AI
Access Control Done Right the First Time
offensive securitynetwork and infrastructure
Cybersecurity
DEF CON 33 2025
DEF CON 33, the world's largest, longest continuously run underground hacking conference. Features top hacking research, hands-on learning, & contests!.
221
Talks
Day 1
84 talks
Cybersecurity in Latin America: The Untold Stories of Resilience & Innovation
security leadershipmalware and threat inteloffensive security
Off-Grid Datarunning in Oppresive Regimes: Sneakernet and Pirate Box
network and infrastructure
Mastering Apple's Endpoint Security for Advanced macOS Malware Detection
defensive securitymalware and threat intel
Silent Leaks: Harvesting Secrets from Shared Linux Environments
offensive securityapplication security
DC101 Panel
security leadership
Safe Harbor or Hostile Waters: Unveiling the Hidden Perils of the TorchScript Engine in PyTorch
application securityoffensive security
Cryptocurrency Opening Keynote
cryptographygovernance and risk
Weaponizing Trust: Investigating a Threat Actor Targeting Security Researchers and Academics
malware and threat inteloffensive securityapplication security
Infecting the Boot to Own the Kernel: Bootkits and Rootkits Development
offensive securitymalware and threat intel
Gateways to Chaos - How We Proved Modems Are a Ticking Time Bomb That Hackers Can Access Everywhere
mobile and iot securitynetwork and infrastructure
The (Un)Rightful Heir: My dMSA Is Your New Domain Admin
identity and accessoffensive security
Beyond Assistants: Securing Agentic AI Systems and Multi-Agent Workflows in High-Stakes Environments
ai securityapplication security
Quiet Confidence: An Introvert's Journey to Technical Public Speaking
security leadership
The depths that marketers will plummet to
governance and riskmalware and threat intel
Emulating Embedded Linux Devices at Scale with Light-Touch Firmware Rehosting
network and infrastructuremobile and iot security
Rusty pearls: Postgres RCE on cloud databases
offensive securitycloud security
Inside Look at a Chinese Operational Relay Network
malware and threat intelnetwork and infrastructureoffensive security
Dead Made Alive Again: Bypassing Intent Destination Checks and Reintroducing LaunchAnyWhere Privilege Escalation
offensive securitymobile and iot security
Ghosts in the Machine Check - Conjuring Hardware Failures for Cross-ring Privilege Escalation
offensive securitynetwork and infrastructure
Edge of Tomorrow: Foiling Large Supply Chain Attacks By Taking 5k Abandoned S3 Buckets from Malware and Benign Software
application securitycloud securitymalware and threat intel
The Ultimate Hack: Applying Lessons Learned from the loss of TITAN to Maritime Cybersecurity
network and infrastructuregovernance and risk
No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol
cryptographynetwork and infrastructureoffensive security
Teaching Your Reverse Proxy to Think: Fingerprint-Based Bot Blocking & Dynamic Deception
defensive securitynetwork and infrastructure
Escaping the Privacy Sandbox with Client-Side Deanonymization Attacks
offensive securityapplication security
Fear vs. Physics: Diagnosing Grid Chaos
network and infrastructuregovernance and risk
AppleStorm - Unmasking the Privacy Risks of Apple Intelligence
ai securitymobile and iot security
What is Dead May Never Die: The Ghost of Internet Explorer in Windows: MapUrlToZone
offensive securityapplication security
HTTP/1.1 Must Die! The Desync Endgame
offensive securityapplication security
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
offensive securitynetwork and infrastructure
Flipping Locks - Remote Badge Cloning with the Flipper Zero and More
offensive securitynetwork and infrastructure
Recording PCAPs from Stingrays With a $20 Hotspot
defensive securitynetwork and infrastructure
Smart Bus Smart Hacking: From Free WiFi to Total Control
mobile and iot securityoffensive securitynetwork and infrastructure
Killing Killnet
malware and threat intel
Remote code execution via MIDI messages
offensive securitynetwork and infrastructure
BitUnlocker: Leveraging Windows Recovery to Extract BitLocker Secrets
offensive securitycryptography
Of Stochastic Parrots and Deterministic Predators: Decision-Making in Adversarial Automation
offensive securityai security
Ghost Calls: Abusing Web Conferencing for Covert Command & Control
offensive securitynetwork and infrastructure
Cash, Drugs, and Guns: Why Your Safes Aren't Safe
offensive securitymobile and iot security
Quantum-Resistant Healthcare
cryptographyapplication security
Firewalls Under Fire: China's 5+ year campaign to penetrate perimeter network defenses
network and infrastructuremalware and threat intel
Virtualization-Based (In)security - Weaponizing VBS Enclaves
