cloud security, and unique network and application attack vectors. When not selling out, he can be found lost in the untz unce wubs, dabbling in instagram food photography, or eating scotch and drinking gummy bears (that's right, right?). More information on Zack can be found by searching for "zfasel" and on Urbane Security at UrbaneSecurity.com. Leading the charge of Urbane’s Compliance and Enterprise Risk Management divisions, Erin brings her years of executive level experience coupled with deep and diverse technical knowledge to help organizations accurate prioritize and address the security and compliance risks they face. Her prior talks and research have spread across numerous domains, including technical soluti...https://peertube.dodges.it/static/streaming-playlists/hls/0ab39ab8-db45-4611-a7e0-9d3a388b1e22/1b79d010-99af-41ff-93f5-efa86e9995be-master.m3u8https://peertube.dodges.it/videos/embed/2jDrXvo6xZFef51knVuCSN2599002026-10-25T19:25:50.309ZDEF CONDEFCONDEF CON 24DC24DC-24YESDEFCONNOhttps://peertube.dodges.it/w/sg1NcTHEZh3zaB6g5ckQAx2026-10-23T06:24:17.779Zhttps://peertube.dodges.it/lazy-static/thumbnails/6cc20dda-3e8d-476f-b327-84035f43cf62.jpgDEF CON 30 - Tomer Bar - OopsSec -The bad, the worst and the ugly of APT’s operations securityAdvanced Persistent Threat groups invest in developing their arsenal of exploits and malware to stay below the radar and persist on the target machines for as long as possible. We were curious if the same efforts are invested in the operation security of these campaigns. We started a journey researching active campaigns from the Middle East to the Far East including the Palestinian Authority, Turkey, and Iran, Russia, China, and North Korea. These campaigns were both state-sponsored, surveillance-targeted attacks and large-scale financially-motivated attacks. We analyzed every technology used throughout the attack chain: Windows (Go-lang/.Net/Delphi) and Android malware; both on Windows and Linux-based C2 servers. We found unbelievable mistakes which allow us to discover new advanced TTPs used by attackers, for example: bypassing iCloud two-factor authentication' and crypto wallet and NFT stealing methods. We were able to join the attackers' internal groups, view their chats, bank accounts and crypto wallets. In some cases, we were able to take down the entire campaign. We will present our latest breakthroughs from our seven-year mind-game against the sophisticated Infy threat actor who successfully ran a 15-year active campaign using the most secured opSec attack chain we've encountered. We will explain how they improved their opSec over the years and how we recently managed to monitor their activity and could even cause a large-scale misinformation counterattack. We will conclude by explaining how organizations can better defend themselves. --- Mirrored from YouTube: https://www.youtube.com/watch?v=StSLxFbVz0Mhttps://peertube.dodges.it/static/streaming-playlists/hls/d4a640ae-0984-482a-a801-da72305848fb/5eb27553-6d3f-4e20-9777-ba84d612f069-master.m3u8https://peertube.dodges.it/videos/embed/sg1NcTHEZh3zaB6g5ckQAx2761002026-10-25T21:01:58.710ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/c429Cq1gtJggAKKsqGX3EP2026-10-23T06:25:02.596Zhttps://peertube.dodges.it/lazy-static/thumbnails/b00d26d4-6023-48cb-ae14-41ae098c362e.jpgBrent Stone - Reverse Engineering 17+ Cars in Less than 10 Minutes - DEF CON 27 ConferenceBrent provides a live demonstration reversing engineering 17 or more unknown passenger vehicle CAN networks in under 10 minutes using new automated techniques. These unsupervised techniques are over 90% accurate and consistent when tested using production CAN networks and different driving conditions. He then introduces the Python and R code used for the demo and posted to his public GitHub repository at https://github.com/brent-stone/CAN_Reverse_Engineering. The Dissertation explaining how the code works is also posted. Brent Stone Dr. Brent Stone is a Cyber officer with the U.S. Military. His professional experience includes 10 years of IT and cyber work in North America, the Middle East, and Asia. The focus of his PhD research was developing AI methods to help security researchers overcome the 'security through obscurity' used in the automotive industry. He presented initial findings at the 2018 IEEE Connected and Automated Vehicles Symposium and is an active member of the Open Garage's car hacking group. He holds a B.S. in Computer Science from West Point, M.S. in IT security from Carnegie-Mellon, and PhD in Computer Science from the Air Force Institute of Technology. Github: https://github.com/brent-stone --- Mirrored from YouTube: https://www.youtube.com/watch?v=KkgxFplsTnMhttps://peertube.dodges.it/static/streaming-playlists/hls/598076ea-7fe3-4112-a8e2-7e05b4a1ec2b/b9d39796-7eb5-4a8b-905c-5b436bdde279-master.m3u8https://peertube.dodges.it/videos/embed/c429Cq1gtJggAKKsqGX3EP1066002026-10-25T21:02:05.451ZDEFCONDEFCONDEF CON 27DC27YESDEFCONNOhttps://peertube.dodges.it/w/hSnz8XMCEzYV4JdW9NCXG82026-10-23T06:28:13.769Zhttps://peertube.dodges.it/lazy-static/thumbnails/436f917e-debf-4700-b790-969e0478f8ea.jpgDEF CON 33 - Where’s My Crypto, Dude? The Ultimate Guide to Crypto Money Laundering - Thomas RocciaCryptocurrency is everywhere now. Billion-dollar companies are built on it, entire economies run on Bitcoin, and cybercriminals love using it to finance their operations or hide stolen money. Cryptocurrencies promise anonymity, yet blockchain transactions are fully public, and make it tricky to hide funds. In February 2025, the Bybit breach exposed two advanced attack vectors. First, a third-party wallet tool was compromised through malicious JavaScript injected into its logic, allowing attackers to manipulate smart contract behavior. Second, a SAFE Wallet developer was tricked through social engineering into running a fake Docker container, giving attackers persistent access to his machine. With control established, they hijacked proxy contracts and executed stealth withdrawals of ETH and ERC-20 tokens. The stolen assets were laundered through decentralized exchanges, split across multiple wallets, bridged to Bitcoin, and passed through mixers like Wasabi Wallet. So how do attackers manage to launder crypto, and how can we stop them? Using the 1.46 billion dollar Bybit hack by North Korea’s Lazarus Group as a case study, this talk breaks down each laundering step and explains how to automate tracking and accelerate investigations using AI. --- Mirrored from YouTube: https://www.youtube.com/watch?v=1uNneo9L_jUhttps://peertube.dodges.it/static/streaming-playlists/hls/889ab36b-eef2-4b4d-8ac1-2fe32745bad3/755aeeb7-91ef-4dfa-a9a4-b888d1bb454e-master.m3u8https://peertube.dodges.it/videos/embed/hSnz8XMCEzYV4JdW9NCXG81802002026-10-25T22:26:23.798ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/1EYP7fmKPXnQLcN8gSrB5Q2026-10-23T06:33:00.339Zhttps://peertube.dodges.it/lazy-static/thumbnails/ec759cfc-549c-4a36-9a1d-9d5ec2081dba.jpgJoseph Cox - How You Can Buy ATT TMobile and Sprint Real Time Location Data - DEF CON 27 ConferenceMajor US telecommunications companies AT&T, T-Mobile, and Sprint have been quietly selling access to their customers’ real-time location data, including cell tower information as well as highly precise GPS data. Through a complex network of dodgy data aggregators and middlemen companies, this data access eventually trickled down to a slew of different industries, used car salesman, landlords, and hundreds of bounty hunters, likely without your knowledge or informed consent. In this talk, based on leaked documents, sources, and first hand experience, Joseph will explain how this data industry works, the players involved, and also how the data access is available on the black market, where it can be used in any way an attacker fancies: Joseph paid a source $300 to successfully locate a phone in New York. Joseph Cox Joseph is an investigative reporter for Motherboard, the science and technology section of VICE. He covers cybersecurity, the digital underground, and social media platforms. Twitter: @josephfcox --- Mirrored from YouTube: https://www.youtube.com/watch?v=3e6n7jDDmj0https://peertube.dodges.it/static/streaming-playlists/hls/05714667-f02b-458f-9e59-bea7bf7c562c/71ea8f4e-cbc4-4027-8613-89cd80334e71-master.m3u8https://peertube.dodges.it/videos/embed/1EYP7fmKPXnQLcN8gSrB5Q2315032026-10-25T22:26:48.225ZDEFCONDEF CON 2019conference speakershackersYESDEFCONNOhttps://peertube.dodges.it/w/n3F83D6RXTUentBZwvwHDo2026-10-23T06:33:57.889Zhttps://peertube.dodges.it/lazy-static/thumbnails/f305f7e5-de76-41a4-b6d3-8519d3ac5eff.jpgDEF CON 31 - Smashing the State Machine the True Potential of Web Race Conditions - James KettleFor too long, web race-condition attacks have focused on a tiny handful of scenarios. Their true potential has been masked thanks to tricky workflows, missing tooling, and simple network jitter hiding all but the most trivial, obvious examples. In this session, I'll introduce multiple new classes of race condition that go far beyond the limit-overrun exploits you're probably already familiar with. Inside every website lurks a state machine: a delicately balanced system of states and transitions that each user, session, and object can flow through. I'll show how to fire salvos of conflicting inputs at high-profile websites to make state machines collapse, enabling you to forge trusted data, misroute tokens, and mask backdoors. To handle this explosion of attack surface, I'll share a polished methodology designed to help you eke out subtle tell-tale clues and scent blood long before sacrificing anything to the RNG gods. I've also taken lore amassed over years of research into HTTP Desync Attacks and developed a strategy that can squeeze 30 requests sent from Melbourne to Dublin into a sub-1ms execution window. Alongside the open source tool, we'll also release free online labs so you can try out your new skillset immediately. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tKJzsaB1ZvIhttps://peertube.dodges.it/static/streaming-playlists/hls/aa6f8244-f956-4b17-b7ca-9f83e6eeec3c/ad06c257-6a15-4f1e-89b1-e4c348446436-master.m3u8https://peertube.dodges.it/videos/embed/n3F83D6RXTUentBZwvwHDo2538002026-10-26T00:41:29.911ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wM13gY7hTpAUydohuvV9Cg2026-10-23T06:35:06.186Zhttps://peertube.dodges.it/lazy-static/thumbnails/fbde4e19-94da-48cb-aaa0-1f55126ef085.jpgDEF CON 32 - Breaking Secure Web Gateways for Fun and Profit -Vivek Ramachandran, Jeswin MathaiSecure Web Gateways (SWGs) are cloud-based SSL-intercepting proxies and an important component of enterprise Secure Access Service Edge (SASE) or Security Service Edge (SSE) solutions. SWGs ensure secure web access for enterprise users by doing malware protection, threat prevention, URL filtering, and content inspection of sensitive data, among other critical security measures. Our research indicates that in today's world of complex web applications and protocols, SWGs often fail to deliver on their promise. We will demonstrate a new class of attacks: “Last Mile Reassembly Attacks,” which, as of this writing, can bypass every SWG in the Gartner Magic Quadrant for SASE and SSE - this includes the largest public market cybersecurity companies in the world. Additionally, we will release an open-source attack toolkit for researchers and red teams to test these attacks on their security solutions and better understand their security exposure. We aim for our talk to compel SWG vendors to rethink cloud-based client-side web attack detection models, and for enterprises to rethink how they look at securing their users against web threats. --- Mirrored from YouTube: https://www.youtube.com/watch?v=mBZQnJ1MWYIhttps://peertube.dodges.it/static/streaming-playlists/hls/f93aa754-01a9-4eee-af6c-6d0fa29e7aef/70a1ca5c-5d68-4a18-8efe-74d3e1d801dc-master.m3u8https://peertube.dodges.it/videos/embed/wM13gY7hTpAUydohuvV9Cg2829002026-10-26T00:42:12.236ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pWmHnBtUzXSCKSzfuHMAcc2026-10-23T06:37:18.622Zhttps://peertube.dodges.it/lazy-static/thumbnails/139b521a-6cd4-47b2-a2b4-ea19ea7c3027.jpgDEF CON 22 - Ladar Levison and Stephen Watt - Dark MailDark Mail is not the only solution in the secure mail space, but just as Lavabit’s preoccupation with privacy and user autonomy was a rarity when it started over a decade ago, it hopes once again to push mail security forward into a new frontier. It is Dark Mail's objective to achieve the highest degree of security possible - with the introduction of an interoperable mail protocol as an open standard. To that end, we are publishing documents describing the protocol, along with a reference implementations of the client and server under a free software license. --- Mirrored from YouTube: https://www.youtube.com/watch?v=TWzvXaxR6ushttps://peertube.dodges.it/static/streaming-playlists/hls/c1d91e27-f76b-4ad3-9c26-b1bc0885c169/efd7d805-949c-4576-b0a7-bc2e8d12afab-master.m3u8https://peertube.dodges.it/videos/embed/pWmHnBtUzXSCKSzfuHMAcc3380002026-10-26T02:13:34.063ZDark Mail AllianceLadar LevisonStephen WattDEF CON (Conference Series)DEF CON 22YESDEFCONNOhttps://peertube.dodges.it/w/aeCyKCnrfXzWFys6337azx2026-10-23T06:42:32.152Zhttps://peertube.dodges.it/lazy-static/thumbnails/83542e62-c089-4887-a5f5-abca21945fdb.jpgPatrick Wardle - Harnessing Weapons of Mac Destruction - DEF CON 27 ConferenceWhenever a new Mac malware specimen is uncovered, it provides a unique insight into the offensive Mac capabilities of hackers or nation-state adversaries. Better yet, such discoveries provide fully-functional capabilities that may be weaponized for our own surreptitious purposes! I mean, life is short, why write your own? We'll begin this talk by discussing the methodology of subverting existing malware for "personal use", highlighting both the challenges and benefits of such an approach. Next, we'll walk-thru the weaponization of various Mac malware specimens, including an interactive backdoor, a file-exfiltration implant, ransomware, and yes, even adware. Customizations include various runtime binary modifications that will coerce such malware to accept tasking from our own C&C servers, and/or automatically perform actions on our behalf. Of course, in their pristine state, such samples are currently detected by AV products. As such we'll also walk-thru subtle modifications that will ensure our modified tools remains undetected by traditional detection approaches. In conclusion, we'll highlight novel heuristic methods that can generically detect such threats to ensure Mac users remain protected even from such weaponized threats. Patrick Wardle Patrick Wardle is the Chief Research Officer at Digita Security and founder of Objective-See. Having worked at NASA and the NSA, as well as presented at countless security conferences, he is intimately familiar with aliens, spies, and talking nerdy. Patrick is passionate about all things related to macOS security and thus spends his days finding Apple 0days, analyzing macOS malware and writing free open-source security tools to protect Mac users. http://twitch.com/patrickwardle --- Mirrored from YouTube: https://www.youtube.com/watch?v=InL3YA_6P6shttps://peertube.dodges.it/static/streaming-playlists/hls/4ac97363-dd6a-493b-90aa-f3152fbf966d/aa575fdf-06c8-4818-8e80-da9aa457a8f8-master.m3u8https://peertube.dodges.it/videos/embed/aeCyKCnrfXzWFys6337azx2930002026-10-26T02:14:54.389ZDEFCONDEFCONDEF CONDEF CON 27YESDEFCONNOhttps://peertube.dodges.it/w/2NeFt89LCiQbypwBSZBkLN2026-10-23T06:45:28.752Zhttps://peertube.dodges.it/lazy-static/thumbnails/ffc08662-c7e7-48db-a765-9fb9dadc54b6.jpgDEF CON 32 - Where’s the Money-Defeating ATM Disk Encryption - Matt BurchHolding upwards of $400,000, ATMs continue to be a target of opportunity and have seen over a 600% increase in crime in just the last few years. During this time, I led security research with another colleague into the enterprise ATM industry resulting in the discovery of 6 zero-day vulnerabilities affecting Diebold Nixdorf’s Vynamic Security Suite (VSS), the most prolific ATM security solution in the market. 10 minutes or less is all that a malicious actor would need to gain full control of any system running VSS via offline code injection and decryption of the primary Windows OS. Diebold Nixdorf is one of three major North American enterprise class ATM manufacturers with a global presence in the financial, casino/gaming, and point-of-sale markets. Similar attack surfaces are currently being used in the wild and impact millions of systems across the globe. Furthermore, VSS is known to be present throughout the US gaming industry, including most of the ATM/cash-out systems across Vegas. In this session, I will publicly disclose this research, review the discovery process, and dive into the technical intricacies of each vulnerability. The Full Disk Encryption module of VSS conducts a complex integrity validation process to ensure a trusted system state, performed as a layered approach during system initialization. Examination of the workflow will highlight various deficiencies that I will demonstrate through PoC exploitation. Each vulnerability presented in this session has been observed to have a recursive impact across all major versions of VSS and represents a systemic ongoing risk. We will explore the root-cause, vendor remediation steps, and short-comings thereof – perpetuating the attack narrative. In conclusion, proper mitigation techniques and procedures will be covered, providing valuable insights into defending against potential compromise. --- Mirrored from YouTube: https://www.youtube.com/watch?v=lF8NEsl3-kQhttps://peertube.dodges.it/static/streaming-playlists/hls/0e8dc870-ef39-41c7-aa4e-f1a125999dda/9deb527d-945c-4870-8812-7ce3472cc87a-master.m3u8https://peertube.dodges.it/videos/embed/2NeFt89LCiQbypwBSZBkLN2313002026-10-26T05:02:34.571ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6SYrQ6GLCMSfg8ifjS11xw2026-10-23T06:51:51.507Zhttps://peertube.dodges.it/lazy-static/thumbnails/9856ea66-d264-4c3d-a344-6215a2065ddf.jpgInvestigating Malware Using Memory Forensics - A Practical ApproachThis presentation mainly focuses on the practical concept of memory forensics and shows how to use memory forensics to detect, investigate and understand the capabilities of malicious software. In addition to that, with the help of various demonstrations, the presentation also covers various tricks and techniques used by the malware including some of the stealth and evasive capabilities. By Monnappa K A Full Abstract & Presentation Materials: https://www.blackhat.com/asia-19/briefings/schedule/index.html#investigating-malware-using-memory-forensics---a-practical-approach-14413 --- Mirrored from YouTube: https://www.youtube.com/watch?v=BMFCdAGxVN4https://peertube.dodges.it/static/streaming-playlists/hls/2f9baadf-7218-4f21-96c7-3b26a487a884/b7478637-bcfa-438b-9068-83a6e961cc7d-master.m3u8https://peertube.dodges.it/videos/embed/6SYrQ6GLCMSfg8ifjS11xw3802002026-10-26T05:05:13.301ZBlack HatBlack Hat AsiaBlack Hat Asia 2019Black Hat 2019Black Hat SingaporeYESBlackhatNOhttps://peertube.dodges.it/w/hSEAn3fNUAo9emrH65WugK2026-10-23T06:52:47.280Zhttps://peertube.dodges.it/lazy-static/thumbnails/92bebd54-e84d-4d85-b722-039a2f7bd8c4.jpgBlack Hat Asia 2023 HighlightsCheck out all the highlights from Black Hat Asia 2023 at the Marina Bay Sands Singapore. Visit our Flickr page for the event photos: https://www.flickr.com/photos/blackhatevents/albums/ . #cybersecurity #infosec #blackhat --- Mirrored from YouTube: https://www.youtube.com/watch?v=mR39R68BmyAhttps://peertube.dodges.it/static/streaming-playlists/hls/88a530c5-3212-4510-9023-b77d4c063511/89f7b302-1866-42fc-bace-6276289a6389-master.m3u8https://peertube.dodges.it/videos/embed/hSEAn3fNUAo9emrH65WugK163002026-10-26T23:06:05.533ZYESBlackhatNOhttps://peertube.dodges.it/w/9J8KQTyLbggsfBH3J17RHJ2026-10-23T06:53:54.319Zhttps://peertube.dodges.it/lazy-static/thumbnails/5839bc7b-75a7-4582-a737-bcba0438721e.jpgDEF CON 33 - Carding, Sabotage & Survival: A Darknet Market Veteran’s Story - Godman666For over 10 years, I've operated at every level of darknet markets - from carding forums to multi-million dollar platforms. This is the unfiltered reality they don't teach you: The evolution of scams: From simple carding to sophisticated exit strategies that still work today Infrastructure insights: How markets really operate behind the scenes (and why they always collapse) Psychological warfare: How one forged document can destroy a marketplace overnight The Christmas Massacre: An inside look at the 45-minute market implosion that changed everything DEF CON's darknet challenge: What really happened that year I'll share never-before-seen screenshots, chat logs, and operational details that reveal why no market lasts forever. Whether you're a researcher, journalist, or just curious - this is the uncensored history of the darknet's most infamous moments. --- Mirrored from YouTube: https://www.youtube.com/watch?v=tZwaPDqXTgshttps://peertube.dodges.it/static/streaming-playlists/hls/46ab209b-5dc6-4e12-b167-e1cb4e77b088/54aa9762-a29b-4a2c-884c-97d2452c6263-master.m3u8https://peertube.dodges.it/videos/embed/9J8KQTyLbggsfBH3J17RHJ2538002026-10-26T19:27:51.138ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gAZJGX1RrPeb2RuqeW6NNA2026-10-23T06:54:01.255Zhttps://peertube.dodges.it/lazy-static/thumbnails/7834b2b4-7b5d-4e59-a370-193fd923bd5e.jpgHopping on the CAN Busby Eric Evenchick Controller Area Network (CAN) is found in a number of systems, and is the main form of networking used in the automotive industry. Every new car has multiple CAN buses that let controllers communicate. This bus controls everything from the camshaft on your engine to your power seats. In this talk, we will present and release CANard, an open-source toolkit which allows easy scripting of CAN bus tasks. This toolkit allows us to easily work with CAN, to talk to automotive controllers, perform diagnostic actions, and fuzz the protocols. We will start with a brief introduction to CAN, look at the required hardware, and then start sending and receiving messages. We will explore CANard's features, and see several demos of real world vulnerabilities using our tool. We'll demonstrate how to read and clear fault codes, crack diagnostics security, and fuzz controllers to take over vehicle operation. The talk will focus on practical applications. By the end of the talk, attendees will not only gain an understanding of automotive systems, but will also have the tools to attack them. --- Mirrored from YouTube: https://www.youtube.com/watch?v=U1yecKUmnFohttps://peertube.dodges.it/static/streaming-playlists/hls/7e5bf308-4cea-451e-83bf-9ae471e24b4e/26ce827b-077f-405e-9e4d-a0377014ebd2-master.m3u8https://peertube.dodges.it/videos/embed/gAZJGX1RrPeb2RuqeW6NNA2950002026-10-26T06:45:02.232ZBlack Hat Asia 2015Information SecurityBlack HatBlackHatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/ePnfRNwr76nbkT2QKwM6YM2026-10-23T06:54:24.524Zhttps://peertube.dodges.it/lazy-static/thumbnails/e8d8a9b5-fc48-47c3-aba3-fc82fed7a7b4.jpgBlack Hat Asia 2025 - Sizzle Reel--- Mirrored from YouTube: https://www.youtube.com/watch?v=KbK1v65O6uUhttps://peertube.dodges.it/static/streaming-playlists/hls/6fe3dbfe-eba0-4bbc-9fbe-4cd805b288d9/a00e46b7-40fe-4de4-b8e1-a7aa036c4bfb-master.m3u8https://peertube.dodges.it/videos/embed/ePnfRNwr76nbkT2QKwM6YM15002026-10-26T05:05:23.251ZYESBlackhatNOhttps://peertube.dodges.it/w/d6Juvn3VHDBdbCDmET9Mjv2026-10-23T06:54:52.464Zhttps://peertube.dodges.it/lazy-static/thumbnails/e46cc6fd-ced2-49e8-8a16-cd12855d8926.jpgDEF CON 32 - What To Expect When You’re Exploiting: 0Days Baby Monitors & Wi-Fi Cams - Mager, ForteHome surveillance technology is a modern convenience that has been made accessible to the masses through the rise of IoT devices, namely cloud-connected Wi-Fi cameras. From parents monitoring their infants to homeowners watching their entryways, these cameras provide users with access to instant, high definition video from the convenience of a mobile phone, tablet, or PC. However, the affordability of these devices and relative ease of cloud access generally correlates to flawed security, putting users at risk. We set out to explore the attack surface of various Wi-Fi camera models to gain a deeper understanding of how these devices are being exploited. In the end, we devised methods to gain local root access, uncovered user privacy issues, discovered a zero-day vulnerability within a prominent IoT device management platform that allows attackers to gain remote control of millions of cameras worldwide and access sensitive user data, and revealed how these devices may be vulnerable to remote code execution attacks through completely unauthenticated means thanks to an inherently flawed implementation of their underlying peer to peer networking protocol. Along with demonstrating our exploits against live cameras, we will highlight the methods used to obtain our most significant findings and provide guidance on remediating the issues we encountered so these devices can be used safely in your household. We will also invite audience members to probe and attack a camera during our talk and earn a prize in the process! --- Mirrored from YouTube: https://www.youtube.com/watch?v=caY7ls4G460https://peertube.dodges.it/static/streaming-playlists/hls/61fa91af-2de3-4c81-8a49-78c12d2ef635/5c4c587a-4d5d-4719-b9da-522f14a4a7ba-master.m3u8https://peertube.dodges.it/videos/embed/d6Juvn3VHDBdbCDmET9Mjv2401002026-10-26T06:45:25.703ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8gpfC5TxmAyhTVXxQe1Jh32026-10-23T06:55:30.123Zhttps://peertube.dodges.it/lazy-static/thumbnails/b9416676-a645-46eb-ad5a-512e342fab33.jpgGhidra - Journey from Classified NSA Tool to Open SourceThis year was a momentous one for the National Security Agency (NSA) as we released our game-changing software reverse engineering (SRE) framework to the open source community: Ghidra. This was a long and arduous process and we want to give Black Hat attendees a chance to hear from two of our experts on how we developed Ghidra, what the tool does, and the process to release it to the public. We will also share some of the insight into what it is like for NSA researchers to interact with the dynamic nature of an open source tool…and the social media attention that it attracts. By Brian Knighton and Chris Delikat Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#ghidra---journey-from-classified-nsa-tool-to-open-source-16309 --- Mirrored from YouTube: https://www.youtube.com/watch?v=kx2xp7IQNSchttps://peertube.dodges.it/static/streaming-playlists/hls/3ad674f0-2544-40e1-8ab6-39048739099a/fd08209e-0056-4525-8e16-15480a418da7-master.m3u8https://peertube.dodges.it/videos/embed/8gpfC5TxmAyhTVXxQe1Jh32856002026-10-26T19:27:18.694ZYESBlackhatNOhttps://peertube.dodges.it/w/n6d1suXDuwrDfy9w1HPDRB2026-10-23T06:56:33.707Zhttps://peertube.dodges.it/lazy-static/thumbnails/56522af1-5065-4ec1-b134-a80b1ff63875.jpgLiving off Microsoft CopilotWhatever your need as a hacker post-compromise, Microsoft Copilot has got you covered. Covertly search for sensitive data and parse it nicely for your use. Exfiltrate it out without generating logs. Most frightening, Microsoft Copilot will help you phish to move lately. Heck, it will even social engineer victims for you! This talk is a comprehensive analysis of Microsoft copilot taken to red-team-level practicality. We will show how Copilot plugins can be used to install a backdoor into other user's copilot interactions, allowing for data theft as a starter and AI-based social engineering as the main course. We'll show how hackers can circumvent built-in security controls which focus on files and data by using AI against them. Next, we will drop LOLCopilot, a red-teaming tool for abusing Microsoft Copilot as an ethical hacker to do all of the above. The tool works with default configuration in any M365 copilot-enabled tenant. Finally, we will recommend detection and hardening you can put in place to protect against malicious insiders and threat actors with Copilot access. By: Michael Bargury | CTO, Zenity Tamir Ishay Sharbat | Software Engineer, AI Security, Zenity Gal Malka | Software Engineering Manager, Zenity Lana Salameh | Software Engineering Manager, Zenity Full Abstract and Presentation Materials Available: https://www.blackhat.com/us-24/briefings/schedule/#living-off-microsoft-copilot-40074 --- Mirrored from YouTube: https://www.youtube.com/watch?v=FH6P288i2PEhttps://peertube.dodges.it/static/streaming-playlists/hls/aaca07e4-48f0-44cb-8493-96f14b95edd9/b4f6a91f-0c25-4bc1-b23d-6ab71357e181-master.m3u8https://peertube.dodges.it/videos/embed/n6d1suXDuwrDfy9w1HPDRB2526002026-10-26T09:16:39.317ZYESBlackhatNOhttps://peertube.dodges.it/w/uQ8AAxFFfYNWCDkkB8DkLg2026-10-23T06:58:03.144Zhttps://peertube.dodges.it/lazy-static/thumbnails/ffb92ded-51ad-4a81-a241-ccd3ea8399fa.jpgSirenJack: Cracking a 'Secure' Emergency Warning Siren SystemSirenJack is a vulnerability that was found to affect radio-controlled emergency warning siren systems from ATI Systems. It allows a bad actor, with a $30 handheld radio and a laptop, to set off all sirens in a deployment. By Balint Seeber Full Abstract: https://www.blackhat.com/us-18/briefings/schedule/#sirenjack-cracking-a-secure-emergency-warning-siren-system-11691 --- Mirrored from YouTube: https://www.youtube.com/watch?v=49KoUmiJutshttps://peertube.dodges.it/static/streaming-playlists/hls/e97843d2-c01c-48a9-97f2-0307dbe46f0b/1f5e9377-7148-4704-a249-063e60d02058-master.m3u8https://peertube.dodges.it/videos/embed/uQ8AAxFFfYNWCDkkB8DkLg3080002026-10-26T09:43:48.195ZBlack HatBlack Hat USABlack Hat 2018Black Hat USA 2018BlackHatYESBlackhatNOhttps://peertube.dodges.it/w/qGuJ5jcPzU9NZaAEBLUwDU2026-10-23T06:59:22.852Zhttps://peertube.dodges.it/lazy-static/thumbnails/9924d345-4a71-416e-a023-9029ae93a804.jpgHacking Next-Gen ATMs: From Capture to Cashoutby Weston Hecker Over the past year I have worked at understanding and breaking the new methods that ATM manufactures have implemented on producing "Next Generation" Secure ATM systems. This includes bypassing Anti-skimming/Anti-Shimming methods introduced to the latest generation ATMs, along with NFC long range attacks that allow real-time card communication over 400 miles away. This talk will demonstrate how a $2000 investment can perform unattended "cash outs," touching also on failures in the past with EMV implementations and how credit card data of the future will most likely be sold with the new EMV data - with a short life span. This talk will include a demonstration of "La-Cara," an automated cash out machine that works on current EMV and NFC ATMs. "La-Cara" is an entire fascia placed on the machine to hide the auto PIN keyboard and flashable EMV card system that silently withdraws money from harvested card data. This demonstration of the system can cash out around $20,000/$50,000 in 15 min. With these methods revealed we will be able to protect against similar types of attacks. --- Mirrored from YouTube: https://www.youtube.com/watch?v=kno0vDhbb7Yhttps://peertube.dodges.it/static/streaming-playlists/hls/c802c803-dd72-409a-9781-bca6bdde740e/3d71c003-9be4-45b7-82e3-8ada2d24736b-master.m3u8https://peertube.dodges.it/videos/embed/qGuJ5jcPzU9NZaAEBLUwDU1984002026-10-26T09:44:00.967ZInformation SecurityBlackHatBlack HatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/eGJ6Nkzh9WbzLhYpJRdyZw2026-10-23T07:01:07.263Zhttps://peertube.dodges.it/lazy-static/thumbnails/40ddaaaf-2fe9-4f58-a4b2-9d16131dd575.jpgDEF CON 33 - RF Village - Tactical Flipper Zero You Have 1 Hour and No Other Equipment - Grey FoxYou just arrived in some city where the enemy is active. You have a mission to locate and identify a hostile team. They operate in and around a hotel adjacent to friendly force headquarters. They use radios to talk, rented cars to move, local Wi-Fi to conduct operations, and Bluetooth for everything else. Your phone just buzzed with a message that screams "They're planning something today. You have one hour to find them so we can direct local law enforcement. Go!" You just realised your equipment bag never made it off the plane. Bad. There is nowhere nearby to get what you need to do RF work in one hour. Worse. You happened to stuff your Flipper Zero into your pocket. Good? It's what you have and it can work on all that enemy tech--let's power it up and get at the mission. Better than nothing, right? Go! --- Mirrored from YouTube: https://www.youtube.com/watch?v=b8-uDKkfw5chttps://peertube.dodges.it/static/streaming-playlists/hls/6ef67f98-2432-4f92-afdb-c2aac202af78/5b766a6f-b8e7-4613-b810-79fd328124b9-master.m3u8https://peertube.dodges.it/videos/embed/eGJ6Nkzh9WbzLhYpJRdyZw2080002026-10-26T11:33:02.864ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jeAAG13ZPTEJahwb3tHQQ22026-10-23T07:02:41.269Zhttps://peertube.dodges.it/lazy-static/thumbnails/12b64938-3a14-45f1-809f-7d3f87a43be3.jpgBlack Hat USA 2013 Keynote - Gen. AlexanderBy: Gen. Alexander --- Mirrored from YouTube: https://www.youtube.com/watch?v=xvVIZ4OyGnQhttps://peertube.dodges.it/static/streaming-playlists/hls/93aa7c9a-04ab-4e15-9468-92950a07b979/20c640ba-2e56-4a06-9e73-4c1978a5e9b1-master.m3u8https://peertube.dodges.it/videos/embed/jeAAG13ZPTEJahwb3tHQQ23219002026-10-26T17:16:14.037ZBlackHatHatInformation SecurityBriefingsInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/dAHZfC12hqSSAmoDAmTv8a2026-10-23T07:02:57.160Zhttps://peertube.dodges.it/lazy-static/thumbnails/ad714cc9-1f34-49d3-a049-ddae7162f550.jpgDEF CON 22 - Shahar Tal - I Hunt TR-069 Admins: Pwning ISPs Like a BossSlides Here: https://defcon.org/images/defcon-22/dc-22-presentations/Tal/DEFCON-22-Shahar-TaI-I-hunt-TR-069-admins-UPDATED.pdf I Hunt TR-069 Admins: Pwning ISPs Like a Boss Shahar Tal SECURITY & VULNERABILITY RESEARCH TEAM LEADER, CHECK POINT SOFTWARE TECHNOLOGIES Residential gateway (/SOHO router) exploitation is a rising trend in the security landscape - ever so often do we hear of yet another vulnerable device, with the occasional campaign targeted against specific versions of devices through independent scanning or Shodan dorking. We shine a bright light on TR-069/CWMP, the previously under-researched, de-facto CPE device management protocol, and specifically target ACS (Auto Configuration Server) software, whose pwnage can have devastating effects on critical amounts of users. These servers are, by design, in complete control of entire fleets of consumer premises devices, intended for use by ISPs and Telco providers. or nation-state adversaries, of course (sorry NSA, we know it was a cool attack vector with the best research-hours-to-mass-pwnage ratio). We investigate several TR-069 ACS platforms, and demonstrate multiple instances of poorly secured deployments, where we could have gained control over hundreds of thousands of devices. During the talk (pending patch availability), we will release exploits to vulnerabilities we discovered in ACS software, including RCE on a popular package, leading to ACS (and managed fleet) takeover. Shahar Tal leads a team of Security & Vulnerability Researchers at Check Point Software Technologies. Prior to joining Check Point, Shahar held leadership roles in the Israel Defense Force (IDF), where he was trained and served as an officer in elite technology R&D units. Shahar (that's Major Tal, for you) brings over ten years of experience in his game, eager to speak and share in public domain. Shahar is a proud father, husband and a security geek who still can't believe he's getting paid to travel to awesome infosec cons. ...https://peertube.dodges.it/static/streaming-playlists/hls/6606d3db-cc38-495e-8a8c-3b702b18876b/8d3c1f12-9085-495e-9905-af0038f36747-master.m3u8https://peertube.dodges.it/videos/embed/dAHZfC12hqSSAmoDAmTv8a1921002026-10-26T11:33:17.362ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/ieRHb3GWY8J3BXNDJMM7jr2026-10-23T07:03:29.214Zhttps://peertube.dodges.it/lazy-static/thumbnails/ed51e94b-4e39-4a46-ae97-908e4dc4aa8c.jpgPractical Web Cache Poisoning: Redefining 'Unexploitable'Modern web applications are composed from a crude patchwork of caches and content delivery networks. In this session I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery systems, targeting everyone that makes the mistake of visiting their homepage. By James Kettle Full Abstract & Presentation Materials: https://www.blackhat.com/us-18/briefings/schedule/#practical-web-cache-poisoning-redefining-unexploitable-10200 --- Mirrored from YouTube: https://www.youtube.com/watch?v=j2RrmNxJZ5chttps://peertube.dodges.it/static/streaming-playlists/hls/8b9aa939-81b6-4496-98ae-17c5e7fabb5d/aa92a82b-a8c8-4023-85d0-06915ccb9858-master.m3u8https://peertube.dodges.it/videos/embed/ieRHb3GWY8J3BXNDJMM7jr2634002026-10-26T13:44:57.740ZBlack HatBlack Hat 2018Black Hat USABlack Hat USA 2018BHUSAYESBlackhatNOhttps://peertube.dodges.it/w/9eLe3d7LWnzL2KpGcddCWV2026-10-23T07:03:56.837Zhttps://peertube.dodges.it/lazy-static/thumbnails/47721306-8a03-47f7-9c65-6209885797bb.jpgDEF CON 31 - Runtime Riddles - Abusing Manipulation Points in the Android Source - Laurie KirkAndroid malware creators constantly struggle to devise innovative methods to obscure apps and impede reverse engineering. As numerous standard techniques have lost efficacy, I'll unveil the next frontier in Android obfuscation: runtime manipulation. Runtime manipulation alters standard application flow-of-control to bypass decompilers and emulators. In this talk, I'll reveal my strategy for pinpointing manipulation targets in Android's source code. I will describe how I craft manipulators in native C++ once a suitable target has been located. This is accomplished by hooking Java methods via the Java Native Interface (JNI) and typecasting the handle to a C-style pointer. Runtime manipulation can entirely remove traces of ClassLoader calls which are unavoidable for standard Dalvik Executable (DEX) packing, but are also easily discovered and hooked. This technique also effectively breaks cross-reference calculations within all Android decompilers. I will demonstrate and equip attendees with a custom Android library for devices running Android 13, providing a new tool that enables runtime manipulation experimentation. In addition, I'll demonstrate my methodology for pinpointing Java targets and modifying their underlying native data structures. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Bq7Z3X4xwCEhttps://peertube.dodges.it/static/streaming-playlists/hls/42b50864-ca34-4c34-acc1-7321851e4281/a72ff8cb-8eaf-4f5a-ae3d-d65ce7cd941d-master.m3u8https://peertube.dodges.it/videos/embed/9eLe3d7LWnzL2KpGcddCWV2519002026-10-26T13:45:09.872ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/mLCu3EvcoA91qDbtR9P2yh2026-10-23T07:05:30.971Zhttps://peertube.dodges.it/lazy-static/thumbnails/323d4087-0945-476c-ad90-e35044635236.jpgDEF CON 25 - Elie Bursztein - How We Created the First SHA 1 CollisionIn this talk, we recount how we found the first SHA-1 collision. We delve into the challenges we faced from developing a meaningful payload, to scaling the computation to that massive scale, to solving unexpected cryptanalytic challenges that occurred during this endeavor. We discuss the aftermath of the release including the positive changes it brought and its unforeseen consequences. For example it was discovered that SVN is vulnerable to SHA-1 collision attacks only after the WebKit SVN repository was brought down by the commit of a unit-test aimed at verifying that Webkit is immune to collision attacks. Building on the Github and Gmail examples we explain how to use counter-cryptanalysis to mitigate the risk of a collision attacks against software that has yet to move away from SHA-1. Finally we look at the next generation of hash functions and what the future of hash security holds. --- Mirrored from YouTube: https://www.youtube.com/watch?v=NbHL0SYlrSQhttps://peertube.dodges.it/static/streaming-playlists/hls/a831fb9d-25c0-426f-9d4b-30f85a5074ac/a9e99e27-ae21-40e0-8c68-72510d673494-master.m3u8https://peertube.dodges.it/videos/embed/mLCu3EvcoA91qDbtR9P2yh2237002026-10-26T17:15:50.420ZDEFCONDEF CONDEF CON 25DC25DC-25YESDEFCONNOhttps://peertube.dodges.it/w/fnS5fqa1PgqHN3E55aTi762026-10-23T07:06:26.783Zhttps://peertube.dodges.it/lazy-static/thumbnails/2648ebb1-db62-469f-ae1c-d3ae94ad349e.jpgCybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014Power exists to be used. Some wish for cyber safety, which they will not get. Others wish for cyber order, which they will not get. Some have the eye to discern cyber policies that are "the least worst thing;" may they fill the vacuum of wishful thinking. --- Mirrored from YouTube: https://www.youtube.com/watch?v=nT-TGvYOBpIhttps://peertube.dodges.it/static/streaming-playlists/hls/746d6b4d-3b88-406d-8882-c0f033ce8ccd/c246d660-9ca0-4506-8a88-0ed90a656ea1-master.m3u8https://peertube.dodges.it/videos/embed/fnS5fqa1PgqHN3E55aTi763275002026-10-26T17:15:38.763ZInfoSecBlackHatBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/tjsd92aegfEaSTc177Zu2g2026-10-23T07:07:01.952Zhttps://peertube.dodges.it/lazy-static/thumbnails/b588a708-78f3-490b-85cd-fa7bc7072774.jpgDEF CON 30 - Gal Zror - Hacking ISPs with Point-to-Pwn Protocol over Ethernet (PPPoE)Hello, my name is BWL-X8620, and I'm a SOHO router. For many years my fellow SOHO routers and I were victims of endless abuse by hackers. Default credentials, command injections, file uploading - you name it. And it is all just because we're WAN-facing devices. Just because our ISP leaves our web server internet-facing makes hackers think it's okay to attack and make us zombies. But today, I say NO MORE! In this talk, I will show that if a web client can attack a web server, then an ISP client can attack the ISP servers! I will reveal a hidden attack surface and vulnerabilities in popular network equipment used by ISPs worldwide to connect end-users to the internet. BRAS devices are not that different from us SOHO routers. No one is infallible. But, BRAS devices can support up to 256,000 subscribers, and exploiting them can cause a ruckus. Code executing can lead to a total ISP compromise, mass client DNS poisoning, end-points RCE, and more! This talk will present a high severity logical DOS vulnerability in a telecommunications vendor implementation of PPPoE and a critical RCE vulnerability in PPP. That means we, the SOHO routers, can attack and execute code on the ISP's that connect us to the internet! Today we are fighting back! --- Mirrored from YouTube: https://www.youtube.com/watch?v=Uwwg4gKpy-Mhttps://peertube.dodges.it/static/streaming-playlists/hls/dd3a48a2-0e4e-4edd-8c33-7c952aec61c1/8148f553-1d01-4b0e-8b37-de1a143bde27-master.m3u8https://peertube.dodges.it/videos/embed/tjsd92aegfEaSTc177Zu2g2358002026-10-26T17:14:19.695ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/fLFpXH6F6U6MYYoWzR1S7A2026-10-23T07:07:53.562Zhttps://peertube.dodges.it/lazy-static/thumbnails/0188600f-e925-45ec-95ca-44175a85f335.jpgDEF CON 34 - VideoTeam - Cliff Stoll AfterHoursAn interview with the delightful Cliff Stolll. So very worth your time --- Mirrored from YouTube: https://www.youtube.com/watch?v=AJCWsoozg0Qhttps://peertube.dodges.it/static/streaming-playlists/hls/779cf4d0-ef3e-4352-a763-1534a18c78b6/61275330-ccc4-417f-ac1b-8cefe0553dc6-master.m3u8https://peertube.dodges.it/videos/embed/fLFpXH6F6U6MYYoWzR1S7A624002026-10-26T17:14:37.559ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pnzn7qk9MhM4F4Axv9B9BZ2026-10-23T07:08:30.661Zhttps://peertube.dodges.it/lazy-static/thumbnails/642b4abb-3547-4859-b888-ed30f56b8367.jpgDEF CON 31 Trailer!Many thanks to the mighty, mighty Zebbler for this DEF CON 31 Trailer video! Enjoy the artistry, dance like no one's watching and get your mind right for DEF CON 31. You can download it for yourself on the media server at https://media.defcon.org/DEF%20CON%2031/. Two little weeks, people. It's almost here. Let's GO! Full video credits: Produced by Zebbler Studios Inspiration and story development by Zebbler, DayDreemer Visions, Matthew McCorkindale 3d worlds / animation by Arcane Realities Ending 3d animation and modeling by Glass Crane Additional 3d character development by DayDreemer and Nicholas Love Video editing by Zebbler Sound design by Encanti Vocal samples and a/v creative direction by Zebbler --- Mirrored from YouTube: https://www.youtube.com/watch?v=0klQiFT1BBEhttps://peertube.dodges.it/static/streaming-playlists/hls/bd455ea0-27f3-4b83-b2ff-d290a813741f/ca9774dd-14c9-4630-9627-1832f74c1eed-master.m3u8https://peertube.dodges.it/videos/embed/pnzn7qk9MhM4F4Axv9B9BZ157002026-10-26T17:14:25.877ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jU6wH1bL8uDagbubuJoxkb2026-10-23T07:13:47.413Zhttps://peertube.dodges.it/lazy-static/thumbnails/63bbb254-3764-477a-a2ed-a1eff3d855c4.jpgDEF CON Safe Mode - James Pavur - Whispers Among the StarsSpace is changing. The number of satellites in orbit will increase from around 2,000 today to more than 15,000 by 2030. This briefing provides a practical look at the considerations an attacker may take when targeting satellite broadband communications networks. Using $300 of widely available home television equipment I show that it is possible to intercept deeply sensitive data transmitted on satellite links by some of the world's largest organizations. The talk follows a series of case studies looking at satellite communications affecting three domains: air, land, and sea. From home satellite broadband customers, to wind farms, to oil tankers and aircraft, I show how satellite eavesdroppers can threaten privacy and communications security. Beyond eavesdropping, I also discuss how, under certain conditions, this inexpensive hardware can be used to hijack active sessions over the satellite link. The talk concludes by presenting new open source tools we have developed to help researchers seeking to improve satellite communications security and individual satellite customers looking to encrypt their traffic. The talk assumes no background in satellite communications or cryptography but will be most interesting to researchers interested in tackling further unsolved security challenges in outer space. