![DEF CON 18 [Video] Speeches from the Hacker Convention. podcast artwork](https://www.defcon.org/podcast/dc-18-itunes-logo-video.jpg){kind=logo}
DEF CON 18 [Video] Speeches from the Hacker Convention.
by The Dark Tangent
Past speeches and talks from DEF CON hacking conferences in an iTunes friendly M4b format. The DEF CON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!
Episodes
-
BONUS- BLACK HAT- Barnaby Jack - Jackpotting Automated Teller Machines Redux - Video
BONUS- BLACK HAT Presentation. The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009. Due to circumstances beyond my control, the talk was pulled at the last minute. The upside to this is that there has been an additional year to research…
more -
Barrett Weisshaar & Garret Picchioni - The Night The Lights Went Out In Vegas: Demystifying Smartmeter Networks
Smart meter technology is moving from news PR item to reality in many major utility markets, bringing with it the promise of fewer site visits and lower rates. With these devices, your local utility can perform a variety of actions from starting/stopping service, upgrading your meter, or even...
-
Zoz - Pwned By The Owner: What Happens When You Steal A Hacker's Computer
Having your place broken into and your computer stolen can be a nightmare. Getting revenge on the fucker who has your machine can be a dream come true. I had the opportunity to experience both of these when my machine was stolen in Boston and then showed up in Las Vegas 2 years later. Come share...
-
A.P. Delchi - Physical Security : You're Doing It Wrong!
Follow in the footsteps of a seasoned geek as he recalls his adventures in the design, buildout, and operation of a physical security system. Learn how to plan ahead for the issues that will fall on your head, how to get vendors to take you to lunch, and how to achieve the impossible : a physical...
-
Adam Pridgen & Matt Wollenweber - Toolsmithing an IDA Bridge, Case Study for Building a Reverse Engineering Tool
The presentation is a case study about an approach to building reverse engineering tools, but in this case, a network bridge between IDA Pro and Debuggers. The presentation will cover the development side of things, and discuss how to leverage open source projects as supplements for code and...
-
Adrian Crenshaw - Programmable HID USB Keystroke Dongle: Using the Teensy as a Pen Testing Device
The Programmable HID USB Keystroke Dongle (PHUKD) is a small device based around the Teensy microcontroller development board. It allows users to program in keystrokes and mouse macros that can execute when the device is plugged in, after a set time, or when certain environmental conditions are…
more -
Ki-Chan Ahn & Dong-Joo Ha - Malware Migrating to Gaming Consoles: Embedded Devices, an Antivirus-Free Safe Hideout For Malware
A large portion of people who possess a Gaming Console or a Smartphone are downloading paid software illegally from the web or p2p. Most of those people do not even give a second thought before installing the downloaded software, and merely just check that the application works. The sense of...
-
Andrew Kongs & Dr. Gerald Kane - Training the Next Generation of Hardware Hackers -- Teaching Computer Organization and Assembly Language Hands-On with Embedded Systems
Hardware hacking can be lots of fun but can be very intimidating getting started. Andrew Kongs and Dr. Gerald Kane wanted to spread the hardware hacking culture to others and saw incoming college engineering freshman as the perfect crowd to indoctrinate. They developed a set of hardware and...
-
Anthony Lai, Jake Appelbaum & Jon Oberheide - The Power of Chinese Security
If you visit China, I am sure you would like the Great Wall, however, if you surf the Internet in China, I am sure you hate the Great FireWall (GFW). How a firewall could "serve" over 3.8 billion Internet users in China is a readily interesting story for the globe. In the presentation and…
more -
Anthony Lineberry, David Luke Richardson & Tim Wyatt - These Aren't the Permissions You're Looking For
The rise of the robot revolution is among us. In the past year Android has stepped up to become a leader in the world of mobile platforms. As of early may the platform has surpassed the iPhone in market share at 28%. Third party trackers for the Android Market have reported upwards of 50,000 apps...
-
Barnaby Jack - Jackpotting Automated Teller Machines Redux
The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009. Due to circumstances beyond my control, the talk was pulled at the last minute. The upside to this is that there has been an additional year to research ATM attacks, and I'm armed with a...
