Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1234 1278 1279 1280 1281 1282 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Tobias-Bluzmanis-Fiddler/DEFCON-20-Tobias-Bluzmanis-Fiddler-Safes-and-Containers.pdf Safes and Containers: Insecurity Design Excellence Marc Weber Tobias Investigative Attorney and Security Specialist, Security.org Matt Fiddler Security Specialist, Security.org Tobias Bluzmanis Security Specia....
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Tobias-Bluzmanis-Fiddler/DEFCON-20-Tobias-Bluzmanis-Fiddler-Safes-and-Containers.pdf Safes and Containers: Insecurity Design Excellence Marc Weber Tobias Investigative Attorney and Security Specialist, Security.org Matt Fiddler Security Specialist, Security.org Tobias Bluzmanis Security Specia....
Subterfuge: The Automated Man-in-the-Middle Attack Framework Matthew Toussain United States Air Force Christopher Shields United States Air Force Walk into Starbucks, plop down a laptop, click start, watch the credentials roll in. Enter Subterfuge, a Framework to take the arcane art of Man-in-the-Middle Attacks and make it as simple as point and shoot. Subterfuge demonstrates vulnerabilities in the ARP Protocol by harvesting creden....
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Toussain-Shields/DEFCON-20-Toussain-Shields-Subterfuge.pdf .pdf Whitepaper:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Toussain-Shields/DEFCON-20-Toussain-Shields-Subterfuge-WP.pdf Subterfuge: The Automated Man-in-the-Middle Attack Framework Matthew ....
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Toussain-Shields/DEFCON-20-Toussain-Shields-Subterfuge.pdf .pdf Whitepaper:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Toussain-Shields/DEFCON-20-Toussain-Shields-Subterfuge-WP.pdf Subterfuge: The Automated Man-in-the-Middle Attack Framework Matthew ....
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Toussain-Shields/DEFCON-20-Toussain-Shields-Subterfuge.pdf .pdf Whitepaper:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Toussain-Shields/DEFCON-20-Toussain-Shields-Subterfuge-WP.pdf Subterfuge: The Automated Man-in-the-Middle Attack Framework Matthew ....
Drinking From the Caffeine Firehose We Know as Shodan Viss Information Security Consultant, Gentleman of Fortune Shodan is commonly known for allowing users to search for banners displayed by a short list of services available over the internet. Shodan can quite easily be used for searching the internet for potentially vulnerable services to exploit, but it's also a powerful defensive posturing tool as well as the first step in aggre....
Improving Web Vulnerability Scanning Dan Zulla A new approach for web vulnerability scanning that outbids most existing scanners. Dan Zulla contributed to various open source vulnerability scanning projects and to the security of most international web hosting and virtualization companies. He did vulnerability scanner development, penetration testing and performance optimization in scaling environments for many years. Last year ..
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Viss/DEFCON-20-Viss-SHODAN.pdf Drinking From the Caffeine Firehose We Know as Shodan Viss Information Security Consultant, Gentleman of Fortune Shodan is commonly known for allowing users to search for banners displayed by a short list of services available over the internet. Shodan can quite easil....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Zulla/DEFCON-20-Zulla-Improving-Web-Vulnerability-Scanning.pdf Improving Web Vulnerability Scanning Dan Zulla A new approach for web vulnerability scanning that outbids most existing scanners. Dan Zulla contributed to various open source vulnerability scanning projects and to the security ..
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Viss/DEFCON-20-Viss-SHODAN.pdf Drinking From the Caffeine Firehose We Know as Shodan Viss Information Security Consultant, Gentleman of Fortune Shodan is commonly known for allowing users to search for banners displayed by a short list of services available over the internet. Shodan can quite easil....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Zulla/DEFCON-20-Zulla-Improving-Web-Vulnerability-Scanning.pdf Improving Web Vulnerability Scanning Dan Zulla A new approach for web vulnerability scanning that outbids most existing scanners. Dan Zulla contributed to various open source vulnerability scanning projects and to the security ..
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Viss/DEFCON-20-Viss-SHODAN.pdf Drinking From the Caffeine Firehose We Know as Shodan Viss Information Security Consultant, Gentleman of Fortune Shodan is commonly known for allowing users to search for banners displayed by a short list of services available over the internet. Shodan can quite easil....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Zulla/DEFCON-20-Zulla-Improving-Web-Vulnerability-Scanning.pdf Improving Web Vulnerability Scanning Dan Zulla A new approach for web vulnerability scanning that outbids most existing scanners. Dan Zulla contributed to various open source vulnerability scanning projects and to the security ..
Owning Bad Guys {And Mafia} With Javascript Botnets Chema Alonso Security Researcher, Informatica64 Manu "The Sur" Penetration Tester, Informatica64 Man in the middle attacks are still one of the most powerful techniques for owning machines. In this talk MITM schemas in anonymous services are going to be discussed. Then attendees will see how easily a botnet using javascript can be created to analyze that kind of connections and so....