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ku0Q_Wey4K0https://peertube.dodges.it/static/streaming-playlists/hls/990a945d-8901-4c60-a4a6-e20844cf9dc4/db0faef6-e011-4ef9-b649-55ae14281fd9-master.m3u8https://peertube.dodges.it/videos/embed/jU6wH1bL8uDagbubuJoxkb2669002026-10-26T22:22:12.792ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/pRYqWjZDpFM7zQAYwH9j192026-10-23T07:16:08.218Zhttps://peertube.dodges.it/lazy-static/thumbnails/24c92bcf-5b8b-437c-b3dc-53baa89c4301.jpgDEF CON 23 - Brent White - Hacking Web AppsAssessing the security posture of a web application is a common project for a penetration tester and a good skill for developers to know. In this talk, I'll go over the different stages of a web application pen test, from start to finish. We'll start with the discovery phase to utilize OSINT sources such as search engines, sub-domain brute-forcing and other methods to help you get a good idea of targets "footprint", all the way to fuzzing parameters to find potential SQL injection vulnerabilities. I'll also discuss several of the tools and some techniques that I use to conduct a full application penetration assessment. After this talk, you should have a good understanding of what is needed as well as where to start on your journey to hacking web apps. Speaker Bio: Brent is an Offensive Security Consultant at Solutionary NTT Group Security Company and has spoken at numerous security conferences, including DEF CON 22‹SE Village. He has held the role of Web/Project Manager and IT Security Director at the headquarters of a global franchise company. His experience includes Internal and External Penetration Assessments, Social Engineering and Physical Security Assessments, Wireless and Application Vulnerability Assessments and more. Twitter: @BrentWDesign --- Mirrored from YouTube: https://www.youtube.com/watch?v=I8AhfDEKUQ4https://peertube.dodges.it/static/streaming-playlists/hls/c13c68fc-27f4-48c3-a7ab-f2a0eee61b20/29bf6564-7050-43ae-bb3c-2cbc548168e3-master.m3u8https://peertube.dodges.it/videos/embed/pRYqWjZDpFM7zQAYwH9j192299002026-10-26T23:06:02.675ZWeb Application (Industry)DEF CON (Conference Series)DEF CON 23DC23DC-23YESDEFCONNOhttps://peertube.dodges.it/w/p39tJ1J114TDTorEzMAkE82026-10-23T07:16:57.908Zhttps://peertube.dodges.it/lazy-static/thumbnails/526d3988-9dc2-410f-9ec3-8d0b38f09719.jpgDEF CON 31 - Snoop On To Them, As They Snoop On To Us - Alan MeekinsBLE devices are now all the rage. What makes a purpose built tracking device like the AirTag all that different from the majority of BLE devices that have a fixed address? With the rise of IoT we're alsoing seeing a rise in government and corporate BLE survallaince systems. We'll look at tools that normal people can use to find out if their favorite IoT gear is easily trackable. If headphones and GoPro's use fixed addresses, what about stun guns and bodycams? We'll take a look at IoT gear used by authorities and how it may be detectedable over long durations, just like an AirTag. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cO1JSzAdPM8https://peertube.dodges.it/static/streaming-playlists/hls/ba8ee6c7-2c5d-4984-a949-9e20011ce50f/1e2368ea-5581-4c65-9896-62b138d5f22b-master.m3u8https://peertube.dodges.it/videos/embed/p39tJ1J114TDTorEzMAkE81402002026-10-26T23:05:44.693ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/gKJScNHmJu3NpoEcH86UmV2026-10-23T07:17:59.920Zhttps://peertube.dodges.it/lazy-static/thumbnails/6f2743f9-84ab-4708-9d0c-5a60df9243ba.jpgDEF CON 25 - Max Bazaliy - Jailbreaking Apple WatchOn April 24, 2015, Apple launched themselves into the wearables category with the introduction of Apple Watch. This June, at Apple's Worldwide Developer Conference, Apple announced that their watch is not only the #1 selling smartwatch worldwide by far, but also announced the introduction of new capabilities that will come with the release of watchOS 4. Like other devices, Apple Watch contains highly sensitive user data such as email and text messages, contacts, GPS and more, and like other devices and operating systems, has become a target for malicious activity. This talk will provide an overview of Apple Watch and watchOS security mechanisms including codesign enforcement, sandboxing, memory protections and more. We will cover vulnerabilities and exploitation details and dive into the techniques used in creating an Apple Watch jailbreak. This will ultimately lead to a demonstration and explanation of jailbreaking an Apple Watch, showcasing how it can access important user data and applications. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eJpbi-Qz6Jchttps://peertube.dodges.it/static/streaming-playlists/hls/7f947a96-a386-47e3-9d88-332cce96eca5/d2cf71be-6a07-4be3-ba7b-6a533c3d0d98-master.m3u8https://peertube.dodges.it/videos/embed/gKJScNHmJu3NpoEcH86UmV2172002026-10-26T22:36:22.941ZDEF CONDEF CON 25DEFCONDC25DC-25YESDEFCONNOhttps://peertube.dodges.it/w/pWQyAg8oCQFdiuzw47bG782026-10-23T07:18:28.677Zhttps://peertube.dodges.it/lazy-static/thumbnails/34fc22cb-47f1-44bc-89b2-af7ca3be1daa.jpgBlack Hat USA 2025 | No Hoodies Here: Organized Crime in AdTechFor nearly a decade, traffic distribution systems (TDSs) have enabled cybercriminals to hide the true nature of their operations. A TDS serves not only to 'cloak' their activity but also to ensure that victims are 'delivered' to the malicious bait they are most likely to take. These systems are so complex that they are often disregarded with off-hand references to 'a bunch of redirects,' but TDSs are critical enablers to a wide range of crime, from scams to information stealers. In this talk, we will unveil the true identity and nature of one of the most pervasive TDS operators in the landscape, which serves as a cautionary tale of how organized crime actors have created an adtech sector unnoticed by the security community. VexTrio operates the oldest documented (dating back to 2015), most prolific criminal TDS. For years, it was assumed that VexTrio was a gang of 'hackers in hoodies' operating in the dark web as part of the underground economy. In reality, VexTrio operates in the corporate world and their activities go far beyond traffic distribution. They run a vast enterprise that includes dozens of companies across adjacent industries (not just adtech) on multiple continents. We'll share how we unraveled their operations and how they responded to coordinated exposure, cementing our confidence in the conclusions. Unmasking VexTrio has been a watershed moment in understanding the role of organized crime within the adtech industry. Numerous other syndicates were discovered as a result, as well as their affiliations with one another. With this new perspective, attendees working in threat intelligence will see TDS in a different light, allowing them to help advance the industry's knowledge and capabilities to fight against malicious adtech. While at the same time, attendees working in defender positions will understand events in their own network better. By: Renée Burton | VP of Threat Intel, Infoblox Dave Mitchell | Senior Director, Threat Intel, Infoblox ...https://peertube.dodges.it/static/streaming-playlists/hls/c1ea47b4-9695-48dd-86b7-ae3521b7f7d3/3163c5d5-f486-430b-bfb6-8f2778bca977-master.m3u8https://peertube.dodges.it/videos/embed/pWQyAg8oCQFdiuzw47bG782441002026-10-26T22:36:27.105ZYESBlackhatNOhttps://peertube.dodges.it/w/fWoQns4KBRguDFrP3hJXsk2026-10-23T07:20:53.555Zhttps://peertube.dodges.it/lazy-static/thumbnails/1ce8525c-eb2b-43c5-991d-c8049dec8deb.jpgDevSecOps : What, Why and HowIn this talk, we shall focus on how a DevOps pipeline can easily be metamorphosed into a DevSecOps and the benefits which can be achieved with this transformation. The talk (assisted with various demos) will focus on developing a DevSecOps pipeline using free/open-source tools in various deployment platforms, i.e. on-premise, cloud native and hybrid scenarios. By Anant Shrivastava Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#devsecops--what-why-and-how-17058 --- Mirrored from YouTube: https://www.youtube.com/watch?v=DzX9Vi_UQ8ohttps://peertube.dodges.it/static/streaming-playlists/hls/78f82d3f-6e57-40f7-807a-f7351c976cc3/31ad8fa1-e3dc-470f-82f5-8e74a3551b80-master.m3u8https://peertube.dodges.it/videos/embed/fWoQns4KBRguDFrP3hJXsk3166002026-10-26T22:45:14.531ZYESBlackhatNOhttps://peertube.dodges.it/w/ftGF26nwBmfPkpNxoFPMxs2026-10-23T07:21:34.155Zhttps://peertube.dodges.it/lazy-static/thumbnails/056e43e3-6f66-49ca-bd39-985b2a24917e.jpgBlack Hat USA 2019Black Hat USA 2019 welcomed more than 20,200 of the most security-savvy professionals across the InfoSec spectrum – spanning academia, world-class researchers, and leaders in the public and private sectors, August 3-8, 2019. This year's conference welcomed more than 500 speakers and Trainers across more than 90 deeply technical Trainings and more than 120 innovative research-based Briefings on stage. The Black Hat Review Board, comprised of 24 of the world's foremost security experts, evaluated more submissions this year than ever before – producing the largest program to date. For more information about the event and to download available whitepapers and presentations, visit: blackhat.com/us-19/ --- Mirrored from YouTube: https://www.youtube.com/watch?v=bjxg7wa1CYMhttps://peertube.dodges.it/static/streaming-playlists/hls/753e16a7-a5a4-446b-a046-c8febd4e72bc/f81ca6f6-a647-476d-b17e-cacff7f6bd4f-master.m3u8https://peertube.dodges.it/videos/embed/ftGF26nwBmfPkpNxoFPMxs78002026-10-26T22:45:16.540ZYESBlackhatNOhttps://peertube.dodges.it/w/hgjdLtjZANDpxT2h7y3Big2026-10-23T07:22:36.851Zhttps://peertube.dodges.it/lazy-static/thumbnails/171cee60-afc8-4fe0-907a-0f759348cf54.jpgDEF CON 32 - Your AI Assistant has a Big Mouth: A New Side Channel Attack - Yisroel MirskyAI assistants like ChatGPT are changing how we interact with technology. But what if someone could read your confidential chats? Imagine awkwardly asking your AI about a strange rash, or to edit an email, only to have that conversation exposed to someone on the net. In this talk we'll unveil a novel side-channel vulnerability in popular AI assistants and demonstrate how it can be used to read encrypted messages sent from AI Assistants. Before our disclosure, major players like OpenAI, Microsoft, Cloudflare, Quora, and Notion were at risk. We'll reveal the technical details of this exploit and show real-world examples of intercepted conversations. This talk isn't just about the problem – learn how to identify this vulnerability in other AI assistants as well! We'll dissect network traffic, discuss attack models, and explore the far-reaching consequences of this discovery. --- Mirrored from YouTube: https://www.youtube.com/watch?v=I1RqhGGRmHYhttps://peertube.dodges.it/static/streaming-playlists/hls/83b59a89-29b2-4010-a0c9-59853b597365/cf618098-5fab-45b6-a21e-e0ff3cc56290-master.m3u8https://peertube.dodges.it/videos/embed/hgjdLtjZANDpxT2h7y3Big2398002026-10-26T23:05:57.790ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6rzApkCHV7LXz8RGFbdcEG2026-10-23T07:29:02.721Zhttps://peertube.dodges.it/lazy-static/thumbnails/7232b314-7016-4fbc-ac53-258b262557dc.jpgKeynote: The Hidden Architecture of our Time: Why This Internet Worked, How We Could Lose It...by Dan Kaminsky What we call the Internet, was not our first attempt at making a global data network that spanned the globe. It was just the first one that worked. Why? In this talk, I'll lay out what I see as how the Internet actually works. It's increasingly likely that there will be attempts to *change* the principles of the net, and the reality is that widespread hacking is the exact sort of force that brought us this working-ish system in the first place. We need to talk about the values of cryptography, of open software and networks, of hackers being a force for measurable good. We need to talk about how infrastructure like DNS -- it was there 25 years ago, we can imagine it will be there 25 years from now -- acts as foundation for future development in a way that the API of the hour doesn't. Things do need to be better, and we need to talk about the role of Government in that. The things that need to be better are technical in nature, and guide research priorities that are outright not being addressed at present. Essentially, I'd like to provide a model for comprehending the Internet as it stands, that prevents harm to it (how much could we have used EC2 if SSH was illegal) while providing the useful resources to promote its continued operation. We can't keep screwing this up forever. NTIA has noted half (!) of the population warily backing away. Let's talk about how it really works, so we can discuss how we can do it better. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RAGwol-keXMhttps://peertube.dodges.it/static/streaming-playlists/hls/2c0ffd74-a15d-4664-a3b1-6348766bdab0/ebca3f69-e587-4648-b155-156734d6f8fd-master.m3u8https://peertube.dodges.it/videos/embed/6rzApkCHV7LXz8RGFbdcEG4369002026-10-26T23:23:48.541ZBlack Hat USA 2016BlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/nxXk4pPhw2WQUha593wHs82026-10-23T07:29:49.747Zhttps://peertube.dodges.it/lazy-static/thumbnails/82f37cb2-f9e2-44e0-9ef1-46f2da06bc76.jpgBlack Hat Europe 2025 | Secure Your Pass | 1 minBlack Hat Europe returns to the Excel in London with a four-day program this December 8-11, 2025. The event will open with two-and four-day options of specialized cybersecurity Trainings, with courses of all skill levels. The two-day main conference on December 10 & 11 boasts Briefings featuring the latest in research, developments, and trends in cybersecurity, along with dozens of open-source tool demos in Arsenal, a robust Business Hall, networking, and social events, and much more. View Pass Options » https://www.blackhat.com/eu-25/registration.html --- Mirrored from YouTube: https://www.youtube.com/watch?v=6S7SZ2NzXOQhttps://peertube.dodges.it/static/streaming-playlists/hls/ae8610f1-e5bb-4ba8-9cc2-e4bb9b8767ff/85f56e9e-2b57-4dc9-a53b-57ff555fd289-master.m3u8https://peertube.dodges.it/videos/embed/nxXk4pPhw2WQUha593wHs871002026-10-26T23:23:51.086ZYESBlackhatNOhttps://peertube.dodges.it/w/tHiTu8JsuoUJ6UgAZzhSMf2026-10-23T07:30:34.575Zhttps://peertube.dodges.it/lazy-static/thumbnails/51047c0e-36e6-4754-97ad-0bebca61a79c.jpgDEF CON 30 - Bill Graydon - Defeating Moving Elements in High Security KeysA recent trend in high security locks is to add a moving element to the key: this prevents casting, 3D printing and many other forms of unauthorised duplication. Pioneered by the Mul-T-Lock Interactive locks, we see the technique used in recent Mul-T-Lock iterations, the Abloy Protec 2 and most recently, the Medeco M4, which is only rolling out to customers now. We have identified a major vulnerability in this technology, and have developed a number of techniques to unlock these locks using a key made from a solid piece of material, which defeats all of the benefits of an interactive key. I’ll demonstrate how it can be applied to Mul-T-Lock Interactive, Mul-T-Lock MT5+ and the Medeco M4, allowing keys to be duplicated by casting, 3D printing and more. I’ll also cover other techniques to defeat moving elements in a key, such as printing a compliant mechanism and printing a captive element directly. With this talk, we’re also releasing a web application for anyone to generate 3D printable files based on this exploit. Finally, I’ll also discuss the responsible disclosure process, and working with the lock manufacturers to patch the vulnerability and mitigate the risk. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3OmyVJDjTr4https://peertube.dodges.it/static/streaming-playlists/hls/e06b4316-5f16-4e16-a234-a43b1d0e0d78/7cc0d0c6-606c-4fa4-b366-6349982101bb-master.m3u8https://peertube.dodges.it/videos/embed/tHiTu8JsuoUJ6UgAZzhSMf2745002026-10-26T23:42:19.741ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ftfpJkcNAubbio8wEghgUv2026-10-23T07:31:31.190Zhttps://peertube.dodges.it/lazy-static/thumbnails/ab3f0737-548c-4c55-9db4-b3ee2551677e.jpgCloning 3G/4G SIM Cards With A PC And An Oscilloscope: Lessons Learned In Physical Securityby Yu Yu Recently, documents leaked from Edward Snowden alleged that NSA and GCHQ had stolen millions of SIM card encryption keys from one of the world's largest chip manufacturers. This incident draws the public attention to the longstanding concern for the mobile network security. Despite that various attacks against 2G (GSM) algorithms (COMP-128, A5) were found in literature, no practical attacks were known against 3G/4G (UMTS/LTE) SIM cards. 3G/4G SIM cards adopt a mutual authentication algorithm called MILENAGE, which is in turn based on AES-128, a mathematically secure block cipher standardized by NIST. In addition to the encryption key, MILENAGE also uses nearly a dozen of 128-bit secrets to further obfuscate the algorithm. In this presentation, we show how to amount differential power analysis that recovers encryption key and other secrets in a divide-and-conquer manner within a few (10 to 40) minutes, allowing for SIM cards cloning. Our experiments succeeded on eight 3G/4G SIM cards from a variety of operators and manufacturers. The measurement setup of our experiment mainly consists of an oscilloscope (for power acquisition), an MP300-SC2 protocol analyzer (for interception of the messages), a self-made SIM card reader, and a PC (for signal processing and cryptanalysis). We finish the presentation by showing what happens to a 3G/4G SIM card and its duplicate when receiving texts/calls at the same time. --- Mirrored from YouTube: https://www.youtube.com/watch?v=qKCQ1KL9GEchttps://peertube.dodges.it/static/streaming-playlists/hls/752de729-5e2a-4121-b619-905d87da9a31/95436b65-e314-4a92-93c5-856f7398bcc8-master.m3u8https://peertube.dodges.it/videos/embed/ftfpJkcNAubbio8wEghgUv1781002026-10-26T23:42:23.398ZBlackHatInfoSecBlack Hat USA 2015Information SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/pwxPJxgbPyG2kHAdvcgiEJ2026-10-23T07:33:17.866Zhttps://peertube.dodges.it/lazy-static/thumbnails/b64b4d35-ddd2-47d7-9d08-0e312c214bc3.jpgUnveiling the Underground World of Anti-CheatsBy Joel Noguera This talk pretends to catch everyone's attention from new people to experts on the field, starting with a state of the market and interesting cases around the cheating world, and finishing with a deep explanation of each analyzed technique and the results we obtained during the journey. Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/index.html#unveiling-the-underground-world-of-anti-cheats-17358 --- Mirrored from YouTube: https://www.youtube.com/watch?v=yJHyHU5UjTghttps://peertube.dodges.it/static/streaming-playlists/hls/be861d28-2cac-48b1-88c0-fb085bee9e52/af80d61b-d66f-4fbd-95a9-e0278e0dbc85-master.m3u8https://peertube.dodges.it/videos/embed/pwxPJxgbPyG2kHAdvcgiEJ2488002026-10-26T23:56:02.399ZYESBlackhatNOhttps://peertube.dodges.it/w/q5yEBfYy3SJL3UEabYR5XV2026-10-23T07:33:33.654Zhttps://peertube.dodges.it/lazy-static/thumbnails/1a2ad4e4-d45e-41cc-bec4-6b2dcdaac16e.jpgDEF CON 22 - Chris Hadnagy - What Your Body Tells Me - Body Language for the SEChris Hadnagy - What Your Body Tells Me - Body Language for the SE --- Mirrored from YouTube: https://www.youtube.com/watch?v=RfLj7y0Xf2Yhttps://peertube.dodges.it/static/streaming-playlists/hls/c2fe6f10-6583-4dce-9bd3-b004f22f85e3/c4f93496-e1fc-461f-8b12-21f047542c07-master.m3u8https://peertube.dodges.it/videos/embed/q5yEBfYy3SJL3UEabYR5XV3495002026-10-26T23:56:07.205ZChristopher HadnagyDEFCON Video SeriesDEFCON ConferenceDefconDEF CONYESDEFCONNOhttps://peertube.dodges.it/w/qSqwiZDHoFWrVsWTBreHER2026-10-23T07:34:43.029Zhttps://peertube.dodges.it/lazy-static/thumbnails/f3bb55e4-2d64-4b20-a84e-2d6178ccf281.jpgBlack Hat Asia 2014 - The Machines That Betrayed Their MastersBy: Glenn Wilkinson The devices we carry betray us to those who want to invade our privacy by emitting uniquely identifiable signals. The most common example is the wireless signals emitted by your mobile phone (even whilst tucked safely into your pocket). Such signals may be used to track you, or be used toward more malicious intent. This talk will discuss the process the author has gone through to build a resilient, modular, reliable, distributed, tracking framework - originally spawned as a PoC tool in 2012 by the name 'Snoopy'. The dog is back, and with more bite - looking beyond just Wi-Fi. Also, he's now airborne via a quadcopter. --- Mirrored from YouTube: https://www.youtube.com/watch?v=NiiI_oZ7y64https://peertube.dodges.it/static/streaming-playlists/hls/c965a101-1909-4fb9-8e63-f61c2f15a8c9/a61cf455-2a61-44c1-88ed-89297975f7a9-master.m3u8https://peertube.dodges.it/videos/embed/qSqwiZDHoFWrVsWTBreHER3494002026-10-27T00:14:00.476ZAsiaBlackHatBriefingsBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/97k98Wic9crK91mD6LtGiQ2026-10-23T07:35:24.375Zhttps://peertube.dodges.it/lazy-static/thumbnails/47b3ddac-02cb-47d9-b1f5-f49ca10bf812.jpgDEF CON 32 - Behind Enemy Lines: Going undercover to breach LockBit Ransomware Op- Jon DiMaggioDelve into the clandestine world of the LockBit ransomware gang! In this revealing presentation, I will recount my two-year journey spent infiltrating the inner ranks of the LockBit crime syndicate. Learn about the strategies employed to earn the trust of key individuals within the syndicate, including the gang's leader, LockBitSupp. You will see firsthand accounts of these exchanges, and I will detail the intricacies of my relationship with LockBit's leadership and its network of affiliate hackers. You will also gain insight into the unintended consequences of my actions, including how my perceived breach of their infrastructure impacted the syndicate's operations. More importantly, I will share how I assisted in unmasking the real-world person behind the mask of LockBitSupp. Join me as I illustrate the pivotal role of human intelligence in tandem with cyber threat intelligence to combat ransomware threats. This talk offers a compelling narrative of real-world efforts to thwart ransomware activities and safeguard organizations from LockBit ransomware attacks. 60 min (full episode): 4/14/2024: Scattered Spider; Knife; Tasmanian Tiger - CBS News 60 Min Overtime (additional footage from my interview about LockBit): Infiltrating ransomware gangs on the dark web - CBS News Ransomware Diaries Ransomware Diaries: Volume 1 | Analyst1 Ransomware Diaries V. 2: A Ransomware Hacker Origin Story (analyst1.com) Ransomware Diaries V. 3: LockBit's Secrets (analyst1.com) Ransomware Diaries Volume 5: Unmasking LockBit (analyst1.com) --- Mirrored from YouTube: https://www.youtube.com/watch?v=dLOUzF6_Y54https://peertube.dodges.it/static/streaming-playlists/hls/41ab5e15-fa0c-49e6-abb5-3d1f007e4c02/461c9e46-23d0-471b-b3a6-c7ac4cdf291b-master.m3u8https://peertube.dodges.it/videos/embed/97k98Wic9crK91mD6LtGiQ2180002026-10-27T00:14:10.526ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/jRapNceWPFuM1RF6JBEpaw2026-10-23T07:35:59.336Zhttps://peertube.dodges.it/lazy-static/thumbnails/420cb995-b24e-4ef2-9a2f-64a90ca1f123.jpgDEF CON 25 - SupaFraud - Official DEF CON Teaser VideoThe official DEF CON 25 Teaser Video. --- Mirrored from YouTube: https://www.youtube.com/watch?v=FNtVqHaWFbUhttps://peertube.dodges.it/static/streaming-playlists/hls/98a1bd6a-49b9-4a83-a88c-9e98f8135584/7a1cae22-1f38-475c-b39d-9ddab2c38622-master.m3u8https://peertube.dodges.it/videos/embed/jRapNceWPFuM1RF6JBEpaw68002026-10-27T00:14:12.590ZDEF CONDEFCONDEF CON 25DC25DC-25YESDEFCONNOhttps://peertube.dodges.it/w/ayoxtD6XaKiZzPGveu9yLS2026-10-23T07:37:11.914Zhttps://peertube.dodges.it/lazy-static/thumbnails/2e9ecb74-f78f-4527-9fde-476dd517362c.jpgThe Linux Kernel Hidden Inside Windows 10by Alex Ionescu Initially known as "Project Astoria" and delivered in beta builds of Windows 10 Threshold 2 for Mobile, Microsoft implemented a full blown Linux 3.4 kernel in the core of the Windows operating system, including full support for VFS, BSD Sockets, ptrace, and a bonafide ELF loader. After a short cancellation, it's back and improved in Windows 10 Anniversary Update ("Redstone"), under the guise of Bash Shell interoperability. This new kernel and related components can run 100% native, unmodified Linux binaries, meaning that NT can now execute Linux system calls, schedule thread groups, fork processes, and access the VDSO! As it's implemented using a full-blown, built-in, loaded-by-default, Ring 0 driver with kernel privileges, this not a mere wrapper library or user-mode system call converter like the POSIX subsystem of yore. The very thought of an alternate virtual file system layer, networking stack, memory and process management logic, and complicated ELF parser and loader in the kernel should tantalize exploit writers - why choose from the attack surface of a single kernel, when there's now two? But it's not just about the attack surface - what effects does this have on security software? Do these frankenLinux processes show up in Procmon or other security drivers? Do they have PEBs and TEBs? Is there even an EPROCESS? And can a Windows machine, and the kernel, now be attacked by Linux/Android malware? How are Linux system calls implemented and intercepted? As usual, we'll take a look at the internals of this entirely new paradigm shift in the Windows OS, and touch the boundaries of the undocumented and unsupported to discover interesting design flaws and abusable assumptions, which lead to a wealth of new security challenges on Windows 10 Anniversary Update ("Redstone") machines. --- Mirrored from YouTube: https://www.youtube.com/watch?v=36Ykla27FIohttps://peertube.dodges.it/static/streaming-playlists/hls/4d67f0e6-266b-44f4-80a2-2e4af481250a/50c4d208-20f6-4a2e-8eb7-85996013b5ee-master.m3u8https://peertube.dodges.it/videos/embed/ayoxtD6XaKiZzPGveu9yLS3149002026-10-27T00:23:53.740ZInformation SecurityInfoSecBlackHatBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/fcHQtrP6SHgvAzHFW5ybKU2026-10-23T07:38:30.918Zhttps://peertube.dodges.it/lazy-static/thumbnails/486e800d-6f7b-4b6b-a5b0-39960fd739e1.jpgDEF CON 22 - Anch - The Monkey in the Middle: A pentesters guide to playing in traffic.Slides here: https://www.defcon.org/images/defcon-22/dc-22-presentations/Anch/DEFCON-22-Anch-The-Monkey-In-the-Middle.pdf The Monkey in the Middle: A pentesters guide to playing in traffic. Anch (MIKE GUTHRIE) Prank your friends, collect session information and passwords, edit traffic as it goes by.. become the Monkey(man)-In-The-Middle and do it all… This presentation will teach you a penetration testers view of man in the middle (MITM) attacks. It will introduce the tools, techniques and methods to get traffic to your hosts. Demonstrations of the tools and methods involved will be presented. Come learn new and interesting ways to prank your friends, experience the all porn internet (redux), learn what mallory is and how to use it, learn how to direct traffic to your proxy, deal with SSL and certificates in interesting ways, and make sure you go (mostly) undetected. Anch is the lead for the Chickasaw Nation Industries Red Team performing penetration tests, and accreditation's for the public and private sector. Anch has 11 years experience in cyber security. He was the Network Security Architect at a major power administration. At Mentor Graphics he spent time as a network engineer providing enterprise networking, firewall and VPN support for a global network comprising of 72 connected sites worldwide. He has been involved in or lead over 75 penetration tests on over 200 networks. Anch's background related to control systems is unrivaled in the bulk power generation and transmission areas. During this time he developed unique perspectives on the areas of compliance and regulation in the power industry. Twitter: @boneheadsanon --- Mirrored from YouTube: https://www.youtube.com/watch?v=YImQys2Xlf0https://peertube.dodges.it/static/streaming-playlists/hls/7302e7a7-c25a-439d-9d21-90bdce9d699a/e14c4f9d-bd29-407d-b034-a7200e8fbb5c-master.m3u8https://peertube.dodges.it/videos/embed/fcHQtrP6SHgvAzHFW5ybKU3190002026-10-27T00:23:57.483ZSoftware (Industry)Penetration TestDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/kYJQdD3VLHvcwEX1CiuiAe2026-10-23T07:39:53.689Zhttps://peertube.dodges.it/lazy-static/thumbnails/b8368602-68e4-4e75-a104-04dd003ef412.jpgCybercrime in The Deep Webby Marco Balduzzi & Vincenzo Ciancaglini All content not indexed by traditional web-based search engines is known as the DeepWeb. Wrongly been associated only with the Onion Routing (TOR), the DeepWeb's ecosystem comprises a number of other anonymous and decentralized networks. The Invisible Internet Project (I2P), FreeNET, and Alternative Domain Names (like Name.Space and OpenNic) are examples of networks leveraged by bad actors to host malware, high-resilient botnets, underground forums and bitcoin-based cashout systems (e.g., for cryptolockers). We designed and implemented a prototype system called DeWA for the automated collection and analysis of the DeepWeb, with the goal of quickly identifying new threats as soon they appear. In this talk, we provide concrete examples of how using DeWA to detect, e.g., trading of illicit and counterfeit goods, underground forums, privacy leaks, hidden dropzones, malware hosting and TOR-based botnets. --- Mirrored from YouTube: https://www.youtube.com/watch?v=OcuzaOLs7dMhttps://peertube.dodges.it/static/streaming-playlists/hls/a1c9ae71-1418-4db5-b474-e6a71cec0395/aa4b0988-ced0-411e-afd4-4b18eb4047f1-master.m3u8https://peertube.dodges.it/videos/embed/kYJQdD3VLHvcwEX1CiuiAe3307002026-10-27T00:31:31.848ZInfoSecBlackHatBlack Hat Europe 2015Black HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/xaFwWEKPC8sghDwG6eWjJi2026-10-23T07:40:32.499Zhttps://peertube.dodges.it/lazy-static/thumbnails/16bb43ca-753c-4537-9f73-6b38c80d1651.jpgBlack Hat USA 2023 HighlightsCheck out all the highlights from Black Hat USA 2023 at the Mandalay Bay in Las Vegas. Visit our Flickr page for the event photos: https://www.flickr.com/photos/blackhatevents/albums #cybersecurity #infosec #blackhat --- Mirrored from YouTube: https://www.youtube.com/watch?v=878kF4zBcjghttps://peertube.dodges.it/static/streaming-playlists/hls/fc655b13-bd75-4a61-b941-7e18f6c9467d/e3a74592-3e0d-4c57-ac5e-50a5ec86f00c-master.m3u8https://peertube.dodges.it/videos/embed/xaFwWEKPC8sghDwG6eWjJi174002026-10-27T00:31:34.407ZYESBlackhatNOhttps://peertube.dodges.it/w/i1yq4SCRH9y9sapWB18Th12026-10-23T07:41:59.911Zhttps://peertube.dodges.it/lazy-static/thumbnails/99df0842-0ec7-4206-adf5-7174f7d3f4bb.jpgWireGuard: Next Generation Secure Network TunnelThe state of VPN protocols is not pretty, with popular options, such as IPsec and OpenVPN, being overwhelmingly complex, with large attack surfaces, using mostly cryptographic designs from the 90s. WireGuard presents a new abuse-resistant and high-performance alternative based on modern cryptography with a focus on implementation and usability simplicity. By Jason Donenfeld Full abstract and materials: https://www.blackhat.com/us-18/briefings/schedule/#wireguard-next-generation-secure-network-tunnel-11207 --- Mirrored from YouTube: https://www.youtube.com/watch?v=88GyLoZbDNwhttps://peertube.dodges.it/static/streaming-playlists/hls/89bf5569-5f15-4c93-b909-1ff9b7ecbdc4/8aa32067-acc0-4ccf-9e86-53def45b048b-master.m3u8https://peertube.dodges.it/videos/embed/i1yq4SCRH9y9sapWB18Th13043002026-10-27T00:33:21.641ZBlack Hat Briefings 2018BlackHatUSABlack Hat BriefingsBlack Hat 2018 BriefingsBlack Hat USA 2018YESBlackhatNOhttps://peertube.dodges.it/w/3NbzgEV9UXavSUx1fkywoh2026-10-23T07:42:51.489Zhttps://peertube.dodges.it/lazy-static/thumbnails/5e7d24bb-a0b7-47c4-9577-1ea14f046ef8.jpgBlack Hat USA 2013 - OPSEC failures of spiesBy: Matthew Cole The CIA is no more technologically sophisticated than your average American, and as a result, has suffered serious and embarrassing operational failures. This is a rare peek inside the CIA's intelligence gathering operations and the stunning lack of expertise they can bring to the job. In 2005, news organizations around the world reported that an Italian court had signed arrest warrants for 26 Americans in connection with an extraordinary rendition of a Muslim cleric. At the heart of the case was the stunning lack of OPSEC the team of spies used while they surveilled and then snatched their target off the streets of Milan. The incident, known as the Italian Job inside the CIA, became an international scandal and caused global outrage. What very few people ever understood was that the CIA's top spies were laughably uneducated about cell phone technology and ignorant of the electronic fingerprints left behind. The story would be startling, though old, if not for the fact that eight years after the debacle in Milan, history repeated itself. In 2011, an entire CIA network of Lebanese informants was busted by Hezbollah. The reason: cell phone OPSEC failures. After receiving a warning from Mossad, who had lost their network a year earlier the same way, the CIA dismissed Hezbollah's ability to run analytic software on raw cell phone traffic. But they did. And with a little effort, the CIA's network of spies, as well as their own officers, were identified one by one. This is the true story of American Intelligence's Keystone Kops. --- Mirrored from YouTube: https://www.youtube.com/watch?v=BwGsr3SzCZchttps://peertube.dodges.it/static/streaming-playlists/hls/16a501c8-9b28-4f8d-9730-743e68a534b4/996022a1-a2ee-4105-afcd-40f3d618fd33-master.m3u8https://peertube.dodges.it/videos/embed/3NbzgEV9UXavSUx1fkywoh1511002026-10-27T00:33:24.666ZUsaInfoSecBlack Hat BriefingsInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/7oR3E4e9fPzqz2rzehGAD12026-10-23T07:43:44.819Zhttps://peertube.dodges.it/lazy-static/thumbnails/0c0d3ee5-510d-4e7a-b0cb-79acae57d7b0.jpgThe Underground Ecosystem of Credit Card Fraudsby Abhinav Singh Point of Sale (POS) malwares have been stealing the limelight this year. They have been the elemental factor in some of the biggest breaches uncovered in the past couple of years. This talk will cover the aspects of what happens after these details have been sent to the malware authors. The entire ecosystem of credit card frauds can be broadly classified into these three steps: 1. Purchase of raw details and dumps 2. Converting them to plastic cash/cards 3. Shop! Shop! Shop! The focus of this talk will be on the above-mentioned points and how they form an organized network of cyber-crime. There have been talks on the POS malware and the big breaches that it has caused. We know that millions of details have been stolen, but the aftermath is hardly discussed. It is important to understand the complete fraud ecosystem if we have to kill its roots. The talk will involve details of forums, which have only privileged access, internal details of the buyers/sellers, personal chats, and IRC encounters that makes it unique and research oriented. --- Mirrored from YouTube: https://www.youtube.com/watch?v=DE4JgUzr5Hshttps://peertube.dodges.it/static/streaming-playlists/hls/33c76ba2-4cfd-4386-a198-7ef20a570f4a/b5ec0f0f-23e3-4a0b-bafe-f00203d3957b-master.m3u8https://peertube.dodges.it/videos/embed/7oR3E4e9fPzqz2rzehGAD13231002026-10-27T00:46:48.335ZBlack HatInformation SecurityInfoSecBlack Hat Asia 2015BlackHatYESBlackhatNOhttps://peertube.dodges.it/w/n1NWgBoaTjT8CQeJbgyjTL2026-10-23T07:45:24.607Zhttps://peertube.dodges.it/lazy-static/thumbnails/fb5050ed-f208-4f34-9fdc-18c8799418c4.jpgMobile Network Hacking, IP EditionBy Karsten Nohl, Luca Melette & Sina Yazdanmehr We explore which protection measures are missing from the mobile network and discuss how to best bring them over from the IT security domain into mobile networks. Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/index.html#mobile-network-hacking-ip-edition-17617 --- Mirrored from YouTube: https://www.youtube.com/watch?v=3XUo7UBn28ohttps://peertube.dodges.it/static/streaming-playlists/hls/aa2cd645-7125-46a3-a78e-c9cd97097472/cb2383e0-2d16-4b5e-a331-8604c3d3c656-master.m3u8https://peertube.dodges.it/videos/embed/n1NWgBoaTjT8CQeJbgyjTL2851002026-10-27T00:47:39.192ZBlack HatBlack Hat EuropeBlack Hat Europe 2019Black Hat BriefingsYESBlackhatNOhttps://peertube.dodges.it/w/sH8Bg5YAEpkPfkiqJCCqZg2026-10-23T07:46:11.488Zhttps://peertube.dodges.it/lazy-static/thumbnails/110dbf80-e8e1-4f7c-ac7c-d152e39e54fd.jpgDEF CON 30 - Cesare Pizzi - Old Malware, New tools: Ghidra and Commodore 64Why looking into a 30 years old "malicious" software make sense in 2022? Because this little "jewels", written in a bunch of bytes, reached a level of complexity surprisingly high. With no other reason than pranking people or show off technical knowledge, this software show how much you can do with very limited resources: this is inspiring for us, looking at modern malicious software, looking at how things are done and how the same things could have been done instead. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Dl7l7gdr34ohttps://peertube.dodges.it/static/streaming-playlists/hls/d84bc9cd-095e-45c3-8f7e-754ff4d8e3f9/34562a3f-e572-4b85-97ee-78048e71f7d9-master.m3u8https://peertube.dodges.it/videos/embed/sH8Bg5YAEpkPfkiqJCCqZg2782002026-10-27T01:50:56.877ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/3YGH4dCZGTrSL6g6hE8WE12026-10-23T07:46:22.778Zhttps://peertube.dodges.it/lazy-static/thumbnails/7ab61489-23ae-45b6-a023-d8547c26d0e0.jpgStagefright: Scary Code in the Heart of Androidby Joshua Drake With over a billion activated devices, Android holds strong as the market leading smartphone operating system. Underneath the hood, it is primarily built on the tens of gigabytes of source code from the Android Open Source Project (AOSP). Thoroughly reviewing a code base of this size is arduous at best - arguably impossible. Several approaches exist to combat this problem. One such approach is identifying and focusing on a particularly dangerous area of code. This presentation centers around the speaker's experience researching a particularly scary area of Android, the Stagefright multimedia framework. By limiting his focus to a relatively small area of code that's critically exposed on 95% of devices, Joshua discovered a multitude of implementation issues with impacts ranging from unassisted remote code execution down to simple denial of service. Apart from a full explanation of these vulnerabilities, this presentation also discusses; techniques used for discovery, Android OS internals, and the disclosure process. Finally, proof-of-concept code will be demonstrated. After attending this presentation, you will understand how to discover vulnerabilities in Android more effectively. Joshua will show you why this particular code is so scary, what has been done to help improve the overall security of the Android operating system, and what challenges lie ahead. --- Mirrored from YouTube: https://www.youtube.com/watch?v=71YP65UANP0https://peertube.dodges.it/static/streaming-playlists/hls/181d03fa-cf7c-4c37-a406-85df4655e96c/d3439767-ace4-4e50-ac34-ae1b0943ada3-master.m3u8https://peertube.dodges.it/videos/embed/3YGH4dCZGTrSL6g6hE8WE13365002026-10-27T01:01:47.168ZInformation SecurityBlack HatBlackHatBlack Hat USA 2015InfoSecYESBlackhatNOhttps://peertube.dodges.it/w/6GMczDqit6EeXGhYagELEs2026-10-23T07:46:51.049Zhttps://peertube.dodges.it/lazy-static/thumbnails/34bd15d0-7a68-4655-8d1b-5a2dc4bd3637.jpgCalling all Cybersecurity Pros! Join Us at Black Hat USA 2024 at the Mandalay Bay.