-
Blake Self & bitemytaco - Hacking DOCSIS For Fun and Profit
At Defcon 16 we showed various modifications and techniques to gain free and anonymous cable modem internet access. During our last talk, the DOCSIS hacking scene was behind the cable companies. Thanks to the efforts of SBHacker and others, we our now ahead of the cable companies. This talk will...
-
Blake Self, Wayne Zage & Dolores Zage - SMART Project: Applying Reliability Metrics to Security Vulnerabilities
Battlefield operations depend heavily on network-centric computing systems. Such complex and widely dispersed operations expose network-based systems to unprecedented levels of reliability and security risks. Computer systems and network security are often limited by the reliability of the…
more -
Brad Smith - Weaponizing Lady GaGa, Psychosonic Attacks
This session introduces and demonstrates the emerging attack vector of psychosonics. Attend and you'll understand how to turn ANY MP3 into a weapon, a study aid, a hidden calming session or helping you experience that Ah-Ha moment of discovery simply by injecting an alternate data stream attack...
-
Brandon Nesbit - The Games We Play
An in depth forensic analysis of video games and the systems they're played on. The goal of which is to identify the types of information useful to a forensics investigation and any other bits of personal information. Brandon Nesbit is a Security Consultant at Trustwave. He is a member of...
-
Bruce Potter & Logan Lodge - This Needs to be Fixed, and Other Jokes in Commit Statements
Open source. These two words mean lots of things to lots of people. Some say, because it's open source it's more secure because you have complete transparency. Some say, because it's open source it's less secure because amateurs are writing the code. Well, one thing is true, with open source you...
-
Cesar Cerrudo - Token Kidnapping's Revenge
On April 14, 2009 Microsoft released a patch (http://www.microsoft.com/technet/security/bulletin/MS09-012.mspx) to fix the issues detailed in my previous Token Kidnapping presentation (http://www.argeniss.com/research/TokenKidnapping.pdf). The patch properly fixed the issues but... This new...
-
Chad Houck & Jason Lee - Decoding reCAPTCHA
Due to the prevalence of spammers on the internet CAPTCHAs have become a necessary security measure. Without a CAPTCHA in place a system is incapable of knowing whether a human or an automated computer is executing a request. Currently one of the most widely implemented versions of this system is...
-
Charlie Miller - Kim Jong-il and Me: How to Build a Cyber Army to Defeat the U.S.
Think you might ever be "asked" by a dictator of an Axis of Evil country to take down the USA in a cyberwar? Ever wonder how someone who finds vulnerabilities and breaks into computers for a living would approach cyberwar, i.e. not Richard Clarke? Then this is the talk for you! In this talk, I...
-
Chema Alonso & José Palazón "Palako" - Connection String Parameter Attacks
This session is about Parameter Pollution in Connection Strings Attack. Today, a lot of tools and web applications allow users to configure dynamically a connection against a Database server. This session will demonstrate the high risk in doing this insecurely. This session will show how to…
more -
Chema Alonso & José Palazón "Palako" - FOCA2: The FOCA Strikes Back
FOCA is a tool to extract information in footprinting and fingerprinting phases during a penetration test. It helps auditors to extract and analyze information from metadata, hidden info and lost data in published files. This new release of FOCA, version 2, adds tools to scans internal domains...
-
Chris Conley - Hacking Facebook Privacy
Facebook's privacy issues are numerous and well-documented, from software "glitches" to decisions that take control away from users. Despite that, it is a still-growing force in the modern Internet and is currently trying to position itself as the gateway to the "social Web" for its 500 million...
-
Chris Paget - Extreme-Range RFID Tracking
If you think that RFID tags can only be read a few inches away from a reader you haven't met EPC Gen2, the tag that can be found in Enhanced Drivers Licenses - this 900MHz tag is readable from 30 feet with off-the-shelf equipment. Without amplifying the signal from a commercial reader we were…
more -
Chris Paget - Practical Cellphone Spying
It's widely accepted that the cryptoscheme in GSM can be broken, but did you know that if you're within radio range of your target you can intercept all of their cellphone calls by bypassing the cryptoscheme entirely? This talk discusses the practical aspects of operating an "IMSI catcher", a…
more -
Christopher Soghoian - Your ISP and the Government: Best Friends Forever
Your Internet, phone and web application providers are all, for the most part, in bed with the government. They all routinely disclose their customers' communications and other private data to law enforcement and intelligence agencies. Worse, firms like Google and Microsoft specifically log data…
more -
Craig Heffner - How to Hack Millions of Routers
This talk will demonstrate how many consumer routers can be exploited via DNS rebinding to gain interactive access to the router's internal-facing administrative interface. Unlike other DNS rebinding techniques, this attack does not require prior knowledge of the target router or the router's...