offensive securitymalware and threat intel
Unmasking the Snitch Puck: the creepy IoT surveillance tech in the school bathroom
mobile and iot securityoffensive security
Never enough about cameras - The firmware encryption keys hidden under the rug
mobile and iot securityoffensive security
Secure Code Is Critical Infrastructure: Hacking Policy for the Public Good
application securitygovernance and risk
Paywall Optional: Stream for Free with a New Technique, Recursive Request Exploits (RRE)
offensive securityapplication security
What is Dead May Never Die: The Immortality of SDK Bugs
mobile and iot securityoffensive security
The One Bitcoin Heist: Making a custom Hashcat module to solve a decade-old puzzle challenge
cryptographyoffensive security
You snooze you lose: RPC-Racer winning RPC endpoints against services
offensive security
Siri-ously Leaky: Exploring Overlooked Attack Surfaces Across Apple's Ecosystem
offensive securitymobile and iot security
Safeguarding the Industrial Frontier: OT SOC & Incident Response
defensive securitynetwork and infrastructuregovernance and risk
Fighting the Digital Blockade: A View from Taiwan
network and infrastructuregovernance and risk
Welcome to DEF CON 33!
security leadership
Context Aware Anomaly Detection in Automotive CAN Without Decoding
network and infrastructuremobile and iot security
They deployed Health AI on us. We’re bringing the rights & red teams.
ai securityoffensive securitygovernance and risk
Hacking the Nautical Rules of the Road: Turn Left for Global Pwnage
offensive security
Modern Odometer Manipulation
mobile and iot securitynetwork and infrastructure
State of Open Source in the Federal Government
governance and riskapplication security
Voices from the Frontlines: Managing Bug Bounties at Scale
Gabriel Nitu, Jay Dancer, Tyson Laa Deng, Ryan Nolette, Goraksh Shinde, Jill "thejillboss" Moné-Corallo
offensive securitysecurity leadership
Hacking Hotel Locks; The Saflok Vulnerabilities Expanded
offensive security
Bio-Cryptography is the Game-Genie in a post quantum dystopia
cryptography
How Extra Features In Contactless Payments Break Security And What We Can Do About it.
mobile and iot securitycryptography
VDP in Aviation - How it shouldn't be done!
application securitygovernance and risk
Threat Dynamics on the Seas
malware and threat intelnetwork and infrastructuregovernance and risk
How API flaws led to admin access to over 1,000 USA dealers and control over your car
application securitymobile and iot security
Dark Capabilities: When Tech Companies Become Threat Actors
governance and risksecurity leadershipoffensive security
Building a Malware Museum
malware and threat intel
Patching Critical Infrastructure: Announcing the Winners of DARPA’s AI Cyber Challenge
ai securityapplication security
Hull Integrity: Applying MOSAICS to Naval Mission Systems
network and infrastructuregovernance and risk
Prompt. Scan. Exploit: AI’s Journey Through Zero-Days and a Thousand Bugs
offensive securityai security
Takes All Kinds: Building Onramps for Emergency Web Archiving in Ukraine and Beyond
governance and riskdefensive security
DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks
offensive securitynetwork and infrastructure
Locked Down, Not Locked Out: How I Escaped Your Secure Operator Workstation
offensive securitynetwork and infrastructure
Securing Intelligence: How hackers are breaking modern AI systems … and how bug bounty programs can keep up
ai securityoffensive security
Vibe School: Making dumb devices smart with AI
mobile and iot securityai security
All your keyboards are belong to us!
offensive security
Third-Party Access Granted: A Postmortem on Student Privacy and the Exploit That's Still in Production
governance and risk
Moonlight Defender - Purple Teaming in Space!
defensive securitynetwork and infrastructure
Orion - fuzzing workflow automation
offensive securityai security
No Spook Leaves Randomness to Chance
cryptographygovernance and risk
Hacking a head unit with malicious PNG
offensive securitymobile and iot security
Burning, trashing, spacecraft crashing: a collection of vulnerabilities that will end your space mission
offensive securityapplication security
Carding is Dead, Long Live Carding: How MaaS is fueling NFC relay attacks
malware and threat inteloffensive security
So Long, and Thanks for All the Phish
offensive securityapplication security
Day 2
95 talks
Boarding the VSAT: Real-World Exploits, Testbed Validation, and Policy Gaps in Maritime Connectivity
network and infrastructureoffensive security
Let AI Auto-Generate Neural-ASR Rules for OT-specific Attacks via NLP Approach
defensive securityai security
Anatomy of a Crypto Scam
defensive security
Resilient and Reconfigurable Maritime Comms.
