Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1234 1270 1271 1272 1273 1274 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
Post Metasploitation: Improving Accuracy and Efficiency in Post Exploitation Using the Metasploit Framework egypt Developer, Rapid7 As many in this community have echoed, shell is just the beginning. Owning a box is all well and good, but where do you go from there? Everyone has their own secret sauce for furthering their access after gaining a foothold. This talk will focus on the techniques, from simple to advanced, available for....
Post Metasploitation: Improving Accuracy and Efficiency in Post Exploitation Using the Metasploit Framework egypt Developer, Rapid7 As many in this community have echoed, shell is just the beginning. Owning a box is all well and good, but where do you go from there? Everyone has their own secret sauce for furthering their access after gaining a foothold. This talk will focus on the techniques, from simple to advanced, available for....
Changing the Security Paradigm: Taking Back Your Network and Bringing Pain to the Adversary Shawn Henry CrowdStrike The threat to our networks is increasing at an unprecedented rate. The hostile environment we operate in has rendered traditional security strategies obsolete. Adversary advances require changes in the way we operate, and "offense" changes the game. Shawn Henry Prior to joining CrowdStrike, Henry was with the FB..
Busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc. Semon Rezchikov Independent Researcher Private aircraft provide transportation to interesting people: corporate officers, business owners, celebrities, high net-worth individuals, etc. In recent years, sites like FlightAware have made it trivial to access all public flight plans. However....
Changing the Security Paradigm: Taking Back Your Network and Bringing Pain to the Adversary Shawn Henry CrowdStrike The threat to our networks is increasing at an unprecedented rate. The hostile environment we operate in has rendered traditional security strategies obsolete. Adversary advances require changes in the way we operate, and "offense" changes the game. Shawn Henry Prior to joining CrowdStrike, Henry was with the FB..
Busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc. Semon Rezchikov Independent Researcher Private aircraft provide transportation to interesting people: corporate officers, business owners, celebrities, high net-worth individuals, etc. In recent years, sites like FlightAware have made it trivial to access all public flight plans. However....
Changing the Security Paradigm: Taking Back Your Network and Bringing Pain to the Adversary Shawn Henry CrowdStrike The threat to our networks is increasing at an unprecedented rate. The hostile environment we operate in has rendered traditional security strategies obsolete. Adversary advances require changes in the way we operate, and "offense" changes the game. Shawn Henry Prior to joining CrowdStrike, Henry was with the FB..
Busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc. Semon Rezchikov Independent Researcher Private aircraft provide transportation to interesting people: corporate officers, business owners, celebrities, high net-worth individuals, etc. In recent years, sites like FlightAware have made it trivial to access all public flight plans. However....
Crypto and the Cops: the Law of Key Disclosure and Forced Decryption Marcia Hofmann Senior Staff Attorney, Electronic Frontier Foundation Can the government force you to turn over your encryption passphrase or decrypt your data? The law surrounding police attempts to force decryption is developing at breakneck speed, with two major court decisions this year alone. This talk will start off with an in-depth explanation of the Fifth A....
Crypto and the Cops: the Law of Key Disclosure and Forced Decryption Marcia Hofmann Senior Staff Attorney, Electronic Frontier Foundation Can the government force you to turn over your encryption passphrase or decrypt your data? The law surrounding police attempts to force decryption is developing at breakneck speed, with two major court decisions this year alone. This talk will start off with an in-depth explanation of the Fifth A....
Crypto and the Cops: the Law of Key Disclosure and Forced Decryption Marcia Hofmann Senior Staff Attorney, Electronic Frontier Foundation Can the government force you to turn over your encryption passphrase or decrypt your data? The law surrounding police attempts to force decryption is developing at breakneck speed, with two major court decisions this year alone. This talk will start off with an in-depth explanation of the Fifth A....
How to Hack All the Transport Networks of a Country Alberto García Illera The presentation is about a real black hacking act against the transport network of a country. It can be extrapolated to any other country. We will show how to get full access to the entire transport network. Manipulating parameters to get free tickets, getting control of the ticket machines, getting clients CC dumps, hooking internal processes to get the cli....