The Darknet of Things, Building Sensor Networks That Do Your Bidding Anch Omega The Internet of Things... It is coming, wearing hardware that communicates across the Internet is starting to become a reality, chips are getting smaller, as a society we are connected all the time... Building these devices is easier then we thought, putting them onto a network that is ours... EVEN BETTER! Come experience the Darknet of Things. Learn wh..
Extra Materials: https://www.defcon.org/images/defcon-20/dc-20-presentations/Atlas/Extras.zip atlas 0f d00m c0rp0ration Wifi is cool and so is cellular, but the real fun stuff happens below the GHz line. Medical systems, mfg plant/industrial systems, cell phones, power systems, it's all in there! atlas and some friends set out to turn pink girltech toys into power-systems-attack tools. Through several turns and changes, the ....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Alonso-Sur/DEFCON-20-Alonso-Sur-Owning-Bad-Guys-Using-JavaScript-Botnets.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Alonso-Sur/DEFCON-20-Alonso-Sur-Owning-Bad-Guys-Using-JavaScript-Botnets-WP.pdf Owning Bad Guys {And Mafia} With Jav....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Anch-Omega/DEFCON-20-Anch-Omega-The-Darknet-of-Things.pdf The Darknet of Things, Building Sensor Networks That Do Your Bidding Anch Omega The Internet of Things... It is coming, wearing hardware that communicates across the Internet is starting to become a reality, chips are getting small....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Atlas/DEFCON-20-Atlas-Sub-Ghz-or-Bust.pdf Extra Materials: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Atlas/Extras.zip atlas 0f d00m c0rp0ration Wifi is cool and so is cellular, but the real fun stuff happens below the GHz line. Medical systems, m....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Alonso-Sur/DEFCON-20-Alonso-Sur-Owning-Bad-Guys-Using-JavaScript-Botnets.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Alonso-Sur/DEFCON-20-Alonso-Sur-Owning-Bad-Guys-Using-JavaScript-Botnets-WP.pdf Owning Bad Guys {And Mafia} With Jav....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Anch-Omega/DEFCON-20-Anch-Omega-The-Darknet-of-Things.pdf The Darknet of Things, Building Sensor Networks That Do Your Bidding Anch Omega The Internet of Things... It is coming, wearing hardware that communicates across the Internet is starting to become a reality, chips are getting small....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Atlas/DEFCON-20-Atlas-Sub-Ghz-or-Bust.pdf Extra Materials: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Atlas/Extras.zip atlas 0f d00m c0rp0ration Wifi is cool and so is cellular, but the real fun stuff happens below the GHz line. Medical systems, m....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Alonso-Sur/DEFCON-20-Alonso-Sur-Owning-Bad-Guys-Using-JavaScript-Botnets.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Alonso-Sur/DEFCON-20-Alonso-Sur-Owning-Bad-Guys-Using-JavaScript-Botnets-WP.pdf Owning Bad Guys {And Mafia} With Jav....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Anch-Omega/DEFCON-20-Anch-Omega-The-Darknet-of-Things.pdf The Darknet of Things, Building Sensor Networks That Do Your Bidding Anch Omega The Internet of Things... It is coming, wearing hardware that communicates across the Internet is starting to become a reality, chips are getting small....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Atlas/DEFCON-20-Atlas-Sub-Ghz-or-Bust.pdf Extra Materials: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Atlas/Extras.zip atlas 0f d00m c0rp0ration Wifi is cool and so is cellular, but the real fun stuff happens below the GHz line. Medical systems, m....
Blind XSS Adam "EvilPacket" Baldwin Chief Security Officer, &yet This talk will announce the release and demonstrate the xss.io toolkit. xss.io is a platform to help ease cross-site scripting (xss) exploitation and specifically for this talk identification of blind xss vectors. Think drag and drop exploits post xss vuln identification. For blind xss, xss.io is a callback and hook manager for intel collected by executed and non-execut....
Overwriting the Exception Handling Cache PointerDwarf Oriented Programming Rodrigo Rubira Branco Vulnerability & Malware Research Labs, Qualys James Oakley Programmer Sergey Bratus Research Ass't Professor, Comp. Science, Dartmouth College This presentation describes a new technique for abusing the DWARF exception handling architecture used by the GCC tool chain. This technique can be used to exploit vulnerabilities in programs c....
Exploit Archaeology: Raiders of the Lost Payphones Josh Brashars Penetration Tester, Member DC 949 Payphones. Remember those? They used to be a cornerstone of modern civilation, available at every street corner, gas station, or any general place of commerce. For decades, hackers and phone phreaks crowded around them as an altar to high technology and a means to "reach out and touch someone". Fast forward to today, most people ha....
