Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Copy of the slides for this talk are here: https://www.defcon.org/html/links/dc-archives/dc-20-archive.html Owning the Network: Adventures in Router Rootkits Michael Coppola Security Consultant at Virtual Security Research Routers are the blippy switchy boxes that make up the infrastructure of networks themselves, yet few administrators actually care to change the default login on these devices. Interestingly, nearly all consumer....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cui/DEFCON-20-Cui-FRAK.pdf Embedded Device Firmware Vulnerability Hunting Using FRAK, the Firmware Reverse Analysis Konsole Ang Cui Red Balloon Security We present FRAK, the firmware reverse analysis konsole. FRAK is a framework for unpacking, analyzing, modifying and repacking the firmware imag....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutaway/DEFCON-20-Cutaway-Eye-Of-the-Meter.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutaway/DEFCON-20-Cutaway-OptiGuard-WP.pdf Looking Into The Eye Of The Meter Cutaway InGuardians, Inc. When you look at a Smart Meter, it practical....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutlip/DEFCON-20-Cutlip-Rooting-SOHO-Routers.pdf Extra Materials: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutlip/Extras.zip SQL Injection to MIPS Overflows: Rooting SOHO Routers Zachary Cutlip Security Researcher, Tactical Network Solutions Th....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Panel-WW3.0/DEFCON-20-Corman-Panel-WW3dot0.pdf World War 3.0: Chaos, Control & the Battle for the Net Joshua Corman Director of Security Intelligence, Akamai Technologies Dan Kaminsky Jeff Moss Founder, DEF CON and Black Hat Rod Beckstrom Michael Joseph Gross Author of the Vanity Fair arti....

Copy of the slides for this talk are here: https://www.defcon.org/html/links/dc-archives/dc-20-archive.html Owning the Network: Adventures in Router Rootkits Michael Coppola Security Consultant at Virtual Security Research Routers are the blippy switchy boxes that make up the infrastructure of networks themselves, yet few administrators actually care to change the default login on these devices. Interestingly, nearly all consumer....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cui/DEFCON-20-Cui-FRAK.pdf Embedded Device Firmware Vulnerability Hunting Using FRAK, the Firmware Reverse Analysis Konsole Ang Cui Red Balloon Security We present FRAK, the firmware reverse analysis konsole. FRAK is a framework for unpacking, analyzing, modifying and repacking the firmware imag....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutaway/DEFCON-20-Cutaway-Eye-Of-the-Meter.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutaway/DEFCON-20-Cutaway-OptiGuard-WP.pdf Looking Into The Eye Of The Meter Cutaway InGuardians, Inc. When you look at a Smart Meter, it practical....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutlip/DEFCON-20-Cutlip-Rooting-SOHO-Routers.pdf Extra Materials: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutlip/Extras.zip SQL Injection to MIPS Overflows: Rooting SOHO Routers Zachary Cutlip Security Researcher, Tactical Network Solutions Th....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Panel-WW3.0/DEFCON-20-Corman-Panel-WW3dot0.pdf World War 3.0: Chaos, Control & the Battle for the Net Joshua Corman Director of Security Intelligence, Akamai Technologies Dan Kaminsky Jeff Moss Founder, DEF CON and Black Hat Rod Beckstrom Michael Joseph Gross Author of the Vanity Fair arti....

Copy of the slides for this talk are here: https://www.defcon.org/html/links/dc-archives/dc-20-archive.html Owning the Network: Adventures in Router Rootkits Michael Coppola Security Consultant at Virtual Security Research Routers are the blippy switchy boxes that make up the infrastructure of networks themselves, yet few administrators actually care to change the default login on these devices. Interestingly, nearly all consumer....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cui/DEFCON-20-Cui-FRAK.pdf Embedded Device Firmware Vulnerability Hunting Using FRAK, the Firmware Reverse Analysis Konsole Ang Cui Red Balloon Security We present FRAK, the firmware reverse analysis konsole. FRAK is a framework for unpacking, analyzing, modifying and repacking the firmware imag....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutaway/DEFCON-20-Cutaway-Eye-Of-the-Meter.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutaway/DEFCON-20-Cutaway-OptiGuard-WP.pdf Looking Into The Eye Of The Meter Cutaway InGuardians, Inc. When you look at a Smart Meter, it practical....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutlip/DEFCON-20-Cutlip-Rooting-SOHO-Routers.pdf Extra Materials: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Cutlip/Extras.zip SQL Injection to MIPS Overflows: Rooting SOHO Routers Zachary Cutlip Security Researcher, Tactical Network Solutions Th....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Panel-WW3.0/DEFCON-20-Corman-Panel-WW3dot0.pdf World War 3.0: Chaos, Control & the Battle for the Net Joshua Corman Director of Security Intelligence, Akamai Technologies Dan Kaminsky Jeff Moss Founder, DEF CON and Black Hat Rod Beckstrom Michael Joseph Gross Author of the Vanity Fair arti....