How to Hack All the Transport Networks of a Country Alberto García Illera The presentation is about a real black hacking act against the transport network of a country. It can be extrapolated to any other country. We will show how to get full access to the entire transport network. Manipulating parameters to get free tickets, getting control of the ticket machines, getting clients CC dumps, hooking internal processes to get the cli....
How to Hack All the Transport Networks of a Country Alberto García Illera The presentation is about a real black hacking act against the transport network of a country. It can be extrapolated to any other country. We will show how to get full access to the entire transport network. Manipulating parameters to get free tickets, getting control of the ticket machines, getting clients CC dumps, hooking internal processes to get the cli....
Bigger Monster, Weaker Chains: The National Security Agency and the Constitution Jameel Jaffer Deputy Legal Director, American Civil Liberties Union William Binney Former Official, National Security Agency James Bamford Investigative Journalist Alex Abdo Staff Attorney, American Civil Liberties Union The National Security Agency, the largest, most powerful spy agency in the world, has taken in an estimated 15 to 20 trillio....
Bigger Monster, Weaker Chains: The National Security Agency and the Constitution Jameel Jaffer Deputy Legal Director, American Civil Liberties Union William Binney Former Official, National Security Agency James Bamford Investigative Journalist Alex Abdo Staff Attorney, American Civil Liberties Union The National Security Agency, the largest, most powerful spy agency in the world, has taken in an estimated 15 to 20 trillio....
Bigger Monster, Weaker Chains: The National Security Agency and the Constitution Jameel Jaffer Deputy Legal Director, American Civil Liberties Union William Binney Former Official, National Security Agency James Bamford Investigative Journalist Alex Abdo Staff Attorney, American Civil Liberties Union The National Security Agency, the largest, most powerful spy agency in the world, has taken in an estimated 15 to 20 trillio....
Owning One to Rule Them All Dave Kennedy Chief Security Officer Dave DeSimone Manager, Information Security As penetration testers, we often try to impact an organization as efficient and effective as we can to simulate an attack on an organization. What if you could own one system to own them all? That's it, one system. It's all you need, it's in every company, and as soon as you compromise it, the rest fall (no not a domain co....
Owning One to Rule Them All Dave Kennedy Chief Security Officer Dave DeSimone Manager, Information Security As penetration testers, we often try to impact an organization as efficient and effective as we can to simulate an attack on an organization. What if you could own one system to own them all? That's it, one system. It's all you need, it's in every company, and as soon as you compromise it, the rest fall (no not a domain co....
Owning One to Rule Them All Dave Kennedy Chief Security Officer Dave DeSimone Manager, Information Security As penetration testers, we often try to impact an organization as efficient and effective as we can to simulate an attack on an organization. What if you could own one system to own them all? That's it, one system. It's all you need, it's in every company, and as soon as you compromise it, the rest fall (no not a domain co....
Robots: You're Doing It Wrong 2 Katy Levinson Director of Development, Hacker Dojo By popular demand, Defcon's angry little roboticist is back with more stories of robot designs gone awry that make practical lessons on making better robots. Drinking will happen: vodka-absconding scoundrels are not invited. This talk will cover material assuming the average audience member is a relatively intelligent coder with a high-school p....
Robots: You're Doing It Wrong 2 Katy Levinson Director of Development, Hacker Dojo By popular demand, Defcon's angry little roboticist is back with more stories of robot designs gone awry that make practical lessons on making better robots. Drinking will happen: vodka-absconding scoundrels are not invited. This talk will cover material assuming the average audience member is a relatively intelligent coder with a high-school p....
Robots: You're Doing It Wrong 2 Katy Levinson Director of Development, Hacker Dojo By popular demand, Defcon's angry little roboticist is back with more stories of robot designs gone awry that make practical lessons on making better robots. Drinking will happen: vodka-absconding scoundrels are not invited. This talk will cover material assuming the average audience member is a relatively intelligent coder with a high-school p....
Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2 Moxie Marlinspike David Hulton Marsh Ray MS-CHAPv2 is an authentication and key negotiation protocol that, while old and battered, is still unfortunately deployed quite widely. It underpins almost all PPTP VPN services, and is relied upon by many WPA2 Enterprise wireless deployments. We will release tools that definitively break the protocol, allowing anyone to affordably....
Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2 Moxie Marlinspike David Hulton Marsh Ray MS-CHAPv2 is an authentication and key negotiation protocol that, while old and battered, is still unfortunately deployed quite widely. It underpins almost all PPTP VPN services, and is relied upon by many WPA2 Enterprise wireless deployments. We will release tools that definitively break the protocol, allowing anyone to affordably....
Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2 Moxie Marlinspike David Hulton Marsh Ray MS-CHAPv2 is an authentication and key negotiation protocol that, while old and battered, is still unfortunately deployed quite widely. It underpins almost all PPTP VPN services, and is relied upon by many WPA2 Enterprise wireless deployments. We will release tools that definitively break the protocol, allowing anyone to affordably....
SCADA HMI and Microsoft Bob: Modern Authentication Flaws With a 90's Flavor Wesley McGrew Research Associate and Lecturer Critical Infrastructure Protection Center, National Forensics Training Center, Mississippi State University SCADA HMI software provides a "control panel" interface to SCADA/ICS systems, allowing system operators and engineers the capability to visually monitor and make changes to parameters in the system. Man....
SCADA HMI and Microsoft Bob: Modern Authentication Flaws With a 90's Flavor Wesley McGrew Research Associate and Lecturer Critical Infrastructure Protection Center, National Forensics Training Center, Mississippi State University SCADA HMI software provides a "control panel" interface to SCADA/ICS systems, allowing system operators and engineers the capability to visually monitor and make changes to parameters in the system. Man....
SCADA HMI and Microsoft Bob: Modern Authentication Flaws With a 90's Flavor Wesley McGrew Research Associate and Lecturer Critical Infrastructure Protection Center, National Forensics Training Center, Mississippi State University SCADA HMI software provides a "control panel" interface to SCADA/ICS systems, allowing system operators and engineers the capability to visually monitor and make changes to parameters in the system. Man....
Making Sense of Static - New Tools for Hacking GPS Fergus Noble Colin Beighley GPS receivers are a part of everyday life, you probably own several already and use them everyday, in your phone or in your car. Its really pretty amazing that you can find your position anywhere on Earth with just a small device you can fit in your pocket, but how does it actually work? In this talk we would like to guide you through the amazing tech....
Making Sense of Static - New Tools for Hacking GPS Fergus Noble Colin Beighley GPS receivers are a part of everyday life, you probably own several already and use them everyday, in your phone or in your car. Its really pretty amazing that you can find your position anywhere on Earth with just a small device you can fit in your pocket, but how does it actually work? In this talk we would like to guide you through the amazing tech....
Making Sense of Static - New Tools for Hacking GPS Fergus Noble Colin Beighley GPS receivers are a part of everyday life, you probably own several already and use them everyday, in your phone or in your car. Its really pretty amazing that you can find your position anywhere on Earth with just a small device you can fit in your pocket, but how does it actually work? In this talk we would like to guide you through the amazing tech....
Panel: The Making of DEF CON 20 Have you ever wondered what it takes to put DEF CON together, Well now is your chance to find out. DEF CON is broken down into 10 departments: Security, Networking, Press, Speaker Ops, Contests, Vendors, Swag Booth, Registration, Quarter Master, and Operations. Each of the department heads (aka the DEF CON Planning Staff) will be part of this panel and will give an overview of what we do the other 361 d..
Panel: The Making of DEF CON 20 Have you ever wondered what it takes to put DEF CON together, Well now is your chance to find out. DEF CON is broken down into 10 departments: Security, Networking, Press, Speaker Ops, Contests, Vendors, Swag Booth, Registration, Quarter Master, and Operations. Each of the department heads (aka the DEF CON Planning Staff) will be part of this panel and will give an overview of what we do the other 361 d..