network and infrastructure
Red Alerts and Blue Oceans: Incident Response from a Sysadmin’s War Room in Maritime Ops
defensive securitynetwork and infrastructuregovernance and risk
How AI + Hardware can Transforming Point-of-Care Workflows
mobile and iot securityai security
Critically Neglected: Cybersecurity for buildings
network and infrastructuregovernance and risk
Examining Access Control Vulnerabilities in GraphQL - A Feeld Case Study
application securityoffensive security
Reverse Engineering Marine Engines: How to make powerboats do your bidding
network and infrastructuremobile and iot security
Navigating the Invisible
offensive securitynetwork and infrastructuremalware and threat intel
China's Health Sector Ambitions and Information Needs: Implications for U.S. Health Care Cyber Defense
malware and threat intelgovernance and risk
Malware in the gist: How malicious packages on npm bypass existing security tools
application securitymalware and threat intel
Your Passkey is Weak: Phishing the Unphishable
identity and accessoffensive security
How Not to IoT: Lessons in Security Failures
mobile and iot securityoffensive security
Breaking Down Bias in the Cyber Stack
security leadership
Illuminating the Dark Corners of AI: Extracting Private Data from AI Models and Vector Embeddings
ai securityoffensive security
Thinking Like a Hacker in the Age of AI
ai securityoffensive security
Here and Now: Exploiting the Human Layer at the Right Moment
offensive securityidentity and access
Breaking the Chain: Advanced Offensive Strategies in the Software Supply Chain
offensive securityapplication securitycloud security
The Missing Link: Draytek's New RCEs Complete the Chain
offensive securitynetwork and infrastructure
How Computers Kill People: Marine Systems
network and infrastructuregovernance and risk
Hacking Context for Auto Root Cause and Attack Flow Discovery
defensive securityai security
Blurred Lines of Cyber Threat Attribution: The Evolving Tactics of North Korean Cyber Threat Actors
malware and threat inteldefensive security
Deepfake Image and Video Detection
ai securitydefensive security
De-Virtualizing the Dragon: Automated Unpacking and Deobfuscation of Nested VM-Based Protectors using Symbolic Execution and Taint Tracking
malware and threat inteloffensive security
How to secure unique ecosystem shipping 1 billion+ cores?
offensive securitydefensive securityapplication security
Private, Private, Private: Access Everywhere
identity and accessgovernance and risk
OverLAPS: Overriding LAPS Logic
identity and accessoffensive security
Sometimes you find bugs, sometimes bugs find you
offensive securityapplication security
Operational Twilight: APTs, OT, and the geopolitics of a dying climate
malware and threat intelnetwork and infrastructure
Veilid la revoluçion : Your data is yours to own
network and infrastructurecryptographygovernance and risk
Referral Beware, Your Rewards Are Mine
offensive securityapplication security
"We are currently clean on OPSEC": The Signalgate Saga
governance and riskoffensive security
Take all my money – penetrating ATMs
offensive securitynetwork and infrastructure
SSH Honeypots and Walkthrough Workshops: A History
defensive security
Kill Chain Reloaded: Abusing Legacy Paths for Stealth Persistence
offensive securitymalware and threat intel
Help! Linux in my Webcam! (•_•)
network and infrastructureoffensive security
Red Teaming Space: Hacking the Final Frontier
offensive security
Creating a Virtual Ship Environment Optimized for Cybersecurity Use
defensive securitynetwork and infrastructure
No Brain No Gain
identity and access
Original Sin of SSO: macOS PRT Cookie Theft & Entra ID Persistence via Device Forgery
identity and accessoffensive security
Metal-as-a-Disservice: Exploiting Legacy Flaws in Cutting-Edge Clouds
offensive securitycloud securitynetwork and infrastructure
Client or Server? The Hidden Sword of Damocles in Kafka
application securitycloud security
One Key, Two Key, I Just Stole Your goTenna Key
network and infrastructureoffensive securitycryptography
From Pwn to Plan: Turning Physical Exploits Into Upgrades
offensive security
Making the DEF CON 33 Badge
offensive securitynetwork and infrastructure
Breakin 'Em All – Overcoming Pokemon Go's Anti-Cheat Mechanism
offensive securitymobile and iot security
CTRAPS: CTAP Impersonation and API Confusion Attacks on FIDO2
identity and accesscryptography
ReVault! Compromised by your Secure SoC
offensive securitynetwork and infrastructure
Countering Forensics Software by Baiting Them
defensive securitymobile and iot security
Shaking Out Shells with SSHamble
offensive security
Regex For Hackers
offensive securityapplication security
The 2025 Pwnie Awards
offensive security
Reconfigurable HSMs: Future-Proofing Hardware Security Against Evolving Threats
cryptographynetwork and infrastructure
Direct Memory, Access Everywhere