Hardware Backdooring is Practical Jonathan Brossard Toucan System Whitepaper Available here: https://www.defcon.org/images/defcon-20/dc-20-presentations/Brossard/DEFCON-20-Brossard-Hardware-Backdooring-is-Practical-WP.pdf This presentation will demonstrate that permanent backdooring of hardware is practical. We have built a generic proof of concept malware for the intel architecture, Rakshasa, capable of infecting more than a....
DIY Electric Car Dave Brown Electric Vehicles are an exciting area of developing technology entering the mainstream market. Every major manufacturer is working on new hybrid and electric vehicles but prices will be high and options few for years to come. As with many industries, a DIY approach can yield similar results for much less cost, while creating something truly unique. This talk will explore the possibilities and pr..
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Baldwin/DEFCON-20-Adam-Baldwin-Blind-XSS.pdf Blind XSS Adam "EvilPacket" Baldwin Chief Security Officer, & yet. This talk will announce the release and demonstrate the xss.io toolkit. xss.io is a platform to help ease cross-site scripting (xss) exploitation and specifically for this talk identifi....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Branco-Oakley-Bratus/DEFCON-20-Branco-Oakley-Bratus-Dwarf-Oriented-Programming.pdf Extra Paper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Branco-Oakley-Bratus/RodrigoBranco.txt Overwriting the Exception Handling Cache PointerDwarf Oriented Programming ....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brashars/DEFCON-20-Brashars-Exploit-Archaeology.pdf Exploit Archaeology: Raiders of the Lost Payphones Josh Brashars Penetration Tester, Member DC 949 Payphones. Remember those? They used to be a cornerstone of modern civilation, available at every street corner, gas station, or any general place ....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brossard/DEFCON-20-Brossard-Hardware-Backdooring-is-Practical.pdf Whitepaper Available here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brossard/DEFCON-20-Brossard-Hardware-Backdooring-is-Practical-WP.pdf Hardware Backdooring is Practical Jonathan Brossa....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brown/DEFCON-20-Dave-Brown-DIY-Electric-Car.pdf DIY Electric Car Dave Brown Electric Vehicles are an exciting area of developing technology entering the mainstream market. Every major manufacturer is working on new hybrid and electric vehicles but prices will be high and options few for years to c....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Baldwin/DEFCON-20-Adam-Baldwin-Blind-XSS.pdf Blind XSS Adam "EvilPacket" Baldwin Chief Security Officer, & yet. This talk will announce the release and demonstrate the xss.io toolkit. xss.io is a platform to help ease cross-site scripting (xss) exploitation and specifically for this talk identifi....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Branco-Oakley-Bratus/DEFCON-20-Branco-Oakley-Bratus-Dwarf-Oriented-Programming.pdf Extra Paper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Branco-Oakley-Bratus/RodrigoBranco.txt Overwriting the Exception Handling Cache PointerDwarf Oriented Programming ....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brashars/DEFCON-20-Brashars-Exploit-Archaeology.pdf Exploit Archaeology: Raiders of the Lost Payphones Josh Brashars Penetration Tester, Member DC 949 Payphones. Remember those? They used to be a cornerstone of modern civilation, available at every street corner, gas station, or any general place ....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brossard/DEFCON-20-Brossard-Hardware-Backdooring-is-Practical.pdf Whitepaper Available here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brossard/DEFCON-20-Brossard-Hardware-Backdooring-is-Practical-WP.pdf Hardware Backdooring is Practical Jonathan Brossa....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brown/DEFCON-20-Dave-Brown-DIY-Electric-Car.pdf DIY Electric Car Dave Brown Electric Vehicles are an exciting area of developing technology entering the mainstream market. Every major manufacturer is working on new hybrid and electric vehicles but prices will be high and options few for years to c....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Baldwin/DEFCON-20-Adam-Baldwin-Blind-XSS.pdf Blind XSS Adam "EvilPacket" Baldwin Chief Security Officer, & yet. This talk will announce the release and demonstrate the xss.io toolkit. xss.io is a platform to help ease cross-site scripting (xss) exploitation and specifically for this talk identifi....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Branco-Oakley-Bratus/DEFCON-20-Branco-Oakley-Bratus-Dwarf-Oriented-Programming.pdf Extra Paper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Branco-Oakley-Bratus/RodrigoBranco.txt Overwriting the Exception Handling Cache PointerDwarf Oriented Programming ....
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Brashars/DEFCON-20-Brashars-Exploit-Archaeology.pdf Exploit Archaeology: Raiders of the Lost Payphones Josh Brashars Penetration Tester, Member DC 949 Payphones. Remember those? They used to be a cornerstone of modern civilation, available at every street corner, gas station, or any general place ....
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1234 1278 1279 1280 1281 1282 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
44 visitors online