Panel: The Making of DEF CON 20 Have you ever wondered what it takes to put DEF CON together, Well now is your chance to find out. DEF CON is broken down into 10 departments: Security, Networking, Press, Speaker Ops, Contests, Vendors, Swag Booth, Registration, Quarter Master, and Operations. Each of the department heads (aka the DEF CON Planning Staff) will be part of this panel and will give an overview of what we do the other 361 d..
Creating an A1 Security Kernel in the 1980s (Using "Stone Knives and Bear Skins") Tom Perrine Sr Enterprise Architect, Sr Manager IT Infrastructure This is a retrospective of computer security research and the process of building a secure operating system for the US government 1983-1990. The paper presents the case study of Kernelized Secure Operating System (KSOS), an A1 security-kernel operating system. KSOS was written to protec....
The Safety Dance - Wardriving the Public Safety Band Robert Portvliet Foundstone Brad Antoniewicz Foundstone The 4.9Ghz Public Safety Band has been deployed to a town near you! Police, Emergency Medical, and even Critical Infrastructure (power plants, etc.) maintain wireless networks on this seemingly ‘hidden’ band ... but what’s actually there? How can you identify and monitor these networks? Stop by and find out the answers to..
Creating an A1 Security Kernel in the 1980s (Using "Stone Knives and Bear Skins") Tom Perrine Sr Enterprise Architect, Sr Manager IT Infrastructure This is a retrospective of computer security research and the process of building a secure operating system for the US government 1983-1990. The paper presents the case study of Kernelized Secure Operating System (KSOS), an A1 security-kernel operating system. KSOS was written to protec....
The Safety Dance - Wardriving the Public Safety Band Robert Portvliet Foundstone Brad Antoniewicz Foundstone The 4.9Ghz Public Safety Band has been deployed to a town near you! Police, Emergency Medical, and even Critical Infrastructure (power plants, etc.) maintain wireless networks on this seemingly ‘hidden’ band ... but what’s actually there? How can you identify and monitor these networks? Stop by and find out the answers to..
Creating an A1 Security Kernel in the 1980s (Using "Stone Knives and Bear Skins") Tom Perrine Sr Enterprise Architect, Sr Manager IT Infrastructure This is a retrospective of computer security research and the process of building a secure operating system for the US government 1983-1990. The paper presents the case study of Kernelized Secure Operating System (KSOS), an A1 security-kernel operating system. KSOS was written to protec....
The Safety Dance - Wardriving the Public Safety Band Robert Portvliet Foundstone Brad Antoniewicz Foundstone The 4.9Ghz Public Safety Band has been deployed to a town near you! Police, Emergency Medical, and even Critical Infrastructure (power plants, etc.) maintain wireless networks on this seemingly ‘hidden’ band ... but what’s actually there? How can you identify and monitor these networks? Stop by and find out the answers to..
Attacking TPM Part 2: A Look at the ST19WP18 TPM Device Chris Tarnovsky Flylogic, Inc. The STMicroelectronics ST19WL18P TPM die-level analysis. Companies like Atmel, Infineon and ST are pushing motherboard manufacturers to use these devices. End-users trust these devices to hold passwords and other secrets. Once more, I will show you just how insecure these devices are. Christopher 'Biggun' Tarnovsky owns Flylogic, Inc. and spec..
Attacking TPM Part 2: A Look at the ST19WP18 TPM Device Chris Tarnovsky Flylogic, Inc. The STMicroelectronics ST19WL18P TPM die-level analysis. Companies like Atmel, Infineon and ST are pushing motherboard manufacturers to use these devices. End-users trust these devices to hold passwords and other secrets. Once more, I will show you just how insecure these devices are. Christopher 'Biggun' Tarnovsky owns Flylogic, Inc. and spec..
Attacking TPM Part 2: A Look at the ST19WP18 TPM Device Chris Tarnovsky Flylogic, Inc. The STMicroelectronics ST19WL18P TPM die-level analysis. Companies like Atmel, Infineon and ST are pushing motherboard manufacturers to use these devices. End-users trust these devices to hold passwords and other secrets. Once more, I will show you just how insecure these devices are. Christopher 'Biggun' Tarnovsky owns Flylogic, Inc. and spec..
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1234 1270 1271 1272 1273 1274 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
150 visitors online