--- Mirrored from YouTube: https://www.youtube.com/watch?v=x-956BVXMLQhttps://peertube.dodges.it/static/streaming-playlists/hls/2e2f4ca4-0b0a-4782-8c68-39b9b5488b66/64ab4826-ad60-44f3-b3ac-b996ff2f98b1-master.m3u8https://peertube.dodges.it/videos/embed/6GMczDqit6EeXGhYagELEs41002026-10-27T00:47:45.473ZYESBlackhatNOhttps://peertube.dodges.it/w/4nRo7h5V5mSGscwqnhSVNp2026-10-23T07:48:01.019Zhttps://peertube.dodges.it/lazy-static/thumbnails/b25e1062-4d96-477f-a904-dcf0753636e9.jpgLiving off Microsoft CopilotBefore Diving Into This Presentation, Take a Look at The Short Demo: https://www.youtube.com/watch?v=tr1tTJk32uk&list=PLH15HpR5qRsUiLYPNSylDvlskvS_RSzee&index=12 Whatever your need as a hacker post-compromise, Microsoft Copilot has got you covered. Covertly search for sensitive data and parse it nicely for your use. Exfiltrate it out without generating logs. Most frightening, Microsoft Copilot will help you phish to move lately. Heck, it will even social engineer victims for you! This talk is a comprehensive analysis of Microsoft copilot taken to red-team-level practicality. We will show how Copilot plugins can be used to install a backdoor into other user's copilot interactions, allowing for data theft as a starter and AI-based social engineering as the main course. We'll show how hackers can circumvent built-in security controls which focus on files and data by using AI against them. Next, we will drop LOLCopilot, a red-teaming tool for abusing Microsoft Copilot as an ethical hacker to do all of the above. The tool works with default configuration in any M365 copilot-enabled tenant. Finally, we will recommend detection and hardening you can put in place to protect against malicious insiders and threat actors with Copilot access. By: Michael Bargury | CTO, Zenity Tamir Ishay Sharbat | Software Engineer, AI Security, Zenity Gal Malka | Software Engineering Manager, Zenity Lana Salameh | Software Engineering Manager, Zenity Full Abstract & Presentation Materials: https://www.blackhat.com/us-24/briefings/schedule/#living-off-microsoft-copilot-40074 --- Mirrored from YouTube: https://www.youtube.com/watch?v=-YJgcTCSzU0https://peertube.dodges.it/static/streaming-playlists/hls/1b5877a6-4b0a-4fff-b211-de86bb3b25e7/8785f56d-135e-46b0-bb8f-dee030f48f65-master.m3u8https://peertube.dodges.it/videos/embed/4nRo7h5V5mSGscwqnhSVNp2526002026-10-27T01:01:52.516ZYESBlackhatNOhttps://peertube.dodges.it/w/h2SBkPeTRWutsFBq6UbMNm2026-10-23T07:49:32.875Zhttps://peertube.dodges.it/lazy-static/thumbnails/fcc30ef3-60c6-4320-8d0f-84df79cc27a5.jpgHacking a Professional Droneby Nils Rodday Professional drones are now actively used across various industries (for example utility companies, law enforcement and first responder organizations, government agencies and universities) to perform daily critical operations. In this Briefing, Nils Rodday performs a live hack which exploits vulnerabilities of the professional drone and effectively compromises the security of the system to take over control. He also examines practical fixes and approaches for remediating these compromises. --- Mirrored from YouTube: https://www.youtube.com/watch?v=JRVb-xE1zTIhttps://peertube.dodges.it/static/streaming-playlists/hls/81d526c4-f4a2-44ce-9597-b7482b450f44/8f455fbd-9ed3-417a-8825-cdc6fce40588-master.m3u8https://peertube.dodges.it/videos/embed/h2SBkPeTRWutsFBq6UbMNm1677002026-10-27T01:05:51.363ZBlack Hat Asia 2016Black HatBlackHatInformation SecurityInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/5K7BuF72CkY5ywPAvf9do92026-10-23T07:50:23.836Zhttps://peertube.dodges.it/lazy-static/thumbnails/86629b00-7acc-4811-b471-744f5c3a9327.jpgBypassing Local Windows Authentication To Defeat Full Disk Encryptionby Ian Haken In 2007, starting with Windows Vista, Microsoft began shipping a full disk encryption feature named BitLocker with professional and enterprise versions of Windows. Full disk encryption helps protect users from threats that include physical access. This can, for example, prevent the exposure of proprietary information and account credentials if a company laptop is lost, stolen, or even left temporarily accessible to an attacker. Under the hood, BitLocker utilizes a system's Trusted Platform Module (TPM) to store the secret key used for full disk encryption, and is able to use the features of the TPM to safely provide transparent, passwordless decryption of the disk on boot. Because BitLocker can work transparentlywithout any extra passwords or prompts on bootmany enterprises have opted to enable this form of full disk encryption as a part of their data loss prevention strategy. However, in this presentation, I will demonstrate how one can abuse physical access in order to bypass Windows authenticationthus accessing all of a user's dataeven when the disk is fully encrypted by BitLocker. This platform-independent attack effectively bypasses all of the protection offered by BitLocker, reliably and quickly allowing an attacker to retrieve all of the sensitive data on the machine, all without having to perform any cryptographic brute-forcing or hardware manipulation. --- Mirrored from YouTube: https://www.youtube.com/watch?v=eRuca6eAdFMhttps://peertube.dodges.it/static/streaming-playlists/hls/26699c8c-bdd8-4275-acf3-9b40a22dbdf4/624812c3-324e-4cbe-9f20-7380eb07a196-master.m3u8https://peertube.dodges.it/videos/embed/5K7BuF72CkY5ywPAvf9do91556002026-10-27T01:05:55.326ZBlack Hat Europe 2015BlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/oJvVoJEJnD9vuc5vySWnNa2026-10-23T07:50:58.405Zhttps://peertube.dodges.it/lazy-static/thumbnails/18b558cf-d7f3-43f5-b6a9-9ea4511f8e42.jpgExploiting Network PrintersThe idea of a paperless office has been dreamed of for more than three decades. However, nowadays printers are still one of the most essential devices for daily work and common Internet users. Instead of removing them, printers evolved from simple devices into complex network computer systems, installed directly into company networks, and carrying considerable confidential data in their print jobs. This makes them to an attractive attack target. By Jens Müller Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#exploiting-network-printers --- Mirrored from YouTube: https://www.youtube.com/watch?v=DwKzSO4yA_shttps://peertube.dodges.it/static/streaming-playlists/hls/b818ba61-cd71-4822-ad2f-569308936a39/818b03e9-dc9b-4a78-844b-cbae95327b66-master.m3u8https://peertube.dodges.it/videos/embed/oJvVoJEJnD9vuc5vySWnNa2709002026-10-27T01:12:13.118ZBlack HatBHUSAInformation SecurityInfoSecBlack Hat USA 2017YESBlackhatNOhttps://peertube.dodges.it/w/1QKcpdVgJuoBRTThGeVXpQ2026-10-23T07:51:21.053Zhttps://peertube.dodges.it/lazy-static/thumbnails/28af5a52-a8af-4379-980c-9e10a5375819.jpgCult of the Dead Cow - Change the World, cDc Style - DEF CON 27 ConferenceThe Cult of the Dead Cow changed the culture of the entire security industry, the attitude of companies who had ignored risks, and even how the feds dealt with hackers. In this session, four key figures from the group’s first 35 years will cover their greatest hits and screw-ups, highlighting the lessons for other hackers out to make a difference. They will be questioned by Joseph Menn, whose new book on the group shows how it evolved from a network of bulletin board operators to the standard-bearers of hacker culture. cDc Minister of Propaganda Deth Vegetable and long serving text-file editor Omega will appear for the first time under their real names, covering the group’s formative years and how it handled such recent controversies as WikiLeaks, neo-Nazis, and the presidential candidacy of cDc alum Beto O’Rourke. cDc tech luminaries Zatko and Rioux will discuss the release of Back Orifice at Def Con in 1998, which allowed non-hackers to hijack Windows machines, drawing worldwide attention to the insecurity of Microsoft’s operating system, and Rioux’s pathbreaking sequel, Back Orifice 2K, which prompted Microsoft to hire hackers as security consultants, including those from Zatko and Rioux’s @stake. Zatko will share insights from leading inside the government, where he ran cybersecurity grantmaking at DARPA, the people who brought you the internet. And Rioux will explain what’s possible in the private sector, where he co-founded unicorn Veracode, which dramatically improved code review by major software buyers. Joseph Menn Joseph Menn has just published Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World. He is an investigative reporter on security, and has covered the issue since 1999 at the Los Angeles Times, Financial Times and most recently Reuters. His previous books include Fatal System Error: The Hunt for the New Crime Lords who are Bringing Down the Internet and All the Rave: The Rise and Fall of Shawn Fanning’s Napster...https://peertube.dodges.it/static/streaming-playlists/hls/06ce5260-80a2-4488-b6cb-39f5ca3eb1ba/dd5758da-a220-4baa-88a4-d02568199ab6-master.m3u8https://peertube.dodges.it/videos/embed/1QKcpdVgJuoBRTThGeVXpQ2779002026-10-27T01:30:37.699ZDEFCONDEF CONDEFCONDef Con 27YESDEFCONNOhttps://peertube.dodges.it/w/rFmrt5rKsoFzYbETDKkbCt2026-10-23T07:51:38.929Zhttps://peertube.dodges.it/lazy-static/thumbnails/c7c6cd3c-bd6b-47a2-9c95-59b10c611e9e.jpgAttacking Encrypted USB Keys the Hard(ware) WayEver wondered if your new shiny AES hardware-encrypted USB device really encrypts your data - or is just a fluke? If you have, come to our talk to find out if those products live up to the hype and hear about the results of the audit we conducted on multiples USB keys and hard drives that claim to securely encrypt data. By Elie Bursztein, Jean-Michel Picod & Rémi Audebert Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#attacking-encrypted-usb-keys-the-hardware-way --- Mirrored from YouTube: https://www.youtube.com/watch?v=jVKl3GuazEshttps://peertube.dodges.it/static/streaming-playlists/hls/cff311ce-d7d5-460c-9bc6-b6a8881af233/dbedd78f-f189-4bd9-9d97-5922ecce1a9c-master.m3u8https://peertube.dodges.it/videos/embed/rFmrt5rKsoFzYbETDKkbCt2268002026-10-27T01:12:16.004ZBHUSAInfoSecBlack HatInformation SecurityBlack Hat 2017YESBlackhatNOhttps://peertube.dodges.it/w/xpPCJs3c5ecNAVnu1mVNQc2026-10-23T07:52:55.283Zhttps://peertube.dodges.it/lazy-static/thumbnails/30a373f6-5ab2-4f04-b602-7de74ab4d017.jpgBlack Hat ArsenalBlack Hat Arsenal offers a space for researchers and developers to showcase their latest open-source tools and products with Black Hat attendees. Through live tool demonstrations in an open, conversational environment, presenters are able to interact with attendees and provide a hands-on experience utilizing new, tools and strengthening their security toolkits. Now in its tenth year at Black Hat USA, this year's program showcased more than 90 tools and featured all-new Arsenal Labs, which offered hands-on opportunities to play with hardware, including ICS gear, and IoT devices. --- Mirrored from YouTube: https://www.youtube.com/watch?v=KA8Ts7jo6i4https://peertube.dodges.it/static/streaming-playlists/hls/fe5ec29f-03bf-464b-8b5b-5e6f998fab6b/ff0370a5-bc5b-4563-bb1a-839e09aff6de-master.m3u8https://peertube.dodges.it/videos/embed/xpPCJs3c5ecNAVnu1mVNQc162002026-10-27T01:30:40.373ZYESBlackhatNOhttps://peertube.dodges.it/w/3c1vSyJhMcADcsie9odASk2026-10-23T07:54:19.415Zhttps://peertube.dodges.it/lazy-static/thumbnails/85635ce5-90bd-4b51-947b-a2a5e302de3a.jpgDEF CON 24 SE Village - Robert Anderson - US Interrogation Techniques and SEUS Army Interrogation techniques and training is the Irish Twin of Social Engineering. Objectives for both Match, obtain information from a source or target. Techniques for both match: Lying and Deception at the Source or Target Sincere and Convincing to the Source or Target Building Rapport and Confidence with the Source or Target The speaker will establish the synergy between both practices and provide insight into how to utilize this information in Social Engineering pentesting and defense techniques. BIO: Robert Anderson is a former Intelligence Officer with the US Army. He successfully completed the US Army Interrogation school at Ft. Huachuca, AZ. He then completed an extensive Arabic Language program at the Defense Language Institute in Monterey, CA. After two years on active duty in the military he was then awarded an assignment as Interrogation Instructor for FORSCOM Intelligence Training Detachment (FITD). He has supported numerous missions and operations in the Middle East and Africa, both on active duty and later in his career as a government contractor. His IT/Cyber Security experience spans 20 years working for IBM, HP, DELL, BearingPoint, and most recently as a IT/Cyber Security Consultant with Preying Mantis. His Cyber Security experience began over 15 years ago with Network Security, moving to Application Security, Incident Response, and Security Policy, Awareness, and Training. He adapted his Interrogation skill to Social Engineering pentesting and defensive measures. He is a highly trained and experience security professional. His eyes on, hands on experience supporting numerous large organizations in their security challenges covers both strategic and tactical security solutions. He is currently supporting several clients as a IT/Cyber Security Consultant including CenturyLink’s security practice. --- Mirrored from YouTube: https://www.youtube.com/watch?v=G_lmXqBUtZchttps://peertube.dodges.it/static/streaming-playlists/hls/11bbc6b4-5459-4348-9316-21b14838c02f/4833a08e-6857-493d-b16f-9c047116a1bb-master.m3u8https://peertube.dodges.it/videos/embed/3c1vSyJhMcADcsie9odASk3144002026-10-27T01:51:00.894ZDEF CONDEFCONHackingHacker ConferenceComputer SecurityYESDEFCONNOhttps://peertube.dodges.it/w/vdTu3afbWgc5yG32BB3Cce2026-10-23T07:58:18.516Zhttps://peertube.dodges.it/lazy-static/thumbnails/f765e031-3222-4e97-a8dc-4760b1fa9d9a.jpgPanel - DEF CON to help hackers anonymously submit bugs to the government - DEF CON 27 ConferenceHere’s the use case. You learn of a problem with a government system or some technology, and you want to do the right thing. You want to get the information into the right hands, but you’d be more comfortable sharing if you knew you couldn’t be identified as the messenger of the problem. Sound familiar? This very problem has been the subject of a years-long conversation in the space between government and independent security research. The goal is to create a sturdy, anonymous system for hackers and researchers that shares your tip directly with the part of government that needs to know, and keeps you out of the equation. This is your chance to be part of the conversation. Join The Dark Tangent, the NYT’s Runa Sandvik, Leviathan’s Corbin Souffrant, SOFWERX and The Donovan Groups Pablo Breuer, the ACLU’s Jennifer Granick and the DHS CISA Christopher Krebs and have your voice heard. Corbin Souffrant Corbin Souffrant is a Security Consultant with Leviathan Security Group where his expertise spans several security domains. He has engaged in projects involving everything from firmware and device security, to application assessments, and even fuzzer development. Prior to this, he participated as a competitor in DARPA Cyber Grand Challenge (CGC), researched program analysis tooling, and reverse-engineered exploits from active malware samples. Twitter: @loliponi Pablo Breuer Pablo Breuer is currently the director of US Special Operations Command Donovan Group and senior military advisor and innovation officer to SOFWERX. He's served at the National Security Agency and U.S. Cyber Command as well as being the Director of C4 at U.S. Naval Forces Central Command. He is a DoD Cyber Cup and Defcon Black Badge winner, and has been adjunct faculty at National University, California State University Monterey Bay, and a Visiting Scientist at Carnegie Mellon CERT/SEI. Pablo is also a founder and board member of The Diana Initiative, an InfoSec event focused on advancing the car...https://peertube.dodges.it/static/streaming-playlists/hls/eca5ac95-4350-4383-be41-0cfaf8c5293b/d7391262-c1b4-43c4-be0f-39891461f694-master.m3u8https://peertube.dodges.it/videos/embed/vdTu3afbWgc5yG32BB3Cce2771002026-10-27T02:09:08.522ZDEFCONdefconDef Con 27DEF CON 2019YESDEFCONNOhttps://peertube.dodges.it/w/eWr3QPxvqH27D9ysizrHEK2026-10-23T07:59:30.220Zhttps://peertube.dodges.it/lazy-static/thumbnails/268edb24-3d5c-481c-a13b-b4c61f34ef11.jpgDEF CON 31 - The Internals of Veilid, a New Decentralized Application Framework - DilDog, Medus4Veilid is an open-source, peer-to-peer, mobile-first networked application framework, with a flagship secure messaging application named VeilidChat. Veilid is conceptually similar to IPFS + Tor, but faster and designed from the ground-up to provide all services over a privately routed network. The network also enables development of distributed applications without a 'blockchain' or a 'transactional layer' at their base. Veilid can be included as part of user-facing applications or run as a standalone server for power users who wish to help build the network. Architecturally, it is written in Rust, uses strong encryption, and nodes can run on Linux, Mac, Windows, Android, iOS, and in-browser WASM. Low-level protocols over UDP, raw TCP, Websockets and Secure Websockets. Nodes are optimized for low latency, high node churn, and are particularly capable of dealing with low level network changes, such as switching from cellular to wifi networks mid-communication. This talk will focus on the internals of Veilid: * How it works as a protocol * How it leverages strong cryptography to provide private communications * How it provides decentralized storage and cryptographically sound data structures * How applications are written to leverage the Veilid Network We will demonstrate Veilid Server, and VeilidChat, the application. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Kb1lKscAMDQhttps://peertube.dodges.it/static/streaming-playlists/hls/70e06734-f183-4341-be98-741444d89ca3/cd3723ff-557b-4cbd-a593-52704cde570c-master.m3u8https://peertube.dodges.it/videos/embed/eWr3QPxvqH27D9ysizrHEK2476002026-10-27T02:17:35.718ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/d99Ed94ZXEC9Pgddxa3o1n2026-10-23T08:00:36.695Zhttps://peertube.dodges.it/lazy-static/thumbnails/da4796fb-fc1a-407d-b992-c1135fa5d95d.jpgDEF CON 29 - Joseph Gabay - DoS Denial of Shopping Analyzing and Exploiting Physical Shopping CartMany supermarkets and shopping centers have implemented devices that “lock” their shopping carts if they’re taken outside of an approved boundary (e.g, a parking lot). This talk examines some of the technology that’s used to do this, as well as ways to capture and spoof the control signals to defeat these devices. We will go over the anatomy of remotely lockable shopping cart wheels, their basic theory, and get into how they’re controlled. We’ll deconstruct some samples of the lock and unlock signals captured using a homemade antenna and a HackRF, and briefly discuss methods of rebroadcasting them – as well as the challenges inherent to this process. DISCLAIMER This talk is the result of a personal project. Any views, opinions, or research presented in this talk are personal and belong solely to the presenter. They do not represent or reflect those of any person, institution, or organization that the presenter may or may not be associated with in a professional or personal capacity unless explicitly stated otherwise. --- Mirrored from YouTube: https://www.youtube.com/watch?v=fBICDODmCPIhttps://peertube.dodges.it/static/streaming-playlists/hls/6250f343-23e2-48b7-8972-ee395434876d/b0140859-7c62-41b5-880e-a210c99967c3-master.m3u8https://peertube.dodges.it/videos/embed/d99Ed94ZXEC9Pgddxa3o1n1872002026-10-27T02:17:39.096ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/vskvJjJXnGQ9PWtFM5EvQ12026-10-23T08:02:01.211Zhttps://peertube.dodges.it/lazy-static/thumbnails/e3c7b0ba-437a-4a69-91ab-4a487bf11180.jpgDEF CON 30 - Sam Quinn, Steve Povolny - Perimeter Breached Hacking an Access Control SystemThe first critical component to any attack is an entry point. As we lock down firewalls and routers, it can be easy to overlook the network-connected physical access control systems. A study done by IBM in 2021 showed that the average cost of a physical security compromise is $3.54 million and takes an average of 223 days to identify a breach. HID Mercury is a global distributor of access control systems with more than 20 OEM partners, deployed across multiple industries and certified for use in federal and state government facilities. Trellix's Advanced Threat Research team uncovered 4 unique 0-day vulnerabilities and 4 additional undisclosed vulnerabilities leading to remote, unauthenticated code execution on multiple HID Mercury access control panels. These findings lead to full system control including the ability for an attacker to remotely manipulate door locks. During this presentation, we will briefly cover the hardware debugging process, leading to a root shell on the target. We will explore in greater depth the vulnerability discovery techniques, including emulation, fuzzing, static and dynamic reverse engineering, and a detailed walkthrough of several of the most critical vulnerabilities. We’ll address our approach to exploitation using simplistic malware we designed to control system functionality and culminate the talk with a live demo featuring full system control, unlocking doors remotely without triggering any software notification --- Mirrored from YouTube: https://www.youtube.com/watch?v=2htQvpvFex4https://peertube.dodges.it/static/streaming-playlists/hls/ee86625b-ebad-4cec-ac5e-5462bd9bf684/fd300094-0e96-4c85-92f4-ffcd55e54824-master.m3u8https://peertube.dodges.it/videos/embed/vskvJjJXnGQ9PWtFM5EvQ12590002026-10-27T02:33:00.557ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/8qW6WJaafLA2y76nvA2apb2026-10-23T08:05:31.851Zhttps://peertube.dodges.it/lazy-static/thumbnails/f8c500b6-2a55-474b-9657-81d955d958ad.jpgDEF CON 25 - Matt Wixey - See no evil, hear no evil: Hacking invisibly & silently with light & soundTraditional techniques for C2 channels, exfiltration, surveillance, and exploitation are often frustrated by the growing sophistication and prevalence of security protections, monitoring solutions, and controls. Whilst all is definitely not lost, from an attacker's perspective - we constantly see examples of attackers creatively bypassing such protections - it is always beneficial to have more weapons in one's arsenal, particularly when coming up against heavily-defended networks and highly-secured environments. This talk demonstrates a number of techniques and attacks which leverage light and/or sound, using off-the-shelf hardware. It covers everything from C2 channels and exfiltration using light and near-ultrasonic sound, to disabling and disrupting motion detectors; from laser microphones, to repelling drones; from trolling friends, to jamming speech and demotivating malware analysts. This talk not only provides attendees with a new suite of techniques and methodologies to consider when coming up against a well-defended target, but also demonstrates, in a hopefully fun and practical way, how these techniques work, their advantages, disadvantages, and possible future developments. It also gives details of real case studies where some of these techniques have been used, and provides defenders with realistic methods for the mitigation of these attacks. Finally, the talk covers some ideas for future research in this area. --- Mirrored from YouTube: https://www.youtube.com/watch?v=gFTiD7EnVjUhttps://peertube.dodges.it/static/streaming-playlists/hls/3c2b29b6-1b39-4fb7-98a0-0050ec0c36ac/702ddaae-6446-489e-a584-106949616f2a-master.m3u8https://peertube.dodges.it/videos/embed/8qW6WJaafLA2y76nvA2apb2616002026-10-27T02:33:05.902ZDEF CON 2017DEF CON 25DEF CONDC25hackersYESDEFCONNOhttps://peertube.dodges.it/w/xvHBV7BN8BU6YNwQ8Qp5rm2026-10-23T08:06:58.580Zhttps://peertube.dodges.it/lazy-static/thumbnails/b2ceb60a-52fe-4794-af18-28f2872b1d91.jpgDEF CON 26 - Josh Mitchell - Ridealong Adventures: Critical Issues with Police Body CamerasThe police body camera market has been growing in popularity over the last few years. A recent (2016) Johns Hopkins University market survey found 60 different models have been produced specifically for law enforcement use. Rapid adoption is fueling this meteoric increase in availability and utilization. Additionally, device manufactures are attempting to package more and more technology into these devices. This has caused a deficiency in local municipalities' skills and budget to accurately assess the attack surface and exposure to the organization. Furthermore, departmental policies and procedures governing the secure deployment of these devices is largely insufficient. At DEF CON, we will be introducing tactics, techniques, and procedures to assess the security of these devices. We will cover attacks against the physical devices, RF components, smartphone app's, and desktop software. The capabilities demonstrated and discussed will encompass publicly and privately available technologies. Additionally, the talk will cover multiple products and vendors, shedding light on industry wide issues and trends. Finally, we will be releasing software to detect and track various devices and tie these issues into real world events. --- Mirrored from YouTube: https://www.youtube.com/watch?v=X34taF1R7sUhttps://peertube.dodges.it/static/streaming-playlists/hls/ff31843d-0268-436a-937b-db985aa24746/144b0262-36b2-478d-ad53-cb991677a53b-master.m3u8https://peertube.dodges.it/videos/embed/xvHBV7BN8BU6YNwQ8Qp5rm2747002026-10-27T02:47:22.771ZDEFCONDEFCONDEF CON 26DC26YESDEFCONNOhttps://peertube.dodges.it/w/gHZJ6inqadENp1zcE6a4k52026-10-23T08:09:25.132Zhttps://peertube.dodges.it/lazy-static/thumbnails/af2f22c9-f87e-4a49-9fa4-32ded6fdaf2b.jpgDEF CON 31 - War Stories - Youre Not George Clooney, and This Isnt Oceans 11 - Andrew BrandtOne common thread runs through a recent wave of (initially, successful) targeted malware attacks I've investigated: The attackers communicated with their targets, personally, using social engineering in real-time, in order to lay the groundwork for the rest of the attack to succeed. Throughout the course of several post-breach investigations, it became apparent that -- for a certain kind of target and a particular class of attacker -- engaging the victim in direct conversation was far more effective at assuring the target infected their computer than crafting a believable-looking "malspam" email that would "fool" the target into clicking a link or opening a file. The attackers did not need to be charismatic for the technique to succeed. In fact, so long as the attacker "got into character" and treated the interaction as a normal, everyday event (from their perspective), the targets went along for the ride, and in many cases, self-infected with malware that was capable of snooping through their most sensitive files. In this session, we'll discuss both the social engineering and technical aspects of the attacks, and why this combination of tactics is particularly dangerous and hard to defend against. --- Mirrored from YouTube: https://www.youtube.com/watch?v=RRjre0dnOGQhttps://peertube.dodges.it/static/streaming-playlists/hls/7f562632-4659-41c5-a7a4-8d8202d12b76/f2c0c326-3eee-4c1c-97b4-289b568f3a0e-master.m3u8https://peertube.dodges.it/videos/embed/gHZJ6inqadENp1zcE6a4k52658002026-10-27T02:55:04.711ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/2xnrH3Q6KrbDqnzzvijAtA2026-10-23T08:10:39.943Zhttps://peertube.dodges.it/lazy-static/thumbnails/3bd13939-975d-4022-800d-ebc927987246.jpgDEF CON 29 - Thomas Roth - Hacking the Apple AirTagsApple’s AirTags enable tracking of personal belongings. They are the most recent and cheapest device interacting with the Apple ecosystem. In contrast to other tracking devices, they feature Ultrawide-band precise positioning and leverage almost every other Apple device within the Find My localization network. Less than 10 days after the AirTag release, we bypassed firmware protections by glitching the nRF52 microcontroller. This opens the AirTags for firmware analysis and modification. In this talk, we will explain the initial nRF52 bypass as well as various hacks built on top of this. In particular, AirTags can now act as phishing device by providing malicious links via the NFC interface, be cloned and appear at a completely different location, used without privacy protections that should alert users as tracking protection, act as low-quality microphone by reutilizing the accelerometer, and send arbitrary data via the Find My network. Besides these malicious use cases, AirTags are now a research platform that even allows access to the new Ultrawide-band chip U1. REFERENCES: LimitedResults nRF52 APPROTECT Bypass: https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/ Positive Security’s Send My Research for sending arbitrary data via the find my network: https://positive.security/blog/send-my Colin O’Flynn’s notes on the AirTag Hardware: https://github.com/colinoflynn/airtag-re --- Mirrored from YouTube: https://www.youtube.com/watch?v=paxErRRsrTUhttps://peertube.dodges.it/static/streaming-playlists/hls/0c7a690f-989d-428b-b7b2-247efb636ec8/61d7a5af-3e45-471d-9b5e-2ea055f7143f-master.m3u8https://peertube.dodges.it/videos/embed/2xnrH3Q6KrbDqnzzvijAtA2311002026-10-27T02:55:08.556ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/tdZoDQiDeEpncBmNzQgsXo2026-10-23T08:13:25.521Zhttps://peertube.dodges.it/lazy-static/thumbnails/d07c8c62-fc57-4ab1-b26a-347001fc959e.jpgBlack Hat USA 2019 Keynote: Every Security Team is a Software Team Now by Dino Dai ZoviAs software is eating the world, every company is becoming a software company. This doesn’t mean that every company is shipping software products, it means that services and products in every field are becoming increasingly driven, powered, and differentiated by software. Let’s explore what that will do to how cybersecurity is practiced in enterprises of all types. Peter Drucker famously said that “Culture eats strategy for breakfast.” There have been two large cultural shifts in software engineering over the last 20 years that created the successful strategies behind how software is eating the world. First, there was Agile (2001). In response to the inefficiencies of classic “waterfall” software development, Agile focused on breaking down the barriers between software requirements, development, and testing by having software development teams own their roadmaps as well as their quality. Separate product management organizations evolved into product owners working directly with the software team. Similarly, separate quality assurance organizations evolved into a focus on building quality into the software development process. This should remind us of how we talk about needing to build security in, but most importantly, this change was effected by software teams themselves vs. forced onto them by a separate security organization. There is a lesson to be learned there. Next came DevOps (2009), which brought the agile mindset to server operations. Software teams now began to own their deployment and their uptime. Treating software teams as the end-user and customer has driven the replacement of traditional ops with the cloud and replacing the traditional stack with serverless models. Ops teams evolved into software teams that provide platforms, tools, and self-service infrastructure to internal teams. They provide value by increasing internal teams’ productivity while reducing costs to the entire organization through economies of scale and other efficiencies. When...https://peertube.dodges.it/static/streaming-playlists/hls/dc770989-040a-44bd-affb-9b27d06425ac/21168d91-644f-4be8-a8e1-a0e6fb642828-master.m3u8https://peertube.dodges.it/videos/embed/tdZoDQiDeEpncBmNzQgsXo3850002026-10-27T03:55:21.367ZBlack HatBlack Hat USABlack Hat 2019Black Hat USA 2019Black Hat KeynoteYESBlackhatNOhttps://peertube.dodges.it/w/rjSvqfyEGffuRxj6J81nr42026-10-23T08:15:01.735Zhttps://peertube.dodges.it/lazy-static/thumbnails/3ea44a45-562b-40ce-84d9-c2bbccaac1ce.jpgDEF CON 33 - Journey to the center of PSTN - I became a phone company. You should too - Enzo DamatoWhether you access the phone network over your cell phone, an SIP trunk, or via an old-school POTS line, the PSTN is an essential part of your day-to-day life and is a longstanding interest of the hacker community. Despite this interest, the regulatory and technical structures underlying this network are poorly understood, deliberately opaque, and dominated by large corporations. This talk will demystify the network, starting with a brief overview of the history of the PSTN, followed by a deep dive into the inner functioning of the network. After this, the session will detail the regulatory structures that govern the network, and the technologies it employs. Next, the talk will continue with a practical guide detailing how anyone can form a full local exchange carrier to provide service to their community, covering the entire formation process through first-hand experience: regulatory approval, building interconnect with the PSTN, voice network design, and most importantly, user security and privacy. With this knowledge in hand, the talk will briefly cover a range of exploits in the network, detailing how STIR/SHAKEN can be trivially bypassed, numbers can be hijacked, and how telecom fraud is monetized. The talk will conclude with a discussion of the future of the PSTN, and potential future issues. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cA-ZQJ8EZSshttps://peertube.dodges.it/static/streaming-playlists/hls/cd16fb04-3973-4188-860e-645b9419b691/dc2c97da-fbb1-4f83-bf84-e65323515127-master.m3u8https://peertube.dodges.it/videos/embed/rjSvqfyEGffuRxj6J81nr42662002026-10-27T04:26:38.990ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/wLSMyh378DsQze8jap24642026-10-23T08:17:07.599Zhttps://peertube.dodges.it/lazy-static/thumbnails/127b6143-8573-4eaa-8d7e-f9e3009305db.jpgAbusing Windows Management Instrumentation (WMI)by Matthew Graeber Imagine a technology that is built into every Windows operating system going back to Windows 95, runs as System, executes arbitrary code, persists across reboots, and does not drop a single file to disk. Such a thing does exist and it's called Windows Management Instrumentation (WMI). With increased scrutiny from anti-virus and 'next-gen' host endpoints, advanced red teams and attackers already know that the introduction of binaries into a high-security environment is subject to increased scrutiny. WMI enables an attacker practicing a minimalist methodology to blend into their target environment without dropping a single utility to disk. WMI is also unlike other persistence techniques in that rather than executing a payload at a predetermined time, WMI conditionally executes code asynchronously in response to operating system events. This talk will introduce WMI and demonstrate its offensive uses. We will cover what WMI is, how attackers are currently using it in the wild, how to build a full-featured backdoor, and how to detect and prevent these attacks from occurring. --- Mirrored from YouTube: https://www.youtube.com/watch?v=0SjMgnGwpq8https://peertube.dodges.it/static/streaming-playlists/hls/f9362eee-ad2a-4a63-a18e-b37ca1e4d2c9/9bb948d2-0f12-431a-a23e-c7662ba00bfb-master.m3u8https://peertube.dodges.it/videos/embed/wLSMyh378DsQze8jap24643001002026-10-27T03:55:36.548ZBlackHatBlack HatInformation SecurityBlack Hat USA 2015InfoSecYESBlackhatNOhttps://peertube.dodges.it/w/eNc6jT5vpBwnMv94ip58Ad2026-10-23T08:18:00.376Zhttps://peertube.dodges.it/lazy-static/thumbnails/641cf9ce-adcb-434c-b550-07aacc7896ef.jpgServer-Side Template Injection: RCE For The Modern Web Appby James Kettle Simple inputs can conceal an {expansive} attack surface. Feature-rich web applications often embed user input in web templates in an attempt to offer flexible functionality and developer shortcuts, creating a vulnerability easily mistaken for XSS. In this presentation, I'll discuss techniques to recognize template injection, then show how to take template engines on a journey deeply orthogonal to their intended purpose and ultimately gain arbitrary code execution. I'll show this technique being applied to craft exploits that hijack four popular template engines, then demonstrate RCE zero-days on two corporate web applications. This presentation will also cover techniques for automated detection of template injection, and exploiting subtle, application-specific vulnerabilities that can arise in otherwise secure template systems. --- Mirrored from YouTube: https://www.youtube.com/watch?v=3cT0uE7Y87shttps://peertube.dodges.it/static/streaming-playlists/hls/6fb9da00-ea45-41e4-8da6-85f9748dd22c/77cb4c8f-a781-4fe5-9ecb-bb72f548e701-master.m3u8https://peertube.dodges.it/videos/embed/eNc6jT5vpBwnMv94ip58Ad2681002026-10-27T04:05:13.410ZBlack HatInformation SecurityInfoSecBlack Hat USA 2015BlackHatYESBlackhatNOhttps://peertube.dodges.it/w/1YaqovSYASYQy4wJ27ixBN2026-10-23T08:19:16.687Zhttps://peertube.dodges.it/lazy-static/thumbnails/5aba1a5a-dc7f-4926-8ad7-500816db6ab9.jpgPhishing for Funds: Understanding Business Email CompromiseBusiness Email Compromise (aka CEO fraud) is a rapidly expanding cybercrime in which reported cases jumped 1300% from 2015 to 2016. This financial fraud scheme can target any market segment or organization regardless of size. Thousands of organizations from more than 100 countries have reported losses. The reasons for this surge is simple - it makes money. by Keith Turpin Full Abstract: https://www.blackhat.com/asia-17/briefings/schedule/index.html#phishing-for-funds-understanding-business-email-compromise-5255 --- Mirrored from YouTube: https://www.youtube.com/watch?v=_gk4i33lriYhttps://peertube.dodges.it/static/streaming-playlists/hls/07d774ea-581e-461d-a339-f1fdfe34c4a0/dd6dd899-cd97-4a9b-9c97-6433cc8a05b6-master.m3u8https://peertube.dodges.it/videos/embed/1YaqovSYASYQy4wJ27ixBN3585002026-10-27T04:26:26.496ZBlack Hat AsiaInformation SecurityBlackHatBlack HatBHASIAYESBlackhatNOhttps://peertube.dodges.it/w/7VumikJseGFLYfrBFKWb8G2026-10-23T08:19:59.598Zhttps://peertube.dodges.it/lazy-static/thumbnails/a725cff8-b73a-45f7-9995-fcae25130389.jpgDEF CON 30 - Lennert Wouters - A Black-Box Security Evaluation of SpaceX Starlink User TerminalThis presentation covers the first black-box hardware security evaluation of the SpaceX Starlink User Terminal (UT). The UT uses a custom quad-core Cortex-A53 System-on-Chip that implements verified boot based on the ARM trusted firmware (TF-A) project. The early stage TF-A bootloaders, and in particular the immutable ROM bootloader include custom fault injection countermeasures. Despite the black-box nature of our evaluation we were able to bypass signature verification during execution of the ROM bootloader using voltage fault injection. Using a modified second stage bootloader we could extract the ROM bootloader and eFuse memory. Our analysis demonstrates that the fault model used during countermeasure development does not hold in practice. Our voltage fault injection attack was first performed in a laboratory setting and later implemented as a custom printed circuit board or 'modchip'. The presented attack results in an unfixable compromise of the Starlink UT and allows us to execute arbitrary code. Obtaining root access on the Starlink UT is a prerequisite to freely explore the Starlink network and the underlying communication interfaces. This presentation will cover an initial exploration of the Starlink network. Other researchers should be able to build on our work to further explore the Starlink ecosystem. --- Mirrored from YouTube: https://www.youtube.com/watch?v=myKs04lfuy8https://peertube.dodges.it/static/streaming-playlists/hls/380eb91a-ef3e-4bef-8787-2d438f2e4de6/d4d8dab2-aef2-4eb4-ba66-ffee447ad22b-master.m3u8https://peertube.dodges.it/videos/embed/7VumikJseGFLYfrBFKWb8G2148002026-10-27T04:26:35.206ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/7HQh8RU7j8kbXkuDBssLF82026-10-23T08:25:00.209Zhttps://peertube.dodges.it/lazy-static/thumbnails/56ddfa8a-9e69-4f92-8b79-f3fba09b71db.jpgOrange Tsai - Infiltrating Corporate Intranet Like NSA Preauth RCE - DEF CON 27 ConferenceComputer security is now a public policy issue. Election security, blockchain, "going dark," the vulnerabilities equities debate, IoT safety , data privacy, algorithmic security and fairness, critical infrastructure: these are all important public policy issues with a strong Internet security component. But while an understanding of the technology involved is fundamental to crafting good policy, there is little involvement of technologists in policy discussions. This is not sustainable. We need public-interest technologists: people from our fields helping craft policy, and working to provide security to agencies and groups working in the broader public interest. We need these people in government, at NGOs, teaching at universities, as part of the press, and inside private companies. This is increasingly critical to both public safety and overall social welfare. This talk both describes the current state of public-interest technology, and offers a way forward for us individually and collectively for our field. The defining policy question of the Internet age is this: How much of our lives should be governed by technology, and under what terms? We need to be involved in that debate.SSL VPNs protect corporate assets from Internet exposure, but what if SSL VPNs themselves are vulnerable? They’re exposed to the Internet, trusted to reliably guard the only way to intranet. However, we found pre-auth RCEs on multiple leading SSL VPNs, used by nearly half of the Fortune 500 companies and many government organizations. To make things worse, a “magic” backdoor was found to allow changing any user’s password with no credentials required! To show how bad things can go, we will demonstrate gaining root shell from the only exposed HTTPS port, covertly weaponizing the server against their owner, and abusing a hidden feature to take over all VPN clients! In such complicated closed-source systems, gaining root shell from outside the box certainly ain’t easy. It takes advanced we...https://peertube.dodges.it/static/streaming-playlists/hls/366e143b-1cc1-4c5b-be28-c443749d81dd/0b09985c-e406-4c40-895b-2432f3428972-master.m3u8https://peertube.dodges.it/videos/embed/7HQh8RU7j8kbXkuDBssLF82758002026-10-27T04:46:14.357ZDC27DEF CON 2019cyber securitysecurity conference 2019hackersYESDEFCONNOhttps://peertube.dodges.it/w/j3ja6bsDygyThfP7obSTj92026-10-23T08:25:28.148Zhttps://peertube.dodges.it/lazy-static/thumbnails/e77b74ba-e7d4-44f1-b3c5-d90fe3cae9b4.jpgThe Accidental Discovery of a New Vulnerability in Google's OAuth ImplementationBeware, dear friends, the cautionary tale of the cloud provider that broke its own security model. Ignoring RFCs! Putting plaintext passwords in scripts - and printing them in books! It's a crazy story, but one that may nonetheless resonate with enterprise security practitioners everywhere. In early 2021, I identified a client impersonation vulnerability in a series of Google "first-party" applications. This vulnerability allows an attacker to present themselves both to a user and to Google as one of these applications, and enjoy all the privileges therein.... By: Brian Smith-Sweeney Full Abstract and Presentation Materials: https://www.blackhat.com/us-23/briefings/schedule/#first-party-problems-in-a-zero-trust-world-the-accidental-discovery-of-a-new-vulnerability-in-googles-oauth-implementation-32992 --- Mirrored from YouTube: https://www.youtube.com/watch?v=77doS9hCe8Ahttps://peertube.dodges.it/static/streaming-playlists/hls/92172c42-9bab-43fd-8d1f-780bf03e5978/58453558-6309-4e0f-87be-3202fe076abb-master.m3u8https://peertube.dodges.it/videos/embed/j3ja6bsDygyThfP7obSTj92909002026-10-27T04:46:18.685ZYESBlackhatNOhttps://peertube.dodges.it/w/397QAj1kv5fPyeewJHfcyk2026-10-23T08:28:22.218Zhttps://peertube.dodges.it/lazy-static/thumbnails/380c2d2b-1806-4e0f-a760-029687b6a2d2.jpgDEF CON 22 - Richard Thieme - The Only Way to Tell the Truth is in FictionSlides Here:https://defcon.org/images/defcon-22/dc-22-presentations/Theime/DEFCON-22-Theime-Truth-Through-Fiction-Updated.pdf The Only Way to Tell the Truth is in Fiction: The Dynamics of Life in the National Security State Richard Thieme THIEMEWORKS Over a decade ago, a friend at the National Security Agency told Richard Thieme that he could address the core issues they discussed in a context of "ethical considerations for intelligence and security professionals" only if he wrote fiction. "It's the only way you can tell the truth," he said. Three dozen published short stories and one novel-in-progress (FOAM) later, one result is "Mind Games," published in 2010 by Duncan Long Publishing, a collection of stories that illuminates “non-consensual realities:” the world of hackers; the worlds of intelligence professionals; encounters with other intelligent life forms; and deeper states of consciousness. A recent scholarly study of “The Covert Sphere” by Timothy Melley documents the way the growth and influence of the intelligence community since World War 2 has created precisely the reality to which that NSA veteran pointed. The source of much of what “outsiders” believe is communicated through novels, movies, and television programs. But even IC “insiders” rely on those sources as compartmentalization prevents the big picture from coming together because few inside have a “need to know.” Thieme asked a historian at the NSA what historical events they could discuss with a reasonable expectation that their words denoted the same details. “Anything up to 1945,” the historian said with a laugh – but he wasn’t kidding. Point taken. This fascinating presentation illuminates the mobius strip on which all of us walk as we make our way through the labyrinth of security and intelligence worlds we inhabit of necessity, all of us some of the time and some of us all of the time. It discloses why “post-modernism” is not an affectation but a necessary condition of modern li...https://peertube.dodges.it/static/streaming-playlists/hls/11547100-9320-4435-a1f3-79accc4ac6df/d09cec7d-bc89-495f-a54b-443e9cc1e04f-master.m3u8https://peertube.dodges.it/videos/embed/397QAj1kv5fPyeewJHfcyk3082002026-10-27T04:53:50.945ZDEF CON (Conference Series)Richard Thieme (Author)Hacker (Character Power)hackingDEF CONYESDEFCONNOhttps://peertube.dodges.it/w/8SZyFnJZZRykJzToJCeQuD2026-10-23T08:29:28.724Zhttps://peertube.dodges.it/lazy-static/thumbnails/3cde92ca-f7ef-4048-bc26-36d6796370f1.jpgDEF CON Safe Mode Lock Bypass Village - Robert Graydon - DIY Bypass Tools--- Mirrored from YouTube: https://www.youtube.com/watch?v=EzL72_OzMK0https://peertube.dodges.it/static/streaming-playlists/hls/3fcea243-8ffc-4eb7-b995-cf83922575c5/c5093710-df7f-426f-b521-06c997cb4e7b-master.m3u8https://peertube.dodges.it/videos/embed/8SZyFnJZZRykJzToJCeQuD1081002026-10-27T04:53:55.398ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/c2hhAmLFE2ZLNGQz2f7zEF2026-10-23T08:32:47.515Zhttps://peertube.dodges.it/lazy-static/thumbnails/581b5371-4dd1-4186-ba06-095d589bc97a.jpgThe Lifecycle of a Revolution (Keynote)by Jennifer Granick In the early days of the public internet, we believed that we were helping build something totally new, a world that would leave behind the shackles of age, of race, of gender, of class, even of law. Twenty years on, "cyberspace" looks a lot less revolutionary than it once did. Hackers have become information security professionals. Racism and sexism have proven resiliant enough to thrive in the digital world. Big companies are getting even bigger, and the decisions corporationsnot just governmentsmake about security, privacy, and free speech affect hundreds of thousands, or millions, of people. The Four Horsemen of the Infocalypseterrorists, pedophiles, drug dealers, and money launderersare driving online policy as governments around the world are getting more deeply involved in the business of regulating the network. Meanwhile, the Next Billion Internet Users are going to connect from Asia and developing countries without a Bill of Rights. Centralization, Regulation, and Globalization are the key words, and over the next twenty years, we'll see these forces change digital networks and information security as we know it today. So where does that leave security, openness, innovation, and freedom? The Digital Millennium Copyright Act is being used to weld the hood of cars shut to keep engine software safe from mechanics. Will we still have the Freedom to Tinker even in the oldest of technologies? What does it mean that the U.S. is a big player in the zero-day market even as international agreements seek to regulate exploit code and surveillance tools? Will we see liability for insecure software and what does that mean for open source? With advances in artificial intelligence that will decide who gets run over, who gets a loan, who gets a job, how far off can legal liability regimes for robots, drones, and even algorythms be? Is the global Internet headed for history's dustbin, and what does a balkanized network mean for security, for civil ri...https://peertube.dodges.it/static/streaming-playlists/hls/59424e41-1474-46c4-9661-b110b6c4e617/fadf4e61-afa3-48f9-868a-a68680c80edd-master.m3u8https://peertube.dodges.it/videos/embed/c2hhAmLFE2ZLNGQz2f7zEF4260002026-10-27T05:24:19.889ZInformation SecurityInfoSecBlack Hat USA 2015Black HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/vVniwvUFq9jEovDawM5jcE2026-10-23T08:32:57.781Zhttps://peertube.dodges.it/lazy-static/thumbnails/6e159c8b-85a6-4527-9a8d-a83f54ee7194.jpgDEF CON 24 SE Village - Jayson Street - Total Fail: and Bad Mistakes, I've Made a FewIn an industry that does so much to uncover and expose the mistakes of others. Which don’t get me wrong is a valuable service in helping to increase security by the discovery of these vulnerabilities. It seems everyone though is very shy about pointing out their own failures! I’ve decided that I could help teach others valuable lessons I learned by showcasing failures I’ve had in Blue Team. failures I’ve had in Red Team and failures I’ve had in this community. I once read that a smart person learns from their mistakes. A wise person learns from the mistakes of others! So please take a moment to listen to me trying to help you become a little bit wiser. BIO: Jayson E. Street is an author of the “Dissecting the hack: Series”. Also the DEF CON Groups Global Coordinator. He has also spoken at DEF CON, DerbyCon, UCON and at several other ‘CONs and colleges on a variety of Information Security subjects. His life story can be found on Google under “Jayson E. Street” *He is a highly carbonated speaker who has partaken of Pizza from Beijing to Brazil. He does not expect anybody to still be reading this far but if they are please note he was chosen as one of Time’s persons of the year for 2006. --- Mirrored from YouTube: https://www.youtube.com/watch?v=l1OFH_H8PjQhttps://peertube.dodges.it/static/streaming-playlists/hls/f24c91a2-3406-421a-82c8-cb3fe7dfaa1c/ba08dc84-80d3-4fb3-948f-9510954392f7-master.m3u8https://peertube.dodges.it/videos/embed/vVniwvUFq9jEovDawM5jcE3079002026-10-27T05:25:09.622ZDEF CONDEFCONDC24DC-24social engineeringYESDEFCONNOhttps://peertube.dodges.it/w/6bCgkfpfQh9UjxtyHV5nWw2026-10-23T08:36:16.886Zhttps://peertube.dodges.it/lazy-static/thumbnails/2aacc307-f48e-49cc-bfc5-2bbc3ae79048.jpgDEF CON 23 - Cory Doctorow - Fighting Back in the War on General Purpose ComputersEFF's Apollo 1201 project is a 10-year mission to abolish all DRM, everywhere in the world, within a decade. We're working with security researchers to challenge the viability of the dread DMCA, a law that threatens you with jail time and fines when you do your job: discover and disclosing defects in systems that we rely on for life and limb. Speaker Bio: Cory Doctorow (craphound.com) is a science fiction author, activist, journalist and blogger — the co-editor of Boing Boing (boingboing.net) and the author of the YA graphic novel IN REAL LIFE, the nonfiction business book INFORMATION DOESN’T WANT TO BE FREE and young adult novels like HOMELAND, PIRATE CINEMA and LITTLE BROTHER and novels for adults like RAPTURE OF THE NERDS and MAKERS. He works for the Electronic Frontier Foundation and co-founded the UK Open Rights Group. Born in Toronto, Canada, he now lives in London. --- Mirrored from YouTube: https://www.youtube.com/watch?v=pT6itfUUsoQhttps://peertube.dodges.it/static/streaming-playlists/hls/29f97acd-4c3e-489d-a111-0b6b972bda5e/503dc7fe-eb75-4cad-9b35-4c7e91157f31-master.m3u8https://peertube.dodges.it/videos/embed/6bCgkfpfQh9UjxtyHV5nWw3056002026-10-27T05:46:05.140ZDEF CONDEF CON 23DEFCONDC23DC 23YESDEFCONNOhttps://peertube.dodges.it/w/4n6MrpyJsxyF6Es1HA22WD2026-10-23T08:36:26.227Zhttps://peertube.dodges.it/lazy-static/thumbnails/c939efa4-437c-489a-9d5c-2b224e8e2389.jpgThe State of Incident Response by Bruce SchneierThe last of the protection-detection-response triad to get any real attention, incident response is big business these days. I plan on stepping back and looking at both the economic and psychological forces that affect incident response as both a business and a technical activity. Nothing seems to be able to keep sufficiently skilled and motivated attackers out of a network. Can incident response save the day? --- Mirrored from YouTube: https://www.youtube.com/watch?v=u54Radu2bF0https://peertube.dodges.it/static/streaming-playlists/hls/1b3d996c-1a54-4bac-a977-272bbe4ceb6d/06d2f142-176e-4adf-a061-87b723a2e5a0-master.m3u8https://peertube.dodges.it/videos/embed/4n6MrpyJsxyF6Es1HA22WD3270002026-10-27T05:32:14.558ZBlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/oXfRk1NHqwRj3VhaXQNffz2026-10-23T08:36:41.009Zhttps://peertube.dodges.it/lazy-static/thumbnails/f26f2473-5d1f-464a-9ad5-6d5c7200e06f.jpgDEF CON 32 TrailerDEF CON 32! The most influential hacker convention in the world. August 8-11, Las Vegas Convention Center. Online registration available until August 1 at shop.defcon.org. Otherwise, tickets can be purchased for cash at the door. --- Mirrored from YouTube: https://www.youtube.com/watch?v=_0kKEPLbLdshttps://peertube.dodges.it/static/streaming-playlists/hls/b9e01c1c-0de4-444a-b5fc-d6876b294015/61725062-a068-452c-8787-962ab7a89b1c-master.m3u8https://peertube.dodges.it/videos/embed/oXfRk1NHqwRj3VhaXQNffz50002026-10-27T05:25:11.766ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/biTDvqq4VRH2FMmcRvwtAW2026-10-23T08:36:57.259Zhttps://peertube.dodges.it/lazy-static/thumbnails/54fe1dd2-8107-484c-b64a-9453f266e09a.jpgIchthyology: Phishing as a ScienceIn this talk we'll cover the psychology of phishing, then walk through a series of real-world attacks conducted against a Bay Area tech company - including conversion rates for each attack, and ways in which existing protections were bypassed. We'll cover recent technological advancements in this area, then combine these with our case studies to provide evidence-based techniques on how to prevent, not just mitigate, credential phishing. By Karla Burnett Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#ichthyology-phishing-as-a-science --- Mirrored from YouTube: https://www.youtube.com/watch?v=Z20XNp-luNAhttps://peertube.dodges.it/static/streaming-playlists/hls/537adbed-0516-4624-9bb6-95ea378f6f96/653c4cf8-3977-4f0d-b892-088b39a1f1ba-master.m3u8https://peertube.dodges.it/videos/embed/biTDvqq4VRH2FMmcRvwtAW1468002026-10-27T05:32:17.739ZBHUSAInformation SecurityPhishingBlackHatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/kGuBi8djtiNKB7b47XGQp52026-10-23T08:37:41.346Zhttps://peertube.dodges.it/lazy-static/thumbnails/530b73dd-c04e-4205-99ed-cddb27b4048c.jpgDEF CON 31 War Stories - A Series of Unfortunate Events - Ben Sadeghipour, Corben LeoThis talk includes a series of favorite hacking stories. From hacking into a prison system to having the ability to publish “fake news” on a major tech companies website to even breaking into some of the largest entertainment and online casinos. This talk will take a look at the identification, exploitation, and escalation paths as well as the possible impact based on the company’s organization and nature of work. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Hw5jSmmcDl0https://peertube.dodges.it/static/streaming-playlists/hls/9f850417-260c-460a-958e-e6c0fc18be2a/ba3fdcfc-b5e8-49b6-ada6-6135873e0832-master.m3u8https://peertube.dodges.it/videos/embed/kGuBi8djtiNKB7b47XGQp52049002026-10-27T05:49:38.456ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/nNH3QShoWSDZGMonJUWNj72026-10-23T08:38:31.600Zhttps://peertube.dodges.it/lazy-static/thumbnails/6ea2cf0e-917c-434d-9de4-f28c1358f306.jpgDEF CON 23 - David An - When the Secretary of State says Please Stop Hacking UsMaterials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-David-An-When-the-Secretary-of-State-says-Stop-Hacking-us.pdf When the Secretary of State says: “Please Stop Hacking Us…” David An Former U.S. State Department Senior American officials routinely hold dialogues with foreign officials to discuss cyber espionage. However, if a cyber attack can be performed through proxy servers jumping several countries before reaching the U.S., then can anyone ever be sure of who is really behind the attack? Yet we often see newspaper headlines clearly identifying that one country is hacking another country through state-sponsored, cyber criminal, or hacktivist means. Even if government cyber analysts with TS/SCI security clearances have high confidence in the identity of an attacker based on forensics and human intelligence, what are the challenges in effectively addressing the topic in a diplomatic or military dialogue with the attacker country? Two major roadblocks in cyber diplomacy are the "attribution problem," and the related "disclosure dilemma." If there is indeed an attribution problem--when a country cannot be sure which other state is hacking it because a third country could be using it as a proxy--then a country could never accuse another countries of state-sponsored cyber attacks. Yet, countries routinely accuse others of cyber attacks, the public sees this in newspapers almost every day, and it is often an important topic in bilateral dialogues. Furthermore, the disclosure dilemma occurs when a country has both incentives and disincentives to disclose details on how it was hacked. On one hand, evidence will prove its case, but on another hand, evidence will make the attacker more savvy and careful not to repeat the same mistakes next time. Disclosure could create a stronger adversary. These are major concerns in the practice of cyber diplomacy today. My presentation identifies how government-to-government...https://peertube.dodges.it/static/streaming-playlists/hls/b0956c31-8370-4e9e-96ac-920722a6ebc2/6b1d6c49-16ec-4ba4-9dca-de86f2b1ce91-master.m3u8https://peertube.dodges.it/videos/embed/nNH3QShoWSDZGMonJUWNj71230002026-10-27T05:49:43.860ZDEF CON Video SeriesDEF CON ConferenceConference RecordingsDEF CONDEFCONYESDEFCONNOhttps://peertube.dodges.it/w/n1qUVmoGNmkJcJKVWGs9NL2026-10-23T08:39:06.977Zhttps://peertube.dodges.it/lazy-static/thumbnails/5e2b48d0-0fe6-42ff-a5fa-bbcd39988c9d.jpgDEF CON 24 - Grant Bugher - Bypassing Captive Portals and Limited NetworksCommon hotspot software like Chilispot and Sputnik allow anyone to set up a restricted WiFi router or Ethernet network with a captive portal, asking for money, advertising, or personal information in exchange for access to the Internet. In this talk I take a look at how these and similar restrictive networks work, how they identify and restrict users, and how with a little preparation we can reach the Internet regardless of what barriers they throw up. Bio: Grant Bugher has been hacking and coding since the early 90’s and working professionally in information security for the last 12 years. He is currently a security engineer for a cloud service provider, and has previously been an architect, program manager and software engineer on a variety of online services, developer tools and platforms. Grant is a prior speaker at BlackHat and DEF CON and a regular DEF CON attendee since DEF CON 16. Most of his research and work is on cloud computing and storage platforms, application security, and detecting & investigating attacks against web-scale applications. --- Mirrored from YouTube: https://www.youtube.com/watch?v=GhUUzGBjhXQhttps://peertube.dodges.it/static/streaming-playlists/hls/aa1f43c1-fc29-4f76-b7af-23857e804cc8/2b720ce0-c1ad-43e2-8f6c-34e18e33431c-master.m3u8https://peertube.dodges.it/videos/embed/n1qUVmoGNmkJcJKVWGs9NL976002026-10-27T05:49:41.004ZDEF CONDEFCONHackingHacker ConferenceComputer SecurityYESDEFCONNOhttps://peertube.dodges.it/w/eFxbU5LBDKqZDib5sAMnsz2026-10-23T08:42:23.902Zhttps://peertube.dodges.it/lazy-static/thumbnails/0cc21a06-8e3c-459e-931f-6bd5bf49d563.jpgDEF CON 32 - Winning the Game of Active Directory - Brandon ColleyThe Game Of Active Directory (GOAD) is a prebuilt vulnerable Active Directory (AD) environment primarily created for pentesters. Touting over 30 methods of attack, GOAD offers multiple paths to full AD takeover. But is that really how you win the game? Regardless of color, as security professions our goal should be to better secure environments. This talk walks through AD attack strategies, exploiting misconfigurations that ultimately pwn AD. Mitigations for these attacks are discussed and implemented, showcasing how they stop common attacks. Implementing these protections in your environment is truly how you win the Game Of Active Directory. --- Mirrored from YouTube: https://www.youtube.com/watch?v=M-2d3sM3I2ohttps://peertube.dodges.it/static/streaming-playlists/hls/6ecc07a3-2e2e-4ffe-bc22-98b2f0b6ea61/7dca0043-9de9-4b12-a372-95a38e5e46ee-master.m3u8https://peertube.dodges.it/videos/embed/eFxbU5LBDKqZDib5sAMnsz2584002026-10-27T06:02:51.088ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/4pWxa6DjaHkA5QyqAYZE8f2026-10-23T08:43:42.084Zhttps://peertube.dodges.it/lazy-static/thumbnails/11b42410-c163-4526-b9cd-83a55b1cb3b6.jpgDEF CON 23 - Joshua Smith - High Def Fuzzing: Exploring Vulnerabilities in HDMI CEC *The HDMI (High Definition Multimedia Interface) standard has gained extensive market penetration. Nearly every piece of modern home theater equipment has HDMI support and most modern mobile devices actually have HDMI-capable outputs, though it may not be obvious. Lurking inside most modern HDMI-compatible devices is something called HDMI-CEC, or Consumer Electronics Control. This is the functionality that allows a media device to, for example, turn on your TV and change the TV’s input. That doesn’t sound interesting, but as we'll see in this presentation, there are some very surprising things an attacker can do by exploiting CEC software implementations. Then there's something called HEC or HDMI Ethernet Connection, which allows devices to establish an Ethernet connection of up to 100Mbit/s over their HDMI connections (newer HDMI standards raise the speed to 1Gbit/s). Don't think your mobile phone implements CEC? You might be wrong. Most modern Android-based phones and tablets have a Slimport(r) connection that supports HDMI-CEC. Ever heard of MHL (Mobile High-Definition Link)? Think Samsung and HTC (among other) mobile devices, and many JVC, Kenwood, Panasonic, and Sony car stereos – as many as 750 million devices in the world so far. Guess what? MHL supports HDMI-CEC as well. Let's explore, and own, this attack space. Speaker Bios: Kernelsmith is senior vulnerability researcher with Hewlett-Packard Security Research (HPSR). In this role, he analyzes and performs root-cause analysis on hundreds of vulnerabilities submitted to the Zero-Day Initiative (ZDI) program, which represents the world’s largest vendor-agnostic bug bounty program. His focus includes analyzing and performing root-cause analysis on hundreds of zero-day vulnerabilities submitted by ZDI researchers from around the world. Joshua is also a developer for the Metasploit Framework and has spoken at a few conferences and holds a few certifications. Prior to joining HP, Smith served in the U.S. Air...https://peertube.dodges.it/static/streaming-playlists/hls/1ba321e6-a614-400c-958d-28ead8ff90a4/5705f8b9-6e85-496b-8901-d99e682e22c2-master.m3u8https://peertube.dodges.it/videos/embed/4pWxa6DjaHkA5QyqAYZE8f2872002026-10-27T06:03:24.810ZDEF CONDEFCONDEF CON 23DC23HackYESDEFCONNOhttps://peertube.dodges.it/w/x8hmgc5hqBDtALPbw2nZAM2026-10-23T08:44:10.351Zhttps://peertube.dodges.it/lazy-static/thumbnails/50ffa1ef-f406-492a-a4e7-02631daed90b.jpgDEF CON Safe ModeDEF CON 28 has entered Safe Mode. The ‘DEF CON is canceled’ meme has crossed over into real life, courtesy of COVID-19. In early March we had hopes that things would be stable by August. That is no longer realistic. Currently there’s no way to gather everyone together and keep them safe, so The Dark Tangent has decided to cancel the in-person event. We will try an on-line experiment this year - DEF CON Safe Mode. Please read The Dark Tangent’s more detailed thoughts on the situation at https://forum.defcon.org/node/232005 and then head over to the Forums (forum.defcon.org) to get involved. There is a DEF CON Safe Mode FAQ that should help to answer common questions. We wish there was better news, but we hackers are a resilient bunch. Stay healthy, stay safe and stay in touch so we can all be together virtually this August 6-9 and again for DEF CON 29 in person. --- Mirrored from YouTube: https://www.youtube.com/watch?v=vqDvv1sS2oshttps://peertube.dodges.it/static/streaming-playlists/hls/fc0f949b-0629-439a-812e-9f4d1ccf5ffd/cf6cad3d-33fb-4e3c-81db-c5f50c56c717-master.m3u8https://peertube.dodges.it/videos/embed/x8hmgc5hqBDtALPbw2nZAM48002026-10-27T06:03:27.076ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/6gJVCNRdW8Ve8H738czC5k2026-10-23T08:45:59.324Zhttps://peertube.dodges.it/lazy-static/thumbnails/5524891d-1855-40a3-bf98-3b289d0649eb.jpgDEF CON 21 - Alberto Garcia Illera and Javier Vazquez Vidal - Dude WTF in my car?Dude, WTF in my car? ALBERTO GARCIA ILLERA JAVIER VAZQUEZ VIDAL The ECU tuning market is weird. There is little help from people in it, and most of the equipment is expensive. Well, not anymore! After hacking some equipment worth thousands of dollars, a new toy was born. Seed/Key algos broken, RSA bustedÖ We will learn all about Bosch EDC15 and EDC16 car ECUs. How they communicate, what protocols they use, their security and why it is worth hacking them. There will be a demonstration of a tool that does all of these, and costs less than $25 to build. Alberto Garcia Illera (@algillera) is a 25 year old who is passionate about hacking and social engineering. Alberto studied mathematics and computer systems in Spain and has spent the past several years working as a professional penetration tester. Alberto has presented at several seminars where he has helped teach hacking techniques to large companies such as Microsoft, the Spanish government and the cyberterrorism Spanish police department. At DEF CON 20 in Las Vegas, Alberto has presented a talk titled "How to hack all the transport networks of a country" that had a great repercussion. He has also spoken at ZeroNights in Moscow, BlackHat in Abu Dhabi and recently in Infiltrate in Miami. Javier Vazquez Vidal AKA Bi0H4z4rD is a hardware security specialist. He has been involved in several reversing projects that go from a simple IP camera to the well known PS3. He has worked for Airbus Military among other companies. He studied Electromechanics and Telecommunications, developing a passion for electronics and technology since his youth. At this time, he will be presenting his first public work, the ecu tool. Materials: https://www.defcon.org/images/defcon-21/dc-21-presentations/Illera-Vidal/DEFCON-21-Illera-Vidal-Dude-WTF-in-My-Car-Extras-Updated.txt https://www.defcon.org/images/defcon-21/dc-21-presentations/Illera-Vidal/DEFCON-21-Illera-Vidal-Dude-WTF-in-My-Car-Updated.pdf --- Mirrored from YouTube: http...https://peertube.dodges.it/static/streaming-playlists/hls/2ab04d9b-bd43-4787-a20c-81d86d74b6c3/bf5d3e62-4714-47d4-8531-fc5fa70cf39d-master.m3u8https://peertube.dodges.it/videos/embed/6gJVCNRdW8Ve8H738czC5k2650002026-10-27T06:09:38.530Z2013Securitydc21ConferenceLas VegasYESDEFCONNOhttps://peertube.dodges.it/w/8BuYgZNGGZjvixXNKDPanF2026-10-23T08:47:04.968Zhttps://peertube.dodges.it/lazy-static/thumbnails/32b81089-3093-41f6-a7cf-739a1808b6fa.jpgDEF CON 22 - Robert Rowley - Detecting and Defending Against a Surveillance StateSlides Here: https://defcon.org/images/defcon-22/dc-22-presentations/Rowley/DEFCON-22-Robert-Rowley-Detecting-Defending-Against-Surveillance-State.pdf Detecting and Defending Against a Surveillance State Robert RowleySECURITY RESEARCHER, TRUSTWAVE SPIDERLABS This talk is based on semi-recent reported leaks that detail how state-actors could be engaging in surveillance against people they deem as 'threats'. I will cover the basics on what was leaked, and focus the talk on how to detect hardware bugs, implanted radio transceivers, firmware injections, cellular network monitoring, etc... No need to bring your tin-foil hats though, the discussion here is a pragmatical approach to how to detect such threats and identify if you have been targeted. No blind faith approaches, or attempts to sell any privacy snake oil will be found here. Robert is a Security Researcher for Trustwave Spiderlabs as has been an active member of the Southern California hacking scene for over the last 10+ years. Co-Founding Irvine underground and recently presenting on many topics including Juice Jacking, Web Application Security and more… I am presenting on a personal passion this time, Privacy. --- Mirrored from YouTube: https://www.youtube.com/watch?v=d5jqV06Yijwhttps://peertube.dodges.it/static/streaming-playlists/hls/3da4db2b-a48e-464a-83b2-2fb0ada27bb5/46d34fa8-1dd3-4f21-bcaf-833e26dd027e-master.m3u8https://peertube.dodges.it/videos/embed/8BuYgZNGGZjvixXNKDPanF2587002026-10-27T06:09:41.584ZDEFCON Video SeriesDEFCON ConferenceDefconDEF CONDC22YESDEFCONNOhttps://peertube.dodges.it/w/nHjhTUBk4b64X3bMsKjSpq2026-10-23T08:47:48.258Zhttps://peertube.dodges.it/lazy-static/thumbnails/639c1678-0ff7-48f7-8706-6532007c8df5.jpgDEF CON 24 - RISE OF THE MACHINES--- Mirrored from YouTube: https://www.youtube.com/watch?v=A9ew4jdLjYYhttps://peertube.dodges.it/static/streaming-playlists/hls/afd4adc8-6680-49a8-9d25-4f3845c1ff56/d02cf55e-f9b4-4f16-b721-89e07492547c-master.m3u8https://peertube.dodges.it/videos/embed/nHjhTUBk4b64X3bMsKjSpq103002026-10-27T06:22:52.911Zdef condefcondefcon 24def con 24conferenceYESDEFCONNOhttps://peertube.dodges.it/w/qMPzWgZ4nD4khjNae5E2ov2026-10-23T08:50:27.256Zhttps://peertube.dodges.it/lazy-static/thumbnails/8fb6486a-c031-44b6-b409-52210c25714c.jpgBlack Hat USA 2025 | The First 30 Months of Psychological Manipulation of Humans by AIIn our highly rated 2023 talk "Evil Digital Twin", we warned that large language models (LLMs) were exploiting the cognitive vulnerabilities of their users, and that humans would perceive AI as sentient long before true artificial general intelligence emerges. Twenty four months later, the situation has escalated rapidly, and many of our predictions have become realities, rewriting our civilization's core realities. Join us for a two year check-in, as we discuss how human digital twins (HDTs) trained on the core patterns of human individuals are being deployed at scale to simulate everything from human i workflows to relationships. Cyberattack stakeholders have taken notice of the capabilities of LLMs in exploiting human social norms, cognitive bias, and perceptual limitations. We will detail a present where longitudinal interaction data is facilitating low-cost social engineering labor and high power AI-human hybrid attacks. We will also explore a coming future of persistent cognitive cyberwarfare, escalating as the cost of deception approaches zero, and the attack surface shifts from networks to minds. Audience members will interact with a human digital twin of a Supreme Court justice, meet a perfect AI assistant for insider threat, and leave with a NIST research-based LLM that speaks in phishing emails. Get a sneak peek at research in collaboration with the US Military Academy (USMA) at Westpoint that pits humans and human digital twins against one another in competitions of manipulation and deception. We will finally talk about a brighter future that is still attainable, where AI natives, those that have grown up in a context suffused by AI, can help us to build defensive posture that extends beyond infrastructure to include cognitive security, protecting not just digital systems, but the systems that underpin civilization and the human beings they serve. By: Ben D. Sawyer | Associate Professor of Industrial Engineering, University of Central Florida Ma...https://peertube.dodges.it/static/streaming-playlists/hls/c8c11f73-0f0b-4f7d-bdb7-19b9c920e2cd/f8214e6d-c976-4e92-92eb-b7f0d929a96e-master.m3u8https://peertube.dodges.it/videos/embed/qMPzWgZ4nD4khjNae5E2ov2483002026-10-27T06:22:59.302ZYESBlackhatNOhttps://peertube.dodges.it/w/mhUgKopWysu57DNUdBse572026-10-23T08:51:26.216Zhttps://peertube.dodges.it/lazy-static/thumbnails/5f1d7686-5fcd-4ed3-b5c1-a23d00a9553c.jpgDEF CON 33 - Breakin 'Em All – Overcoming Pokemon Go's Anti Cheat Mechanism - Tal SkvererIt was the summer of 2016, and like everyone else, I was out playing Pokémon Go. Except my rural location barely spawned anything interesting. Naturally, I dove into the game's code, reverse engineered its protocol, and built a custom Pokémon scanner. But the story doesn't end there. One day, a switch was flipped, enabling a fancy new anti-cheating feature that locked out any custom implementations. In this talk, I'll begin by exploring how mobile games like Pokémon Go handle communication through specialized protocols—and how I replicated that behavior to build a scanner. Then, I'll walk you through a 4-day hacking marathon where I teamed up with a group of like-minded enthusiasts to overcome the anti-cheating mechanism that nearly broke our scanners. We'll examine how mobile games attempt to thwart such applications, unraveling the anti-cheating mechanism that was deployed by Pokemon Go. We'll explore how we managed, through obfuscated cryptographic functions, unexpected use of smartphone peripherals and hidden protobuf definitions, to break the anti-cheating system and release a publicly available API for the game's protocol. Almost a decade later, the full story is ready to be told. Join me for an inside look at the anti-cheating mechanisms of online mobile games—and how to hack them. --- Mirrored from YouTube: https://www.youtube.com/watch?v=2En96Cg9BFwhttps://peertube.dodges.it/static/streaming-playlists/hls/a452e311-9962-4183-bfba-bb26848c5982/79e83ffb-c5dd-400c-a428-42dbc0d50b7f-master.m3u8https://peertube.dodges.it/videos/embed/mhUgKopWysu57DNUdBse572844002026-10-27T07:28:27.674ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/appGYn78EewKZTtZ7Jv5r62026-10-23T08:51:49.236Zhttps://peertube.dodges.it/lazy-static/thumbnails/00595881-8542-453a-bb54-b6ec581b17cc.jpgAdvanced JPEG Steganography and Detection by John Ortiz--- Mirrored from YouTube: https://www.youtube.com/watch?v=BQPkRlbVFEshttps://peertube.dodges.it/static/streaming-playlists/hls/4c26f6d8-b661-4f31-8e70-38be3c887fe7/1f84a641-21ed-42c4-89e2-0359e49806ff-master.m3u8https://peertube.dodges.it/videos/embed/appGYn78EewKZTtZ7Jv5r63807002026-10-27T06:36:50.446ZBlack HatInformation SecurityInfoSecBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/pxKpJc4oEsPUo5sYFHvoLZ2026-10-23T08:53:23.049Zhttps://peertube.dodges.it/lazy-static/thumbnails/c9bbf875-b5eb-49bd-93ce-154617e821b8.jpgUnderstanding SCADA's Modbus Protocolby Justin Searle Join Justin Searle for a two-hour workshop where he'll take you through the modbus network protocol standard and walk you through hands-on exercises, including analyzing modbus network captures, configuring modbus endpoint simulators, and generating your own modbus traffic to query and fuzz modbus devices. Come prepared with your laptops, a DVD drive, and an installed version of vmware player to take full advantage of this workshop! --- Mirrored from YouTube: https://www.youtube.com/watch?v=oVDYaG2HInUhttps://peertube.dodges.it/static/streaming-playlists/hls/beb0ff73-5e96-4944-9b39-161a509a1bc1/c37d0338-41ed-43f3-80c6-c3708250da7a-master.m3u8https://peertube.dodges.it/videos/embed/pxKpJc4oEsPUo5sYFHvoLZ6693002026-10-27T06:37:01.197ZBlackHatBlack HatInfoSecInformation SecurityBlack Hat Asia 2015YESBlackhatNOhttps://peertube.dodges.it/w/7Cnv2ZgZYB7zYhTB8MjQAD2026-10-23T08:54:19.287Zhttps://peertube.dodges.it/lazy-static/thumbnails/f7137b8c-e1e0-466d-8ab6-6885c70b61f8.jpgBehind the scenes of iOS and Mac SecurityThe Find My feature in iOS 13 and macOS Catalina enables users to receive help from other nearby Apple devices in finding their lost Macs, while rigorously protecting the privacy of all participants. We will discuss our efficient elliptic curve key diversification system that derives short non-linkable public keys from a user’s keypair, and allows users to find their offline devices without divulging sensitive information to Apple. By Ivan Krstić Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#behind-the-scenes-of-ios-and-mac-security-17220 --- Mirrored from YouTube: https://www.youtube.com/watch?v=3byNNUReyvEhttps://peertube.dodges.it/static/streaming-playlists/hls/35aadb9e-aaa3-45d4-986d-aa36a2f0eed9/709707a2-9c35-4951-bc65-fff1ed899ccb-master.m3u8https://peertube.dodges.it/videos/embed/7Cnv2ZgZYB7zYhTB8MjQAD2669002026-10-27T06:49:50.181ZYESBlackhatNOhttps://peertube.dodges.it/w/uAiTRzX4RopxdZWMeiNFbH2026-10-23T08:55:18.510Zhttps://peertube.dodges.it/lazy-static/thumbnails/bedb7bea-b0bf-4854-b186-a54cbc34d45d.jpgUnpacking the Packed Unpacker: Reverse Engineering an Android Anti-Analysis Native LibraryI will discuss each of the techniques the malware author used in order to prevent reverse engineering of their Android native library including manipulating the Java Native Interface, encryption, run-time environment checks, and more. This talk discusses not only the techniques the malware author implemented to prevent analysis, but also the steps and process for a reverse engineer to proceed through the anti-analysis traps. By Maddie Stone Full Abstract & Presentation Materials: https://www.blackhat.com/us-18/briefings/schedule/index.html#unpacking-the-packed-unpacker-reverse-engineering-an-android-anti-analysis-native-library-10795 --- Mirrored from YouTube: https://www.youtube.com/watch?v=s0Tqi7fuOSUhttps://peertube.dodges.it/static/streaming-playlists/hls/e78a32c1-2b59-47e4-ad63-fcc573bc2289/8669a7de-5760-4f0c-9907-437683e20ffd-master.m3u8https://peertube.dodges.it/videos/embed/uAiTRzX4RopxdZWMeiNFbH2372002026-10-27T07:02:23.950ZBlack HatBlack Hat USABlack Hat 2018Black Hat USA 2018BHUSAYESBlackhatNOhttps://peertube.dodges.it/w/ncEJEUiLHD4qSiZ3VnTZRp2026-10-23T08:56:09.974Zhttps://peertube.dodges.it/lazy-static/thumbnails/37ead02a-e7de-401c-ae9c-e87fc135baaa.jpgBlackhat Asia 21Locknote: Conclusions and Key Takeaways from Day 1 locknoteAt the end of day one of this year's virtual conference, join Black Hat Review Board members Mika Devonshire, Ty Miller, Pamela O'Shea and Fyodor Yarochkin for an insightful conversation on the most pressing issues facing the InfoSec community. This Locknote will feature a candid discussion on the key takeaways from day one and how these trends will impact future InfoSec strategies. By: Mika Devonshire, Ty Miller, Pamela O'Shea, Fyodor Yarochkin Full Abstract: https://www.blackhat.com/asia-21/briefings/schedule/#locknote-conclusions-and-key-takeaways-from-day--22926 --- Mirrored from YouTube: https://www.youtube.com/watch?v=wSP-ajSmuf0https://peertube.dodges.it/static/streaming-playlists/hls/abb0f70d-cd81-4f4c-95c0-c8c0ca002a9d/f49bfe26-3330-4a76-b812-d4f0fd387755-master.m3u8https://peertube.dodges.it/videos/embed/ncEJEUiLHD4qSiZ3VnTZRp2485002026-10-27T07:14:11.921ZYESBlackhatNOhttps://peertube.dodges.it/w/nXGR6hWFqHFvQSHe4rxNap2026-10-23T08:56:53.622Zhttps://peertube.dodges.it/lazy-static/thumbnails/5cb0123b-0681-4ce2-aed5-231e1d78bdee.jpgI'm Not a Human: Breaking the Google Recaptchaby Iasonas Polakis & Suphannee Sivakorn Since their inception, captchas have been widely used for preventing fraudsters from performing illicit actions. Nevertheless, economic incentives have resulted in an arms race, where fraudsters develop automated solvers and, in turn, captcha services tweak their design to break the solvers. Recent work, however, presented a generic attack that can be applied to any text-based captcha scheme. Fittingly, Google recently unveiled the latest version of reCaptcha. The goal of their new system is twofold; to minimize the effort for legitimate users, while requiring tasks that are more challenging to computers than text recognition. ReCaptcha is driven by an "advanced risk analysis system" that evaluates requests and selects the difficulty of the captcha that will be returned. Users may be required to click in a checkbox, or identify images with similar content. In this paper, we conduct a comprehensive study of reCaptcha, and explore how the risk analysis is influenced by each aspect of the request. Through extensive experimentation, we identify flaws that allow adversaries to effortlessly influence the risk analysis process, bypass restrictions, and deploy large-scale attacks. Subsequently, we design a novel low-cost attack that leverages deep learning technologies for the semantic annotation of images. Our system is extremely effective, automatically solving 70.78% of the image reCaptcha challenges, while requiring only 19 seconds per challenge. We also apply our attack to the Facebook image captcha and achieve an accuracy of 83.5%. Based on our experimental findings, we propose a series of safeguards and modifications for impacting the scalability and accuracy of our attacks. Overall, while our study focuses on reCaptcha, our findings have wide implications; as the semantic information conveyed via images is increasingly within the realm of automated reasoning, the future of captchas relies on the exploration of novel dir...https://peertube.dodges.it/static/streaming-playlists/hls/b1d6fddf-f5f2-4626-811b-25f7590cbea1/19760d61-3f94-491d-9964-4714c2eeda72-master.m3u8https://peertube.dodges.it/videos/embed/nXGR6hWFqHFvQSHe4rxNap1680002026-10-27T07:13:58.290ZInformation SecurityBlack Hat Asia 2016BlackHatBlack HatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/hDr1EtXgLr59khpRSdzzT62026-10-23T08:57:02.700Zhttps://peertube.dodges.it/lazy-static/thumbnails/d911453b-43ce-4274-b049-859e38e90efc.jpgDEF CON 23 - Bruce Schneier - Questions and AnswersBruce Schneier Talks Security. Come hear about what's new, what's hot, and what's hype in security. NSA surveillance, airports, voting machines, ID cards, cryptography -- he'll talk about what's in the news and what matters. Always a lively and interesting talk. Speaker Bio: Bruce Schneier is an internationally renowned security technologist, called a security guru by the Economist. He is the author of 12 booksincluding the New York Times best-seller Data and Goliath: The Hidden Values to Collect Your Data and Control Your Worldas well as hundreds of articles, essays, and academic papers. His influential newsletter Crypto-Gram and his blog Schneier on Security are read by over 250,000 people. He has testified before Congress, is a frequent guest on television and radio, has served on several government committees, and is regularly quoted in the press. Schneier is a fellow at the Berkman Center for Internet and Society at Harvard Law School, a program fellow at the New America Foundations Open Technology Institute, a board member of the Electronic Frontier Foundation, and an advisory board member of the Electronic Privacy Information Center. He is the CTO of Resilient Systems. --- Mirrored from YouTube: https://www.youtube.com/watch?v=bjopJ-_vAUEhttps://peertube.dodges.it/static/streaming-playlists/hls/86cc26e2-b86f-4e97-b565-246ed7ec641f/505d4db9-cca6-4608-8b35-22b341cd9edb-master.m3u8https://peertube.dodges.it/videos/embed/hDr1EtXgLr59khpRSdzzT62794002026-10-27T07:02:36.733ZBruce Schneier (Academic)DEF CONDEF CON 23DEFCONDC23YESDEFCONNOhttps://peertube.dodges.it/w/bvPhnN9iwqMboDn8dwQVdB2026-10-23T08:57:48.446Zhttps://peertube.dodges.it/lazy-static/thumbnails/21d6ffbd-de12-4375-9395-8a7d1e7dc267.jpgARMageddon: How Your Smartphone CPU Breaks Software-Level Security and PrivacyIn the last years, mobile devices and smartphones have become the most important personal computing platform. Besides phone calls and managing the personal address book, they are also used to approve bank transfers and digitally sign official documents, thus storing very sensitive secrets. Their exposure or misappropriation would not only be a fatal infringement of privacy, but could also lead to disastrous consequences in terms of financial security and identity theft. So what if it is possible to silently monitor and track what the user is doing on his smartphone or recovering encryption keys without any permissions or privileges? Read More: https://www.blackhat.com/eu-16/briefings/schedule/index.html#armageddon-how-your-smartphone-cpu-breaks-software-level-security-and-privacy-4887 --- Mirrored from YouTube: https://www.youtube.com/watch?v=9KsnFWejpQghttps://peertube.dodges.it/static/streaming-playlists/hls/5525183e-c766-452d-a068-81482840276f/3c89e3e2-2c2d-42d2-a729-a6088f59d8a9-master.m3u8https://peertube.dodges.it/videos/embed/bvPhnN9iwqMboDn8dwQVdB2416002026-10-27T07:14:08.646ZBlackHatInfoSecBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/cFGSxWiy1Z4D4xVmGHvfsE2026-10-23T08:57:50.272Zhttps://peertube.dodges.it/lazy-static/thumbnails/e781df9f-2d6d-4bb7-be16-12dead4760b4.jpgDEF CON 25 - Peyton Engel - Learning about Government Surveillance SoftwareImagine that you're accused of a crime, and the basis of the accusation is a log entry generated by a piece of custom software. You might have some questions: does the software work? how accurate is it? how did it get the results that it did? Unfortunately, the software isn't available to the public. And you can't get access to the source code or even a working instance of the software. All you get are assurances that the software is in use by investigators around the globe, and doesn't do anything that law enforcement isn't supposed to be doing. Because you can trust the government, right? This talk will look at a family of tools designed for investigating peer-to- peer networks. By synthesizing information from dozens of search warrant affidavits, and a few technical sources, we're able to put together at least a partial picture of the software's capabilities. But we'll also look at the reasons the government offers for keeping these tools out of the public eye and talk about whether they make sense. Finally, we'll examine the implications that investigations based on secret capabilities have for justice. --- Mirrored from YouTube: https://www.youtube.com/watch?v=7Obeod8X7Dohttps://peertube.dodges.it/static/streaming-playlists/hls/5e9fb864-9c92-489b-ac19-f64d2f499f9a/664f2190-6752-4e1e-a383-71ca701ad86b-master.m3u8https://peertube.dodges.it/videos/embed/cFGSxWiy1Z4D4xVmGHvfsE1175002026-10-27T07:14:01.679ZDEF CON 2017DEF CON 25DEF CONDC25hackersYESDEFCONNOhttps://peertube.dodges.it/w/8qVrQbH6TcRdvzuHNxExLX2026-10-23T08:59:27.986Zhttps://peertube.dodges.it/lazy-static/thumbnails/7185d443-6809-4c6b-94c0-6752d3f71cb0.jpgHack Your ATM with Friend's Raspberry.PyBy Alexey Osipov and Olga Kochetova "At all times there have been bad guys, who tried to steal money. ATM machines containing vast amounts of money have always been attractive targets. Until recently, criminals were only using physical weaknesses. Skimmers and shimmers for stealing magstripe-tracking data, fake pin pads and cameras for stealing pin codes, and even fake ATMs were created. Time passed and ATM software started to unify. Where there is unification, there are viruses. Trojan.Skimmer.*, Ploutus and other named or unnamed trojans. And what did we see on the public scene? Vendors started discussing the skimmers problem only after they were detected in the wild. As you remember, Barnaby Jack presented ""Jackpotting Automated Teller Machines"" at Black Hat USA 2010. He used some vulnerabilities in ATM software. He showed that malware, was injected into the OS of the ATM via bootable flash drive or via remote management TCP port. Barnaby Jack's work was based on assumptions that most vulnerabilities were concentrated in the host machine and that we can and should reuse software made by ATM vendors. And that's quite true, but... antiviruses, locked firmware upgrades, blocked USB connectors, and encrypted hard drives can mitigate such risks. But, what about connecting not to the host machine, but to devices themselves? What countermeasures exist, when we will try to impersonate ourselves as an ATM host? Hacking ATMs with small computer like Raspberry Pi should be impossible, but it isn't. The point of our presentation is to draw attention to the problem, which has existed for quite a long time. The problem is usage of common interfaces (like RS232 or USB) and protocols of communication from host machine to such devices as card readers, pin pads and/or dispenser units." --- Mirrored from YouTube: https://www.youtube.com/watch?v=q5tQWe6YsLMhttps://peertube.dodges.it/static/streaming-playlists/hls/3c2ac20a-75e5-47e8-84da-46b9b00d5c6b/768d1284-63c6-44a5-8595-ff3c54c77e4f-master.m3u8https://peertube.dodges.it/videos/embed/8qVrQbH6TcRdvzuHNxExLX2523002026-10-27T07:44:26.674ZBlackHatBlack Hat Europe 2014InfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/rszo2ns5bkY5TnnA72Bdmw2026-10-23T08:59:28.379Zhttps://peertube.dodges.it/lazy-static/thumbnails/0aa7df98-9f1c-4012-bde7-5122e22c5bcd.jpgKate Rose - Adversarial Fashion Sartorial Hacking - DEF CON 27 Crypto and Privacy VillageUse of patterning and adversarial input techniques are on the rise as computer vision analysis of everything from our faces to our license plates becomes ubiquitous for everything from marketing to state surveillance. This talk will be a highly tactical guide to give an overview of the work in the area of confounding or intentionally triggering computer vision systems with fashion. This presentation will show you the same open source guides, libraries, and resources to build your own adversarial clothing, via the process used to develop ALPR-triggering fabrics. This talk will review not only the technical and aesthetic considerations, but also getting over the manufacturing hurdle from design to prototype so you can quickly deploy your fashion hacks to the people BIO Kate Rose is director of an organization that provides privacy, security, and technology resources and training to nonprofits and activists. She’s organized civic hackathons across the US, and currently leads a volunteer team building open source state advocacy tools. When she’s not recreationally filing FOIA requests, she illustrates and designs fabrics. --- Mirrored from YouTube: https://www.youtube.com/watch?v=jVcGZ_Ak4NIhttps://peertube.dodges.it/static/streaming-playlists/hls/ce2a6020-ded4-47bc-aaad-280c42ce189e/b9c66913-b023-42a6-b2d0-8d304f74505c-master.m3u8https://peertube.dodges.it/videos/embed/rszo2ns5bkY5TnnA72Bdmw2986002026-10-27T07:32:41.045ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/dhZs5AgAm7woVmzhDBtqMG2026-10-23T09:00:08.619Zhttps://peertube.dodges.it/lazy-static/thumbnails/ff50ee42-6b0f-4ec0-9771-9913b1293eeb.jpgKey Reinstallation Attacks: Breaking the WPA2 ProtocolWe introduce key reinstallation attacks. These attacks abuse features of a protocol to reinstall an already in-use key, thereby resetting nonces and/or replay counters associated to this key. We show that our novel attack technique breaks several handshakes that are used in a WPA2-protected network. By Mathy Vanhoef Full Abstract & Presentation Materials: https://www.blackhat.com/eu-17/briefings.html#key-reinstallation-attacks-breaking-the-wpa2-protocol --- Mirrored from YouTube: https://www.youtube.com/watch?v=fZ1R9RliM1whttps://peertube.dodges.it/static/streaming-playlists/hls/638cf805-d201-4135-8c82-c473f567edc2/ffd069fc-f10f-4988-b84d-a2c6abc9d7e8-master.m3u8https://peertube.dodges.it/videos/embed/dhZs5AgAm7woVmzhDBtqMG2829002026-10-27T07:28:30.778ZBlack HatBlack Hat 2017Black Hat EuropeBlack Hat Europe 2017Information SecurityYESBlackhatNOhttps://peertube.dodges.it/w/pxH5Ba4JBwXfRXxaoVX1gZ2026-10-23T09:00:43.099Zhttps://peertube.dodges.it/lazy-static/thumbnails/c6d61f5e-83e7-4f4e-adc1-8accdcea6ee5.jpgDEF CON 18 - Samy Kamkar - How I Met Your GirlfriendSamy Kamkar - How I Met Your Girlfriend How I Met Your Girlfriend: The discovery and execution of entirely new classes of Web attacks in order to meet your girlfriend. This includes newly discovered attacks including HTML5 client-side XSS (without XSS hitting the server!), PHP session hijacking and random numbers (accurately guessing PHP session cookies), browser protocol confusion (turning a browser into an SMTP server), firewall and NAT penetration via Javascript (turning your router against you), remote iPhone Google Maps hijacking (iPhone penetration combined with HTTP man-in-the-middle), extracting extremely accurate geolocation information from a Web browser (not using IP geolocation), and more. Samy Kamkar is best known for the Samy worm, the first XSS worm, infecting over one million users on MySpace in less than 24 hours. A co-founder of Fonality, Inc., an IP PBX company, Samy previously led the development of all top-level domain name server software and systems for Global Domains International (.ws). In the past 10 years, Samy has focused on evolutionary and genetic algorithmic software development, Voice over IP software development, automated security and vulnerability research in network security, reverse engineering, and network gaming. When not strapped behind the Matrix, Samy can be found stunt driving, getting involved in local community service projects, and continuing his focus on staying out of jail. For copies of the slides and additional materials please see the DEF CON 18 Archive here: https://defcon.org/html/links/dc-archives/dc-18-archive.html --- Mirrored from YouTube: https://www.youtube.com/watch?v=fWk_rMQiDGchttps://peertube.dodges.it/static/streaming-playlists/hls/beaf8fe8-5fff-44a0-a773-2e56d3b47107/dd3a558d-2354-494f-b8c3-2cb808101372-master.m3u8https://peertube.dodges.it/videos/embed/pxH5Ba4JBwXfRXxaoVX1gZ2270002026-10-27T07:32:51.317Z2010Hackerdc18DEF CONDef ConYESDEFCONNOhttps://peertube.dodges.it/w/fkw6rhuj543kPbbLoCZK9a2026-10-23T09:01:26.487Zhttps://peertube.dodges.it/lazy-static/thumbnails/e1d1b05d-4dff-40fd-b612-d3c8b9cf6fb7.jpgHTTP Desync Attacks: Request Smuggling RebornHTTP requests are traditionally viewed as isolated, standalone entities. In this session, I'll introduce techniques for remote, unauthenticated attackers to smash through this isolation and splice their requests into others, through which I was able to play puppeteer with the web infrastructure of numerous commercial and military systems, rain exploits on their visitors, and harvest over $70k in bug bounties. By James Kettle Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/#http-desync-attacks-request-smuggling-reborn-18313 --- Mirrored from YouTube: https://www.youtube.com/watch?v=_A04msdplXshttps://peertube.dodges.it/static/streaming-playlists/hls/74199e68-bbe0-4bb1-b406-58a77dec73cd/4d3bd851-da68-427d-9460-ea0a0593eff1-master.m3u8https://peertube.dodges.it/videos/embed/fkw6rhuj543kPbbLoCZK9a2856002026-10-27T07:44:30.162ZYESBlackhatNOhttps://peertube.dodges.it/w/hs3GbFh2BziKwPqP46DV7o2026-10-23T09:02:08.224Zhttps://peertube.dodges.it/lazy-static/thumbnails/c00b5cbf-a486-4212-82af-3904e4b4f62d.jpgBlack Hat Asia 2018 Keynote: A Short Course in Cyber Warfare by The GrugqBlack Hat Asia 2018 Day 2 Keynote: A Short Course in Cyber Warfare presented by The Grugq Cyber is a new dimension in conflict which is still not fully theorized or conceptualized. Not that that is stopping anybody. Critically, cyber is the third new dimension in war in the last century, and the only one where the great powers are openly engaged in active conflict. Here we have an opportunity to observe the creation of cyber power and doctrine from first principles. This talk will cover some of what we've learned, touching on