-
Dan Kaminsky - Black Ops Of Fundamental Defense: Web Edition
Lets be honest: Year in, year out, we keep finding the same bugs in the same places, and wondering: Why don't they learn? Why don't developers use these beautiful tools we provide them -- parameterized queries, XSRF tokens, X.509 certificates, and escapes in all their glorious forms? I will tell...
-
Daniel Burroughs - Open Public Sensors and Trend
Our world is instrumented with countless sensors. While many of these are outside of our control (at least without significant effort...) there is an incredible amount of publicly available information being generated and gathered all the time. While much of this data goes by unnoticed or ignored...
-
The Dark Tangent & Joe Grand - Welcome and Making the DEF CON 18 Badge
For the fifth year in a row, the DEFCON Badge makes its appearance as a full-fledged, active electronic system. Pushing fabrication techniques to the limit and using some components that are so new they barely exist, the design of this year's badge took some serious risks. Did they pay off? If...
-
Dave King - Hardware Hacking for Software Guys
Hardware hacking is cool, but it can be daunting to software guys. Microcontrollers mix hardware and software basically allowing software guys to do hardware in software. Lately several products have emerged that make it even easier for software guys to get hardware up and working. Arduinos are...
-
David "VideoMan" M. N. Bryan & Michael Anderson - Cloud Computing, a Weapon of Mass Destruction?
Using cloud computing to attack systems allows for the testing of a company's incident response and recovery program. We have been using the cloud computing environment to test real world scenarios for different types of attacks, such as Distributed Denial of Service, Flooding, and Packet...
-
David C. Smith & Samuel Petreski - A New Approach to Forensic Methodology - !!BUSTED!! case studies
Imagine the following experiment, a unique case is given to three digital forensic analysts and each is given the opportunity to engage the requester in order to develop the information needed to process the case. Based on the information gathered, each of the three analysts is asked to provide…
more -
David Kennedy "ReL1K" & Josh Kelley - Powershell...omfg
Powershell is as close to a programming language we are going to get through a command line interface on Windows. The ability to perform almost any task we want through Windows is a huge benefit for systems administrators... and hackers. During this presentation we'll be releasing a new attack...
-
David Maynor & Paul Judge, PhD - Searching for Malware: A Review of Attackers’ Use of Search Engines to Lure Victims
For many people, the first page they visit online is a search engine; in fact, in the US alone more than 14 billion searches per month happen on Google, Yahoo! and Bing. These searches are then siphoned into thousands of popular search terms that are ripe for attackers to exploit. Attackers...
-
Decius - Exploiting Internet Surveillance Systems
For many years people have been debating whether or not surveillance capabilities should be built into the Internet. Cypherpunks see a future of perfect end to end encryption while telecom companies are hard at work building surveillance interfaces into their networks. Do these lawful intercept...
-
Dennis Brown - How Hackers Won the Zombie Apocalypse
In April, 2010, a zombie outbreak occurred in Providence, Rhode Island. These were not traditional zombies however; They were controlled by an electronic device that allowed for wireless attacks against the living around them. Fortunately, the living had their own devices, and were able to fight...
-
Dennis Brown - Resilient Botnet Command and Control with Tor
There's nothing worse than toiling away at building a large, powerful botnet after months of effort, only to see it get taken down due to being taken down by an ISP, hosting provider or due to law enforcement intervention. Fortunately, a tool exists that will help us hide the command and control...
-
Toool - The Search for Perfect Handcuffs... and the Perfect Handcuff Key
Toool, Deviant Ollam, Dave, Dr. Tran & Ray - The Search for Perfect Handcuffs... and the Perfect Handcuff Key The few handcuff talks which have appeared at conferences in the past have focused mostly on how these restraints function and how to open them without a key. While this talk is no...