Hacking Humanity: Human Augmentation and You Christian "quaddi" Dameff Third Year Medical Student Jeff "r3plicant" Tully Third Year Medical Student You've played Deus Ex. You've seen Robocop. You've read Neuromancer. You've maybe even wondered just what dark mix of technology and black magic keeps the withered heart of Richard "Dick" Cheney pumping coronary after coronary. Now it's time to get off the couch and put down the control....

Not-So-Limited Warranty: Target Attacks on Warranties for Fun and Profit Darkred Frequently people consider a serial number as nothing but a number but in this presentation you will be shown the multitude of ways in which an attacker could utilize serial numbers to hurt you,to hurt companies as well as to track your movements. A brief primer on the function and use of serial numbers in the real world will be provided. Focusing on App....

Sploitego - Maltego's (Local) Partner in Crime Nadeem Douba Cygnos IT Security Have you ever wished for the power of Maltego when performing internal assessments? Ever hoped to map the internal network within seconds? Or that Maltego had a tad more aggression? Sploitego is the answer. In the presentation we'll show how we've carefully crafted several local transforms that gives Maltego the ooomph to operate nicely within internal net....

Not So Super Notes, How Well Does US Dollar Note Security Prevent Counterfeiting? Matthew Duggan Member of Technical Staff, VMware Inc. The security of US dollar notes is paramount for maintaining their value and safeguarding the US and dependent economies. Counterfeiting has historically been a crime of high sophistication, but has the prevalence of affordable color scanning and printing equipment changed that? This talk analyzes th..

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Dameff-Tully/DEFCON-20-Dameff-Tully-Hacking-Humanity.pdf Cited Works: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Dameff-Tully/DEFCON-20-Dameff-Tully-Hacking-Humnaity-Cited-Works-1.0.txt Hacking Humanity: Human Augmentation and You Christian "quaddi" Da....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Darkred/DEFCON-20-Darkred-Not-so-Limited-Warranty.pdf Not-So-Limited Warranty: Target Attacks on Warranties for Fun and Profit Darkred Frequently people consider a serial number as nothing but a number but in this presentation you will be shown the multitude of ways in which an attacker could util....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Douba/DEFCON-20-Douba-Sploitego.pdf Extras: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Douba/Extras.zip Sploitego - Maltego's (Local) Partner in Crime Nadeem Douba Cygnos IT Security Have you ever wished for the power of Maltego when performing int....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Duggan/DEFCON-20-Duggan-Not-So-Super-Notes.pdf Not So Super Notes, How Well Does US Dollar Note Security Prevent Counterfeiting? Matthew Duggan Member of Technical Staff, VMware Inc. The security of US dollar notes is paramount for maintaining their value and safeguarding the US and dependent econ....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Dameff-Tully/DEFCON-20-Dameff-Tully-Hacking-Humanity.pdf Cited Works: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Dameff-Tully/DEFCON-20-Dameff-Tully-Hacking-Humnaity-Cited-Works-1.0.txt Hacking Humanity: Human Augmentation and You Christian "quaddi" Da....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Darkred/DEFCON-20-Darkred-Not-so-Limited-Warranty.pdf Not-So-Limited Warranty: Target Attacks on Warranties for Fun and Profit Darkred Frequently people consider a serial number as nothing but a number but in this presentation you will be shown the multitude of ways in which an attacker could util....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Douba/DEFCON-20-Douba-Sploitego.pdf Extras: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Douba/Extras.zip Sploitego - Maltego's (Local) Partner in Crime Nadeem Douba Cygnos IT Security Have you ever wished for the power of Maltego when performing int....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Duggan/DEFCON-20-Duggan-Not-So-Super-Notes.pdf Not So Super Notes, How Well Does US Dollar Note Security Prevent Counterfeiting? Matthew Duggan Member of Technical Staff, VMware Inc. The security of US dollar notes is paramount for maintaining their value and safeguarding the US and dependent econ....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Dameff-Tully/DEFCON-20-Dameff-Tully-Hacking-Humanity.pdf Cited Works: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Dameff-Tully/DEFCON-20-Dameff-Tully-Hacking-Humnaity-Cited-Works-1.0.txt Hacking Humanity: Human Augmentation and You Christian "quaddi" Da....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Darkred/DEFCON-20-Darkred-Not-so-Limited-Warranty.pdf Not-So-Limited Warranty: Target Attacks on Warranties for Fun and Profit Darkred Frequently people consider a serial number as nothing but a number but in this presentation you will be shown the multitude of ways in which an attacker could util....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Douba/DEFCON-20-Douba-Sploitego.pdf Extras: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Douba/Extras.zip Sploitego - Maltego's (Local) Partner in Crime Nadeem Douba Cygnos IT Security Have you ever wished for the power of Maltego when performing int....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Duggan/DEFCON-20-Duggan-Not-So-Super-Notes.pdf Not So Super Notes, How Well Does US Dollar Note Security Prevent Counterfeiting? Matthew Duggan Member of Technical Staff, VMware Inc. The security of US dollar notes is paramount for maintaining their value and safeguarding the US and dependent econ....