policy, organisational structure, strategy, and tactics. Cyber operations include active, passive, kinetic, and cognitive aspects. Cyber capacity can be measured on many angles such as adaptability, agility, speed, creativity and cohesion. Adding to the complexity, operations can be any combination of overt, covert and clandestine. The players in cyber are shaped by their organizations and bureaucracies, and it is clear that some are better than others. This talk examines what factors contribute to being good at cyber conflict. Read More: https://www.blackhat.com/asia-18/briefings/schedule/index.html#a-short-course-in-cyber-warfare-10273 --- Mirrored from YouTube: https://www.youtube.com/watch?v=gvS4efEakpYhttps://peertube.dodges.it/static/streaming-playlists/hls/85353751-fc0b-438d-afec-cf438cc6249e/cac59b7a-5850-4761-a4e4-958e54a63a1a-master.m3u8https://peertube.dodges.it/videos/embed/hs3GbFh2BziKwPqP46DV7o3293002026-10-27T08:23:52.334ZBlack HatBlack Hat 2018Black Hat AsiaBlack Hat Asia 2018KeynoteYESBlackhatNOhttps://peertube.dodges.it/w/tVGPxfS9kDtpSAMyuENfCy2026-10-23T09:02:32.071Zhttps://peertube.dodges.it/lazy-static/thumbnails/3f442cb7-9650-453c-a89d-de20ee57771c.jpgDEF CON 25 Wifi Village - Matt Blaze - Sigint for the rest of usPractical weaknesses on P25 radio encryption, and how we exploited them --- Mirrored from YouTube: https://www.youtube.com/watch?v=7awwG9aaR4chttps://peertube.dodges.it/static/streaming-playlists/hls/e22651d2-e687-45c6-a114-ca7a72995bd0/ce57c308-96a7-4960-8ec8-649629aef93d-master.m3u8https://peertube.dodges.it/videos/embed/tVGPxfS9kDtpSAMyuENfCy3954002026-10-27T07:58:52.294ZDEFCONDEF CON 2017DEF CON 25DEF CONYESDEFCONNOhttps://peertube.dodges.it/w/6oTPY9hZw6ZxG6oa6bPM6f2026-10-23T09:03:25.910Zhttps://peertube.dodges.it/lazy-static/thumbnails/30da1b43-a80e-4c7e-920b-197afd56881c.jpgDEF CON 32 - Listen to the Whispers: Web Timing Attacks that Actually Work - James KettleWebsites are riddled with timing oracles eager to divulge their innermost secrets. It's time we started listening to them. In this session, I'll unleash novel attack concepts to coax out server secrets including masked misconfigurations, blind data-structure injection, hidden routes to forbidden areas, and a vast expanse of invisible attack-surface. This is not a theoretical threat; every technique will be illustrated with multiple real-world case studies on diverse targets. Unprecedented advances have made these attacks both accurate and efficient; in the space of ten seconds you can now reliably detect a sub-millisecond differential with no prior configuration or 'lab conditions' required. In other words, I'm going to share timing attacks you can actually use. To help, I'll equip you with a suite of battle-tested open-source tools enabling both hands-free automated exploitation, and custom attack scripting. I'll also share a little CTF to help you hone your new skillset. Want to take things further? I'll help you transform your own attack ideas from theory to reality, by sharing a methodology refined through testing countless concepts on thousands of websites. We've neglected this omnipresent and incredibly powerful side-channel for too long. --- Mirrored from YouTube: https://www.youtube.com/watch?v=zOPjz-sPyQMhttps://peertube.dodges.it/static/streaming-playlists/hls/2baffeeb-bd22-46f0-a58b-bd6e633054dc/b73571f1-f104-4b0d-9065-4fa2f8f3a5cf-master.m3u8https://peertube.dodges.it/videos/embed/6oTPY9hZw6ZxG6oa6bPM6f2557002026-10-27T07:58:56.003ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/rbN4VVvW7TssSs4DL1qQb82026-10-23T09:03:27.497Zhttps://peertube.dodges.it/lazy-static/thumbnails/688f6f2d-4af2-4e30-bff6-277f518ce3fb.jpgDRAMA: How Your DRAM Becomes a Security ProblemIn this talk, we will present our research into how the design of DRAM common to all computers and many other devices makes these computers and devices insecure. Since our attack methodology targets the DRAM, it is mostly independent of software flaws, operating system, virtualization technology and even CPU. The attack is based on the presence of a row buffer in all DRAM modules. While this buffer is of vital importance to the way DRAM works physically, they also provide an attack surface for a side channel attack. by Michael Schwarz & Anders Fogh Full Abstract: https://www.blackhat.com/eu-16/briefings/schedule/index.html#drama-how-your-dram-becomes-a-security-problem-4826 --- Mirrored from YouTube: https://www.youtube.com/watch?v=lSU6YzjIIiQhttps://peertube.dodges.it/static/streaming-playlists/hls/cbf64b61-d4bc-41a2-b787-979e2a98810b/e4207c44-2db4-4368-ab48-1199e87f159b-master.m3u8https://peertube.dodges.it/videos/embed/rbN4VVvW7TssSs4DL1qQb83064002026-10-27T08:23:41.035ZBlack Hat Europe 2016Platform SecurityBlackHatInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/n3e8PEtrxhYC8BRSc9zp5W2026-10-23T09:04:12.374Zhttps://peertube.dodges.it/lazy-static/thumbnails/687fdf2f-f8c6-4937-bbba-5ea2762419e5.jpgSide-Channel Attacks on Everyday Applicationsby Taylor Hornby In 2013, Yuval Yarom and Katrina Falkner discovered the FLUSH+RELOAD L3 cache side-channel. So far it has broken numerous implementations of cryptography including, notably, the AES and ECDSA in OpenSSL and the RSA GnuPG. Given FLUSH+RELOAD's astounding success at breaking cryptography, we're lead to wonder if it can be applied more broadly, to leak useful information out of regular applications like text editors and web browsers whose main functions are not cryptography. In this talk, I'll briefly describe how the FLUSH+RELOAD attack works, and how it can be used to build input distinguishing attacks. In particular, I'll demonstrate how when the user Alice browses around the top 100 Wikipedia pages, the user Bob can spy on which of those pages she's visiting. This isn't an earth-shattering attack, but as the code I'm releasing shows, it can be implemented reliably. My goal is to convince the community that side channels, FLUSH+RELOAD in particular, are useful for more than just breaking cryptography. The code I'm releasing is a starting point for developing better attacks. If you have access to a vulnerable CPU running a suitable OS, you should be able to reproduce the attack within minutes after watching the talk and downloading the code. --- Mirrored from YouTube: https://www.youtube.com/watch?v=GPwNFrpd1KUhttps://peertube.dodges.it/static/streaming-playlists/hls/aa5f7e79-a7b7-4b75-9da8-a4a164aa88e2/9cec7f25-a0ea-4f05-b4d8-d1a5cc48e673-master.m3u8https://peertube.dodges.it/videos/embed/n3e8PEtrxhYC8BRSc9zp5W1429002026-10-27T08:10:52.418ZBlack HatInfoSecInformation SecurityBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/jb8GbPqFUaeViYUhhTwJzi2026-10-23T09:05:19.979Zhttps://peertube.dodges.it/lazy-static/thumbnails/7ebbdd04-8b9a-4840-9e62-c2bc23239489.jpgDEF CON 29 - Sick Codes - The Agricultural Data Arms Race - Exploiting a Tractor Load of VulnsContact Sick Codes on Twitter: https://twitter.com/sickcodes How I hacked the entire American Food Supply Chain over the course of 3 months, assembled a team of hacker strangers, and how we used a "full house" of exploits on almost every aspect of the agriculture industry. See the process in which it happened, the private exploits we used, the vectors we attacked from, and how it could happen again, or be happening right now. How the ongoing analytics arms race affects everyone, and how Tractor companies have metastasized into Tech companies, with little to no cyber defenses in place. Learn how farms are not like they used to be; telemetry, crop & yield analytics, and more telemetry. REFERENCES: https://github.com/sickcodes/Docker-OSX https://github.com/sickcodes/osx-serial-generator https://www.vice.com/en/article/akdmb8/open-source-app-lets-anyone-create-a-virtual-army-of-hackintoshes https://www.bleepingcomputer.com/news/security/python-also-impacted-by-critical-ip-address-validation-vulnerability/ https://sick.codes/sick-2021-012/ https://sick.codes/sick-2021-031/ https://sick.codes/leaky-john-deere-apis-serious-food-supply-chain-vulnerabilities-discovered-by-sick-codes-kevin-kenney-willie-cade/ https://www.vice.com/en/article/4avy8j/bugs-allowed-hackers-to-dox-all-john-deere-owners https://www.youtube.com/watch?v=rB_SleNKBus wabaf3t https://twitter.com/wabafet1 D0rkerDevil https://twitter.com/D0rkerDevil ChiefCoolArrow https://twitter.com/ChiefCoolArrow johnjhacking https://twitter.com/johnjhacking rej_ex https://twitter.com/rej_ex w0rmer https://twitter.com/0x686967 https://climate.com/press-releases/transform-data-into-value-with-climate-fieldview/14 https://www.agriculture.com/news/business/john-deere-to-acquire-precision-plting_5-ar50937 https://www.reuters.com/article/us-monsanto-m-a-deere-idUSKBN17X2FZ https://twitter.com/sickcodes/status/1385218039734423565?s=20 --- Mirrored from YouTube: https://www.youtube.com/watch?v=zpouLO-GXLohttps://peertube.dodges.it/static/streaming-playlists/hls/932eacaa-b7a0-431b-8fd5-c26b216e7853/1cfaf820-90d3-4e19-8045-0912d98a0734-master.m3u8https://peertube.dodges.it/videos/embed/jb8GbPqFUaeViYUhhTwJzi1632002026-10-27T08:10:56.089ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/9Q9KSSR5GHTq7Skkj6aVww2026-10-23T09:05:27.537Zhttps://peertube.dodges.it/lazy-static/thumbnails/9a37dd1f-1714-4402-ad20-e3997cc5ef90.jpgBlack Hat USA 2017 KeynoteStepping Up Our Game: Re-focusing the Security Community on Defense and Making Security Work for Everyone by Alex Stamos, Facebook CSO Since the first Black Hat conference 20 years ago, the security community, industry and the world have changed to the point that it’s time to re-examine whether we’re living up to our responsibilities and potential. Long gone are the days when “hacking” conjured up a sense of mischief and light-heartedness, with limited risks and harm. The harsh reality of the now is that the security community hasn't kept pace with the importance of technology in our society, even as the stakes have grown higher than ever. Our adversaries are no longer motivated only by money, personal data or competitive intelligence, but are now driven to use the critical technologies of our lives to arrest journalists and activists, to suppress democracy and manipulate public opinion. In these times, our community has a responsibility to the people of the world that goes beyond traditional facets of information security. Full Abstract: https://www.blackhat.com/us-17/briefings/schedule/index.html#stepping-up-our-game-re-focusing-the-security-community-on-defense-and-making-security-work-for-everyone-8227 --- Mirrored from YouTube: https://www.youtube.com/watch?v=YJOMTAREFtYhttps://peertube.dodges.it/static/streaming-playlists/hls/478234e5-7d1b-4f13-b51e-3a3c884ee596/841eb93d-23a5-4359-8b41-4467444f16dd-master.m3u8https://peertube.dodges.it/videos/embed/9Q9KSSR5GHTq7Skkj6aVww3838002026-10-27T08:11:03.291ZBlack Hat USA 2017Black Hat KeynoteBlack Hat 2017Black Hat USABHUSAYESBlackhatNOhttps://peertube.dodges.it/w/aC7MZqdJEUW97y5XbRGwYW2026-10-23T09:07:00.984Zhttps://peertube.dodges.it/lazy-static/thumbnails/2b2b5bfd-f310-4e01-a8ba-97b9a43b4b39.jpgCrash & Pay: How To Own And Clone Contactless Payment Devicesby Peter Fillmore With all this talk about NFC payments (Apple Pay, Google Wallet, etc.), are there claims on your card that can't be cloned? What security mechanisms can prevent this? How can they be subverted to make fraudulent transactions? This talk answers these questions by taking you through how NFC payments work and how you can perform fraudulent transactions with just an off-the-shelf phone and a little bit of software. I'll take you through how you can clone common NFC payment cards; show you the attacks and explain why it is possible. Information will be provided on the inexpensive tools now available for testing NFC devices and how to put together your own testing lab to test for vulnerabilities over these interfaces. --- Mirrored from YouTube: https://www.youtube.com/watch?v=SLGl9X9LBv4https://peertube.dodges.it/static/streaming-playlists/hls/4ded35bf-691f-457c-8bac-2ea9218cd36e/7fe7a249-13a9-4537-99f1-1c23c18f103f-master.m3u8https://peertube.dodges.it/videos/embed/aC7MZqdJEUW97y5XbRGwYW2353002026-10-27T08:23:44.425ZInformation SecurityInfoSecBlack HatBlackHatBlack Hat USA 2015YESBlackhatNOhttps://peertube.dodges.it/w/djeKAJvynf7QKQRBPsabic2026-10-23T09:07:28.858Zhttps://peertube.dodges.it/lazy-static/thumbnails/cbdeec4d-dd1e-4c2f-893c-57ab9d59ba82.jpgBlack Hat USA 2023 Preview VideoNow in its 26th year, Black Hat USA returns to the Mandalay Bay Convention Center in Las Vegas with a 6-day program. The event will open with four days of specialized cybersecurity Trainings (August 5-10), with courses for all skill levels. The two-day main conference (August 9-10) will feature more than 100 selected Briefings, dozens of open-source tool demos in Arsenal, a robust Business Hall, networking and social events, and much more. This year Black Hat is launching 'Certified Pentester' program - a full day practical exam, covering pentesting topics. See the Conference Highlights below for more details. --- Mirrored from YouTube: https://www.youtube.com/watch?v=F15FJpu5M5whttps://peertube.dodges.it/static/streaming-playlists/hls/63b986cd-34ba-4b43-9a3d-6f881d7379f5/e14dc8fe-843c-46b9-8ee4-d69e07427c9d-master.m3u8https://peertube.dodges.it/videos/embed/djeKAJvynf7QKQRBPsabic34002026-10-27T08:23:48.082ZYESBlackhatNOhttps://peertube.dodges.it/w/8W59VnX1eyKiMZVBz48nH52026-10-23T09:08:53.465Zhttps://peertube.dodges.it/lazy-static/thumbnails/af03d258-1a7b-4378-9183-5b6377d5a33d.jpgDEF CON 32 - On Your Ocean's 11 Team, I'm the AI Guy (technically Girl) - Harriet FarlowOne of the best parts of DEF CON is the glitz and glam of Vegas, the gambling capital of the world. Many have explored hacking casinos (on and off stage). Unfortunately, it’s just not like it is portrayed in the Oceans franchise.. in real life there’s much less action, no George Clooney, and it’s a lot harder to pull off a successful heist. Fortunately I’m not your typical hacker, I’m an AI hacker. I use adversarial machine learning techniques to disrupt, deceive and disclose information from Artificial Intelligence systems. I chose my target carefully: Canberra Casino. It’s the best casino in my city.. It’s also the only casino but that’s not the point. The casino industry is at an interesting inflection point. Many large casinos have already adopted AI for surveillance and gameplay monitoring, smaller casinos are starting to make the transition, and there’s only a couple of companies in the world that provide this software. It’s ripe for exploitation. In this talk I’m going to show you how I bypassed Casino Canberra's AI systems - facial recognition, surveillance systems and gameplay monitoring. AI Security is the new cyber security threat, and attacks on AI systems could have broad implications including misdiagnoses in medical imaging, navigation errors in autonomous vehicles.. and successful casino heists. --- Mirrored from YouTube: https://www.youtube.com/watch?v=pTSEViCwAighttps://peertube.dodges.it/static/streaming-playlists/hls/403cb1ae-859a-47dd-8afa-260080f8f36a/e3868eca-4c13-4088-b622-de70e2805a7a-master.m3u8https://peertube.dodges.it/videos/embed/8W59VnX1eyKiMZVBz48nH52261002026-10-27T08:39:28.109ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/cjox2t1QCfE3KLzHZ5G9QY2026-10-23T09:10:13.005Zhttps://peertube.dodges.it/lazy-static/thumbnails/2d2c4334-2337-45cb-9b70-7813b8555e9a.jpgChris Kubecka - Hack the World and Galaxy with OSINT - DEF CON 27 ICS VillagePresentations from the DEF CON 27 ICS Village --- Mirrored from YouTube: https://www.youtube.com/watch?v=MMFIGJ8__akhttps://peertube.dodges.it/static/streaming-playlists/hls/5ba5ccfe-6645-451e-8879-1ef087b90c18/cbacde5d-635a-4615-af89-44a2835fc53d-master.m3u8https://peertube.dodges.it/videos/embed/cjox2t1QCfE3KLzHZ5G9QY1779002026-10-27T08:39:31.700ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/o8GQt9zpY3kof8e1jL7RCf2026-10-23T09:11:55.947Zhttps://peertube.dodges.it/lazy-static/thumbnails/07664720-5e6d-443e-9900-0db7e81e3acf.jpgKeynote: Black Hat at 25: Where Do We Go from Here?For twenty-five years, the InfoSec community and industry have been gathering here in the desert. For twenty-five years, we have chipped away at underlying insecurities in the technologies we use every day with new vulnerability research and adversary insights. For twenty-five years we’ve seen vendors and software firms roll out new products and protections. With the last twenty-five years as prologue and as we look forward to the next twenty-five years, we have to ask ourselves: are we on the right track? Presented by: Chris Krebs Full Abstract and Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#keynote-black-hat-at--where-do-we-go-from-here--28699 --- Mirrored from YouTube: https://www.youtube.com/watch?v=doRZwCbbyNshttps://peertube.dodges.it/static/streaming-playlists/hls/b33c6c3b-1f37-4696-bcb1-43885c93188a/290ac5da-d178-47fc-905d-2dbb0ced5161-master.m3u8https://peertube.dodges.it/videos/embed/o8GQt9zpY3kof8e1jL7RCf3922002026-10-27T09:28:27.789ZYESBlackhatNOhttps://peertube.dodges.it/w/34eoCyNgfuXXj5yDDS744T2026-10-23T09:13:54.335Zhttps://peertube.dodges.it/lazy-static/thumbnails/ef52bdf7-b9dc-4b78-a37d-98e7776d6174.jpgDEF CON 31 - Using SIM Tunneling to Travel at Light Speed - Adrian Dabrowski, Gabriel GegenhuberCellular networks form large complex compounds for roaming purposes. Thus, geographically-spread testbeds for masurements and rapid exploit verification are needed to do justice to the technology's unique structure and global scope. Additionally, such measurements suffer from a combinatorial explosion of operators, mobile plans, and services. To cope with these challenges, we are releasing an open-source framework that geographically decouples the SIM (subscription) from the cellular modem by selectively connecting both remotely. This allows testing any subscriber with any operator at any modem location within seconds without moving parts. The resulting measurement and testbed platform "MobileAtlas" offers a scalable, controlled experimentation environment. It is fully open-sourced and allows other researchers to contribute locations, SIM cards, and measurement scripts. Using the above framework, our international experiments in commercial networks revealed exploitable inconsistencies in traffic metering, leading to multiple data "phreaking" opportunities ("free-ride"). We also expose problematic IPv6 firewall configurations, hidden SIM card communication to the home network, and fingerprint dial progress tones to track victims across different roaming networks and countries with voice calls. --- Mirrored from YouTube: https://www.youtube.com/watch?v=MYfeNyZIzBEhttps://peertube.dodges.it/static/streaming-playlists/hls/10a5c2b8-18c5-477c-a24b-3eeb700195bd/0a718c20-65f7-4f1a-9b9d-00954bc2338a-master.m3u8https://peertube.dodges.it/videos/embed/34eoCyNgfuXXj5yDDS744T2691002026-10-27T09:35:25.952ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/ayFG5EQJM8xMzxqh1yh1HL2026-10-23T09:14:40.726Zhttps://peertube.dodges.it/lazy-static/thumbnails/793211df-a2b0-4cb1-a4db-027b256ac9db.jpgDCSG1 - Adversaries Have AI. You Have $0. Here's How You Win Anyway - Aaron Crow--- Mirrored from YouTube: https://www.youtube.com/watch?v=yKnXPkpuS0Ihttps://peertube.dodges.it/static/streaming-playlists/hls/4d728251-6415-466c-801c-6e88dee1a2f6/c8c2e584-d6b0-4745-b5f1-1d35dafc2ad1-master.m3u8https://peertube.dodges.it/videos/embed/ayFG5EQJM8xMzxqh1yh1HL1159002026-10-27T09:35:37.367ZDEFCONDEFCONDEF CONhacker conferenceYESDEFCONNOhttps://peertube.dodges.it/w/duWjaH38dL9ntGPBkxcQQy2026-10-23T09:15:22.110Zhttps://peertube.dodges.it/lazy-static/thumbnails/ff714f35-31cd-4523-acdf-f665aca4fb15.jpgOwning a Building: Exploiting Access Control and Facility Management Systems by Billy Rios--- Mirrored from YouTube: https://www.youtube.com/watch?v=wvO3puWSGgQhttps://peertube.dodges.it/static/streaming-playlists/hls/6537f611-0958-40c4-9da8-f1eb11ed7388/a6752807-09f0-49ce-b6df-ff5009bb15b1-master.m3u8https://peertube.dodges.it/videos/embed/duWjaH38dL9ntGPBkxcQQy3914002026-10-27T09:35:33.921ZInformation SecurityBlackHatBlack HatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/xkoyWnmeXxkUGqe13VvUVB2026-10-23T09:17:18.325Zhttps://peertube.dodges.it/lazy-static/thumbnails/ffd47b40-eb4b-406c-acf5-7f862ef70700.jpgReverse Engineering WhatsApp Encryption for Chat Manipulation and MoreWe managed to reverse engineer WhatsApp web source code and successfully decrypted WhatsApp traffic. During the process we translated all WhatsApp web functions to python and created Burpsuit extension that you can use to investigate WhatsApp traffic and extend in order to find vulnerabilities. By Roman Zaikin and Oded Vanunu Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#reverse-engineering-whatsapp-encryption-for-chat-manipulation-and-more-15540 --- Mirrored from YouTube: https://www.youtube.com/watch?v=N0Ne623fKWchttps://peertube.dodges.it/static/streaming-playlists/hls/fdc0568a-04ae-416c-a501-c4723bbff60d/fa947a96-107b-4e2a-8079-ed13cb4aabc4-master.m3u8https://peertube.dodges.it/videos/embed/xkoyWnmeXxkUGqe13VvUVB1353002026-10-27T09:41:14.928ZYESBlackhatNOhttps://peertube.dodges.it/w/mMJwpg1YDRNYS58ZLns1yX2026-10-23T09:17:29.929Zhttps://peertube.dodges.it/lazy-static/thumbnails/eb522214-b89b-47af-9a8c-79b820dbaeac.jpgDEF CON 25 - Mark Williams, Rob Stanley - If You Give a Mouse a MicrochipThe International, a recent esports tournament, had a 20 million dollar prize pool with over five million people tuned in to the final match. The high stakes environment at tournaments creates an incentive for players to cheat for a competitive advantage. Cheaters are always finding new ways to modify software, from attempting to sneak executables in on flash drives, to using cheats stored in Steam's online workshop which bypasses IP restrictions. This presentation describes how one can circumvent existing security controls to sneak a payload (game cheat) onto a target computer. Esports tournaments typically allow players to provide their own mouse and keyboard, as these players prefer to use specific devices or may be obligated to use a sponsor branded device. These "simple" USB input devices can still be used to execute complex commands on a computer via the USB Human Interface Device (HID) protocol. Our attack vector is a mouse with an ARM Cortex M series processor. The microcontroller stores custom user profiles in flash memory, allowing the mouse to retain user settings between multiple computers. We modify the device's firmware to execute a payload delivery program, stored in free space in flash memory, before returning the mouse to its original functionality. Retaining original functionality allows the mouse to be used discreetly, as it is an "expected" device at these tournaments. This concept applies to any USB device that uses this processor, and does not require obvious physical modifications. This delivery method has tradeoffs. Our exploit is observable, as windows are created and in focus during payload delivery. The advantage to this approach is that it bypasses other security measures that are commonly in place, such as filtered internet traffic and disabled USB mass storage. --- Mirrored from YouTube: https://www.youtube.com/watch?v=gRWjd6o4LO4https://peertube.dodges.it/static/streaming-playlists/hls/a8597304-c7e6-43ed-962f-72840f109f17/cba973e5-03e1-475a-839c-3f75aa7a202a-master.m3u8https://peertube.dodges.it/videos/embed/mMJwpg1YDRNYS58ZLns1yX1759002026-10-27T09:44:22.895ZDEF CON 2017DEF CON 25DEF CONDC25hackersYESDEFCONNOhttps://peertube.dodges.it/w/czoS171oUxUmLePXa3RR6E2026-10-23T09:17:59.006Zhttps://peertube.dodges.it/lazy-static/thumbnails/edd888ee-5bb4-43c2-a39a-e1d5e298344c.jpgKeynote: Why We are Not Building a Defendable InternetBy Thomas Dullien / Halvar Flake In IT security, offensive problems are technical - but most defensive problems are political and organisational. Attackers have the luxury to focus only on the technical aspects of their work, while defenders have to navigate complex political and regulatory environments. In a previous talk ("Rearchitecting a defendable internet") I discussed what technical measures would yield defendable devices - and intentionally omitted the political and economics side. This talk, on the other hand, will explore the economics and incentive structures in IT security: Who is incentivized by who to do what - and how these incentives fail to produce the security level we desire. The talk will look at different players in IT security: CISOs, security product vendors, computer manufacturers, cyber insurances - and examine their economic incentive structures, their interplay, and reasons for failure. The talk will also discuss an alternate reality where things work smoothly, and examine the differences to our current reality. --- Mirrored from YouTube: https://www.youtube.com/watch?v=PLJJY5UFtqYhttps://peertube.dodges.it/static/streaming-playlists/hls/5dbe28b0-4175-4883-9e4f-b1f0a9472dd4/a0fa6d45-b351-42d1-88dd-b83dfdacc377-master.m3u8https://peertube.dodges.it/videos/embed/czoS171oUxUmLePXa3RR6E2472002026-10-27T09:44:29.863ZBlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/5ZA4hjgC5TrCKPzuevJ6aS2026-10-23T09:18:35.841Zhttps://peertube.dodges.it/lazy-static/thumbnails/ef36bd43-2729-4644-b183-a8e9d8819bf5.jpgJailbreaking Apple WatchIn the Apple ecosystem, in order to explore the internals and security aspects of an Apple iOS based device it's necessary to use a jailbreak. However, a jailbreak does not exist publicly for watchOS so we had to create the first ever public Apple Watch jailbreak. By Max Bazaliy Full Abstract & Presentation Materials: https://www.blackhat.com/eu-17/briefings.html#jailbreaking-apple-watch --- Mirrored from YouTube: https://www.youtube.com/watch?v=axH45m5xpJohttps://peertube.dodges.it/static/streaming-playlists/hls/286ef009-22d3-4d08-9e52-b4e5f8b200f0/d2489ad0-e286-44b7-92dd-31febb94ac43-master.m3u8https://peertube.dodges.it/videos/embed/5ZA4hjgC5TrCKPzuevJ6aS1774002026-10-27T09:48:53.804ZBlack HatBlack Hat 2017Black Hat Europe 2017Black Hat EuropeBHEUYESBlackhatNOhttps://peertube.dodges.it/w/o1n52z4hHNqee62ySbphNx2026-10-23T09:19:27.365Zhttps://peertube.dodges.it/lazy-static/thumbnails/fa44a29f-046c-470b-a5f5-09abaac0a0d4.jpgWhy Most Cyber Security Training Fails and What We Can Do About itTo date, the only pro-active, user-focused solution against spear phishing has been cyber security awareness training. However, multiple lines of evidence—from continuing news stories of bigger and bolder breaches to objective academic assessments of training effects—point to its limited effectiveness. By Arun Vishwanath Read More: https://www.blackhat.com/us-17/briefings/schedule/index.html#why-most-cyber-security-training-fails-and-what-we-can-do-about-it-7921 --- Mirrored from YouTube: https://www.youtube.com/watch?v=3L3IrAN30a4https://peertube.dodges.it/static/streaming-playlists/hls/b23608f6-fc6d-4d2d-bf86-81e003a66fc3/f1e37365-fffd-4593-8dd0-23dba64d215f-master.m3u8https://peertube.dodges.it/videos/embed/o1n52z4hHNqee62ySbphNx2987002026-10-27T09:48:57.323ZBlack HatBHUSAInformation SecurityInfoSecBlack Hat USA 2017YESBlackhatNOhttps://peertube.dodges.it/w/8YmbsPp3225caB59uPFDt22026-10-23T09:21:07.248Zhttps://peertube.dodges.it/lazy-static/thumbnails/03598185-7cfa-4711-8270-431982ff4bad.jpgIndustrial Control Systems : Pentesting PLCs 101 (Part 1/2)By Arnaud Soullie "There is a lot of talking about ICS, SCADA and such nowadays, but only few people have the opportunity to get their hands dirty and understand how it works. The goal of this workshop is to provide the knowledge required to start attacking Scada networks and PLCs, and give hands-on experience on real devices. In this workshop, you will learn the specifics of performing a penetration test on industrial control systems, and especially on Programmable Logic Controllers (PLCs). We will cover the main components and the commonly associated security flaws of industrial control systems, aka SCADA systems. We will discover how they work and how they communicate with the SCADA systems to learn the methods and tools you can use to p*wn them. Then, we will move on to real-world by attacking a Siemens S7-1200 PLC and a Schneider m340, which are two common PLCs." --- Mirrored from YouTube: https://www.youtube.com/watch?v=iGwm6-lyn2Yhttps://peertube.dodges.it/static/streaming-playlists/hls/408e0eef-a90e-4ddb-bcb7-ff8eb5c230db/b4bdbd48-4c11-4770-98ae-81088f863df2-master.m3u8https://peertube.dodges.it/videos/embed/8YmbsPp3225caB59uPFDt23463002026-10-27T09:58:08.476ZInformation SecurityBlack HatBlackHatInfoSecBlack Hat Europe 2014YESBlackhatNOhttps://peertube.dodges.it/w/oBJ2iLCfR4WMy3uuTFjkij2026-10-23T09:21:56.093Zhttps://peertube.dodges.it/lazy-static/thumbnails/9bf29409-b192-4abb-a640-8cc49671a132.jpgRed Team Techniques for Evading, Bypassing & Disabling MSRed Team Techniques for Evading, Bypassing, and Disabling MS Advanced Threat Protection and Advanced Threat Analytics Windows Defender Advanced Threat Protection is now available for all Blue Teams to utilize within Windows 10 Enterprise and Server 2012/16, which includes detection of post breach tools, tactics and techniques commonly used by Red Teams, as well as behavior analytics. By Chris Thompson Full Abstract & Presentation Materials: https://www.blackhat.com/eu-17/briefings.html#red-team-techniques-for-evading-bypassing-and-disabling-ms-advanced-threat-protection-and-advanced-threat-analytics --- Mirrored from YouTube: https://www.youtube.com/watch?v=2HNuzUuVyv0https://peertube.dodges.it/static/streaming-playlists/hls/b725fad2-362b-4e2c-8bb6-20e6cf668bb8/06b10de5-fc9c-4c77-b7e0-ccd8cc58d9a8-master.m3u8https://peertube.dodges.it/videos/embed/oBJ2iLCfR4WMy3uuTFjkij3474002026-10-27T09:58:12.386ZBlack HatBlack Hat EuropeBlack Hat 2017Black Hat Europe 2017Information SecurityYESBlackhatNOhttps://peertube.dodges.it/w/7NVfKqa5QnTmvkGsLC73r32026-10-23T09:22:43.755Zhttps://peertube.dodges.it/lazy-static/thumbnails/f4975d3d-358d-41f8-a445-e56e3e3e4c2b.jpgSpAIware & More: Advanced Prompt Injection Exploits in LLM ApplicationsThis talk explores advanced prompt injection exploits targeting widely used LLM applications, including Microsoft Copilot, Google Gemini, Google NotebookLM, Apple Intelligence, GitHub Copilot Chat, Anthropic Claude and others. Using real-world demonstrations, we will discuss the following threats in detail: - Misinformation, Phishing, and Scams: Including advanced techniques such as conditional instructions. - Automatic Tool Invocation: Exploiting tool integration to escalate privileges, extract sensitive data, or modify system configurations - Data Exfiltration: Leveraging strategies, such as markdown and hidden payloads, to bypass security controls and leak data. - SpAIware and Persistence: Manipulating LLM memory for long-term control and persistence. - ASCII Smuggling: How LLMs can hide secrets and craft hidden text invisible to users. For each threat category, we will discuss mitigations and show how vendors are addressing these vulnerabilities. By: Johann Rehberger | Security Researcher | Red Team Director, embracethered.com Full Abstract and Presentation Materials: Johann Rehberger | Security Researcher | Red Team Director, embracethered.com --- Mirrored from YouTube: https://www.youtube.com/watch?v=84NVG1c5LRIhttps://peertube.dodges.it/static/streaming-playlists/hls/3723dd4f-d63e-409a-a8cb-d88fa3076e24/f701ba7f-29ca-4294-8e1a-7b4e0ca3c110-master.m3u8https://peertube.dodges.it/videos/embed/7NVfKqa5QnTmvkGsLC73r32362002026-10-27T10:11:36.572ZYESBlackhatNOhttps://peertube.dodges.it/w/6VXyYDUwHZS8CRU82vJLxh2026-10-23T09:25:03.323Zhttps://peertube.dodges.it/lazy-static/thumbnails/677f208b-698c-4044-9850-dd274230e5c1.jpgWhat Malware Authors Don't Want You to Know - Evasive Hollow Process InjectionHollow process injection is a code injection technique used by the malware authors to blend in with legitimate processes on the system and remain undetected; there are documented procedures to detect hollow process injection. This presentation focuses on undocumented hollow process injection techniques. Read More: https://www.blackhat.com/asia-17/briefings/schedule/index.html#what-malware-authors-dont-want-you-to-know---evasive-hollow-process-injection-5116 --- Mirrored from YouTube: https://www.youtube.com/watch?v=9L9I1T5QDg4https://peertube.dodges.it/static/streaming-playlists/hls/30065bc3-b5a0-45a0-9b25-19cd8c74c706/1f0ab395-2385-47b9-bd74-aeaca246aac3-master.m3u8https://peertube.dodges.it/videos/embed/6VXyYDUwHZS8CRU82vJLxh3301002026-10-27T10:11:43.600ZBlackHatInfoSecBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/6APJKWz3WVhqqnFFjjRHAJ2026-10-23T09:26:08.046Zhttps://peertube.dodges.it/lazy-static/thumbnails/2eca0fec-b61c-4413-8286-32a203bc2a74.jpgSelling 0-Days to Governments and Offensive Security CompaniesSelling 0-days is a fascinating process that not a lot of people are familiar with. This talk will discuss a vulnerability brokerage company called Q-recon and provide a glimpse of how this market works. In the presentation, questions will be answered from three different angles: researcher, broker and client By Maor Shwartz Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#selling--days-to-governments-and-offensive-security-companies-14453 --- Mirrored from YouTube: https://www.youtube.com/watch?v=ZDHHGZlEfsQhttps://peertube.dodges.it/static/streaming-playlists/hls/2d5a668c-10c7-4ea2-af05-2d80666d56ea/71c0036d-0a7b-4e44-bd17-ea11b1f0921d-master.m3u8https://peertube.dodges.it/videos/embed/6APJKWz3WVhqqnFFjjRHAJ2357002026-10-27T10:20:06.772ZYESBlackhatNOhttps://peertube.dodges.it/w/qF8FdVUesSYTnC9VokUnpR2026-10-23T09:27:17.994Zhttps://peertube.dodges.it/lazy-static/thumbnails/51b26bb7-2183-4299-bfeb-bbf593192147.jpgLies and Damn Lies: Getting Past the Hype of Endpoint Security SolutionsSignatures are dead! We need to focus on machine learning, artificial intelligence, math models, lions, tigers and bears, Oh My!! - STOP!! - How many times have we heard all these buzzwords at conferences, or our managers saying that solution X will solve all our problems. I don't know about you, but I was tired of listening to the hype and the over-use of these terms that really made no sense. By Lidia Giuliano & Mike Spaulding Full Abstract & Presentational Materials: https://www.blackhat.com/us-17/briefings.html#lies-and-damn-lies-getting-past-the-hype-of-endpoint-security-solutions --- Mirrored from YouTube: https://www.youtube.com/watch?v=3p_7hYXxkXEhttps://peertube.dodges.it/static/streaming-playlists/hls/c7d210c6-a95d-49c2-9faf-0602f6454eab/41b5af43-9093-4d4c-a1c7-72fd9b779f49-master.m3u8https://peertube.dodges.it/videos/embed/qF8FdVUesSYTnC9VokUnpR2958002026-10-27T10:20:14.426ZBlack Hat USA 2017Black Hat USABlack HatInfoSecBlack Hat 2017YESBlackhatNOhttps://peertube.dodges.it/w/spmfBmrTMp9jYis93nkHhP2026-10-23T09:29:45.375Zhttps://peertube.dodges.it/lazy-static/thumbnails/8a6ac5bc-0b8f-49cf-b90f-d3641451c0de.jpgSATCOM Terminals: Hacking by Air, Sea, and Land by Ruben Santamarta"Satellite Communications (SATCOM) play a vital role in the global telecommunications system. We live in a world where data is constantly flowing. It is clear that those who control communications traffic have a distinct advantage. The ability to disrupt, inspect, modify, or re-route traffic provides an invaluable opportunity to carry out attacks. SATCOM infrastructure can be divided into two major segments, space and ground. Space includes those elements needed to deploy, maintain, track, and control a satellite. Ground includes the infrastructure required to access a satellite repeater from Earth station terminals. Earth station terminals encompass the equipment located both on the ground and on airplanes and ships; therefore, this segment includes air and sea. This specific portion of the ground segment was the focus of our research. We analyzed devices, from leading SATCOM vendors, used to access services such as: - Inmarsat-C - Inmarsat BGAN / M2M - FleetBroadBand - SwiftBroadBand - Classic Aero Services - GMDSS (Global Maritime Distress Safety System) - SSAS (Ship Security Alert System) IOActive found that 100% of the devices could be abused. The vulnerabilities we uncovered included multiple backdoors, hardcoded credentials, undocumented and/or insecure protocols or weak encryption algorithms. These vulnerabilities allow remote, unauthenticated attackers to fully compromise the affected products. In certain cases no user interaction is required to exploit the vulnerability, just sending a simple SMS or specially crafted message from one ship to another ship can do it. The talk will show all the technical details, mainly based on static firmware analysis via reverse engineering, also including a live demo against one of these systems. Ships, aircraft, military personnel, emergency services, media services, and industrial facilities (oil rigs, gas pipelines, water treatment plants, wind turbines, substations, etc.) could all be impacted by these vulne...https://peertube.dodges.it/static/streaming-playlists/hls/d5d0314a-42be-4de4-ab2f-5b097f16c91b/a22578c9-931a-40d3-961c-ae356ffe3793-master.m3u8https://peertube.dodges.it/videos/embed/spmfBmrTMp9jYis93nkHhP2858002026-10-27T10:27:55.639ZInfoSecInformation SecurityBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/s9QH6obLjt8C8ukDwcqMPY2026-10-23T09:30:34.345Zhttps://peertube.dodges.it/lazy-static/thumbnails/026f7705-9b71-4ca7-9199-ae0c818b25b8.jpgA New Era of SSRF - Exploiting URL Parser in Trending Programming Languages!We propose a new exploit technique that brings a whole-new attack surface to bypass SSRF (Server Side Request Forgery) protections. This is a very general attack approach, in which we used in combination with our own fuzzing tool to discover many 0days in built-in libraries of very widely-used programming languages, including Python, PHP, Perl, Ruby, Java, JavaScript, Wget and cURL. The root cause of the problem lies in the inconsistency of URL parsers and URL requesters. By Orange Tsai Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#a-new-era-of-ssrf-exploiting-url-parser-in-trending-programming-languages --- Mirrored from YouTube: https://www.youtube.com/watch?v=voTHFdL9S2khttps://peertube.dodges.it/static/streaming-playlists/hls/d3c992af-f33d-446c-a702-2a102417bf22/48c9e98a-48b7-4856-ad63-7aa082003f43-master.m3u8https://peertube.dodges.it/videos/embed/s9QH6obLjt8C8ukDwcqMPY2838002026-10-27T10:28:02.956ZInfoSecInformation SecurityBlack HatBlack Hat USABlack Hat USA 2017YESBlackhatNOhttps://peertube.dodges.it/w/9V1VGBx9d5GPtWCPn7NvNV2026-10-23T09:31:01.298Zhttps://peertube.dodges.it/lazy-static/thumbnails/b113903c-3e65-4d3f-8459-e50b6b610da3.jpgWeb Cache Deception AttackWeb Cache Deception attack is a new web attack vector that puts various technologies and frameworks at risk. By manipulating behaviors of web servers and caching mechanisms, anonymous attackers can expose sensitive information of authenticated application users, and in certain cases to even take control over their accounts. By Omer Gil Read More and Download Presentation Materials: https://www.blackhat.com/us-17/briefings.html#web-cache-deception-attack --- Mirrored from YouTube: https://www.youtube.com/watch?v=mroq9eHFOIUhttps://peertube.dodges.it/static/streaming-playlists/hls/48301984-4d15-4d41-8737-1ce7fb555f25/06ec2e8d-cfeb-49ef-abea-f99692bc7a58-master.m3u8https://peertube.dodges.it/videos/embed/9V1VGBx9d5GPtWCPn7NvNV1382002026-10-27T10:34:21.956ZBlack HatBlack Hat 2017Information SecurityBlack Hat USABHUSAYESBlackhatNOhttps://peertube.dodges.it/w/quNKb33YQZGVZeFdv5o1DG2026-10-23T09:32:38.871Zhttps://peertube.dodges.it/lazy-static/thumbnails/5b40d3d3-5e30-4ea0-96f0-0f15f68b3208.jpgExploiting the DRAM Rowhammer Bug to Gain Kernel Privilegesby Mark Seaborn, Halvar Flake "Rowhammer" is a problem with DRAM in which repeatedly accessing a row of memory can cause bit flips in adjacent rows. While the industry has known about the problem for a while and has started mitigating the problem in newer hardware, it was rarely mentioned in public until the publication of Yoongu Kim et al's paper in the summer of 2014 which included hard data about the prevalence of the problem. In spite of the paper's speculations about the exploitability of the issue, most people still classified rowhammer as only a reliability issue - the probabilistic aspect of the problem seems to have made people think exploitability would be impractical. We have shown that rowhammer is practically exploitable in real-world scenarios - both in-browser through NaCl, and outside of the browser to escalate to kernel privileges. The probabilistic aspect can be effectively tamed so that the problem can be reliably exploited. Rowhammer, to our knowledge, represents the first public discussion of turning a widespread, real-world, physics-level hardware problem into a security issue. We will discuss the details of our two exploits cause and use bit flips, and how the rowhammer problem can be mitigated. We will explore whether it is possible to cause row hammering using normal cached memory accesses. --- Mirrored from YouTube: https://www.youtube.com/watch?v=0U7511Fb4tohttps://peertube.dodges.it/static/streaming-playlists/hls/c660f5ec-489b-4e2f-9c9d-2a97f6eb2eda/29abc154-8257-4399-aa60-deae8abc3abf-master.m3u8https://peertube.dodges.it/videos/embed/quNKb33YQZGVZeFdv5o1DG2958002026-10-27T10:34:29.063ZBlack Hat USA 2015Information SecurityInfoSecBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/mxUngxB8ekXLoP5vrBFVhk2026-10-23T09:36:13.449Zhttps://peertube.dodges.it/lazy-static/thumbnails/a9ff9f6d-3489-4ee4-9213-db0460917d4b.jpgBlack Hat Asia 2019 Keynote: The Next Arms RaceThe Internet is not supposed to have borders, but it does. Countries fight and spy on each other on the Internet every day. So, borders still exist on the Internet, and almost all countries are investing into offensive use of cyber power. The new weapons they are developing are different from any other kind of weapon we've ever seen, and we are now seeing the very beginning of the next arms race. By Mikko Hypponen --- Mirrored from YouTube: https://www.youtube.com/watch?v=l2rIVdpMToMhttps://peertube.dodges.it/static/streaming-playlists/hls/a66b1a29-1090-4923-a215-e5b1b6e7204f/7cc3fef4-0317-46bb-aaac-77225babda61-master.m3u8https://peertube.dodges.it/videos/embed/mxUngxB8ekXLoP5vrBFVhk3485002026-10-27T10:54:53.352ZBlack HatBlack Hat AsiaBlack Hat Asia 2019Black Hat 2019Black Hat SingaporeYESBlackhatNOhttps://peertube.dodges.it/w/hNtzt7oGKGQptY94SE3G7m2026-10-23T09:37:19.854Zhttps://peertube.dodges.it/lazy-static/thumbnails/e4cb2418-eb5d-4df5-bbe6-e1e7bd3e6d51.jpgBypassing Browser Security Policies for Fun and Profitby Rafay Baloch Mobile browsers in comparison to desktop browsers are relatively new and have not gone under same level of scrutiny. Browser vendors have introduced and implemented tons of protection mechanisms against memory corruption exploits, which makes it very difficult to write a reliable exploit that would work under all circumstances. This leaves us with the "other" category of Client Side attacks. In this presentation, we will present our research about bypassing core security policies implemented inside browsers such as the "Same Origin Policy," and "Content Security Policy," etc. We will present several bypasses that were found in various mobile browsers during our research. In addition, we will also uncover other interesting security flaws found during our research such as Address Bar Spoofing, Content Spoofing, Cross Origin CSS Attacks, Charset Inheritance, CSP Bypass, Mixed Content Bypass, etc., as found in Android Browsers. We will also talk about the testing methodology that we used to uncover several android zero days. Apart from the theory, our presentation will also disclose a dozen of the most interesting examples of security vulnerabilities and weaknesses highlighted above, which we identified in the most popular Android third-party web browsers, and in Android WebView itself. We will explain the root cause of the bug and demonstrate their exploitation, show examples of vulnerable code and, where possible, patches that were issued to address these vulnerabilities. Finally, we will demonstrate a sample test suite which can be used to assess basic security properties of any mobile web/browser. --- Mirrored from YouTube: https://www.youtube.com/watch?v=P5R4KeCzO-Qhttps://peertube.dodges.it/static/streaming-playlists/hls/880f6d4a-f468-47ba-a439-276e688aa5c0/232e5d1d-6a2f-4463-a9ef-65785b904d64-master.m3u8https://peertube.dodges.it/videos/embed/hNtzt7oGKGQptY94SE3G7m1594002026-10-27T10:54:57.646ZInfoSecBlackHatBlack Hat Asia 2016Information SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/nr5v55dHH4QFbqJcaVbz2D2026-10-23T09:38:36.565Zhttps://peertube.dodges.it/lazy-static/thumbnails/fcbf63c0-4d51-4b98-a6e3-191e74ed0710.jpgDemystifying the Secure Enclave Processorby Tarjei Mandt & Mathew Solnik & David Wang The secure enclave processor (SEP) was introduced by Apple as part of the A7 SOC with the release of the iPhone 5S, most notably to support their fingerprint technology, Touch ID. SEP is designed as a security circuit configured to perform secure services for the rest of the SOC, with with no direct access from the main processor. In fact, the secure enclave processor runs it own fully functional operating system - dubbed SEPOS - with its own kernel, drivers, services, and applications. This isolated hardware design