-
Dondi West - An Examination of the Adequacy of the Laws Related to Cyber Warfare
This paper argues that the current rules of war are adequate for addressing the unique issues that are encountered as a result of conducting and defending against cyber warfare. The author begins by giving a survey of the laws that have the biggest impact on cyber warfare. Next, the author...
-
Doug Mohney - HD Voice - The Overdue Revolution
After kicking around on the back shelf for years, HD voice is finally gaining traction both in the broadband world and the cellular. And the French are leading the way! The audio standards for a POTS (Plain Old Telephone System) call have been frozen since about 1937. Since then, modern society…
more -
Ed Schaller - Exploiting WebSphere Application Server's JSP Engine
WebSphere Application Server (WAS), IBM's Java Enterprise Edition (JEE) application server, is one of the leading application servers and is the predominate application server in the financial and insurance sectors. It is also embedded in several of IBM's other products including WebSphere…
more -
Elie Bursztein & Panel - Bad Memories
No matter which kind of cryptography you are using to defend your network, , sooner or later to make it work you will have to store somewhere a password, a key or a certificate. If the attacker is able to tampers with its storage mechanism then even the strongest encryption mechanism became...
-
Elie Bursztein & Jocelyn Lagarenne - Kartograph : Finding a Needle in a Haystack or How to Apply Reverse Engineering Techniques to Cheat at Video Games
While we were slaving away hacking an awesome memory analysis tool, Kartograph, our lazy graduate student friends next door were busy honing their skills in CIV 4, Age of Empire III, Anno, C&C, and WarCraft III. They did not anticipate that we could use Kartograph to own them in these games. This...
-
Esteban Martínez Fayó - Hacking and Protecting Oracle Database Vault
Oracle Database Vault was launched a few years ago to put a limit on DBAs unlimited power especially over highly confidential data where it is required by regulations. This presentation will show how this add-on product for Oracle Database performs on this difficult task, first giving an...
-
Felix "FX" Lindner - Blitzableiter - the Release
The talk presents a simple but effective approach for securing Rich Internet Application (RIA) content before using it. Focusing on Adobe Flash content, the security threats presented by Flash movies are discussed, as well as their inner workings that allow such attacks to happen. Some of those...
-
Ferdinand Schober - Gaming in the Glass Safe - Games DRM & Privacy
"DRM is the new form of slavery - but it also spies on you." - conversation with a gamer After years of perceived-rampant piracy on the PC, game publishers are beginning to shackle gamers with increasingly intrusive DRM systems. However, recent game news headlines are brimming with failures of...
-
Francisco Amato & Federico Kirschbaum - Evilgrade, You Still Have Pending Upgrades?
Vulnerabilities are disclosed daily and in the best case new patches are released. Is no new that many application's update process have security weaknesses allowing fake updates injection. The new version of the framework will show how many updates system are still vulnerable to this trivial...
-
Frank Breedijk - Seccubus - Analyzing Vulnerability Assessment Data the Easy Way
As part of his job as Security Engineer at Schuberg Philis, Frank Breedijk performs regular security scans. The repetitive nature of scanning the same customer infrastructure over and over again made him decide to look for a more automated approach. After building his first scanning scheduler he...
-
frank^2 - Trolling Reverse-Engineers with Math: Ness... It hurts...
y = mx+b? f(x) = sin(x/freq)*amp?! SIN X = (A+BX+CX^2)/(P+QX+RX^2)?! None of these formulas as they stand alone really mean much of anything-- except maybe a headache for some. Isolating the variables, however, will eventually open the door for us to manipulate our code in creative and exciting...
-
Fyodor & David Fifield - Mastering the Nmap Scripting Engine
Most hackers can use Nmap for simple port scanning and OS detection, but the Nmap Scripting Engine (NSE) takes scanning to a whole new level. Nmap's high-speed networking engine can now spider web sites for SQL injection vulnerabilities, brute-force crack and query MSRPC services, find open...
About this show
Past speeches and talks from DEF CON hacking conferences in an iTunes friendly M4b format. The DEF CON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!
Hosted by
The Dark Tangent
Categories