application securitynetwork and infrastructure
Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen
offensive securityapplication security
Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G and 4G/LTE Routers
offensive securitymobile and iot security
The Power(Point) Glove
mobile and iot security
Ask EFF
defensive securitymobile and iot securitygovernance and risk
State of the Pops: Mapping the Digital Waters
offensive securitynetwork and infrastructure
How NOT to Perform Covert Entry Assessments by WeHackPeople.com
offensive security
Rebadged, Relabeled, and Rooted: Pwnage via the Solar Supply Chain
offensive securitynetwork and infrastructure
Amber64: Mining Hacker History from Over Half a Million Commodore 64 Disks
offensive securitymalware and threat intel
Turning Camera Surveillance on its Axis
offensive securitymobile and iot security
So you want to make a badge? Badge Creation 101, from SAO to full #badgelife
network and infrastructuremobile and iot security
Hackers Dropping Mid-Heist Selfies: LLM Identifies Information Stealer Infection Vector and Extracts IoCs
defensive securitymalware and threat intel
What Game Hackers teach us about Offensive Security and Red Teaming
offensive securitymalware and threat intel
Where's My Crypto, Dude? The Ultimate Guide to Crypto Money Laundering (and How to Track It)
malware and threat intelcryptography
The DOMino Effect: Automated Detection and Exploitation of DOM Clobbering Vulnerability at Scale
application securityoffensive security
Fingerprinting Maritime NMEA2000 Networks
network and infrastructuredefensive security
RATs & Socks abusing Google Services
offensive securitymalware and threat intel
Voice Cloning Air Traffic Control: Vulnerabilities at Runway Crossings
network and infrastructureai security
Gold Bug: Puzzle Panel with Friends
cryptographyapplication security
Stories from a Tor dev
network and infrastructuregovernance and risk
Scamming the Scammers: Weaponizing Open Source Against Pig Butchering and Organized Crime
malware and threat intelgovernance and risk
The Things know What You Did Last Session
defensive securitymalware and threat intel
Zero Trust, Total Bust - Breaking into thousands of cloud-based VPNs with one bug
offensive securityidentity and accessnetwork and infrastructure
Binary Facades: Reversing approaches to extract embedded scripts in compiled macOS malware
malware and threat inteldefensive security
Cloned Vishing: A case study
offensive security
Man-in-the-Malware: Intercepting Adversarial Communications
defensive securitymalware and threat intel
Diamonds Are For Hackers - Building the first fully open source and hackable Quantum Sensor
network and infrastructuremobile and iot security
Post-Quantum Panic: When Will the Cracking Begin, and Can We Detect it?
cryptographygovernance and risk
Pirates of the North Sea
offensive securitynetwork and infrastructure
7 Vulns in 7 Days: Breaking Bloatware Faster Than It’s Built
offensive securityapplication security
#ReclaimTech - A community movement
governance and riskidentity and access
Not Just a Pipeline Leak: Reconstructing the Real Attack Behind tj-actions
application securityoffensive securitydefensive security
Badgelife Panel: Lessons from Years of Do’s, Don’ts, and Last-Minute Saves
offensive securitymobile and iot security
DDoS: The Next Generation
network and infrastructure
DEF CON Groups (DCGs): Keeping the Signal Alive All Year Long
mobile and iot securitysecurity leadership
TSPU: Russia's Firewall and Defending Against the Future of Digital Repression
network and infrastructureoffensive security
One Modem to Brick Them All: Exploiting Vulnerabilities in the EV Charging Communication
offensive securitymobile and iot securitynetwork and infrastructure
Turning Microsoft's Login Page into our Phishing Infrastructure
offensive securityidentity and access
The Price for Progress: Ethical Cybersecurity and Tech-Driven Communities
governance and risksecurity leadershipai security
HaKCing OBD-II Emissions Testing
mobile and iot securityoffensive security
What’s Really in the Box? The Case for Hardware Provenance and HBOMs
application securitynetwork and infrastructuregovernance and risk
Day 3
42 talks
Mind the Data Voids: Hijacking Copilot Trust to Deliver C2 Instructions with Microsoft Authority
ai securityoffensive security
Breaking Wi-Fi Easy Connect: A Security Analysis of DPP
network and infrastructureoffensive security
SCCM: The tree that always bears bad fruits
offensive securityidentity and access
SSH-nanigans: Busting Open the Mainframes Iron Fortress through Unix
offensive securitynetwork and infrastructure
Planting C4: Cross-Compatible External C2 for All Your Implants
offensive security
Kill List: Hacking an Assassination Site on the Dark Web
offensive securitymalware and threat intel
Journey to the center of the PSTN: How I became a phone company, and why you should too.