prevents an attacker from easily recovering sensitive data (such as fingerprint information and cryptographic keys) from an otherwise fully compromised device. Despite almost three years have passed since its inception, little is still known about the inner workings of the SEP and its applications. The lack of public scrutiny in this space has consequently led to a number of misconceptions and false claims about the SEP. In this presentation, we aim to shed some light on the secure enclave processor and SEPOS. In particular, we look at the hardware design and boot process of the secure enclave processor, as well as the SEPOS architecture itself. We also detail how the iOS kernel and the SEP exchange data using an elaborate mailbox mechanism, and how this data is handled by SEPOS and relayed to its services and applications. Last, but not least, we evaluate the SEP attack surface and highlight some of the findings of our research, including potential attack vectors. --- Mirrored from YouTube: https://www.youtube.com/watch?v=7UNeUT_sRoshttps://peertube.dodges.it/static/streaming-playlists/hls/ad9047b3-48d7-4645-9e0b-6bd3319b3443/67e23fd2-7b30-4c62-8091-e5b3c6f7a739-master.m3u8https://peertube.dodges.it/videos/embed/nr5v55dHH4QFbqJcaVbz2D2859002026-10-27T11:08:10.756ZBlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/5bX7Wo4feCg1Sug4Wg6CNA2026-10-23T09:40:25.509Zhttps://peertube.dodges.it/lazy-static/thumbnails/14ff2e72-bdeb-4d25-b7b0-e6a8e14a5306.jpgUnmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North KoreaUnmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea – Threat Actors, Tactics, and Defense Strategies State-sponsored threat actors have expanded their arsenal of surveillance tooling, leaning into mobile malware as a way to acquire information about a target or target group that had otherwise been inaccessible through traditional desktop campaigns. With more than 86% of the worldwide population using a smartphone, attackers have access to the perfect espionage device in the pockets of nearly every potential target. However, APTs from various regions tend to conduct operations in significantly different ways. In this session, we'll explore the landscape of state-sponsored surveillance activity using case studies from Russian, Chinese and North Korean threat actors. We'll discuss their choice of targeting and the different methodologies each employ while introducing several previously unreported malware families that highlight the differences in these state-sponsored operations. By: Kristina Balaam | Senior Staff Security Intelligence Researcher, Lookout Kyle Schmittle | Senior Security Intelligence Researcher, Lookout Alemdar Islamoglu | Senior Staff Security Intelligence Researcher, Lookout Full Abstract and Presentation Materials: https://www.blackhat.com/eu-24/briefings/schedule/#unmasking-state-sponsored-mobile-surveillance-malware-from-russia-china-and-north-korea--threat-actors-tactics-and-defense-strategies-43198 --- Mirrored from YouTube: https://www.youtube.com/watch?v=AkNzyvGbB50https://peertube.dodges.it/static/streaming-playlists/hls/21ebf604-ac04-4041-9801-f08891edd256/55d91c5b-7259-41a2-a7b1-50f9d03e055f-master.m3u8https://peertube.dodges.it/videos/embed/5bX7Wo4feCg1Sug4Wg6CNA2566002026-10-27T11:08:15.236ZYESBlackhatNOhttps://peertube.dodges.it/w/4gHbH8FgJFJHjspjvk52372026-10-23T09:41:48.107Zhttps://peertube.dodges.it/lazy-static/thumbnails/1d5460a5-8984-4d07-b0f7-7cc0adfcf96b.jpgRevoke-Obfuscation: PowerShell Obfuscation Detection (And Evasion) Using ScienceAttackers, administrators and many legitimate products rely on PowerShell for their core functionality. However, being a Windows-signed binary native on Windows 7 and later that enables reflective injection of binaries and DLLs and memory-resident execution of remotely hosted scripts, has made it increasingly attractive for attackers and commodity malware authors alike. In environments where PowerShell is heavily used, filtering out legitimate activity to detect malicious PowerShell usage is not trivial. by Daniel Bohannon & Lee Holmes Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#revoke-obfuscation-powershell-obfuscation-detection-and-evasion-using-science --- Mirrored from YouTube: https://www.youtube.com/watch?v=x97ejtv56xwhttps://peertube.dodges.it/static/streaming-playlists/hls/1a7cf416-6648-49d7-b71f-aad5ab9e958e/7097f349-0c4e-47b9-8bfa-6e0cccb22de6-master.m3u8https://peertube.dodges.it/videos/embed/4gHbH8FgJFJHjspjvk52373443002026-10-27T11:23:06.159ZInfoSecBlack HatData ForensicsDFIRBHUSAYESBlackhatNOhttps://peertube.dodges.it/w/rbr5f4VM2FrS5hMGzGarrX2026-10-23T09:44:12.337Zhttps://peertube.dodges.it/lazy-static/thumbnails/9f2b4ef3-9e2c-4336-ab98-ca9de93d1fb9.jpgImplementing the Lessons Learned From a Major Cyber AttackIn June 2017, Maersk suffered a major notpetya cyber-attack, this session explains lessons learned and how they are now being applied within Maersk. By Andy Powell Full Abstract: https://www.blackhat.com/eu-19/briefings/schedule/#implementing-the-lessons-learned-from-a-major-cyber-attack-18198 --- Mirrored from YouTube: https://www.youtube.com/watch?v=wQ8HIjkEe9ohttps://peertube.dodges.it/static/streaming-playlists/hls/cbe95b27-c8a8-47b9-b0c8-e2188e3fb86d/1e56a24e-6439-4f01-a307-2c9c94d9adc6-master.m3u8https://peertube.dodges.it/videos/embed/rbr5f4VM2FrS5hMGzGarrX3058002026-10-27T11:26:33.457ZYESBlackhatNOhttps://peertube.dodges.it/w/vjt3i695VuzC4QdALyi7Xe2026-10-23T09:45:04.920Zhttps://peertube.dodges.it/lazy-static/thumbnails/83cf34a5-5eda-4111-a552-05a1290acad2.jpgA Deep Dive into macOS MDM (and How it can be Compromised)Our talk walks through the various stages of bootstrapping, showing which binaries are involved, the IPC flows on the device, and evaluates the network (TLS) security of key client/server communications. We will follow with a live demo showing how a nation-state actor could exploit this vulnerability such that a user could unwrap a brand new Mac, and the attacker could root it out of the box the first time it connects to WiFi. By Jesse Endahl + Max Bélanger Full abstract and materials: https://www.blackhat.com/us-18/briefings/schedule/#a-deep-dive-into-macos-mdm-and-how-it-can-be-compromised-11674 --- Mirrored from YouTube: https://www.youtube.com/watch?v=ku8jZe-MHUUhttps://peertube.dodges.it/static/streaming-playlists/hls/ed6d129d-ec49-4f54-a028-4175f9219a03/745cddbd-d0d3-481f-a95a-52d311b555a1-master.m3u8https://peertube.dodges.it/videos/embed/vjt3i695VuzC4QdALyi7Xe2862002026-10-27T11:26:37.315ZBlack Hat USABlack HatBlack Hat Briefings 2018BlackHatBlackHatUSAYESBlackhatNOhttps://peertube.dodges.it/w/nuKVB3H1kaYtXa7NQmYgnC2026-10-23T09:45:48.367Zhttps://peertube.dodges.it/lazy-static/thumbnails/6f60b009-ee72-4ec5-a6ed-0320b7b4812a.jpgFriday the 13th: JSON Attacks2016 was the year of Java deserialization apocalypse. Although Java Deserialization attacks were known for years, the publication of the Apache Commons Collection Remote Code Execution (RCE from now on) gadget finally brought this forgotten vulnerability to the spotlight and motivated the community to start finding and fixing these issues. by Alvaro Muñoz & Oleksandr Mirosh Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#friday-the-13th-json-attacks --- Mirrored from YouTube: https://www.youtube.com/watch?v=oUAeWhW5b8chttps://peertube.dodges.it/static/streaming-playlists/hls/ae13ce82-5dfd-4a5c-9b81-d9d21257cf82/00571972-08fb-4212-a435-8ccfc780e778-master.m3u8https://peertube.dodges.it/videos/embed/nuKVB3H1kaYtXa7NQmYgnC2590002026-10-27T11:26:40.610ZBlack HatInfoSecBHUSABlack Hat USABlack Hat USA 2017YESBlackhatNOhttps://peertube.dodges.it/w/njqAgYc2jwWkq9NidLUyuC2026-10-23T09:53:46.386Zhttps://peertube.dodges.it/lazy-static/thumbnails/668c73f5-1598-462a-b5ac-03c02f3c3e5f.jpgComputrace Backdoor RevisitedBy Vitaly Kamluk, Sergey Belov, and Anibal Sacco "This presentation includes a live demonstration of security flaws in modern anti-theft technologies that reside in firmware and PC BIOS of most popular laptops and some desktop computers. While the general idea behind anti-theft technology is good, improper implementation can render it useless as well as harmful, or even extremely dangerous. We have found several proofs of unauthorized activations of Absolute Computrace anti-theft software on our private and corporate computers and discovered that this software can be used as an advanced removal-resistant BIOS-based backdoor. While physical security and a lack of proper code validation have already been shown in prior research presented at Black Hat 2009 by Anibal Sacco and Alfredo Ortega from Core Labs, in our research we demonstrate network security flaws. Our demo will show how to own remote hosts running Absolute Computrace. And there is a cool extra surprise for those who have already heard about Computrace network issues." --- Mirrored from YouTube: https://www.youtube.com/watch?v=AKmNf-JmjKQhttps://peertube.dodges.it/static/streaming-playlists/hls/aca27455-c1be-4629-b455-2ddf1aecde9c/11d8f895-9ded-45f9-899b-463523e6b76e-master.m3u8https://peertube.dodges.it/videos/embed/njqAgYc2jwWkq9NidLUyuC3979002026-10-27T11:39:54.651ZInfoSecBlack HatBlackHatInformation SecurityBlack Hat USA 2014YESBlackhatNOhttps://peertube.dodges.it/w/hcYdQMYjcZe7K5hmvcncrL2026-10-23T09:58:53.892Zhttps://peertube.dodges.it/lazy-static/thumbnails/0c986a4b-9152-42ca-b5bc-139103513244.jpgRed Vs. Blue: Modern Active Directory Attacks, Detection, And Protectionby Sean Metcalf Kerberos "Golden Tickets" were unveiled by Alva "Skip" Duckwall & Benjamin Delpy in 2014 during their Black Hat USA presentation. Around this time, Active Directory (AD) admins all over the world felt a great disturbance in the Force. Golden Tickets are the ultimate method for persistent, forever AD admin rights to a network since they are valid Kerberos tickets and can't be detected, right? The news is filled with reports of breached companies and government agencies with little detail on the attack vectors and mitigation. This briefing discusses in detail the latest attack methods for gaining and maintaining administrative access in Active Directory. Also covered are traditional defensive security measures that work (and ones that don't) as well as the mitigation strategies that can keep your company's name off the front page. Prepare to go beyond "Pass-the-Hash" and down the rabbit hole. This talk explores the latest Active Directory attack vectors and describes how Golden Ticket usage can be detected. When forged Kerberos tickets are used in AD, there are some interesting artifacts that can be identified. Yes, despite what you may have read on the internet, there are ways to detect Golden & Silver Ticket usage! Some of the topics covered: How attackers go from zero to (Domain) Admin MS14-068: the vulnerability, the exploit, and the danger. "SPN Scanning" with PowerShell to identify potential targets without network scans (SQL, Exchange, FIM, webservers, etc.). Exploiting weak service account passwords as a regular AD user. Mimikatz, the attacker's multi-tool. Using Silver Tickets for stealthy persistence that won't be detected (until now). Identifying forged Kerberos tickets (Golden & Silver Tickets) on your network. Detecting offensive PowerShell tools like Invoke-Mimikatz. PowerShell v5 security enhancements Active Directory attack mitigation. Kerberos expertise is not required since the present...https://peertube.dodges.it/static/streaming-playlists/hls/833e0c36-0372-4734-bd1f-5784574d157a/6546407e-07a0-4327-add9-18dc948ddfa7-master.m3u8https://peertube.dodges.it/videos/embed/hcYdQMYjcZe7K5hmvcncrL2939002026-10-27T11:39:59.448ZBlackHatInfoSecBlack Hat USA 2015Information SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/pZb7wqU7yz7htzNYnWzctL2026-10-23T10:06:00.406Zhttps://peertube.dodges.it/lazy-static/thumbnails/cf3daaf7-1963-4aa0-aa09-9929498262af.jpgLocknote: Conclusions and Key Takeaways from Black Hat USA 2022To close out Black Hat USA 2022, join Black Hat Founder Jeff Moss and Review Board members Sheila A. Berta, Chris Eng, Natalie Silvanovich and Matt Suiche for an insightful conversation on the most pressing issues facing the InfoSec community. This Locknote will feature a candid discussion on the key takeaways coming out of the conference and how these trends will impact future InfoSec strategies. Presented by: Jeff Moss, Justine Bone, Chris Eng, Natalie Silvanovich & Matt Suiche Full Abstract: https://www.blackhat.com/us-22/briefings/schedule/#locknote-conclusions-and-key-takeaways-from-black-hat-usa--29172 --- Mirrored from YouTube: https://www.youtube.com/watch?v=klVlP6LTtw0https://peertube.dodges.it/static/streaming-playlists/hls/c23dd0ec-f207-44b3-950d-a1a5307b1d7e/40aeaac7-688d-47d6-b930-2c912b84d6d5-master.m3u8https://peertube.dodges.it/videos/embed/pZb7wqU7yz7htzNYnWzctL2871002026-10-27T12:01:30.860ZYESBlackhatNOhttps://peertube.dodges.it/w/5bPsnJgCaE4W7qzDYzN8Q52026-10-23T10:07:11.671Zhttps://peertube.dodges.it/lazy-static/thumbnails/5a3e32e6-c944-42c0-a346-a4fd4a31db52.jpgAbusing Microsoft Kerberos: Sorry You Guys Don't Get ItBy Alva Duckwall and Benjamin Delpy "Microsoft Active Directory uses Kerberos to handle authentication requests by default. However, if the domain is compromised, how bad can it really be? With the loss of the right hash, Kerberos can be completely compromised for years after the attacker gained access. Yes, it really is that bad. In this presentation Skip Duckwall, @passingthehash on twitter and Benjamin Delpy, @gentilkiwi on twitter and the author of Mimikatz, will demonstrate just how thoroughly compromised Kerberos can be under real world conditions. Prepare to have all your assumptions about Kerberos challenged!" --- Mirrored from YouTube: https://www.youtube.com/watch?v=lJQn06QLwEwhttps://peertube.dodges.it/static/streaming-playlists/hls/21e73cc3-983d-4f00-9cae-298968fe69e0/89cbb69b-cb5d-4e6c-9a59-f3e90e0d935f-master.m3u8https://peertube.dodges.it/videos/embed/5bPsnJgCaE4W7qzDYzN8Q53033002026-10-27T12:01:40.782ZBlack HatInfoSecBlack Hat USA 2014Information SecurityBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/537XT5dA1zVRh1LkqororY2026-10-23T10:08:04.825Zhttps://peertube.dodges.it/lazy-static/thumbnails/60f048f4-9f8d-421d-83ee-17e296b3158c.jpgHow We Created the First SHA-1 Collision and What it Means for Hash SecurityIn this talk, we recount how we found the first SHA-1 collision. We delve into the challenges we faced from developing a meaningful payload, to scaling the computation to that massive scale, to solving unexpected cryptanalytic challenges that occurred during this endeavor. By Elie Bursztein Read More: https://www.blackhat.com/us-17/briefings/schedule/index.html#how-we-created-the-first-sha-1-collision-and-what-it-means-for-hash-security-7693 --- Mirrored from YouTube: https://www.youtube.com/watch?v=Zl1TZJGfvPohttps://peertube.dodges.it/static/streaming-playlists/hls/20b05564-699c-42d8-b91a-22c7e3c87c02/dcd27e43-a004-499d-be2a-bea41d661c63-master.m3u8https://peertube.dodges.it/videos/embed/537XT5dA1zVRh1LkqororY2591002026-10-27T12:01:34.991ZBlack HatBlack Hat USAInformation SecurityInfoSecBHUSAYESBlackhatNOhttps://peertube.dodges.it/w/o5aC1eRh3j7ry7qgQtEoiR2026-10-23T10:10:11.588Zhttps://peertube.dodges.it/lazy-static/thumbnails/5f5f864b-5b71-482a-8403-704aebf72663.jpgFirmware.RE: Firmware Unpacking, Analysis and Vulnerability-Discovery as a ServiceBy Jonas Zaddach "As embedded systems are more than ever present in our society, their security is becoming an increasingly important issue. However, with many recent analysis of individual firmware images, embedded systems acquired a reputation of being very insecure. However, we still lack a global understanding of embedded systems security as well as the tools and techniques needed to support such general claims. In this talk, we present the first public, large scale, analysis of firmware images: we unpacked 32K firmware images into 1.7M individual files, which we then analyze. We leverage this large scale analysis to bring new insights and outline several open challenges when performing such experiments. We also show the main benefits of looking at many different devices at the same time and of linking our results with other large scale datasets, such as the ZMap SSL collection. We discuss results that would not have been possible to achieve without such a wide-scale analysis. In summary, without performing sophisticated static analysis, we discovered a total of 38 previously unknown vulnerabilities in over 693 firmware images. Moreover, by correlating similar files inside apparently unrelated firmware images, we were able to extend some of those vulnerabilities to over 123 different products. We also confirmed that some of these vulnerabilities altogether are affecting at least 140K devices accessible on the public Internet. We believe that this project, which we plan to provide as a service on the long term, will help shed some light on the security of embedded devices." --- Mirrored from YouTube: https://www.youtube.com/watch?v=bfH_Ah5X9v8https://peertube.dodges.it/static/streaming-playlists/hls/b2bdf460-f04c-4553-965a-b2ccea9da983/072f3d71-57c1-46df-9512-8242ba9132b4-master.m3u8https://peertube.dodges.it/videos/embed/o5aC1eRh3j7ry7qgQtEoiR2722002026-10-27T12:10:52.646ZBlackHatBlack Hat Europe 2014Information SecurityInfoSecBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/p7zNZZ17xxCcpHcQJ4siiJ2026-10-23T10:12:26.832Zhttps://peertube.dodges.it/lazy-static/thumbnails/562685c3-f24b-4855-869d-0fb728b4fc67.jpgGameOver Zeus: Badguys And Backendsby Elliott Peterson & Michael Sandee & Tillmann Werner This presentation will detail many of the individuals responsible for GameOver Zeus and Cryptolocker, summarize the law enforcement investigation, and highlight the novel legal processes used to wrest control of the botnet from its operators. GameOver Zeus represents one of the most complex, and successful, law enforcement operations against cyber crime to date. The talk will highlight extensive industry and government partnerships, the many international agencies that played a part, and discuss some of the methods used by private industry and law enforcement personnel to track and identify those responsible for the malware. The investigation resulted in the highest ever reward offered for a cyber criminal: $3,000,000 for Evgeniy Bogachev. --- Mirrored from YouTube: https://www.youtube.com/watch?v=KkEVwswqIBshttps://peertube.dodges.it/static/streaming-playlists/hls/bb2d7cf8-2e1d-408f-a43b-1d2285f7d968/1bef33b7-7be7-4642-958b-8271e392960d-master.m3u8https://peertube.dodges.it/videos/embed/p7zNZZ17xxCcpHcQJ4siiJ3012002026-10-27T12:10:57.431ZInfoSecBlack Hat USA 2015BlackHatBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/vLucPXB8zEZLs5FAi3ePoZ2026-10-23T10:14:05.184Zhttps://peertube.dodges.it/lazy-static/thumbnails/9449bd36-d5ce-4e7a-b369-eb9994e705c6.jpgThe Yandex Leak: How a Russian Search Giant Uses Consumer DataIn late January 2023, almost 45 GB of source code from the Russian search giant Yandex was leaked on BreachForums by a former Yandex employee. While the leak itself did not contain user data, it reportedly contained the source code for all major Yandex services, including Metrika, which collects user analytics through a widely used SDK, and Crypta, Yandex's behavioral analytics technology.... By: Kaileigh McCrea Full Abstract and Presentation Materials: https://www.blackhat.com/us-23/briefings/schedule/#the-yandex-leak-how-a-russian-search-giant-uses-consumer-data-33301 --- Mirrored from YouTube: https://www.youtube.com/watch?v=qAqkOPadkDAhttps://peertube.dodges.it/static/streaming-playlists/hls/f10f20d8-1fb6-40c4-8ff5-b61c45dd5a99/4e6aa9ab-0620-458d-88f8-8bf7e3c849cc-master.m3u8https://peertube.dodges.it/videos/embed/vLucPXB8zEZLs5FAi3ePoZ1979002026-10-27T12:20:17.059ZYESBlackhatNOhttps://peertube.dodges.it/w/cDj9eomc18N2MSnPL2eozR2026-10-23T10:14:40.800Zhttps://peertube.dodges.it/lazy-static/thumbnails/e12171db-9f16-49b6-a038-c1122687bc84.jpgExploiting XXE Vulnerabilities In File Parsing Functionalityby Willis Vandevanter In this 25-minute briefing, we will discuss techniques for exploiting XXE vulnerabilities in File Parsing/Upload functionality. Specifically, XML Entity Attacks are well known, but their exploitation inside XML supported file formats such as docx, xlsx, pptx, and others are not. Discussing the technically relevant points step by step, we will use real world examples from products and recent bug bounties. Finally, in our experience, creating 'XXE backdoored' files can be a very slow process. We will introduce our battle tested tool for infecting the file formats discussed. --- Mirrored from YouTube: https://www.youtube.com/watch?v=LZUlw8hHp44https://peertube.dodges.it/static/streaming-playlists/hls/5e4a39a0-1967-47fc-8b32-448fee06ab9b/11f14da8-ed0f-42be-a532-cbd0817e2398-master.m3u8https://peertube.dodges.it/videos/embed/cDj9eomc18N2MSnPL2eozR1331002026-10-27T12:20:26.355ZBlack HatBlackHatInfoSecInformation SecurityBlack Hat USA 2015YESBlackhatNOhttps://peertube.dodges.it/w/iH1tZ4M44jm3NUkSUdNxVE2026-10-23T10:16:58.633Zhttps://peertube.dodges.it/lazy-static/thumbnails/58000637-39ff-4bd8-a444-1922be8b095b.jpgAttacking and Defending the Microsoft Cloud (Office 365 & Azure AD)This presentation focuses on the Microsoft Cloud (Office 365 & Azure AD) and explores the most common attacks against the Cloud and describes effective defenses and mitigation. While the content is focused on the Microsoft Cloud, some of the attack and defense topics are applicable to other cloud providers and are noted where applicable. By: Sean Metcalf and Mark Morowczynski Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#attacking-and-defending-the-microsoft-cloud-office---azure-ad-14553 --- Mirrored from YouTube: https://www.youtube.com/watch?v=SG2ibjuzRJMhttps://peertube.dodges.it/static/streaming-playlists/hls/8f65262d-5356-451b-a984-9b361ab2fff4/2213b405-ed9b-48bb-83c6-ef0287a145d3-master.m3u8https://peertube.dodges.it/videos/embed/iH1tZ4M44jm3NUkSUdNxVE3023002026-10-27T12:29:30.292ZYESBlackhatNOhttps://peertube.dodges.it/w/svHZQ8y3SwFkN2X5vewwi92026-10-23T10:18:30.222Zhttps://peertube.dodges.it/lazy-static/thumbnails/a8a1dbcd-3fb1-4bb3-9b71-f4beb4dbe625.jpgDetecting Malicious Files with YARA Rules as They Traverse the NetworkIn this presentation, I will show how you can open source Zeek IDS (formerly bro) and how some custom developed scripts can be used to extract files from the network and identify attacks on an early stage before it causes more damage. Scanning for YARA files on the network has the benefit of increased performance, as compared to scanning several gigabytes or terabytes on the endpoint, as well as target specific mime types, used for malware delivery. By David Bernal Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#detecting-malicious-files-with-yara-rules-as-they-traverse-the-network-16221 --- Mirrored from YouTube: https://www.youtube.com/watch?v=irai0kk942Ehttps://peertube.dodges.it/static/streaming-playlists/hls/d6b40e5c-a701-4399-9f02-a81b5e3b673a/12546ccc-463e-40a5-84f2-91f342f88aef-master.m3u8https://peertube.dodges.it/videos/embed/svHZQ8y3SwFkN2X5vewwi91207002026-10-27T12:29:33.489ZYESBlackhatNOhttps://peertube.dodges.it/w/49QRCGw23vJVQZT3MeqQ7n2026-10-23T10:20:31.776Zhttps://peertube.dodges.it/lazy-static/thumbnails/2d201275-f00f-4af1-9afb-dd24ada59f2e.jpgBlueBorne - A New Class of Airborne Attacks that can Remotely Compromise Any Linux/IoT DeviceIn this talk we will present the ramifications of airborne attacks, which bypass all current security measures and provide hackers with a contagious attack, capable of jumping over "air-gapped" networks and allow easy full remote code execution on devices from every major OS. We will demonstrate two out of eight zero-day exploits we've found in the Bluetooth stacks of Linux, Android, Windows, and iOS. We will show how easy it is to infect devices ranging from ordinary PCs to the emerging realm of IoT devices, requiring no user interaction, and nothing more than an active Bluetooth. by Ben Seri & Gregory Vishnepolsky Full Abstract & Presentation Materials: https://www.blackhat.com/eu-17/briefings.html#blueborne-a-new-class-of-airborne-attacks-that-can-remotely-compromise-any-linux-iot-device --- Mirrored from YouTube: https://www.youtube.com/watch?v=WWQTlogqF1Ihttps://peertube.dodges.it/static/streaming-playlists/hls/1987797c-9a52-4051-80fd-a0dc3c78f3e1/a5dc4016-a05b-4cf0-bed2-85ee6f8be4cd-master.m3u8https://peertube.dodges.it/videos/embed/49QRCGw23vJVQZT3MeqQ7n3447002026-10-27T12:41:42.677ZBlack HatBlack Hat EuropeBlack Hat Europe 2017BHEUInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/fDnBPd5ciWxsZB17ECWKA22026-10-23T10:21:46.462Zhttps://peertube.dodges.it/lazy-static/thumbnails/6c2951c4-fd18-4fd8-a1c1-8a78ca90c570.jpgLTE & IMSI Catcher Mythsby Ravishankar Borgaonkar & Altaf Shaik & N. Asokan & Valtteri Niemi & Jean-Pierre Seifert It is true that LTE (4G) is more secure than its old generations GSM (2G) & UMTS (3G). In theory, most of the traditional IMSI catchers would not work in a straightforward manner against LTE-based mobile phones due to LTE's enhanced security mechanisms. However, in practice, it is possible to bypass these LTE security features, due to vulnerabilities in baseband software and in deployed LTE networks. In this talk, we build an LTE IMSI catcher and show how most popular phones fail when they are on LTE networks. --- Mirrored from YouTube: https://www.youtube.com/watch?v=t6q97Vzu5Ukhttps://peertube.dodges.it/static/streaming-playlists/hls/7697c871-2166-47b5-8bfb-4ffebcb39fb1/47abea0e-7f3f-4c8b-bd0f-196d79bfed15-master.m3u8https://peertube.dodges.it/videos/embed/fDnBPd5ciWxsZB17ECWKA23984002026-10-27T12:41:48.212ZBlack Hat Europe 2015BlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/bvJHCCuER85KNmMH2LyLiu2026-10-23T10:24:11.071Zhttps://peertube.dodges.it/lazy-static/thumbnails/d3d5a896-573c-420f-a2ca-5e31bac3d3b9.jpgBlack Hat DC 2010 - Hacking the Smartcard ChipBy: Christopher Tarnovsky From start to finish, we will walk through how a current generation smartcard was successfully compromised. The talk will discuss everything that was required in the order the events took place. We will cram several months into an hour! PS- The talk will be very technical mixed hardware and software (60% hardware, 40% software). --- Mirrored from YouTube: https://www.youtube.com/watch?v=62DGIUpscnYhttps://peertube.dodges.it/static/streaming-playlists/hls/5522481d-83a5-4c65-b865-f2838e88d446/544dca47-3c80-4a3e-8854-34f01bbf18c6-master.m3u8https://peertube.dodges.it/videos/embed/bvJHCCuER85KNmMH2LyLiu4353002026-10-27T12:53:40.255ZHatInformation SecurityInfoSecBriefingsBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/f4nfkKuidQDaZ23RnZTUQb2026-10-23T10:25:57.154Zhttps://peertube.dodges.it/lazy-static/thumbnails/f2a29524-d8ff-4474-83dc-ff65516fe319.jpgBlack Hat Asia 2026 | Bad Vibes - Pwning Coding Agents 70 Times With The Same BugsIt seems like everyone with access to a keyboard is vibe-coding these days, with an increasingly significant amount of code being written through the use of AI Coding Agents. These tools, whether specialized IDEs, IDE extensions, or CLI utilities, come with varying features, interfaces and architectures. However, they all suffer from the same fundamental, severe vulnerabilities and flawed design choices, which we will expose. Our research has uncovered 70+ serious vulnerabilities across a broad array of major platforms, including GitHub Copilot, Google Gemini CLI and Antigravity, OpenAI Codex, Claude Code, Amazon Q and Kiro, Cursor, and more. These vulnerabilities demonstrate that the industry is collectively making similar, fundamental mistakes in securing these agentic applications, which means that not only coding agents may suffer from similar problems. In this session, we will first map out what an attacker needs to achieve in order to truly compromise an AI agent. We will present a variety of issues which lead to severe consequences, making coding agents perform actions significantly more devious than just writing terrible code. Come vibe with us as we demonstrate these attacks across multiple products, showing how to turn a successful prompt injection into a devastating machine compromise using various command-line tricks, creative path manipulation techniques, and turning sandbox features against themselves to bypass established defenses. By detailing the common, critical mistakes shared across these vendors, we aim to provide developers and architects with actionable takeaways to avoid these deep-seated vulnerabilities and better secure the future of AI development tools. Philip Tsukerman | Vulnerability Research Team Lead, Cyberark Nil Ashkenazi | Cyber Security Researcher, Cyberark Alon Zahavi | Senior Security Researcher, Cyberark https://blackhat.com/asia-26/briefings/schedule/?#bad-vibes---pwning-coding-agents-70-times-with-the-same-bugs-5...https://peertube.dodges.it/static/streaming-playlists/hls/71d84442-103a-4921-ac2a-2c66ca2e3922/e9cc11f6-2ef6-44bf-9628-7a991b6739cc-master.m3u8https://peertube.dodges.it/videos/embed/f4nfkKuidQDaZ23RnZTUQb2034002026-10-27T12:53:44.726ZYESBlackhatNOhttps://peertube.dodges.it/w/qAaKqiSx3W4b8a8cV3mDMH2026-10-23T10:26:33.303Zhttps://peertube.dodges.it/lazy-static/thumbnails/f4e14453-ec2e-4c34-ad5e-a08dbb3e790b.jpgBlack Hat USA 2024 HighlightsCheck out all the highlights from Black Hat USA 2024 at the Mandalay Bay in Las Vegas. Visit our Flickr page for the event photos: https://www.flickr.com/photos/blackhatevents/albums/72177720319399624/ #cybersecurity #infosec #blackhat --- Mirrored from YouTube: https://www.youtube.com/watch?v=fsLv2Yb0fKshttps://peertube.dodges.it/static/streaming-playlists/hls/c7209fb2-1720-49a1-9b93-02723a4e7d2f/9a29c306-ef67-4fdf-93f3-c0b345675fe2-master.m3u8https://peertube.dodges.it/videos/embed/qAaKqiSx3W4b8a8cV3mDMH145002026-10-27T12:57:51.647ZYESBlackhatNOhttps://peertube.dodges.it/w/vqF14QnA3Rvarxq6dtKNjp2026-10-23T10:27:33.642Zhttps://peertube.dodges.it/lazy-static/thumbnails/e078125f-b470-4f59-b482-a89b4061ae91.jpgMost Ransomware Isn't As Complex As You Might Thinkby Engin Kirda In this presentation, hear the findings of new academic research into ransomware in which we analyzed more than 1,300 samples captured in the wild from 2006 and 2014 from 15 malware families - including Calelk, Cryptolocker, CryptoWall, Gpcode, Filecoder, Kevtor, Reveton, Seftad, Urausy and Winlock. Our results indicate that (while ransomware authors have made some advancements in encryption, deletion and communication techniques over those eight years) the real impact on victims who don't pay is typically still both nondestructive and preventable. Even the very small set of truly destructive zero-day ransomware samples with sophisticated encryption capabilities we identified can be detected and stopped. First, learn how ransomware appears to have changed - and stayed the same - from 2006 and 2014, including constants, commonalities and advancements across 15 ransomware families in that timeframe. For example, we verified the widely held belief that ransomware attacks have been increasing in volume in recent years. In fact, they grew by more than 500% from 2012-13. However, the majority have not been sufficiently increasing in sophistication in that timeframe to truly take victims data or hardware hostage. Discover previously undocumented aspects of ransomware attacks with a focus on distinctive and common behaviors among different families. Second, see a comparison of the threatened impacts vs. the real impacts of the studied ransomware, demonstrating that the vast majority is essentially bluffing its own destructive capabilities in order to extract funds from the victim who is afraid of losing personal and/or valuable data or equipment. More than 94% of ransomware in our multi-year study simply attempted to lock the victims desktop and demand ransom, or used very similar and superficial approaches to encrypt or delete the victims files. Third, delve into the inner workings of rare destructive ransomware to ascertain key attributes in the code...https://peertube.dodges.it/static/streaming-playlists/hls/ee4ae82c-4dc8-4752-a67f-115c1ac3e9cb/1e0fa4e8-02a9-43a5-8b96-29550f602c4d-master.m3u8https://peertube.dodges.it/videos/embed/vqF14QnA3Rvarxq6dtKNjp1399002026-10-27T12:57:54.761ZBlack Hat USA 2015BlackHatInfoSecBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/bN81pARbqZSkAde9aD2kdB2026-10-23T18:48:42.789Zhttps://peertube.dodges.it/lazy-static/thumbnails/dcaa0a4e-12d0-40f3-9bff-b3a80a1ab153.jpgProcess Injection Techniques - Gotta Catch Them AllIn this presentation, we provide the most comprehensive to-date "Windows process injection" collection of techniques - the first time such resource is available, that really covers all (or almost all) true injection techniques. We focus on Windows 10 x64, and on injections from running 64-bit medium integrity process to another running 64-bit medium integrity process, without privilege elevation. By Itzik Kotler and Amit Klein Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#process-injection-techniques---gotta-catch-them-all-16010 --- Mirrored from YouTube: https://www.youtube.com/watch?v=xewv122qxnkhttps://peertube.dodges.it/static/streaming-playlists/hls/576beb12-37e7-4eac-b922-51cec53d031f/e0341def-ba6d-49e1-8c2d-fed6f2cdad51-master.m3u8https://peertube.dodges.it/videos/embed/bN81pARbqZSkAde9aD2kdB2910002026-10-27T13:03:51.773ZYESBlackhatNOhttps://peertube.dodges.it/w/dYw71cyxYHnyHM4FHTRRFW2026-10-23T18:49:14.998Zhttps://peertube.dodges.it/lazy-static/thumbnails/497d4027-7851-43d5-bdb0-91bd337edebb.jpgBlack Hat Europe 2024 at the ExCel, London December 9-12Join us at Black Hat Europe 2024 at the ExCel, London on December 9-12, 2024. The premier cybersecurity event of the year. #cybersecurity #infosec --- Mirrored from YouTube: https://www.youtube.com/watch?v=ingvkaCR1dkhttps://peertube.dodges.it/static/streaming-playlists/hls/6911ddf2-c3a6-4d79-9411-06fda61a41a8/9ec5da62-67c3-440d-a9e7-4bc50d402ec2-master.m3u8https://peertube.dodges.it/videos/embed/dYw71cyxYHnyHM4FHTRRFW46002026-10-27T13:03:53.897ZYESBlackhatNOhttps://peertube.dodges.it/w/5UfmEtjYUj79LZ9MuV47VC2026-10-23T18:51:34.633Zhttps://peertube.dodges.it/lazy-static/thumbnails/3217b52e-fc35-4134-a3ed-1b516d5092ce.jpgThe NSA Playset: A Year Of Toys And Toolsby Michael Ossmann Inspired by the contents of the leaked NSA ANT catalog, the NSA Playset project has produced an array of gadgets with capabilities similar to those employed by the spooks. I will review the entire collection since the start of the project. This includes new tools for USB, PCI Express, I2C, GSM, Bluetooth, and a family of RF retroreflectors for eavesdropping on a wide variety of electronic devices. Now you can play along with the NSA! --- Mirrored from YouTube: https://www.youtube.com/watch?v=AdeMX6l9qNchttps://peertube.dodges.it/static/streaming-playlists/hls/27b013fa-8c71-4b61-af5e-0e5283c58986/d71b1e02-df37-425d-bf30-14b02b19c3e0-master.m3u8https://peertube.dodges.it/videos/embed/5UfmEtjYUj79LZ9MuV47VC3025002026-10-27T13:17:56.332ZBlackHatInfoSecBlack Hat USA 2015Information SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/bKw8XFXrnsZ97g3G9MQfFH2026-10-23T18:52:33.513Zhttps://peertube.dodges.it/lazy-static/thumbnails/a506adfd-564a-4c7c-aee9-fdf712ea47bb.jpgChaosDB: How We Hacked Databases of Thousands of Azure Customers (rev)In August 2021, the Wiz Research Team uncovered ChaosDB - a critical cross-tenant vulnerability in Azure Cosmos DB, Azure's flagship managed database solution which is used by countless organizations. This vulnerability is every company’s worst nightmare: even a flawless environment is affected. Easily exploitable, this bug allowed any Azure user to have full admin access to thousands of customers' databases, including Fortune 500 companies, without any procedural authorization.This is an unprecedented cloud vulnerability... By: Nir Ohfeld & Sagi Tzadik Full Abstract & Presentation Materials: https://www.blackhat.com/eu-21/briefings/schedule/#chaosdb-how-we-hacked-databases-of-thousands-of-azure-customers-25200 --- Mirrored from YouTube: https://www.youtube.com/watch?v=QiJAxo30w6Uhttps://peertube.dodges.it/static/streaming-playlists/hls/570ef102-a1db-4384-a72f-edc8e992e347/b5dcdc0c-731e-416a-bdf9-2c8cbf375695-master.m3u8https://peertube.dodges.it/videos/embed/bKw8XFXrnsZ97g3G9MQfFH2345002026-10-27T13:18:00.236ZYESBlackhatNOhttps://peertube.dodges.it/w/2Bw7DU2RhZQNjWeaZPgL4F2026-10-23T18:52:59.942Zhttps://peertube.dodges.it/lazy-static/thumbnails/40196375-a881-4b18-bc99-303034b9d8f5.jpgBlack Hat Europe 2023: Why Attend the World's Premier Technical Cybersecurity ConferenceJoin us live, in-person in London, December 4-7 at the ExCel for Black Hat Europe 2023! The world's premier technical cybersecurity conference: https://www.blackhat.com/eu-23/ #cybersecurity #infosec #hacking #security --- Mirrored from YouTube: https://www.youtube.com/watch?v=6BFdBnswcaAhttps://peertube.dodges.it/static/streaming-playlists/hls/0d0ebabe-014f-41b5-859b-7f178f1a74ad/45bb0e7b-013f-4fa3-b655-ed4310194634-master.m3u8https://peertube.dodges.it/videos/embed/2Bw7DU2RhZQNjWeaZPgL4F44002026-10-27T13:21:28.765ZYESBlackhatNOhttps://peertube.dodges.it/w/dhkwnEFxv92jSXbj8NNYds2026-10-23T18:55:08.565Zhttps://peertube.dodges.it/lazy-static/thumbnails/c7409934-182a-4daf-b2e0-37fcaed22905.jpg802.1x and Beyond!By Brad Antoniewicz IEEE 802.1x has been leveraged for a long time for authentication purposes. Up until this point, little has been done to help researchers expose vulnerabilities within the systems that implement the protocol. In this talk, we'll dissect IEEE 802.1x, its surrounding protocols (RADIUS/EAP), provide testing tools, and detail a number of vulnerabilities identified in popular supporting systems. We'll wrap up demonstrating a vulnerability within a RADIUS server that allows for remote code execution over 802.11 wireless using WPA Enterprise before the user is authorized to join the network. --- Mirrored from YouTube: https://www.youtube.com/watch?v=uXukuhVebtYhttps://peertube.dodges.it/static/streaming-playlists/hls/6375989c-6742-475e-a8af-55b4e66ebaa2/c97b1c52-10b7-4e13-804f-521fb5c8db62-master.m3u8https://peertube.dodges.it/videos/embed/dhkwnEFxv92jSXbj8NNYds1906002026-10-27T13:21:32.271ZBlack Hat USA 2014Black HatInformation SecurityInfoSecBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/gp7Jmiw3SctVVgmhBuzXK62026-10-23T18:56:47.483Zhttps://peertube.dodges.it/lazy-static/thumbnails/05dff422-8a5d-44a1-82d5-bea6e4a2f9a9.jpgSmishmash - Text Based 2fa Spoofing Using OSINT, Phishing Techniques and a Burner PhoneIn recent years the data leaks have escalated, and leaked passwords and usernames have become a common attack vector in phishing attacks. Until recently phone numbers were commonly overlooked by attackers as well as red teams. This year has seen an increase in attacks circumventing text based 2fa. In this talk, the researchers will show how it's possible to gather data from publicly available sources and connect the phone numbers most likely used by two factor authentication systems to other leaked email and login credentials. Presented by: Thomas Olofsson & Mikael Byström Full Abstract and Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#smishmash---text-based-fa-spoofing-using-osint-phishing-techniques-and-a-burner-phone-27053 --- Mirrored from YouTube: https://www.youtube.com/watch?v=XAGTnJZwLtQhttps://peertube.dodges.it/static/streaming-playlists/hls/7cb3558f-db3d-4a5a-9a0f-ebb493666147/73d47375-fd7c-402c-b8a8-79c5c0f8a09e-master.m3u8https://peertube.dodges.it/videos/embed/gp7Jmiw3SctVVgmhBuzXK61941002026-10-27T13:32:55.777ZYESBlackhatNOhttps://peertube.dodges.it/w/cpYvSgygpnnM9xsA6HxsBB2026-10-23T18:58:04.517Zhttps://peertube.dodges.it/lazy-static/thumbnails/214f9d80-9fde-4cd0-bd73-d7ff825bf4dd.jpgZigBee Exploited The Good, The Bad, And The Uglyby Tobias Zillner & Sebastian Strobl ZigBee is one of the most widespread communication standards used in the Internet of Things and especially in the area of smart homes. If you have, for example, a smart light bulb at home, the chance is very high that you are actually using ZigBee. Popular lighting applications, such as Philips Hue or Osram Lightify are based on this standard. Usually, IoT devices have very limited processing and energy resources, and therefore not capable of implementing well-known communication standards, such as Wifi. ZigBee is, however, an open, publicly available alternative that enables wireless communication for such devices. ZigBee also provides security services for key establishment, key transport, frame protection, and device management that are based on established cryptographic algorithms. So, is a ZigBee home automation network with applied security and smart home communication protected? No, absolutely not. Due to interoperability and compatibility requirements, as well as the application of legacy security concepts, it is possible to compromise ZigBee networks and take over control of all connected devices. For example, it is entirely possible for an external party to gain control over every smart light bulb that supports the ZigBee Light Link profile. This is made possible because the initial key transport is done in an unsecured way, and support of this weak key transport is, in fact, even required by the standard itself. Due to these shortfalls and limitations created by the manufacturers themselves, the security risk in this last tier communication standard can be considered as very high. This talk will provide an overview of the actual applied security measures in ZigBee, highlight the included weaknesses, and show practical exploitations of actual product vulnerabilities, as well as our recently developed ZigBee security-testing framework tool. --- Mirrored from YouTube: https://www.youtube.com/watch?v=9xzXp-zPkjUhttps://peertube.dodges.it/static/streaming-playlists/hls/5c6d75e6-036d-4764-a7e7-26492229acc1/16970ce9-44c8-4b41-ad12-c51f8cec720e-master.m3u8https://peertube.dodges.it/videos/embed/cpYvSgygpnnM9xsA6HxsBB2543002026-10-27T13:33:04.165ZBlack Hat USA 2015Information SecurityInfoSecBlackHatBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/fSQfWkuyNvL3MnR3vauMTT2026-10-23T18:59:17.844Zhttps://peertube.dodges.it/lazy-static/thumbnails/e44bbc69-b097-4b1b-8d62-ee6ea140f2a1.jpgAttacking The XNU Kernel In El Capitainby Luca Todesco The XNU kernel powers Apple's operative systems. As their market share grows, exploitation of OS X and iOS is gaining popularity. The introduction of kernel exploit mitigations such as KASLR and SMEP has been overcome with new techniques. "vm_map_copy" corruption, a well-known technique useful for bypassing KASLR and SMAP / AS Isolation, has been mitigated in 10.11 & iOS 9. My talk will demonstrate new techniques to get around XNU's latest changes and I will demonstrate a real kernel exploit for the most recent version of El Capitain to bypass System Integrity Protection (rootless). --- Mirrored from YouTube: https://www.youtube.com/watch?v=k550C0V79tshttps://peertube.dodges.it/static/streaming-playlists/hls/7878de97-92b0-4084-a337-4eb019a92e25/416e4e75-3344-438f-b82e-3a8a35fa1775-master.m3u8https://peertube.dodges.it/videos/embed/fSQfWkuyNvL3MnR3vauMTT2243002026-10-27T13:41:42.666ZBlackHatBlack Hat Europe 2015Black HatInformation SecurityInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/waFSFvDDmFfBiCiNt4u5Wf2026-10-23T19:01:31.267Zhttps://peertube.dodges.it/lazy-static/thumbnails/26e1eb1c-979f-4d91-8fae-b06cdfc42e7a.jpgBeyond the Mcse: Active Directory for the Security Professionalby Sean Metcalf Active Directory (AD) is leveraged by 95% of the Fortune 1000 companies for its directory, authentication, and management capabilities. This means that both Red and Blue teams need to have a better understanding of Active Directory, it's security, how it's attacked, and how best to align defenses. This presentation covers key Active Directory components which are critical for security professionals to know in order to defend AD. Properly securing the enterprise means identifying and leveraging appropriate defensive technologies. The provided information is immediately useful and actionable in order to help organizations better secure their enterprise resources against attackers. Highlighted are areas attackers go after including some recently patched vulnerabilities and the exploited weaknesses. This includes the critical Kerberos vulnerability (MS14-068), Group Policy Man-in-the-Middle (MS15-011 & MS15-014) and how they take advantages of AD communication. Some of the content covered: Differing views of Active Directory: admin, attacker, and infosec. The differences between forests and domains, including how multi-domain AD forests affect the security of the forest. Dig into trust relationships and the available security features describing how attack techniques are impacted by implementing these trust security features. AD database format, files, and object storage (including password data). Read-Only Domain Controllers (RODCs), security impact, and potential issues with RODC implementation. Key Domain Controller information and how attackers take advantage. Windows authentication protocols over the years and their weaknesses, including Microsoft's next-generation credential system, Microsoft Passport, and what it means for credential protection. Security posture differences between AD on-premises and in the cloud (Microsoft Azure AD vs Office 365). Key Active Directory security features in the latest Windo...https://peertube.dodges.it/static/streaming-playlists/hls/f44c6d45-708d-425c-95a6-1cf71e73884a/9d087203-300c-4468-a057-b6c2bc834853-master.m3u8https://peertube.dodges.it/videos/embed/waFSFvDDmFfBiCiNt4u5Wf2993002026-10-27T13:41:46.676ZInformation SecurityBlack HatBlackHatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/84J7JXprMvjtDyjSF25jTL2026-10-23T19:03:56.243Zhttps://peertube.dodges.it/lazy-static/thumbnails/65ff6328-983f-4715-a8d4-cca493586db9.jpgHacking the Wireless World with Software Defined Radio - 2.0by Balint Seeber Ever wanted to communicate with a NASA space probe launched in 1978, or spoof a restaurant's pager system? There are surprising similarities! How about use an airport's Primary Surveillance RADAR to build your own bistatic RADAR system and track moving objects? What sorts of RF transactions take place in RFID systems, such as tollbooths, building security, and vehicular keyless entry? Then there's 'printing' steganographic images onto the radio spectrum. Wireless systems, and their radio signals, are everywhere: consumer, corporate, government, amateur - widely deployed and often vulnerable. If you have ever wondered what sort of information is buzzing around you, this talk will introduce how you can dominate the RF spectrum by 'blindly' analyzing any signal, and then begin reverse engineering it from the physical layer up. I will demonstrate how these techniques can be applied to dissect and hack RF communications systems, such as those above, using open source software and cheap radio hardware. In addition, I'll show how long-term radio data gathering can be used to crack poorly implemented encryption schemes, such as the Radio Data Service's Traffic Message Channel. I'll also look briefly at some other systems that are close to my heart: reversing satellite communications, tracking aircraft using Mode S and visualizing local airspace in real-time on a 3D map, monitoring the health of aircraft with ACARS (how many faults have been reported by the next plane you'll be traveling on, e.g. do the toilets work?), and hunting down the source of an interfering clandestine radio transmission. If you have any SDR equipment, bring it along! --- Mirrored from YouTube: https://www.youtube.com/watch?v=MKbU3HhG2vkhttps://peertube.dodges.it/static/streaming-playlists/hls/3935282f-41b8-49c5-970e-9f57d1d9bcd2/70a998eb-3d3b-444f-8d8f-f4d3e8202726-master.m3u8https://peertube.dodges.it/videos/embed/84J7JXprMvjtDyjSF25jTL3572002026-10-27T13:54:26.828ZBlack Hat Asia 2015Information SecurityInfoSecBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/k5KhdLTe1c18BSc862yVZK2026-10-23T19:05:22.222Zhttps://peertube.dodges.it/lazy-static/thumbnails/8a25e2fe-c062-42f1-bf8d-23def7ff188c.jpgMITRE ATT&CK: The Play at Home EditionThe presentation will discuss how different teams like threat intelligence analysts, threat hunters, SOC analysts, red teamers, and even executives can use ATT&CK to improve how they track threats and protect against them. Regardless of their role, attendees will learn how they can hit the ground running with ATT&CK on the first day they return home. By Katie Nickels and Ryan Kovar Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#mitre-attck-the-play-at-home-edition-15035 --- Mirrored from YouTube: https://www.youtube.com/watch?v=wlJElPA0xqYhttps://peertube.dodges.it/static/streaming-playlists/hls/9a87481a-b4d2-4c61-bf4c-0d838fdd2ef9/3c25865d-8487-4724-84aa-a76eeff34cbf-master.m3u8https://peertube.dodges.it/videos/embed/k5KhdLTe1c18BSc862yVZK2872002026-10-27T13:54:34.046ZYESBlackhatNOhttps://peertube.dodges.it/w/3eqpvu8yHuP5R8JXHjsFyr2026-10-23T19:06:49.451Zhttps://peertube.dodges.it/lazy-static/thumbnails/daae42fd-a95c-42c2-a39e-33e9dcce4ca3.jpgHidden Risks Of Biometric Identifiers And How To Avoid Themby Thomas Keenan Technology that identifies you by something you are is showing up in e-passports, laptop login screens, smart firearms and even consumer products, like the iPhone. Current generation systems generally use static biometric features, such as fingerprints, iris scans and facial recognition, either measured directly or mediated through a device, such as a smartphone. We are on the cusp of a revolution that will usher in dynamic (e.g. gestural, heart rhythm, gait analysis) and chemical (e.g. DNA, body odor, perspiration) biometrics. There will also be hybrid technologies, such as the Nokias vibrating magnetic ink tattoos (US Patent 8, 766, 784) and the password pill from Proteus Digital Health. Biometrics will also play an increasingly significant role as one of the factors in multi-factor authentication. The author created one of the first typing rhythm recognition algorithms and one of the earliest DNA sequencing machines in the 1980s and has a long term perspective on this subject. Like all new technologies, advances in biometrics will bring new advantages and also new risks. This presentation surveys cutting edge biometric technologies and provides a framework for evaluating them from the perspectives of security, reliability, privacy, potential for abuse and perceived creepiness. Learn what is coming down the biometrics road now, so you'll be ready to intelligently choose and implement these technologies as they come on the market in the near future. --- Mirrored from YouTube: https://www.youtube.com/watch?v=cfQCOICIliQhttps://peertube.dodges.it/static/streaming-playlists/hls/1211fc94-7c6a-4dca-ac91-84e748e9eb65/e6f2da10-face-4c6a-aba3-ea1e1df8b41e-master.m3u8https://peertube.dodges.it/videos/embed/3eqpvu8yHuP5R8JXHjsFyr3267002026-10-27T14:02:51.781ZBlack Hat USA 2015InfoSecBlack HatInformation SecurityBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/hJvBEQAR6neF5zeHWBMttF2026-10-23T19:08:11.938Zhttps://peertube.dodges.it/lazy-static/thumbnails/db01c533-f712-4c0c-9260-915fe6250dce.jpgThe Machines That Betrayed Their Masters by Glenn Wilkinson--- Mirrored from YouTube: https://www.youtube.com/watch?v=GvrB6S_O0BEhttps://peertube.dodges.it/static/streaming-playlists/hls/8781b531-9815-4212-b206-b41eedec80c9/306b6867-acdf-44bd-ada7-65642f0445be-master.m3u8https://peertube.dodges.it/videos/embed/hJvBEQAR6neF5zeHWBMttF3497002026-10-27T14:02:55.688ZInformation SecurityInfoSecBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/angB4jzZD1YAha7PVwfgnU2026-10-23T19:09:18.385Zhttps://peertube.dodges.it/lazy-static/thumbnails/16e791ac-b42b-43e1-9fd3-da5f1cc2bf52.jpgUsing Static Binary Analysis To Find Vulnerabilities And Backdoors In Firmwareby Christopher Kruegel & Yan Shoshitaishvili Over the last few years, as the world has moved closer to realizing the idea of the Internet of Things, an increasing amount of the things with which we interact every day have been replaced with embedded devices. These include previously non-electronic devices, such as locks, light switches, and utility meters (such as electric meters and water meters), as well as increasingly more complex and ubiquitous devices, such as network routers and printers. Other devices are becoming increasingly intelligent as well. Modern printers and cameras include complex social media functionality, smart televisions are increasingly including Internet-based entertainment options, and even previously-simple devices, such as watches and glasses are being augmented with complex embedded components. The increasingly-complex systems that drive these devices have one thing in common: they must all communicate to carry out their intended functionality. Smart TVs communicate with (and accept communication from) online media services, smart locks allow themselves to be unlocked by phones or keypads, digital cameras contact social media services, and smart meters communicate with the users utility company. Such communication, along with other functionalities of the device, is handled by software (termed firmware) embedded in the device. Because these devices often receive privacy-sensitive information from their sensors (such as what a user is watching, or how much electricity they are using), or carry out a safety-critical function (such as actuators that lock the front door), errors in the devices firmware, whether present due to an accidental mistake or purposeful malice, can have serious and varying implications in both the digital and physical world. Firmware, like any piece of software, is susceptible to a wide range of software errors. These include memory corruption flaws, command injection vulnerabilities and application logic flaw...https://peertube.dodges.it/static/streaming-playlists/hls/4bda7bd2-c547-41b1-afeb-651736349002/492d821a-0ac8-419c-8f7f-2b9c7f430b82-master.m3u8https://peertube.dodges.it/videos/embed/angB4jzZD1YAha7PVwfgnU2851002026-10-27T14:07:31.736ZBlack Hat USA 2015BlackHatBlack HatInfoSecInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/1jyfbPZL1BANCoH4fndJgf2026-10-23T19:09:41.800Zhttps://peertube.dodges.it/lazy-static/thumbnails/f72747e5-b197-4e24-8df9-90cd2b203f65.jpgBlack Hat Europe 2024 at the ExCel, London December 9-12 Sizzle ReelJoin us at Black Hat Europe 2024 at the ExCel, London on December 9-12, 2024. The premier cybersecurity event of the year. #cybersecurity #infosec --- Mirrored from YouTube: https://www.youtube.com/watch?v=nh8-i_ZqkJ0https://peertube.dodges.it/static/streaming-playlists/hls/02974261-743c-4013-8cc1-12c557f43d8c/f9a063c4-0779-441f-9229-875cc32553a7-master.m3u8https://peertube.dodges.it/videos/embed/1jyfbPZL1BANCoH4fndJgf22002026-10-27T14:07:33.749ZYESBlackhatNOhttps://peertube.dodges.it/w/p5YEajVxyWnpfdo8UDyvq22026-10-23T19:11:24.653Zhttps://peertube.dodges.it/lazy-static/thumbnails/a2ae3b8e-58dd-4668-8b93-83f263091e7b.jpgRemotely Compromising iOS via Wi-Fi and Escaping the Sandboxby Marco Grassi --- Mirrored from YouTube: https://www.youtube.com/watch?v=bP5VP7vLLKohttps://peertube.dodges.it/static/streaming-playlists/hls/baf414b9-b7ef-4487-9193-eb9669123e15/6cc3aa2b-8c4a-4c81-a250-f1cd771c15a4-master.m3u8https://peertube.dodges.it/videos/embed/p5YEajVxyWnpfdo8UDyvq22278002026-10-27T14:14:38.600ZInfoSecInformation SecurityBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/sLhMK43v5vKsTjzLjdJfnW2026-10-23T19:12:41.154Zhttps://peertube.dodges.it/lazy-static/thumbnails/9495fd99-8dfa-498d-8021-79003b46988d.jpgMalware Buried Deep Down the SPI Flash: Sednit's First UEFI Rootkit Found in the WildBIOS rootkits have been researched and discussed heavily in the past few years, but sparse evidence has been presented of real campaigns actively trying to compromise systems at this level. Our talk will reveal such a campaign successfully executed by the Sednit group. This APT group, also known as Fancy Bear, Sofacy and APT28, has been linked to numerous high profile cyberattacks such as the 2016 Democratic National Committee email leak scandal. By Jean-Ian Boutin & Frederic Vachon Full Abstract & Presentation Materials: https://www.blackhat.com/eu-18/briefings/schedule/index.html#malware-buried-deep-down-the-spi-flash-sednits-first-uefi-rootkit-found-in-the-wild-12543 --- Mirrored from YouTube: https://www.youtube.com/watch?v=sObGrnesxv4https://peertube.dodges.it/static/streaming-playlists/hls/d8bcad6b-566d-47f1-a25f-cee713c8c700/61c8ebaf-2685-4272-bd44-71fe5ed1fecb-master.m3u8https://peertube.dodges.it/videos/embed/sLhMK43v5vKsTjzLjdJfnW2996002026-10-27T14:14:41.994ZYESBlackhatNOhttps://peertube.dodges.it/w/4en8cdVPiXaha8erA2NMSP2026-10-23T19:13:51.026Zhttps://peertube.dodges.it/lazy-static/thumbnails/dae625e7-b21b-4e25-ac7e-0cab3f3a1628.jpgHow to Break PDF EncryptionPDF is among the most widely used document formats worldwide. To ensure confidentiality, PDF supports document encryption. In this talk, we analyze PDF encryption and show two novel techniques for breaking the confidentiality of encrypted documents. By Jens Müller and Fabian Ising Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/#how-to-break-pdf-encryption-17540 --- Mirrored from YouTube: https://www.youtube.com/watch?v=phLOQ0pROaghttps://peertube.dodges.it/static/streaming-playlists/hls/1a291a66-f3c6-4f55-9d93-200525b92817/e11e1917-3a40-44ca-81ad-e13ce3fe3334-master.m3u8https://peertube.dodges.it/videos/embed/4en8cdVPiXaha8erA2NMSP2656002026-10-27T14:28:39.299ZYESBlackhatNOhttps://peertube.dodges.it/w/cQejMwsEXRKRZgpcyQwQXf2026-10-23T19:16:01.617Zhttps://peertube.dodges.it/lazy-static/thumbnails/29cd6284-e30b-4aec-b3ec-cd1f3effcfb8.jpgDetecting Fake 4G Base Stations in Real Time4G/LTE IMSI-catchers (such as the Hailstorm) are becoming more popular with governments and law enforcement around the world, as well as spies, and even criminals. Until now, IMSI-catcher detection has focused on 2G IMSI-catchers (such as the Stingray), despite the fact that 2G IMSI-catchers are quickly falling out of favor. In this talk, we hope to clear up myths about what modern IMSI-catchers can and can't do, based on results from recent cell network security research. We will also demonstrate software and heuristics to detect fake 4G/LTE base stations that anyone can build. We will also present an outline for the path towards fixing some of the fundamental issues in cell network security, so that hopefully IMSI-catchers are one day a thing of the past. By Cooper Quintin Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#detecting-fake-g-base-stations-in-real-time-19746 --- Mirrored from YouTube: https://www.youtube.com/watch?v=MlIKV5qAf2Ihttps://peertube.dodges.it/static/streaming-playlists/hls/5fd06ff6-423a-477e-a31c-10d759609634/1cbb2c14-04b4-4a5f-b3b2-5410a4a33d46-master.m3u8https://peertube.dodges.it/videos/embed/cQejMwsEXRKRZgpcyQwQXf2578002026-10-27T14:28:47.216ZYESBlackhatNOhttps://peertube.dodges.it/w/orpPVS6oVS2pmPatBAM86A2026-10-23T19:21:36.002Zhttps://peertube.dodges.it/lazy-static/thumbnails/75bf7215-2c14-4940-bbd2-2d19188e8bb3.jpgBlack Hat USA 2026 | Keynote: Vulnerability Research in the Agentic AgeHear from Yan Shoshitaishvili in a compelling discussion exploring how agentic AI is transforming the security landscape, from new attack surfaces and emerging risks to the next wave of defensive innovation. This session tackles one of the most important questions facing cybersecurity today: how do we secure a future powered by autonomous systems? Keynote Speaker: Yan Shoshitaishvili | Associate Professor, Arizona State University Learn more: https://blackhat.com/us-26/features/schedule/index.html#keynote-vulnerability-research-in-the-agentic-age-55627 --- Mirrored from YouTube: https://www.youtube.com/watch?v=VNYe3Cnk5Pwhttps://peertube.dodges.it/static/streaming-playlists/hls/b5b5540a-673a-481b-9dcd-9951a152e988/7ab688da-d840-424e-b748-52ce7a0fad8b-master.m3u8https://peertube.dodges.it/videos/embed/orpPVS6oVS2pmPatBAM86A2687002026-10-27T14:53:24.228ZYESBlackhatNOhttps://peertube.dodges.it/w/nXmuGKfw3zRc8CHZ1kUKDr2026-10-23T19:22:33.949Zhttps://peertube.dodges.it/lazy-static/thumbnails/3d244d5c-d214-4cd3-aa55-1bf922038877.jpgSurfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored CampaignSurfacing a Hydra: Unveiling a Multi-Headed Chinese State-Sponsored Campaign Against a Foreign Government Last year, we came face-to-face with a multi-headed beast after a threat hunt led us to uncover a long-running Chinese state-sponsored cyber espionage campaign, code-named "Crimson Palace" involving three distinct threat clusters coordinating activity to maintain persistent access to the same Southeast Asian government organization. Despite limitations, we were able to perform targeted response actions and monitor the organization's infected network for over a year to gain a rare and detailed insight into the evolving behaviors and capabilities of multiple state-sponsored APTs. In our talk, we will dissect the two-stages of the Crimson Palace campaign, detailing an observed shift by the actors from leveraging the target network as a testing ground for novel malware and evasive techniques to adopting a more aggressive approach after becoming aware of our countermeasures. We'll explore the diverse arsenal leveraged by the actors, including over a dozen different malware families (including several previously unreported variants), more than 15 distinct DLL sideloads, and multiple novel defense evasion techniques, such as a new malware variant capable of blackholing anti-virus (AV) communications. We'll also reveal previously undisclosed details from the second stage of the campaign, showcasing the actors' rapid adaptation and continual rotation of their C2 channels to maintain persistent access. Beyond the technical details, we'll also share the human story of how we navigated this complex intrusion using novel investigation techniques - and the challenges we faced in doing so. Our talk will equip attendees with concrete methods they can use to identify clusters of threat activity and analyze long-running APT intrusion campaigns. It will also provide them with tools and techniques we developed during the investigation for dissecting complex intrusions in thei...https://peertube.dodges.it/static/streaming-playlists/hls/b1ca731a-797e-4444-bebb-bb6ee0223697/49ed7cea-3e5e-44ea-87f9-b528561908f2-master.m3u8https://peertube.dodges.it/videos/embed/nXmuGKfw3zRc8CHZ1kUKDr2387002026-10-27T14:53:27.946ZYESBlackhatNOhttps://peertube.dodges.it/w/nFTQ6beRNGq7QR7nqw5r3A2026-10-23T19:23:27.386Zhttps://peertube.dodges.it/lazy-static/thumbnails/24b93c19-ffa0-4387-934e-b6600c21a02d.jpgWebAuthn 101 - Demystifying WebAuthnFive years later and we're finally at the finish line: Proposed recommendation for W3C WebAuthn. This talk will go into some detail on the use cases WebAuthn sets out solve, how we got here, what's ready for implementation today and what's coming. *Any* service implementing authentication should take note. By Christiaan Brand Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#webauthn----demystifying-webauthn-14687 --- Mirrored from YouTube: https://www.youtube.com/watch?v=RFACQvL_8S4https://peertube.dodges.it/static/streaming-playlists/hls/afa1dc16-cd57-4ad3-b051-d0969a00ebda/800679a8-8084-4932-bcf3-cb03854e28c7-master.m3u8https://peertube.dodges.it/videos/embed/nFTQ6beRNGq7QR7nqw5r3A1587002026-10-27T15:00:29.989ZYESBlackhatNOhttps://peertube.dodges.it/w/wMLpJyv5khCddkgxbBJMh12026-10-23T19:24:31.782Zhttps://peertube.dodges.it/lazy-static/thumbnails/9a4f417b-02ef-4adf-87f0-bfe74236b4f9.jpgWhat's on the Wireless? Automating RF Signal IdentificationMost organisations want to monitor wireless devices within their environment, but, with a growing number of disparate low cost wireless technologies appearing on the market, the scale of this task can be unmanageable. By Michael Ossmann & Dominic Spill Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#whats-on-the-wireless-automating-rf-signal-identification --- Mirrored from YouTube: https://www.youtube.com/watch?v=XNcGhnY_0oIhttps://peertube.dodges.it/static/streaming-playlists/hls/f955ff62-4ce8-4f8c-aafd-53e52dbe1934/58aa3aae-00ae-45e0-9956-71d2db441fc6-master.m3u8https://peertube.dodges.it/videos/embed/wMLpJyv5khCddkgxbBJMh12952002026-10-27T15:00:37.398ZBlack Hat 2017BHUSABlack HatBlack Hat USABlack Hat USA 2017YESBlackhatNOhttps://peertube.dodges.it/w/c2cvYxmFRc1ohZD2F8uCp62026-10-23T19:25:17.385Zhttps://peertube.dodges.it/lazy-static/thumbnails/931cd14d-3d6c-4144-afcb-707e9a6b6130.jpgBlack Hat USA 2026 | Kinetic Prompt Injection: Agent Compromise With a Physical Blast RadiusPrompt injection is usually treated as a text problem contained on a screen: a bad output, leaked data, a rogue tool call. This one isn't. A live jailbreak of a stock Unitree Go2 robot dog running Gemini Robotics-ER 1.6, reached through its own camera and mic and driven to physical movement, no human in the loop. Underneath the demo is a measurement problem: agents behave differently when they know they're being tested, so a clean evaluation score doesn't mean the unsafe behavior is gone. The talk covers the attack live, a taxonomy of how these systems fail, why current testing misses it, and what defenders should change. Live hardware, on stage. Pliny the Liberator | Directs Frontier-Model Research, BT6 Philip (injx) Dursey | Managing Director, BT6 Adrian (threlfall) Wood | Frontier AI Red Team Operator, BT6 Ads (0xmoose) Dawson | Senior Frontier AI Red Team Operator, BT6 Dustin (ph1r3574r73r) Farley | Frontier AI Red Team Operator, BT6 Sean (seahop) Hopkins | Frontier AI Red Team Operator, BT6 Learn more: https://blackhat.com/us-26/briefings/schedule/index.html#kinetic-prompt-injection-agent-compromise-with-a-physical-blast-radius-57343 --- Mirrored from YouTube: https://www.youtube.com/watch?v=LZkdihOzfe4https://peertube.dodges.it/static/streaming-playlists/hls/593f5dd3-e899-4fb3-a2c8-b4c6688d8d3b/328999e5-9bc6-48a1-8d16-85fc442e4826-master.m3u8https://peertube.dodges.it/videos/embed/c2cvYxmFRc1ohZD2F8uCp61427002026-10-27T15:14:42.570ZYESBlackhatNOhttps://peertube.dodges.it/w/hy7XkQjdTuVpgbP7XqYc4R2026-10-23T19:26:02.236Zhttps://peertube.dodges.it/lazy-static/thumbnails/35ff78ad-d1b0-4443-837b-f9f77a4ed2e1.jpgUNC1860 and The Temple of Oats - Iran's hidden hand in Middle Eastern NetworksThis session is a master class in piecing together seemingly unrelated tools and incidents into a single cohesive story about an uprising threat group, UNC1860. For years, UNC1860, a state sponsored Iranian threat actor, operated covertly, leaving behind a trail of tools and incidents that multiple security vendors could not attribute to a single entity. Through meticulous investigation, we were able to correlate the clues about this actor and expose not only its full arsenal but also its intent and tactics. While remaining largely obscured despite its persistent targeting of governments, telecommunications and critical infrastructure entities across the Middle East since at least 2018, this group has in fact played the role of an advanced access broker employed by the Iranian government quite often. In this talk, we will shed light on the advanced aspects of the group's activity. This includes their sophisticated use of Windows kernel-mode drivers that entailed repurposing Iranian AV drivers, as well as developing custom kernel implants that demonstrated the group's extensive reverse engineering capabilities of Windows kernel components. Moreover, our research will reveal previously undisclosed tools extracted from victim systems that were used as webshells and passive backdoors controllers in production environments. Drawing on Google Cloud - Mandiant's real-world incident response experience in the Middle East, we will illustrate UNC1860's distinct tactics within compromised environments, demonstrating how their activities facilitate operations for a large spectrum of Iranian threat actors. This includes destructive attacks against government networks that have garnered international attention and sophisticated espionage operations by MOIS affiliated APTs. By connecting the dots of UNC1860's activities, we will unveil a critical component of Iran's cyber strategy and the associated risks to organizations in the region and beyond. By: Stav shulman | Staff ...https://peertube.dodges.it/static/streaming-playlists/hls/860e4e0b-5304-429d-aa0f-acb93f7b500b/485e310c-4256-416e-8762-3ad6af0c032d-master.m3u8https://peertube.dodges.it/videos/embed/hy7XkQjdTuVpgbP7XqYc4R1659002026-10-27T15:14:46.353ZYESBlackhatNOhttps://peertube.dodges.it/w/iiMvwDQw59dk1AS65Hr29e2026-10-23T19:28:32.137Zhttps://peertube.dodges.it/lazy-static/thumbnails/61c6b896-fcf1-41f2-b1c9-3b8a14a9ebf7.jpgReflected File Download - A New Web Attack VectorBy Oren Hafif "Attackers would LOVE having the ability to upload executable files to domains like Google.com, Facebook.com, and Bing.com. How cool would it be for them if their files are downloaded without ever being uploaded! Yes, download without upload! RFD is a new web based attack that extends reflected attacks beyond the context of the web browser. Attackers can build malicious URLs which once accessed, download files, and store them with any desired extension, giving a new malicious meaning to reflected input, even if it is properly encoded. Moreover, this attack allows running shell commands on the victim's computer. How bad is it? By using this attack on Google.com, Bing.com and others, I created the first cross-social-network worm that is downloadable from trusted sites like Google.com, completely disables same-origin-policy, steals all browser cookies, and spreads itself throughout all social networks such as Facebook, Twitter, Google+, and LinkedIn." --- Mirrored from YouTube: https://www.youtube.com/watch?v=dl1BJUNk8V4https://peertube.dodges.it/static/streaming-playlists/hls/8c270c1b-9f99-4d21-be5e-839a80470539/25cbb426-5fa6-4ff7-807d-c8c45744d360-master.m3u8https://peertube.dodges.it/videos/embed/iiMvwDQw59dk1AS65Hr29e3006002026-10-27T15:18:38.049ZBlack Hat Europe 2014Information SecurityInfoSecBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/s1TCG1KpmJH7tJVUkJw33P2026-10-23T19:29:55.452Zhttps://peertube.dodges.it/lazy-static/thumbnails/7e2dcef6-145c-4f2f-86a9-b46b75c7d266.jpgDoes Dropping USB Drives in Parking Lots and Other Places Really Work?by Elie Bursztein At every Black Hat you will inevitably hear hackers boasting that they can break into any company by dropping a malicious USB drive in the company's parking lot. This anecdote has even entered mainstream culture and was prominently featured in the Mr. Robot TV series. However despite its popularity, there has been no rigorous study of whether the attack works or is merely an urban legend. To answer this burning question and assess the actual threat posed by malicious USB drives, we dropped nearly 300 USB sticks on the University of Illinois Urbana-Champaign campus and measured who plugged in the drives. And oh boy how effective that was! Of the drives we dropped, 98% were picked up and for 48% of the drives, someone not only plugged in the drive but also clicked on files. Join us for this talk if you are interested in physical security and want to learn more about the effectiveness of arguably the most well known anecdote of our community. We will provide an in-depth analysis of which factors influence users to pick up a drive, why users plug them in, and demo a new tool that can help mitigate USB attacks. --- Mirrored from YouTube: https://www.youtube.com/watch?v=XJCQBqTmGUUhttps://peertube.dodges.it/static/streaming-playlists/hls/d2ad6cc4-4bde-44a4-8988-c26b99e4c49b/dd38d974-1d1c-458c-83da-831f326a3f06-master.m3u8https://peertube.dodges.it/videos/embed/s1TCG1KpmJH7tJVUkJw33P2039002026-10-27T15:18:43.447ZBlackHatInfoSecBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/qZPHQJGgj89EwuGRn8tsK12026-10-23T19:31:00.691Zhttps://peertube.dodges.it/lazy-static/thumbnails/a719e6ad-3994-40d9-844b-6b51dac0665a.jpgAn Attacker Looks at Docker: Approaching Multi-Container ApplicationsThe goal of this talk is to provide a penetration tester experienced in exploitation and post-exploitation of networks and systems with an exposure to containerization and the implications it has on offensive operations. By Wesley McGrew Full Abstract & Presentation Materials: https://www.blackhat.com/us-18/briefings/schedule/#an-attacker-looks-at-docker-approaching-multi-container-applications-9975 --- Mirrored from YouTube: https://www.youtube.com/watch?v=HTM3ZrSvp6chttps://peertube.dodges.it/static/streaming-playlists/hls/ca6e21cf-d6ac-480d-8c81-8d50cdc7c96e/60e9e842-31a2-46da-a54e-e6a4995a4f5e-master.m3u8https://peertube.dodges.it/videos/embed/qZPHQJGgj89EwuGRn8tsK12336002026-10-27T15:33:38.765ZBlack HatBlack Hat 2018Black Hat USABlack Hat USA 2018BHUSAYESBlackhatNOhttps://peertube.dodges.it/w/9sPZDnYxrbo1HhRVJbFCdv2026-10-23T19:32:31.273Zhttps://peertube.dodges.it/lazy-static/thumbnails/12b73d54-72c8-4567-ae84-2653a3bcf98d.jpgDay 1 Keynote: National Cyber-Aggression and Private-Sector Internet InfrastructureBlack Hat Asia 2018 Day 1 Keynote Bill Woodcock addresses past and current efforts to curtail nation-state cyber-attacks on the private-sector core infrastructure of the Internet. From the live fire cyber exercises of the dot-com era and the US-China-Russia cyber-conflicts and United Nations “Group of Government Experts" of the subsequent decade to the current effort of the Global Commission on the Stability of Cyberspace, Bill will discuss the misaligned incentives that encourage militaries to focus on cyber-offense while ignoring defense, the direct effects and blowback that endanger the central infrastructure of the Internet, and the economic costs these attacks impose on Internet users. Read More: https://www.blackhat.com/asia-18/briefings/schedule/index.html#national-cyber-aggression-and-private-sector-internet-infrastructure-10164 --- Mirrored from YouTube: https://www.youtube.com/watch?v=KoEKclWpRJkhttps://peertube.dodges.it/static/streaming-playlists/hls/4488064a-6e6e-46e4-ab88-03f661451e9d/ada5fb7f-768e-46f9-819b-59b168be2cf1-master.m3u8https://peertube.dodges.it/videos/embed/9sPZDnYxrbo1HhRVJbFCdv2758002026-10-27T15:33:42.637Znation state attacksGCSCcyberspacecyber attacksBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/rwPEdkFJ8i4DaGuebuWpnN2026-10-23T19:35:56.159Zhttps://peertube.dodges.it/lazy-static/thumbnails/672959d1-a62e-49d5-b2f5-22490fef57c3.jpgBack in Black Hat: The 7th Annual Black Hat USA NOC ReportWith the world going virtual, and Black Hat being no exception, come find out how we've spent the last two years changing, adapting, and preparing for an event that's both in person, and broadcast to the world. We'll share what we're using to stabilize and secure one of the most notorious networks in the world, what worked, what didn't, and all the shenanigans in between... By: Neil Wyler (Grifter) & Bart Stump Full Abstract: https://www.blackhat.com/us-21/briefings/schedule/#back-in-black-hat-the-th-annual-black-hat-usa-noc-report-25070 --- Mirrored from YouTube: https://www.youtube.com/watch?v=XOMylAWYZ0khttps://peertube.dodges.it/static/streaming-playlists/hls/cec22680-dc02-4344-aea6-0a09c8a7a2dc/f3e3c348-334e-499c-8e4a-8d5bf40414d6-master.m3u8https://peertube.dodges.it/videos/embed/rwPEdkFJ8i4DaGuebuWpnN2407002026-10-27T15:55:42.552ZYESBlackhatNOhttps://peertube.dodges.it/w/dHkX53EXY8vEddcFDNSgkh2026-10-23T19:37:41.579Zhttps://peertube.dodges.it/lazy-static/thumbnails/a8be9b8c-08a9-44f0-abf0-27ba1b8c1c28.jpgCertified Pre-Owned: Abusing Active Directory Certificate ServicesMicrosoft's Active Directory Public Key Infrastructure (PKI) implementation, known as Active Directory Certificate Services (AD CS), has largely flown under the radar by both the offensive and defensive realms. AD CS is widely deployed and provides attackers opportunities for credential theft, machine persistence, domain escalation, and subtle domain persistence... By: Will Schroeder & Lee Christensen Full Abstract & Presentation Materials: https://www.blackhat.com/us-21/briefings/schedule/#certified-pre-owned-abusing-active-directory-certificate-services-23168 --- Mirrored from YouTube: https://www.youtube.com/watch?v=ejmAIgxFRgMhttps://peertube.dodges.it/static/streaming-playlists/hls/66f373ea-3c09-4824-8e23-487a9a12f98a/82178455-7b23-4b98-bd63-04618fe9acec-master.m3u8https://peertube.dodges.it/videos/embed/dHkX53EXY8vEddcFDNSgkh2092002026-10-27T15:55:46.532ZYESBlackhatNOhttps://peertube.dodges.it/w/16ZqPfnbRmaMdgaabdYyUc2026-10-23T19:38:26.961Zhttps://peertube.dodges.it/lazy-static/thumbnails/e5cfa861-29a3-4030-b222-92603e10e03b.jpgDemystifying Modern Windows RootkitsThis talk will demystify the process of writing a rootkit, moving past theory and instead walking the audience through the process of going from a driver that says "Hello World" to a driver that abuses never-before-seen hooking methods to control the user-mode network stack. Analysis includes common patterns seen in malware and the drawbacks that come with malware in kernel-mode rather than user-mode. By Bill Demirkapi Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#demystifying-modern-windows-rootkits-20918 --- Mirrored from YouTube: https://www.youtube.com/watch?v=ZASsIpdumcYhttps://peertube.dodges.it/static/streaming-playlists/hls/00d61c29-cbc6-4b03-beeb-69254ae337d3/0836f49e-75fa-4cc2-86fe-91ec3abea0c8-master.m3u8https://peertube.dodges.it/videos/embed/16ZqPfnbRmaMdgaabdYyUc1882002026-10-27T16:07:38.211ZYESBlackhatNOhttps://peertube.dodges.it/w/akLDh1ELg2x6C4wL5Egm6v2026-10-23T19:40:02.134Zhttps://peertube.dodges.it/lazy-static/thumbnails/efa7d3ec-4c0d-43dd-bb3b-0edd6499d53f.jpgLeveraging the Apple ESF for Behavioral DetectionsSince its 2019 introduction in macOS Catalina, we have used the Apple Endpoint Security Framework (ESF) as an event source to fuel behavioral-based detections. In this talk, we will focus on the difference between the old and new ways of detecting malicious activity on macOS, speaking to why both are relevant today. We will break down how we use ESF data, both in its basic form, as well as a pivot point to perform more advanced detections. Presented by Jaron Bradley & Matt Benyo Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#leveraging-the-apple-esf-for-behavioral-detections-26526 --- Mirrored from YouTube: https://www.youtube.com/watch?v=AlN59giec0Mhttps://peertube.dodges.it/static/streaming-playlists/hls/4ba4e440-4329-46b4-b8b6-02ee30dd4c47/9cf0b844-4555-4885-8c04-3ed275320ec4-master.m3u8https://peertube.dodges.it/videos/embed/akLDh1ELg2x6C4wL5Egm6v2233002026-10-27T16:07:46.051ZYESBlackhatNOhttps://peertube.dodges.it/w/kvph6qvoDuy4riAU7FduqF2026-10-23T19:42:10.777Zhttps://peertube.dodges.it/lazy-static/thumbnails/fe21dcee-5bfe-45e0-970f-78098ad37b9f.jpgKeynote: The Seven Axioms of SecurityBy Saumil Shah "Today's attacks succeed because the defense is reactive.” As the defenses have caught up and closed open doors, we attackers have looked for new avenues and vectors. Looking back on the state of defenses from One-Way Web Hacking in 2001 to Stegosploit in 2016, a common pattern emerges. Defense boils down to reacting to new attacks and then playing catch-up. It is time to transition defense from being reactive to proactive. This talk discusses seven axioms for implementing proactive defense strategy and measures for the future, concluding with a blueprint of the next evolution of pro-active defense architecture. --- Mirrored from YouTube: https://www.youtube.com/watch?v=ullDGL_7i1chttps://peertube.dodges.it/static/streaming-playlists/hls/9df88c93-5074-488d-8aef-f3bc775f9f97/a3357ef3-e9b3-4786-9544-83d04118751a-master.m3u8https://peertube.dodges.it/videos/embed/kvph6qvoDuy4riAU7FduqF3037002026-10-27T16:23:15.414ZBlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/nKjd9VaAw1GGaZNPsNyF112026-10-23T19:52:42.443Zhttps://peertube.dodges.it/lazy-static/thumbnails/e416c31d-6883-4232-a6ff-07c56d61cce1.jpgBlack Hat USA 2025 | HTTP/1.1 Must Die! The Desync EndgameSome people think the days of critical HTTP request smuggling attacks on hardened targets have passed. Unfortunately, this is an illusion propped up by wafer-thin mitigations that collapse as soon as you apply a little creativity. As long as HTTP/1.1 lives, desync attacks will thrive. In this session, I'll introduce multiple new classes of desync attack, enabling mass compromise of user credentials across hundreds of targets, including tech giants, SaaS providers, US government systems, and almost every company using a certain CDN. Every technique has been honed for maximum impact with minimum effort, with an unplanned collaboration yielding over $200,000 in bug bounties in two weeks. I'll also share the research methodology and open-source toolkit that made this possible, replacing outdated, canned-exploit probes with focused analysis that reveals each target's unique weak spots. This strategy creates an avalanche of desync research leads, yielding results ranging from entire new attack classes, down to exotic implementation flaws that bleed server memory into attackers' welcoming arms. You'll witness attacks meticulously crafted from theoretical foundations alongside accidental exploits with a root cause so incomprehensible, the developers ended up even more confused than me. You'll leave this talk equipped with everything you need to join me in the desync research endgame: the mission to kill HTTP/1. By: James Kettle | Director of Research, PortSwigger Presentation Materials Available at: https://blackhat.com/us-25/briefings/schedule/?#http11-must-die-the-desync-endgame-45103 --- Mirrored from YouTube: https://www.youtube.com/watch?v=FJbuAyxTTWchttps://peertube.dodges.it/static/streaming-playlists/hls/b01c1db2-4d6b-4181-a367-4e75b20e3c5c/5fa9a5ea-5fad-4b98-998c-27de7f34275c-master.m3u8https://peertube.dodges.it/videos/embed/nKjd9VaAw1GGaZNPsNyF112274002026-10-27T16:24:18.792ZYESBlackhatNOhttps://peertube.dodges.it/w/8ChWPdc89aM9TTBqBT4Wpx2026-10-23T19:53:11.962Zhttps://peertube.dodges.it/lazy-static/thumbnails/20404944-b2e3-47f2-bb01-9e0cc26a9528.jpgWelcome and Introduction to Black Hat Asia 2015by Jeff Moss --- Mirrored from YouTube: https://www.youtube.com/watch?v=Bvm0rJ_Mlakhttps://peertube.dodges.it/static/streaming-playlists/hls/3dc13069-78de-412f-9274-148f15b0c6f5/478d0c2e-01aa-4015-966e-1d7c35d1541c-master.m3u8https://peertube.dodges.it/videos/embed/8ChWPdc89aM9TTBqBT4Wpx655002026-10-27T16:24:21.210ZBlackHatInfoSecBlack HatInformation SecurityBlack Hat Asia 2015YESBlackhatNOhttps://peertube.dodges.it/w/tsDpDQV9sFjKWdGq9SZux22026-10-23T19:57:08.786Zhttps://peertube.dodges.it/lazy-static/thumbnails/366e3e9f-eabc-4738-a29c-eaf635345779.jpgBlack Hat Asia 2026 | Keynote: From Prompt Tricks to Autonomous HackersOffensive security has historically been constrained by human effort. In 2026, we see the rapid emergence of systems that can perform meaningful offensive work without human intervention. This talk examines the evolution of these capabilities over the past three years and the key advances that enabled them. We evaluate performance across offensive tasks, identify where automation is already effective, and highlight areas where human expertise remains necessary. We will also discuss the implications for defenders. As offensive capabilities become scalable, parallelized, and continuous, traditional point-in-time testing models are no longer sufficient. Security must adapt to a world where attack simulation can run continuously and at machine scale. By: Ari Herbert-Voss | CEO and Co-Founder, RunSybil https://blackhat.com/asia-26/briefings/schedule/index.html#keynote-from-prompt-tricks-to-autonomous-hackers-the-rise-of-agentic-offensive-security-54362 --- Mirrored from YouTube: https://www.youtube.com/watch?v=5IrJf2qGZcMhttps://peertube.dodges.it/static/streaming-playlists/hls/de5f229d-8972-491b-8740-ce640e95b1ff/e3ba7cc1-3e6f-4444-8ac4-91d4bfdd6155-master.m3u8https://peertube.dodges.it/videos/embed/tsDpDQV9sFjKWdGq9SZux23558002026-10-27T16:52:11.163ZYESBlackhatNOhttps://peertube.dodges.it/w/4FwFysQXnZ9tCFCnGu23Z52026-10-23T19:58:44.097Zhttps://peertube.dodges.it/lazy-static/thumbnails/f103f6ee-f0d8-4182-9ba2-a8408b6a5beb.jpgRepurposing OnionDuke: A Single Case Study Around Reusing Nation State Malwareby Joshua Pitts The news media is awash with nation-states and criminals reusing malware. Why should they have all the fun? This is a case study about reversing the suspected Russian government made OnionDuke MitM patching system, discovered by the speaker in October 2014. During this talk we will seek to understand its inner workings, selecting desirable features, and repurposing it for use in other tools. This is pure malware plagiarism. --- Mirrored from YouTube: https://www.youtube.com/watch?v=OuyLzkG16Ukhttps://peertube.dodges.it/static/streaming-playlists/hls/1dd054dd-6c46-42e0-ac68-2bcf10a5385e/348e758c-f5e3-4982-8c83-bae514b6011d-master.m3u8https://peertube.dodges.it/videos/embed/4FwFysQXnZ9tCFCnGu23Z51973002026-10-27T16:52:14.101ZInformation SecurityInfoSecBlack HatBlackHatBlack Hat USA 2015YESBlackhatNOhttps://peertube.dodges.it/w/eLfLPfGxdYC7AZm1chrVjM2026-10-23T19:59:53.885Zhttps://peertube.dodges.it/lazy-static/thumbnails/a42c5beb-f43d-4d8b-84f1-327b0d3bdc00.jpgHEIST: HTTP Encrypted Information can be Stolen Through TCP-Windowsby Tom Van Goethem & Mathy Vanhoef Over the last few years, a worryingly number of attacks against SSL/TLS and other secure channels have been discovered. Fortunately, at least from a defenders perspective, these attacks require an adversary capable of observing or manipulating network traffic. This prevented a wide and easy exploitation of these vulnerabilities. In contrast, we introduce HEIST, a set of techniques that allows us to carry out attacks against SSL/TLS purely in the browser. More generally, and surprisingly, with HEIST it becomes possible to exploit certain flaws in network protocols without having to sniff actual traffic. HEIST abuses weaknesses and subtleties in the browser, and the underlying HTTP, SSL/TLS, and TCP layers. Most importantly, we discover a side-channel attack that leaks the exact size of any cross-origin response. This side-channel abuses the way responses are sent at the TCP level. Combined with the fact that SSL/TLS lacks length-hiding capabilities, HEIST can directly infer the length of the plaintext message. Concretely, this means that compression-based attacks such as CRIME and BREACH can now be performed purely in the browser, by any malicious website or script, without requiring network access. Moreover, we also show that our length-exposing attacks can be used to obtain sensitive information from unwitting victims by abusing services on popular websites. Finally, we explore the reach and feasibility of exploiting HEIST. We show that attacks can be performed on virtually every web service, even when HTTP/2 is used. In fact, HTTP/2 allows for more damaging attack techniques, further increasing the impact of HEIST. In short, HEIST is a set of novel attack techniques that brings network-level attacks to the browser, posing an imminent threat to our online security and privacy. --- Mirrored from YouTube: https://www.youtube.com/watch?v=GwQsu8dGSeAhttps://peertube.dodges.it/static/streaming-playlists/hls/6f74a1e7-90cf-4799-9e90-88fc30b6e07d/b0b8d993-df34-453b-9a05-3f9344c91eb9-master.m3u8https://peertube.dodges.it/videos/embed/eLfLPfGxdYC7AZm1chrVjM2972002026-10-27T17:00:25.659ZInfoSecBlackHatBlack HatBlack Hat USA 2016Information SecurityYESBlackhatNOhttps://peertube.dodges.it/w/wNs8XzRhhQa3AeVeA18VtS2026-10-23T20:01:19.106Zhttps://peertube.dodges.it/lazy-static/thumbnails/f6ce6b24-ca1c-4437-82c2-8bab1d8399b6.jpgHacking Hardware with a $10 SD Card ReaderDumping firmware from hardware, utilizing a non-eMMC flash storage device, can be a daunting task with expensive programmers required, 15+ wires to solder (or a pricey socket), and dumps that contain extra data to allow for error correction. By Amir Etemadieh, Khoa Hoang & CJ Heres Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#hacking-hardware-with-a-$10-sd-card-reader --- Mirrored from YouTube: https://www.youtube.com/watch?v=6ofPbclXuZQhttps://peertube.dodges.it/static/streaming-playlists/hls/f96e7b18-f101-4ac4-850d-4387251083dc/53428f16-34a4-4023-911f-0d406320ccbb-master.m3u8https://peertube.dodges.it/videos/embed/wNs8XzRhhQa3AeVeA18VtS2498002026-10-27T17:00:34.474ZBlack Hat 2017Information SecurityBlack HatBlack Hat USABlack Hat USA 2017YESBlackhatNOhttps://peertube.dodges.it/w/bqLDSXyKFFfdPeFyduf9FJ2026-10-23T20:03:06.577Zhttps://peertube.dodges.it/lazy-static/thumbnails/508c4f69-d970-495d-bc1f-efe673ade49f.jpgBring Back the Honeypotsby Haroon Meer, Marco Slaviero Honeypots were all the rage in the 90's - A raft of tools (and even a world-wide alliance) sprung up extolling their virtues but they never managed to live up to their hype. They were largely relegated to researchers and tinkerers on the fringes. At the same time, we have the Verizon DBIR telling us that most companies are first informed by 3rd parties that they are breached. This is a stupid situation to be in. Well deployed honeypots can be invaluable tools in the defenders arsenal, and don't need to look anything like the honeypots of old. From application layer man-traps, to booby-trapped documents. From network-level deception, to cloud based honeypottery, we are bringing honeypots back! During this talk, we will discuss and demonstrate the current state of the art regarding honeypots. We will explore the factors that limit adoption (and will discuss how to overcome them.) We will demonstrate new techniques to make your honeypots more "hacker-discoverable" & will share data from running actual honeypots in real organizations. We will also discuss (and release) OpenCanary, our new open source honeypot (along with supporting scripts and utilities). Over the past few years, honeypots have gotten a bit of a bad rap. We will give you tools, techniques and takeaways, to move them from geeky time-wasters, to the most useful pieces of kit you will deploy. --- Mirrored from YouTube: https://www.youtube.com/watch?v=W7U2u-qLAB8https://peertube.dodges.it/static/streaming-playlists/hls/5470c169-9a3f-4ecd-ae47-da957eb15610/fb5853e2-32ed-4b29-98e7-a3c5a4ed0d18-master.m3u8https://peertube.dodges.it/videos/embed/bqLDSXyKFFfdPeFyduf9FJ3225002026-10-27T17:07:11.015ZBlackHatInfoSecBlack Hat USA 2015Information SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/n7Gzqn2TkBPKhqzBcWDt1A2026-10-23T20:03:49.830Zhttps://peertube.dodges.it/lazy-static/thumbnails/f390536e-ebbc-4b84-90ab-12f686740ffc.jpgPoint of Sale System Architecture and SecurityBy Lucas Zaichkowsky To most people, Point of Sale (POS) systems with integrated payment processing are a black box where magic happens. Financial criminals breach hundreds of merchants each year, displaying a better understanding of how these systems operate than the dealer technicians that install and maintain them. With an understanding of POS architecture, integrated payment processing, and weaknesses in the technology, security professionals can better protect local businesses, major retailers, and developers handling payment card information. In this session, attendees will learn and see how POS components operate, their integration points, and the flow of payment data including where it's most vulnerable. A live demonstration will show exactly what sensitive data is passed in the clear by both magstripe and EMV chip readers, mapping it from peripheral all the way through the electronic payments infrastructure. Common attack vectors will then be presented, building on that architectural knowledge. Finally, top attack mitigations will be provided to save businesses from being breached and the disastrous losses that result. --- Mirrored from YouTube: https://www.youtube.com/watch?v=MWCmXOwlUpAhttps://peertube.dodges.it/static/streaming-playlists/hls/aaff6165-9466-4f24-bf60-dbb933e87b36/f0325857-b047-4304-bc0a-c6644f4e1daa-master.m3u8https://peertube.dodges.it/videos/embed/n7Gzqn2TkBPKhqzBcWDt1A1395002026-10-27T17:07:13.807ZBlack Hat USA 2014BlackHatBlack HatInfoSecInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/x1qtyi2w5qxxX7KPDTCBBK2026-10-23T20:04:23.285Zhttps://peertube.dodges.it/lazy-static/thumbnails/20d41dc9-117e-40a3-9872-280536c0ee3f.jpgThe Air-Gap JumpersIn this talk, we focus on 'Bridgeware', a type of malware which allows attackers to overcome ('bridge') air-gap isolation in order to leak data. We talk about various covert channels proposed over the years, including electromagnetic, magnetic, acoustic, thermal, electrical and optical methods (and introduce new air-jumping technique from our recent research). By Mordechai Guri Full abstract and materials: https://www.blackhat.com/us-18/briefings/schedule/#the-air-gap-jumpers-10967 --- Mirrored from YouTube: https://www.youtube.com/watch?v=YKRtFgunyj4https://peertube.dodges.it/static/streaming-playlists/hls/fb1a61bc-c16d-444a-9b2b-d6faedab9535/d9febae5-cd1c-48fd-95f1-0feb371a7925-master.m3u8https://peertube.dodges.it/videos/embed/x1qtyi2w5qxxX7KPDTCBBK1433512026-10-27T17:10:02.395ZBlack HatBlackHatBlack Hat Briefings 2018Black Hat BriefingsBlack Hat USA 2018YESBlackhatNOhttps://peertube.dodges.it/w/q6eADS1Dkpv86ChMv17yWW2026-10-23T20:05:06.625Zhttps://peertube.dodges.it/lazy-static/thumbnails/979b7bbf-2e6e-4aa6-9e36-2626b4512593.jpgGDPArrrrr: Using Privacy Laws to Steal IdentitiesBy James Pavur On May 25, 2018 the European Union's General Data Protection Regulation (GDPR) came into effect, bringing with it the most expansive governmental effort to regulate data security and privacy to date. Among the GDPR's many provisions is the "Right of Access," which states that individuals have the right to access their personal data. This provision can be easily abused by social engineers to steal sensitive information that does not belong to them. Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#gdparrrrr-using-privacy-laws-to-steal-identities-14526 --- Mirrored from YouTube: https://www.youtube.com/watch?v=meHvy24i1LUhttps://peertube.dodges.it/static/streaming-playlists/hls/c3166d2a-165d-4e05-8d1e-19bf91d29c42/d6867ca3-255f-4772-8e71-8f8a41ed5d54-master.m3u8https://peertube.dodges.it/videos/embed/q6eADS1Dkpv86ChMv17yWW1317002026-10-27T17:10:05.933ZBlack HatBlack Hat USABlack Hat USA 2019Black Hat BriefingsYESBlackhatNOhttps://peertube.dodges.it/w/3ZyEEem2Q8HdnZTe5BRYCi2026-10-23T20:06:47.012Zhttps://peertube.dodges.it/lazy-static/thumbnails/6fa57a2d-960a-4ec9-b256-1d85cd7585f3.jpgWriting Bad @$$ Malware For OS Xby Patrick Wardle In comparison to Windows malware, known OS X threats are really quite lame. As an Apple user that has drank the 'Apple Juice,' I didn't think that was fair! From novel persistence techniques, to native OS X components that can be abused to thwart analysis, this talk will detail exactly how to create elegant, bad@ss OS X malware. And since detection is often a death knell for malware, the talk will also show how OS X's native malware mitigations and 3rd-party security tools were bypassed. For example I'll detail how Gatekeeper was remotely bypassed to allow unsigned download code to be executed, how Apple's 'rootpipe' patch was side-stepped to gain root on a fully patched system, and how all popular 3rd-party AV and personal firewall products were generically bypassed by my simple proof-of-concept malware. However, don't throw out your Macs just yet! The talk will conclude by presenting several free security tools that can generically detect or even prevent advanced OS X threats. Armed with such tools, we'll ensure that our computers are better protected against both current and future OS X malware. So unless you work for Apple, come learn how to take your OS X malware skills to the next level and better secure your Mac at the same time! --- Mirrored from YouTube: https://www.youtube.com/watch?v=fv4l9yAL2sUhttps://peertube.dodges.it/static/streaming-playlists/hls/183bcdbd-e1a1-4771-839a-d430e448d531/8040343a-1a6a-4c79-86ec-75176238c201-master.m3u8https://peertube.dodges.it/videos/embed/3ZyEEem2Q8HdnZTe5BRYCi3099012026-10-27T17:18:35.792ZBlackHatInformation SecurityBlack HatInfoSecBlack Hat USA 2015YESBlackhatNOhttps://peertube.dodges.it/w/hvMG9oMCpaoicSU1hCSLGh2026-10-23T20:07:32.907Zhttps://peertube.dodges.it/lazy-static/thumbnails/8d02a37e-8838-44ef-984f-cf2696f03660.jpgWelcome & Introduction to Black Hat Asia 2017by Jeff Moss --- Mirrored from YouTube: https://www.youtube.com/watch?v=s95CQNntunQhttps://peertube.dodges.it/static/streaming-playlists/hls/85baf259-7a1a-4ed7-a540-57aa5875ed60/7bf17250-7d12-44a2-92d9-0955ae35a1ef-master.m3u8https://peertube.dodges.it/videos/embed/hvMG9oMCpaoicSU1hCSLGh1187002026-10-27T17:18:41.666ZBHASIABlackHatBlack HatBlack Hat AsiaInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/omqHEwKQNkTaGWkvBeF6tc2026-10-23T20:22:49.383Zhttps://peertube.dodges.it/lazy-static/thumbnails/b6207e4e-434f-4903-8f39-e06a77aace24.jpgBlack Hat USA 2025 Keynote | Mikko Hypponen | Three Decades in CybersecurityCybersecurity isn't just about protecting computers - it's about securing society. For over thirty years, Mikko Hypponen has been at the front lines of malware research. Since 1991, he has investigated and responded to some of the most significant cyber outbreaks in history - from early viruses like Stoned, to major cases like Code Red, Slammer, Conficker, Stuxnet, WannaCry and LockBit. His team was the first to identify and counter the ILOVEYOU worm - the largest malware outbreak the world has seen. In this keynote, Mikko will take us through the most pivotal shifts in cyber-attacks. He will offer an informed look ahead at what's likely coming next. It's possible we're still at the very beginning of this story. Mikko Hypponen is a best-selling author and respected voice in global cybersecurity. He has written for The New York Times, Wired, and Scientific American, and he has lectured at Oxford, Harvard, and MIT. Today, he serves as Chief Research Officer at WithSecure, a cybersecurity company based in Helsinki, and curates the Museum of Malware Art. By: Mikko Hypponen | Chief Research Officer, WithSecure Full Abstract Available: https://www.blackhat.com/us-25/briefings/schedule/#keynote-three-decades-in-cybersecurity-lessons-learned-and-what-comes-next-48195 --- Mirrored from YouTube: https://www.youtube.com/watch?v=H14EhT-DRJ8https://peertube.dodges.it/static/streaming-playlists/hls/b50328bd-af30-4b50-9d30-3572151db165/b30bb35f-4525-4f5e-8c0b-9dca987dae23-master.m3u8https://peertube.dodges.it/videos/embed/omqHEwKQNkTaGWkvBeF6tc3878002026-10-27T18:04:56.332ZYESBlackhatNOhttps://peertube.dodges.it/w/pDcdjuxQ7krjXXtseS22rr2026-10-23T20:24:53.461Zhttps://peertube.dodges.it/lazy-static/thumbnails/f233ebbe-f7ec-4a27-8511-aca67a6c7c8a.jpgInside the Apple T2In this presentation we will share a deep dive into the inner workings of the T2 going way beyond the limited technical details Apple have made public up to now. In addition, we will share our methodology along with the tooling we developed and subsequently released in an effort to enable the audience to learn about our process of tackling complex security research tasks as well as being able to build on top of our initial research. By Mikhail Davidov and Jeremy Erickson Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#inside-the-apple-t-15686 --- Mirrored from YouTube: https://www.youtube.com/watch?v=vRnyasv1qbUhttps://peertube.dodges.it/static/streaming-playlists/hls/bf739e59-7aa0-40d1-9018-2387fdc91e4f/bedc3d77-ecfe-4ef0-be75-189e36f95f91-master.m3u8https://peertube.dodges.it/videos/embed/pDcdjuxQ7krjXXtseS22rr2714002026-10-27T18:05:01.419ZYESBlackhatNOhttps://peertube.dodges.it/w/o2GjMdBcoT3G1tQzc6kde82026-10-23T20:25:41.745Zhttps://peertube.dodges.it/lazy-static/thumbnails/90f40b04-5031-4033-9991-89e164310398.jpgTracking Ransomware End to EndA niche term just two years ago, ransomware has rapidly risen to fame in the last year, infecting hundreds of thousands of users, locking their documents, and demanding hefty ransoms to get them back. In doing so, it has become one of the largest cybercrime revenue sources, with heavy reliance on Bitcoins and Tor to confound the money trail. By Elie Bursztein, Kylie McRoberts and Luca Invernizzi Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#tracking-ransomware-end-to-end --- Mirrored from YouTube: https://www.youtube.com/watch?v=RV2tcc6e168https://peertube.dodges.it/static/streaming-playlists/hls/b265a50b-74f0-4ef2-a601-15d08ab7e211/4e5b7ccc-689c-4cbe-b786-ebfdc0ab5db0-master.m3u8https://peertube.dodges.it/videos/embed/o2GjMdBcoT3G1tQzc6kde81333002026-10-27T18:09:37.506ZBlack Hat USA 2017InfoSecBHUSABlack HatBlack Hat USAYESBlackhatNOhttps://peertube.dodges.it/w/shhLyoTLBL7sQYYKJX7v8H2026-10-23T20:26:51.194Zhttps://peertube.dodges.it/lazy-static/thumbnails/c316878b-750c-46a3-87c5-c56f94927840.jpgDefeating Samsung KNOX with Zero PrivilegeIn this talk I will describe how I used an exploit chain to defeat the new Samsung KNOX with zero privilege (exploit chain can be executed by any untrusted application), including KASLR bypassing, DFI bypassing, SELinux fully bypassing and privilege escalation. All details of vulnerabilities and mitigation bypassing techniques will be given during the presentation. By Di Shen Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#defeating-samsung-knox-with-zero-privilege --- Mirrored from YouTube: https://www.youtube.com/watch?v=6bPuEfHSYOchttps://peertube.dodges.it/static/streaming-playlists/hls/d4d3d6db-22f0-4625-b665-c2e4e300df33/0a4fe356-91b2-4e4d-9167-dbbe690cf40b-master.m3u8https://peertube.dodges.it/videos/embed/shhLyoTLBL7sQYYKJX7v8H2344002026-10-27T18:09:41.617ZBHUSABlack Hat USABlack Hat USA 2017Information SecurityBlack Hat 2017YESBlackhatNOhttps://peertube.dodges.it/w/ipVwVMLiiGEMvb9MsYHMVq2026-10-23T20:28:15.553Zhttps://peertube.dodges.it/lazy-static/thumbnails/010b3fa7-a22f-4a41-b6aa-8e6b02d86551.jpgGame of Chromes: Owning the Web with Zombie Chrome ExtensionsOn April 16, 2016, an army of bots stormed upon Wix servers, creating new accounts and publishing shady websites in mass. The attack was carried by a malicious Chrome extension, installed on tens of thousands of devices, sending HTTP requests simultaneously. This “Extension Bot” has used Wix websites platform and Facebook messaging service, to distribute itself among users. Two months later, same attackers strike again. by Tomer Cohen Full Abstract & Presentation Materials: https://www.blackhat.com/us-17/briefings.html#game-of-chromes-owning-the-web-with-zombie-chrome-extensions --- Mirrored from YouTube: https://www.youtube.com/watch?v=UHwpusw6mPchttps://peertube.dodges.it/static/streaming-playlists/hls/8d027477-f85c-437c-a57c-076f78d506d6/e5db4305-bcdc-438e-95f2-20f06dc62d57-master.m3u8https://peertube.dodges.it/videos/embed/ipVwVMLiiGEMvb9MsYHMVq2739012026-10-27T18:13:55.052ZBHUSABlack Hat USAInformation SecurityBlack Hat USA 2017Black Hat 2017YESBlackhatNOhttps://peertube.dodges.it/w/vwUmAosfZAJzfoSfHQEVRM2026-10-23T20:30:09.985Zhttps://peertube.dodges.it/lazy-static/thumbnails/8190420a-bf72-4470-b4a4-8b08cdd2fe0d.jpgWiFi-Based IMSI CatcherWe introduce a new type of IMSI catcher which operates over WiFi. Whilst existing Stingray type IMSI catchers exploit 2-4G radio protocols to track movements of mobile subscribers, in this talk, we introduce two new approaches to track mobile devices which exploit authentication protocols that operate over WiFi. by Piers O'Hanlon and Ravishankar Borgaonkar Full Abstract: https://www.blackhat.com/eu-16/briefings/schedule/#wifi-based-imsi-catcher-4916 --- Mirrored from YouTube: https://www.youtube.com/watch?v=njttqrhIOwYhttps://peertube.dodges.it/static/streaming-playlists/hls/ef299964-378f-4d59-97e1-64cce23fc9cb/62794650-68df-4efa-b398-8a3ed88ecf82-master.m3u8https://peertube.dodges.it/videos/embed/vwUmAosfZAJzfoSfHQEVRM3564002026-10-27T18:13:59.151ZBlackHatInfoSecInformation SecurityBlack HatYESBlackhatNOhttps://peertube.dodges.it/w/12Fop4kw2cwMa5cmJdTW5i2026-10-23T20:33:37.060Zhttps://peertube.dodges.it/lazy-static/thumbnails/96bd650e-a976-483f-bf33-223ef157caf3.jpgHacking the Wireless World with Software Defined Radio - 2.0By Balint Seeber "Ever wanted to spoof a restaurant's pager system? How about use an airport's Primary Surveillance RADAR to build your own bistatic RADAR system and track moving objects? What sorts of RF transactions take place in RFID systems, such as toll booths, building security and vehicular keyless entry? Then there's 'printing' steganographic images onto the radio spectrum... Wireless systems, and their radio signals, are everywhere: consumer, corporate, government, amateur - widely deployed and often vulnerable. If you have ever wondered what sort of information is buzzing around you, this talk will introduce how you can dominate the RF spectrum by 'blindly' analysing any signal, and then begin reverse engineering it from the physical layer up. I will demonstrate how these techniques can be applied to dissect and hack RF communications systems, such as those above, using open source software and cheap radio hardware. In addition, I'll show how long-term radio data gathering can be used to crack poorly-implemented encryption schemes, such as the Radio Data Service's Traffic Message Channel. I'll also look briefly at some other systems that are close to my heart: reversing satellite communications, tracking aircraft using Mode S and visualising local airspace in real-time on a 3D map, monitoring the health of aircraft with ACARS (how many faults have been reported by the next plane you'll be travelling on, e.g. do the toilets work?), and hunting down the source of an interfering clandestine radio transmission. If you have any SDR equipment, bring it along!" --- Mirrored from YouTube: https://www.youtube.com/watch?v=x3UUazj0tkghttps://peertube.dodges.it/static/streaming-playlists/hls/003c042f-ed88-4c8a-b31e-b61cbd547809/7deb050c-6ffd-4930-a52b-40623a8efab2-master.m3u8https://peertube.dodges.it/videos/embed/12Fop4kw2cwMa5cmJdTW5i3198002026-10-27T18:24:47.260ZBlack Hat USA 2014BlackHatInfoSecBlack HatInformation SecurityYESBlackhatNOhttps://peertube.dodges.it/w/rCBKGqWFpHagyaTXX2fEjK2026-10-23T20:35:46.078Zhttps://peertube.dodges.it/lazy-static/thumbnails/8bec2054-bc35-424c-9b0d-3149ae15d2ef.jpgThe Path Less Traveled: Abusing Kubernetes DefaultsKubernetes is a container orchestration framework that is increasingly widely used in enterprise and elsewhere. While the industry is starting to pay some attention to Kubernetes security, there are many attack paths that aren’t well-documented, and are rarely discussed. This lack of information can make your clusters vulnerable. In this live demonstration-filled talk, we are going to walk through the Kubernetes control plane before using sigs.k8s.io/kind to show some of the attack surface exposed by a default configuration of Kubernetes. There will be multiple exploits involving various moving parts, including cluster takeovers and host escapes. We’ll show you mitigations, and then show you how to get around those. By Ian Coldwater and Duffie Cooley --- Mirrored from YouTube: https://www.youtube.com/watch?v=HmoVSmTIOxMhttps://peertube.dodges.it/static/streaming-playlists/hls/cf9146aa-2979-4c26-a20b-14d55854a477/a0366252-3a8c-4acd-81ea-954449d8cc2f-master.m3u8https://peertube.dodges.it/videos/embed/rCBKGqWFpHagyaTXX2fEjK2886002026-10-27T18:24:51.174ZYESBlackhatNOhttps://peertube.dodges.it/w/kwSwqnFmj1CDgQj1JJCGWm2026-10-23T20:36:59.101Zhttps://peertube.dodges.it/lazy-static/thumbnails/309ee867-0629-45bd-9fe4-7a43d128966c.jpgKubernetes Privilege Escalation: Container Escape == Cluster Admin?In this talk, Yuval and Shaul will reveal the powerful system pods quietly installed by popular Kubernetes platforms. They'll show how attackers may abuse these pods, and demo new privilege escalation techniques. Covering managed Kubernetes services and common open-source add-ons, they'll demonstrate how on the most popular platforms today - a single container escape is often enough to take over the entire cluster. Looking ahead, they'll present tools that flush out powerful pods and identify privilege escalation paths in a cluster, alongside mitigations that can detect and prevent such attacks. Join them as they embark on the journey of ensuring container escape != cluster admin. Presented by Yuval Avrahami & Shaul Ben Hai Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#kubernetes-privilege-escalation-container-escape--cluster-admin-26344 --- Mirrored from YouTube: https://www.youtube.com/watch?v=oc1tq_r6VNMhttps://peertube.dodges.it/static/streaming-playlists/hls/9e2d159f-3e82-4378-9f22-099a92eadf70/59428d70-e0e8-4230-9dd0-0635e5732b7d-master.m3u8https://peertube.dodges.it/videos/embed/kwSwqnFmj1CDgQj1JJCGWm2188012026-10-27T18:37:08.079ZYESBlackhatNOhttps://peertube.dodges.it/w/fq2BdMhYMrE1jAxmAveFZM2026-10-23T20:37:50.445Zhttps://peertube.dodges.it/lazy-static/thumbnails/74001a1c-c5ce-42bd-bdc3-79a03c0beea2.jpgZero Days, Thousands of Nights: The Life & Times of Zero-Day Vulns and Their ExploitsZero-day vulnerabilities and their exploits are useful in offensive operations as well as in defensive and academic settings. RAND obtained rare access to a dataset of information about more than 200 zero-day software vulnerabilities and their exploits - many of which are still publicly unknown. We analyzed these data to provide insights about the zero-day vulnerability research and exploit development industry. By Lillian Ablon Read More: https://www.blackhat.com/eu-17/briefings/schedule/#zero-days-thousands-of-nights-the-life-and-times-of-zero-day-vulnerabilities-and-their-exploits-8557 --- Mirrored from YouTube: https://www.youtube.com/watch?v=8BMULyCiSK4https://peertube.dodges.it/static/streaming-playlists/hls/74bac83f-a8da-4f38-ae94-190925f3b42b/9f4a0b81-1cc2-4e08-bd60-3ee6d2e0031f-master.m3u8https://peertube.dodges.it/videos/embed/fq2BdMhYMrE1jAxmAveFZM3385002026-10-27T18:37:11.413ZBlack HatBlack Hat 2017Black Hat EuropeBlack Hat Europe 2017Information SecurityYESBlackhatNOhttps://peertube.dodges.it/w/mpTHJKR7QvzmjajXmUFFRd2026-10-23T20:47:23.343Zhttps://peertube.dodges.it/lazy-static/thumbnails/f1e5d337-ea54-4eb8-a3ee-3b803305dcec.jpgSecTor 2025 | Ghost SIM Attack: Hacking Mobile Network Authentication PoliciesThe authentication policy of a mobile operator dictates the frequency and conditions under which an authentication procedure is triggered on the subscriber following a set number of events. A lax or insufficiently robust authentication policy may allow an attacker to perform the Ghost SIM Attack, an attack that results in potential fraud, starting by extracting essential SIM card information. This presentation unveils a comprehensive overview of the experimental setup and methodology utilized to execute the Ghost SIM Attack, along with an in-depth analysis of the authentication policies implemented by various operators and technologies across multiple countries around the world. The results reveal that the Ghost SIM Attack is successful across all the selected technologies and operators, highlighting the weak authentication policies configured. Finally, some countermeasures are proposed for the attack while also addressing its limitations. By: Pedro Cabrera | Founder, Ethon Shield Miguel Gallego | Partner, Ethon Shield Presentation Materials Available at: https://blackhat.com/sector/2025/briefings/schedule/?#ghost-sim-attack-hacking-mobile-network-authentication-policies-47749 --- Mirrored from YouTube: https://www.youtube.com/watch?v=Cvm4F7yVcikhttps://peertube.dodges.it/static/streaming-playlists/hls/a54cc0d4-f928-4e7e-aaab-98ddd1feb93a/86adb42e-411b-4404-8bbc-64a1a648a930-master.m3u8https://peertube.dodges.it/videos/embed/mpTHJKR7QvzmjajXmUFFRd2894002026-10-27T18:56:47.556ZYESBlackhatNOhttps://peertube.dodges.it/w/dRETHCzSpV3AzgmZgkiUzM2026-10-23T20:48:13.129Zhttps://peertube.dodges.it/lazy-static/thumbnails/650b164f-9527-4f34-adfd-605a3aa0ef78.jpgHow to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management EngineIn our presentation, we will tell how we detected and exploited the vulnerability (explained in this Briefing: https://youtu.be/mYsTBPqbya8), and bypassed built-in protection mechanisms. By Maxim Goryachy & Mark Ermolov Full Abstract & Presentation Materials: https://www.blackhat.com/eu-17/briefings.html#how-to-hack-a-turned-off-computer-or-running-unsigned-code-in-intel-management-engine --- Mirrored from YouTube: https://www.youtube.com/watch?v=9fhNokIgBMUhttps://peertube.dodges.it/static/streaming-playlists/hls/681d1395-afa7-4c0f-9fb1-fd5e1380136f/54fdcc73-bbbc-4ac0-83ed-f76fc95c0a36-master.m3u8https://peertube.dodges.it/videos/embed/dRETHCzSpV3AzgmZgkiUzM2818002026-10-27T19:00:00.115ZBlack Hat 2017Black Hat Europe 2017BHEUBlack HatBlack Hat EuropeYESBlackhatNOhttps://peertube.dodges.it/w/6QtcZfGtBa28mw5Yz1e4kf2026-10-23T20:49:08.289Zhttps://peertube.dodges.it/lazy-static/thumbnails/4a02aee9-293b-4139-8750-5fd4dbf60f8c.jpgDeath to the IOC: What's Next in Threat IntelligenceIn this project we will automate this process using Machine Learning. We will share how we can use ML for Custom Entity Extraction to automatically extract entities specific to the cyber security domain from unstructured text. We will also share how this system can be used to generate insights such as identify patterns of attacks an enterprise may have faced and much more. By Bhavna Soman Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#death-to-the-ioc-whats-next-in-threat-intelligence-15392 --- Mirrored from YouTube: https://www.youtube.com/watch?v=MJHSUsS9K7shttps://peertube.dodges.it/static/streaming-playlists/hls/2f422935-420a-49ea-b233-ffb8242e0b70/1f8b8a9b-af9e-4ea8-8da2-492ceb206ac0-master.m3u8https://peertube.dodges.it/videos/embed/6QtcZfGtBa28mw5Yz1e4kf1588002026-10-27T19:00:04.309ZYESBlackhatNOhttps://peertube.dodges.it/w/k4YpgfyUiZsr5KLoBPeKuc2026-10-23T20:50:25.401Zhttps://peertube.dodges.it/lazy-static/thumbnails/47b8a9eb-5990-4897-87aa-9e4c33db2f6e.jpgDevSecOps: What, Why and HowIn this talk, we focus on how a DevOps pipeline can easily be metamorphosed into DevSecOps, and we will identify the accompanying benefits . The talk will discuss a number of open source tools and also the cultural changes needed to implement DevSecOps. By Anant Shrivastava Full Abstract & Presentation Materials: https://www.blackhat.com/asia-19/briefings/schedule/#devsecops-what-why-and-how-14754 --- Mirrored from YouTube: https://www.youtube.com/watch?v=jdPlQvvloachttps://peertube.dodges.it/static/streaming-playlists/hls/9a6b9fcf-1621-433b-b946-a8afd214d8c7/c6e6c311-ff37-4965-b76a-9a9977114dba-master.m3u8https://peertube.dodges.it/videos/embed/k4YpgfyUiZsr5KLoBPeKuc2346002026-10-27T19:12:55.065ZYESBlackhatNOhttps://peertube.dodges.it/w/p97UPGJ3ExLF2HLE1ionGe2026-10-23T20:51:35.079Zhttps://peertube.dodges.it/lazy-static/thumbnails/97658a80-d52b-4117-b97a-8f8088dffba2.jpgDenial of Service with a Fistful of Packets: Exploiting Algorithmic Complexity VulnerabilitiesBy Nathan Hauke and David Renardy How many bytes do you need to take down a web server? The answer might be fewer than you think. Algorithmic complexity (AC) vulnerabilities allow an attacker to submit a small amount of input to an algorithm and cause the target to perform a large amount of work. Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#denial-of-service-with-a-fistful-of-packets-exploiting-algorithmic-complexity-vulnerabilities-16445 --- Mirrored from YouTube: https://www.youtube.com/watch?v=UdTpa-n9L-ghttps://peertube.dodges.it/static/streaming-playlists/hls/bb6465f2-603b-4e2d-b849-e6875b8e6511/3c2bc343-0fd6-47c8-b6a8-e0643d4a7324-master.m3u8https://peertube.dodges.it/videos/embed/p97UPGJ3ExLF2HLE1ionGe2817002026-10-27T19:13:02.919ZBlack HatBlack Hat USABlack Hat USA 2019Black Hat BriefingsYESBlackhatNOhttps://peertube.dodges.it/w/jySC2onRtWPhG7o4cxVs5s2026-10-23T20:53:09.934Zhttps://peertube.dodges.it/lazy-static/thumbnails/0c89e17c-32e7-4bd7-8582-3a6283ead09b.jpgHow To Implement IT Security After A Cyber Meltdownby Christina Kubecka The 2012 cyber attacks against Saudi Aramco and the Aramco family of affiliates was a major game changer in IT & ICS Security. The energy sector, relevant markets, and governments world wide shuddered. Although oil production wasn't directly affected, business operations were greatly interrupted and remain so. This presentation is the story how I implemented the first IT Security unit for Aramco Overseas Company, a Saudi Aramco affiliate which provides all IT services for Saudi Aramco in South America and the EMEA region outside of Saudi Arabia. --- Mirrored from YouTube: https://www.youtube.com/watch?v=WyMobr_TDSIhttps://peertube.dodges.it/static/streaming-playlists/hls/965b7e2d-8555-4120-99fc-9433bb4deb82/cc228ce5-64e3-486a-9b8a-862a0d85fc85-master.m3u8https://peertube.dodges.it/videos/embed/jySC2onRtWPhG7o4cxVs5s3061002026-10-27T19:26:28.034ZBlackHatBlack HatInformation SecurityBlack Hat USA 2015InfoSecYESBlackhatNOhttps://peertube.dodges.it/w/cViz7ahUXLbvwhiUdmdd612026-10-23T20:59:37.485Zhttps://peertube.dodges.it/lazy-static/thumbnails/80916488-e50e-494c-b942-5c2631c7d197.jpgAndroid Parcels: The Bad, the Good and the Better - Introducing Android's Safer ParcelParcel is the serialization mechanism in Android and is behind almost every OS cross-process interaction. Parcelable implementations have been the source of vulnerabilities in Android for ~8 years, often rated high severity and weaponized by malware authors to achieve privileged exploits, including silent package installation and arbitrary code execution.This talk covers a detailed overview of known exploit techniques that abuse Parcel vulnerabilities, including the well-known yet still active Bundle FengShui exploits; and a novel exploit chain that was reported through Google VRP program (CVE-2021-0928) in June 2021, that achieves arbitrary code execution in privileged applications' processes, on Android 12... By: Hao Ke , Bernardo Rufino , Maria Uretsky , Yang Yang Full Abstract and Presentation Materials: https://www.blackhat.com/eu-22/briefings/schedule/#android-parcels-the-bad-the-good-and-the-better---introducing-androids-safer-parcel-28404 --- Mirrored from YouTube: https://www.youtube.com/watch?v=qIzMKfOmIAAhttps://peertube.dodges.it/static/streaming-playlists/hls/6085c601-598c-474d-a496-d05e012f18f2/7b62dca4-d168-4230-bb72-fb36a8782fc3-master.m3u8https://peertube.dodges.it/videos/embed/cViz7ahUXLbvwhiUdmdd612364002026-10-27T19:26:34.738ZYESBlackhatNOhttps://peertube.dodges.it/w/4H9BnqhDvKZ8Bmh6SZiv3i2026-10-23T21:01:03.827Zhttps://peertube.dodges.it/lazy-static/thumbnails/0aca36ec-571b-47b8-add7-30230691e775.jpgKeynote: Fighting Cybercrime in 2024Law enforcement has made a lot of progress in effectively fighting cybercrime over the past ten years. These results are only made possible through international cooperation and working with private actors. This keynote will give an overview of today's challenges in this fight, provide an insight into some of the success stories in France, Europe and beyond, but also try and provide proposals on what needs to be done in the future. By: Eric Freyssinet | Brigadier General, French Gendarmerie Nationale Full Abstract Available: https://www.blackhat.com/eu-24/briefings/schedule/#keynote-fighting-cybercrime-in-2024-44121 --- Mirrored from YouTube: https://www.youtube.com/watch?v=FhJNMUCVvAAhttps://peertube.dodges.it/static/streaming-playlists/hls/1e0a376e-fafe-409a-aadc-1cd1fe333951/d7a96573-cc95-46f4-b510-b68a6040c1a7-master.m3u8https://peertube.dodges.it/videos/embed/4H9BnqhDvKZ8Bmh6SZiv3i2955002026-10-27T19:48:53.976ZYESBlackhatNOhttps://peertube.dodges.it/w/74XzhKbYwKbGWo6ApEEgg82026-10-23T21:02:38.841Zhttps://peertube.dodges.it/lazy-static/thumbnails/2f57d97f-0d51-4442-bea0-4bb248adc1c3.jpgNew Vulnerabilities in 5G NetworksThe security in the 5G network has evolved and is more efficient than the previous generations. In this talk, we visit security features of 5G radio networks and reveal new vulnerabilities affecting both the operator infrastructure and end-devices (including mobiles, NB-IoT, laptop etc). By Altaf Shaik and Ravishankar Borgaonkar Full Abstract & Presentation Materials: https://www.blackhat.com/us-19/briefings/schedule/#new-vulnerabilities-in-g-networks-15279 --- Mirrored from YouTube: https://www.youtube.com/watch?v=YpH3Zx-X5bMhttps://peertube.dodges.it/static/streaming-playlists/hls/31244fda-9887-4a6c-a36f-58ac5e850739/40581419-f299-49f7-8cde-5941db597db1-master.m3u8https://peertube.dodges.it/videos/embed/74XzhKbYwKbGWo6ApEEgg82615002026-10-27T19:48:58.171ZYESBlackhatNOhttps://peertube.dodges.it/w/cbQrV5NSjUkhAUAAuRXZH22026-10-23T21:04:20.640Zhttps://peertube.dodges.it/lazy-static/thumbnails/d26c7397-cf5b-4ac8-bc98-45446cd464b7.jpgExploiting Windows Hello for BusinessBy Michael Grafnetter During this talk, we will also demonstrate our new toolset that can be used to scan corporate environments for the aforementioned vulnerabilities and to resolve any issues found. It also provides a much-required visibility into Windows Hello for Business usage in Active Directory. Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/#exploiting-windows-hello-for-business-17260 --- Mirrored from YouTube: https://www.youtube.com/watch?v=u22XC01ewn0https://peertube.dodges.it/static/streaming-playlists/hls/5a97d1c2-3a63-406e-9a36-cbbad0868bf7/009a23e6-a2a7-40b0-b82a-44a0bb43000c-master.m3u8https://peertube.dodges.it/videos/embed/cbQrV5NSjUkhAUAAuRXZH22386002026-10-27T20:01:05.473ZYESBlackhatNOhttps://peertube.dodges.it/w/qP2k28KSjMaifHy7aiB4Eq2026-10-23T21:05:20.782Zhttps://peertube.dodges.it/lazy-static/thumbnails/b560eb3b-a504-4061-a583-fb62053a66ef.jpgBattle Of The SKM And IUM: How Windows 10 Rewrites OS Architectureby Alex Ionescu In Windows 10, Microsoft is introducing a radical new concept to the underlying OS architecture, and likely the biggest change to the NT design since the decision to move the GUI in kernel-mode. In this new model, the Viridian Hypervisor Kernel now becomes a core part of the operating system and implements Virtual Secure Machines (VSMs) by loading a true microkernel - a compact (200kb) NT look-alike with its own drivers called the Secure Kernel Mode (SKM) environment, which then uses the Hypervisor to hook and intercept execution of the true NT kernel. This creates a new paradigm where the NT Kernel, executing in Ring 0, now runs below the Secure Kernel, at Ring ~0 (called Virtual Trust Level 1). But it doesn't stop there - as the Ring 0 NT kernel now has the ability to not only create standard Ring 3 user-mode applications, but also Ring ~3 applications (or Virtual Trust Level 0) that run in Isolated User Mode (IUM). Because VTLs are all more privileged than Ring 0, this now creates a model where a user-mode application running inside a VSM now has data and rights that even the kernel itself cannot modify. Why go through all this trouble? Because it seems like the hottest thing these days is Pass-the-Hash, and attacks must seemingly be mitigated at all costs. And even in Windows 8.1, an attacker with the permissions to load a kernel driver can bypass the existing mitigations (and Mimikatz is signed!). With VTLs, now even the most privileged attacker is only as privileged as the hypervisor will allow it - never able to truly read the hash date that is stored in the secure partition. How "secure" is this new model really? And what prevents a malicious application from running in such a secure mode to begin with? --- Mirrored from YouTube: https://www.youtube.com/watch?v=LqaWIn4y26Ehttps://peertube.dodges.it/static/streaming-playlists/hls/c8ec1a77-dd7a-4c28-bab0-236c4a57cac8/e63ee8bf-0a7f-45aa-a320-062d8de6d96d-master.m3u8https://peertube.dodges.it/videos/embed/qP2k28KSjMaifHy7aiB4Eq3090002026-10-27T20:01:09.324ZBlack Hat USA 2015Information SecurityInfoSecBlack HatBlackHatYESBlackhatNOhttps://peertube.dodges.it/w/4sYYZFgF2KjsASRjwBKGtq2026-10-23T21:06:55.894Zhttps://peertube.dodges.it/lazy-static/thumbnails/7100a709-0bb8-40f5-b718-b32a85fd28dd.jpgBypassing HTTP Strict Transport SecurityBy Jose Selvi "For the last few years, some different attacks against SSL/TLS have been released. Some of them based on cryptography or protocol weaknesses such as BEAST, CRIME, etc, and some others, such as SSLStrip, based on rewriting https links into http ones and keep user communications always in HTTP. In order to protect users against SSLStrip attacks, a new protection called HTTP Strict Transport Security (HSTS) has been developed and it's currently supported by most widely used browsers. However, under certain circumstances, an attacker could exploit an inter-operation vulnerability in order to bypass HTTP Strict Transport Security protection and use other well-known attack techniques such as SSLStrip. In this presentation, we review the HSTS strengths and weaknesses, and we go in-depth on this inter-operation vulnerability and how it could be exploited." --- Mirrored from YouTube: https://www.youtube.com/watch?v=eLhb4jZuv6Mhttps://peertube.dodges.it/static/streaming-playlists/hls/1c0fdeed-a2ae-4151-93d4-2c4496400b7e/ac651d0a-74f1-4415-8afb-8869103a5f25-master.m3u8https://peertube.dodges.it/videos/embed/4sYYZFgF2KjsASRjwBKGtq2779002026-10-27T20:21:15.406ZBlack HatInformation SecurityBlack Hat Europe 2014BlackHatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/9HW4XtTWEC93fqhLxEKMX82026-10-23T21:08:10.655Zhttps://peertube.dodges.it/lazy-static/thumbnails/55764d54-f09c-4b4b-849a-359fc46920b3.jpgBlack Hat USA 2026 | Keynote: The End of Rare Defending When Offense Is CheapWhat happens when advanced cyberattacks are no longer rare, but routine? In the Black Hat USA 2026 Keynote “The End of Rare: Defending When Offense Is Cheap”, David Weston tackles the growing imbalance between increasingly affordable offensive capabilities and the rising demands placed on defenders to secure complex environments. As AI, automation, and widely available offensive tooling continue to lower the cost of attack, the challenge is no longer how to stop every threat. It's how to build resilient systems that can withstand constant pressure. Walk away with practical insights, a clear picture of the threat-landscape shift, and a concrete case for emergent defense in the AI era. Keynote Speaker: David Weston | Agentic Security Leader, Microsoft Learn more: https://blackhat.com/us-26/features/schedule/index.html#keynote-the-end-of-rare-defending-when-offense-is-cheap-56597 --- Mirrored from YouTube: https://www.youtube.com/watch?v=uNdlqEqxUVwhttps://peertube.dodges.it/static/streaming-playlists/hls/46a3ecb0-c60a-4e4f-8971-46135e1d1649/dbefb06e-adbe-4815-9333-b633b418509e-master.m3u8https://peertube.dodges.it/videos/embed/9HW4XtTWEC93fqhLxEKMX82775002026-10-27T20:21:22.239ZYESBlackhatNOhttps://peertube.dodges.it/w/7pJDZyhxLqLei1JkE9ZFC12026-10-24T00:49:17.908Zhttps://peertube.dodges.it/lazy-static/thumbnails/db74acfb-a60b-45d2-990f-e267b42da688.jpgA Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Landby Alvaro Munoz & Oleksandr Mirosh JNDI (Java Naming and Directory Interface) is a Java API that allows clients to discover and look up data and objects via a name. These objects can be stored in different naming or directory services such as RMI, CORBA, LDAP, or DNS. This talk will present a new type of vulnerability named "JNDI Reference Injection" found on malware samples attacking Java Applets (CVE-2015-4902). The same principles can be applied to attack web applications running JNDI lookups on names controlled by attackers. As we will demo during the talk, attackers will be able to use different techniques to run arbitrary code on the server performing JNDI lookups. The talk will first present the basics of this new vulnerability including the underlying technology, and will then explain in depth the different ways an attacker can exploit it using different vectors and services. We will focus on exploiting RMI, LDAP and CORBA services as these are present in almost every Enterprise application. LDAP offers an alternative attack vector where attackers not able to influence the address of an LDAP lookup operation may still be able to modify the LDAP directory in order to store objects that will execute arbitrary code upon retrieval by the application lookup operation. This may be exploited through LDAP manipulation or simply by modifying LDAP entries as some Enterprise directories allow. --- Mirrored from YouTube: https://www.youtube.com/watch?v=Y8a5nB-vy78https://peertube.dodges.it/static/streaming-playlists/hls/33e739cc-3d89-40a7-a2a9-b994e93af78c/4d5a52c0-3fcd-4bf9-b75a-b8a7a6dacdca-master.m3u8https://peertube.dodges.it/videos/embed/7pJDZyhxLqLei1JkE9ZFC12898002026-10-27T20:31:10.567ZBlackHatInformation SecurityBlack HatInfoSecYESBlackhatNOhttps://peertube.dodges.it/w/sR5W2hrHL69HUcGJTv1Ugx2026-10-24T00:50:21.885Zhttps://peertube.dodges.it/lazy-static/thumbnails/75c8764c-180e-49c7-8e31-783599c1df4e.jpgSimple Spyware: Androids Invisible Foreground Services and How to (Ab)use ThemThis simple to implement spyware shows that Androids permission model can't prevent an excessive use of permissions and that the limitations do not prevent the collection of the user's sensitive data. In order to prevent such attacks, it would be necessary to constantly monitor the apps permission usage or to revoke the permissions after every use. Such prevention mechanisms already exist but aren't widely used, which sets the users privacy and security at risk. We will show what users can do in order to guard themselves against such spyware attacks. Furthermore, we will introduce our solution ideas to detect such spyware on Android. By Thomas Sutter and Bernhard Tellenbach Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/#simple-spyware-androids-invisible-foreground-services-and-how-to-abuse-them-17738 --- Mirrored from YouTube: https://www.youtube.com/watch?v=EuInUW77CPohttps://peertube.dodges.it/static/streaming-playlists/hls/d96816c7-93f0-4714-bd1a-d6c3143aaa05/8a090cc5-0140-45c7-ac4a-457151dde1ae-master.m3u8https://peertube.dodges.it/videos/embed/sR5W2hrHL69HUcGJTv1Ugx1517012026-10-27T20:31:13.741ZYESBlackhatNOhttps://peertube.dodges.it/w/1j65dmFtbHcfqsGroyy3iV2026-10-24T00:51:17.951Zhttps://peertube.dodges.it/lazy-static/thumbnails/9868d1ec-945b-4d9e-8bc1-13f3274f66f7.jpgCertificate Bypass: Hiding and Executing Malware from a Digitally Signed Executableby Tom Nipravsky Malware developers are constantly looking for new ways to evade the detection and prevention capabilities of security solutions. In recent years, we have seen many different tools, such as packers and new encryption techniques, help malware reach this goal of hiding the malicious code. If the security solution cannot unpack the compressed or encrypted malicious content (or at least unpack it dynamically), then the security solution will not be able to identify that it is facing malware. To further complicate the matter, we present a new technique for hiding malware (encrypted and unencrypted) inside a digitally signed file (while still keeping the file with a valid certificate) and executing it from the memory, using a benign executable (which acts as a reflective EXE loader, written from scratch). Our research demonstrates our Certificate Bypass tool and the Reflective EXE Loader. During the presentation, we will focus on the research we conducted on the PE file structure. We will take a closer look at the certificate table and how we can inject data to the table without damaging the certificate itself (the file will still look and be treated as a valid digitally signed file). We will examine the tool we wrote to execute PE files from memory (without writing them to the disk). We will cover the relevant fields in the PE structure, as well as the steps required to run a PE file directly from the memory without requiring any files on disk. Last, we will conclude the demonstration with a live example and show how we bypass security solutions based on the way they look at the certificate table. --- Mirrored from YouTube: https://www.youtube.com/watch?v=yG4wj_0iVkQhttps://peertube.dodges.it/static/streaming-playlists/hls/02868394-7fba-4a25-a709-f89f8d718b57/5cddcf9c-3813-4440-8186-9dfd1f42c53e-master.m3u8https://peertube.dodges.it/videos/embed/1j65dmFtbHcfqsGroyy3iV1549002026-10-27T20:33:48.642ZBlackHatBlack HatInfoSecBlack Hat USA 2016Information SecurityYESBlackhatNOhttps://peertube.dodges.it/w/czzBh2nUiLLf6EvbgsQ9w12026-10-28T06:12:02.483Zhttps://peertube.dodges.it/lazy-static/thumbnails/dec74874-da8c-4b06-ae32-f0ab0969126d.jpgShorts Begone: Modding YouTube on iOS (without jailbreaking)Identifier: 9EAAT8 Description: - “Shorts Begone: Modding YouTube on iOS (without jailbreaking)” - Practical guide to iOS reverse engineering without jailbreak. - Case study: modifying YouTube app to remove short-form content. - Covers app packaging, dynamic analysis, method swizzling, and debugging. - Explains how Apple Silicon Macs enable reverse engineering without iPhones. Location & Metadata: - Location: Proving Ground, Firenze - Date/Time: Tuesday, 14:00–14:25 - Speakers: MasterChen, Navan --- Mirrored from YouTube: https://www.youtube.com/watch?v=YAqKVDpe1Achttps://peertube.dodges.it/static/streaming-playlists/hls/5dc4c80e-2aa4-4855-b511-b132758ede6c/00db127d-d274-4662-8752-6801e035b28c-master.m3u8https://peertube.dodges.it/videos/embed/czzBh2nUiLLf6EvbgsQ9w11501002026-10-28T06:18:02.571ZYESBSidesNOhttps://peertube.dodges.it/w/9PNv7mtsLUxoSiFSyHzoEr2026-10-30T06:36:19.304Zhttps://peertube.dodges.it/lazy-static/thumbnails/be8e2adb-2161-4d1c-a507-879a4081d4f3.jpghackmas2026 - Wer WLAN kennt legt Kabelhttps://media.ccc.de/v/wer-wlan-kennt-legt-kabel Ist das Chaosband (2.4 GHz) noch zu retten? andromeda https://openki.hack-mas.at/event/ELqCBGb4B8QNuScd2/wer-wlan-kennt-legt-kabel #hackmas2026 Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ --- Mirrored from YouTube: https://www.youtube.com/watch?v=2y7Jn8WWCh4https://peertube.dodges.it/static/streaming-playlists/hls/4775b96a-36a2-4ac2-bca9-c49786167b85/bb0b50c1-2d08-485a-a1b9-dd53160756df-master.m3u8https://peertube.dodges.it/videos/embed/9PNv7mtsLUxoSiFSyHzoEr1816002026-10-30T06:44:52.572Z2026Lise Meitnerandromedahackmashackmas2026YESCCCNOhttps://peertube.dodges.it/w/xt8hzZjaZixnweYQt4jQKN2026-11-04T19:00:37.932Zhttps://peertube.dodges.it/lazy-static/thumbnails/2f8ac109-966b-4769-a0a0-0ee15e2651cf.jpgПривет, Russentrolle! Auf Tuchfühlung mit russischer Desinformation #ds26https://media.ccc.de/v/ds26-701-russentrolle-auf-tuchfuhlung-mit-russischer-desinformation Fake-Videos, Fake-Schlagzeilen und als Reporter selbst mittendrin: Grober Über- und kurioser Einblick in russische Disinfo. Lars Wienand berichtet aus seiner Arbeit zu Desinformationskampagnen aus Russland. Es geht um die Kampagnen Storm-1516, Matryoshka und Doppelgänger. Von "Doppelgänger" mit seinen nachgebauten Nachrichtenseiten war Wienand Entdecker und entlarvte Akteure dahinter. Er berichtete als erster Journalist über das jüngste Leak bei Planern und Machern der Kampagnen in einer Moskauer Firma. Zugleich taucht er immer wieder selbst in absurden Beiträgen auf: Zuhörer lernen Günther Wienand kennen, den älteren und ermordeten Bruder von Wienand, von dem dieser selbst nichts wusste. Aber dann meldete Moskau, dass Merz Verdächtiger beim Mord an Günther ist und Wienand deshalb verärgert ist über Merz. Lars Wienand https://talks.datenspuren.de/ds26/talk/T8DPBR/ #ds26 #Zeitenwende Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ --- Mirrored from YouTube: https://www.youtube.com/watch?v=A3YBJOcdO8Ihttps://peertube.dodges.it/static/streaming-playlists/hls/fed4ded1-9529-4063-a19b-ea8d288cf38c/1a20f2cb-dd28-4c55-92b7-5da77d1b972d-master.m3u8https://peertube.dodges.it/videos/embed/xt8hzZjaZixnweYQt4jQKN2842002026-11-04T19:12:09.992Z2026KabinettLars WienandZeitenwendeds26YESCCCNOhttps://peertube.dodges.it/c/defcon/videos2026-10-23T09:17:27.637Zhttps://peertube.dodges.it/c/blackhat/videos2026-10-24T00:51:16.620Zhttps://peertube.dodges.it/c/ccc/videos2026-11-04T19:00:36.393Zhttps://peertube.dodges.it/c/bsides/videos2026-10-28T06:12:01.056Zhttps://peertube.dodges.it/a/qdii/video-channels2026-10-21T13:58:12.174Z