The Paparazzi Platform: Flexible, Open-Source, UAS Software and Hardware esden dotAero misterj cifo This presentation introduces the Paparazzi framework, an Open-Source (GPL3 and OSHW CC-by-SA) software and hardware robotics platform focused on Unmanned Aerial Systems (UASes). Paparazzi’s power and flexibility enable rapid development and robust control of diverse vehicle types " from fixed-wing airplanes to multicopters and tr....

Hacking the Google TV Amir "Zenofex" Etemadieh CJ Heres Dan Rosenberg Tom "tdweng" Dwenger The GoogleTV platform is designed to bring an integrated web experience, utilizing the Chrome web browser and Android applications, to your television. GoogleTV is based on the Android operating system, which is mainly used in tablets and smart phones, but customized with security features not normally seen on most Android devices. The cu....

Owned in 60 Seconds: From Network Guest to Windows Domain Admin Zack Fasel Their systems were fully patched, their security team watching, and the amateur pentesters just delivered their "compliant" report. They thought their Windows domain was secure. They thought wrong. Zack Fasel (played by none other than Angelina Jolie) brings a New Tool along with New methods to obtain Windows Integrated Authentication network requests and....

Hellaphone: Replacing the Java in Android John Floren Senior Member of Technical Staff, Sandia National Labs Android is the only widespread open-source phone environment available today, but actually hacking on it can be an exercise in frustration, with over 14 million lines of code (not counting the Linux kernel!), build times in the hours, and the choice of writing Java or C++/JNI. Add in security debacles like the CarrierIQ affair....

Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Esden-and-Panel/DEFCON-20-Esden-Panel-Paparazzi-Platform.pdf The Paparazzi Platform: Flexible, Open-Source, UAS Software and Hardware esden dotAero misterj cifo This presentation introduces the Paparazzi framework, an Open-Source (GPL3 and OSHW CC-by-SA) software and hardware robotics pl....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Xenofex/DEFCON-20-Xenofex-Panel-Hacking-the-GoogleTV.pdf Hacking the Google TV Amir "Zenofex" Etemadieh CJ Heres Dan Rosenberg Tom "tdweng" Dwenger The GoogleTV platform is designed to bring an integrated web experience, utilizing the Chrome web browser and Android applications, to your tele....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Fasel/DEFCON-20-Fasel-Owned-in-60-Seconds.pdf Owned in 60 Seconds: From Network Guest to Windows Domain Admin Zack Fasel Their systems were fully patched, their security team watching, and the amateur pentesters just delivered their "compliant" report. They thought their Windows domain was secure. Th....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Floren/DEFCON-20-Floren-Hellaphone.pdf Hellaphone: Replacing the Java in Android John Floren Senior Member of Technical Staff, Sandia National Labs Android is the only widespread open-source phone environment available today, but actually hacking on it can be an exercise in frustration, with ove....

Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Esden-and-Panel/DEFCON-20-Esden-Panel-Paparazzi-Platform.pdf The Paparazzi Platform: Flexible, Open-Source, UAS Software and Hardware esden dotAero misterj cifo This presentation introduces the Paparazzi framework, an Open-Source (GPL3 and OSHW CC-by-SA) software and hardware robotics pl....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Xenofex/DEFCON-20-Xenofex-Panel-Hacking-the-GoogleTV.pdf Hacking the Google TV Amir "Zenofex" Etemadieh CJ Heres Dan Rosenberg Tom "tdweng" Dwenger The GoogleTV platform is designed to bring an integrated web experience, utilizing the Chrome web browser and Android applications, to your tele....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Fasel/DEFCON-20-Fasel-Owned-in-60-Seconds.pdf Owned in 60 Seconds: From Network Guest to Windows Domain Admin Zack Fasel Their systems were fully patched, their security team watching, and the amateur pentesters just delivered their "compliant" report. They thought their Windows domain was secure. Th....

Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Floren/DEFCON-20-Floren-Hellaphone.pdf Hellaphone: Replacing the Java in Android John Floren Senior Member of Technical Staff, Sandia National Labs Android is the only widespread open-source phone environment available today, but actually hacking on it can be an exercise in frustration, with ove....

Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Esden-and-Panel/DEFCON-20-Esden-Panel-Paparazzi-Platform.pdf The Paparazzi Platform: Flexible, Open-Source, UAS Software and Hardware esden dotAero misterj cifo This presentation introduces the Paparazzi framework, an Open-Source (GPL3 and OSHW CC-by-SA) software and hardware robotics pl....

102 visitors online