network and infrastructureoffensive security
Silent Signals: Exploiting Security and Privacy Side-Channels in End-to-End Encrypted Messengers
cryptographyoffensive securitymobile and iot security
Loading Models, Launching Shells: Abusing AI File Formats for Code Execution
ai securityoffensive security
Turning your Active Directory into the attacker’s C2: modern Group Policy Objects enumeration and exploitation
identity and accessoffensive security
Invitation Is All You Need! Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite
ai securityoffensive security
Passkeys Pwned: Turning WebAuthn Against Itself
identity and accessoffensive securityapplication security
How to Fake a Badge like a Pro: 11 Tips to Counterfeiting Event Credentials
offensive security
From Shanghai to the Shore: The Silent Threat in Global Shipping
network and infrastructuregovernance and risk
40 Years Of Phrack: Hacking, Zines & Digital Dissent
offensive security
Unexpected Connections: How a vulnerability in obscure dealer software could have unlocked your car from anywhere
mobile and iot securityapplication security
Playing Dirty Without Cheating - Getting Banned for Fun and No Profit
offensive securitymalware and threat intelnetwork and infrastructure
Jailbreaking the Hivemind: Finding and Exploiting Kernel Vulnerabilities in the eBPF Subsystem
offensive security
Hacking Space to Defend It: Generating IoBs with SPARTA
defensive securitynetwork and infrastructure
Unveiling IoT Vulnerabilities: From Backdoors to Bureaucracy
offensive securitymobile and iot security
Dead Reckoning: Hijacking Marine Autopilots
network and infrastructure
Closing Patient Safety Gaps with Smart Tech and AI
ai securitydefensive security
Win-DoS Epidemic: A crash course in abusing RPC for Win-DoS & Win-DDoS
offensive securitynetwork and infrastructure
Hacker vs. Triage: Inside the Bug Bounty Battleground
offensive securitysecurity leadership
Cyber Volunteering and Community Defense - DEF CON Franklin and the Cyber Resilience Corps 1 Year In
governance and risksecurity leadership
Intro to Physical Security Bypass
offensive security
Carding, Sabotage & Survival: A Darknet Market Veteran’s Story
offensive securitymalware and threat intel
The Worst ICS/OT Love Story Ever Told
network and infrastructuregovernance and risk
Smart Devices, Dumb Resets? Testing Firmware Persistence in Commercial IoT
mobile and iot securityoffensive security
Bare Metal Reverse Engineering
malware and threat intelmobile and iot security
Red Russians: How Russian APT groups closely follow offensive security research
malware and threat inteldefensive security
Escaping the Privacy Sandbox with Client-Side Deanonymization Attacks
offensive securityapplication security
Don't Cry Wolf: Evidence-based assessments of ICS Threats
malware and threat intelnetwork and infrastructure
Intro to Common Industrial Protocol Exploitation
offensive securitynetwork and infrastructure
Hacking Reality: HoloConnect AI and the Rise of Offline Holograms in Medical Devices
ai securitymobile and iot security
There and Back Again: Discovering OT devices across protocol gateways
network and infrastructure
Elevators 101
offensive security
Letthemin: Facilitating High-Value Purple Teams Using an Assumed Compromise Approach
defensive security
Passing the Torch: Mentoring and Protecting Our Students in Education Spaces
defensive securitygovernance and risksecurity leadership
Silent Sabotage: How Nation-State Hackers Turn Human Error into Catastrophic Failures
defensive securitynetwork and infrastructuremalware and threat intel
OSINT Enabled Ghost Mode: Counter-Surveillance for Everyday People Like Us
defensive securitymalware and threat intel
DEF CON Closing Ceremonies & Awards
security leadership