PODCAST

DEF CON 23 [Audio] Speeches from the Hacker Convention

The DEF CON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. Video, audio and supporting materials from past conferences are available on our new media server at: https://media.defcon.org

technology software how-to

All Episodes

Etienne Martineau - Inter-VM data exfiltration: The...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Etienne-Martineau-Inter-VM-Data-Exfiltration.pdf Inter-VM data exfiltration: The art of cache timing covert channel on x86 multi-core Etienne Martineau Software engineer, Cisco Systems On x86 multi-core covert channels between co-located Virtual Machine (VM) are real and practical thanks to the architecture that has many imperfections in the way shared resources are isolated. This talk will

Yuriy Bulygin - Attacking Hypervisors Using Firmware...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Attacking Hypervisors Using Firmware and Hardware Yuriy Bulygin Advanced Threat Research, Intel Security Mikhail Gorobets Advanced Threat Research, Intel Security Alexander Matrosov Advanced Threat Research, Intel Security Oleksandr Bazhaniuk Advanced Threat Research, Intel Security Andrew Furtak Security Researcher In this presentation, we explore the attack surface of modern hypervisors from the perspective of vulnerabilities in system firmware such as BIOS and in hardware emulation. We will

Michael Robinson & Alan Mitchell - Knocking my...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here:https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Michael-Robinson-Knocking-My-Neighbors-Kids-Drone-Offline-UPDATED.pdf Knocking my neighbor’s kid’s cruddy drone offline Michael Robinson Professor, Stevenson University My neighbor’s kid is constantly flying his quad copter outside my windows. I see the copter has a camera and I know the little sexed crazed monster has been snooping around the neighborhood. With all of the hype around

Brian Gorenc, Abdul-Aziz Hariri, Jasiel Spelman -...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Hariri-Spelman-Gorenc-Abusing-Adobe-Readers-JavaScript-APIs.pdf Abusing Adobe Reader’s JavaScript APIs Brian Gorenc Manager, HP’s Zero Day Initiative Abdul-Aziz Hariri Security Researcher, HP’s Zero Day Initiative Jasiel Spelman Security Researcher, HP’s Zero Day Initiative Adobe Reader’s JavaScript APIs offer a rich set of functionality for document authors. These APIs allow for processing

Gregory Picket - Staying Persistent in Software...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Gregory-Pickett-Staying-Persistant-in-Software-Defined-Networks.pdf Extras Here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Gregory-Pickett-Extras.rar Staying Persistent in Software Defined Networks Gregory Pickett Cybersecurity Operations, Hellfire Security The Open Network Install Environment, or ONIE, makes commodity or WhiteBox Ethernet possible. By

Eric Van Albert & Zach Banks - Looping Surveillance...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Eric-Van-Albert-Zack-Banks-Looping-Surveillance-Cameras-like-in-the-Movies.pdf Looping Surveillance Cameras through Live Editing of Network Streams Eric Van Albert independent security researcher Zach Banks independent security researcher This project consists of the hardware and software necessary to hijack wired network communications. The hardware allows an attacker to splice into live

Colby Moore - Spread Spectrum Satcom Hacking -...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Colby-Moore-Spread-Spectrum-Satcom-Hacking.pdf Spread Spectrum Satcom Hacking: Attacking The GlobalStar Simplex Data Service Colby Moore Manager of Special Activities, Synack Recently there have been several highly publicized talks about satellite hacking. However, most only touch on the theoretical rather than demonstrate actual vulnerabilities and real world attack scenarios. This talk will

Dan “AltF4” Petro & Oscar Salaza - Hacking Smart...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Hacking Smart Safes: On the "Brink" of a Robbery Dan “AltF4” Petro Security Associate, Bishop Fox Oscar Salazar Senior Security Associate at Bishop Fox Have you ever wanted to crack open a safe full of cash with nothing but a USB stick? Now you can! The Brink’s CompuSafe cash management product line provides a “smart safe as a service” solution to major retailers and fast food franchises. They offer end-to-end management of your cash, transporting it safely from your storefront safe to your bank

Mickey Shkatov & Jesse Michael - Scared Poopless –...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Mickey-Shkatov-Jesse-Michael-Scared-poopless-LTE-and-your-laptop-UPDATED.pdf Scared Poopless – LTE and *your* laptop Mickey Shkatov Security researcher, Intel Advanced Threat Research. Jesse Michael Security researcher With today’s advancement in connectivity and internet access using 3G and LTE modems it seems we all can have a device that’s always internet capable, including our laptops,

Dr. Phil Polstra - One Device to Pwn Them All

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here:https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Phil-Polstra-One-device-to-Pwn-them-all.pdf One Device to Pwn Them All Dr. Phil Polstra Professor, Bloomsburg University This talk will present a device that can be used as a dropbox, remote hacking drone, hacking command console, USB writeblocker, USB Mass Storage device impersonator, or scripted USB HID device. The device is based on the BeagleBone Black, can be battery operated for several

Craig Young - How to Train Your RFID Hacking Tools

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available Here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Craig-Young-How-To-Train-Your-RFID-Hacking-Tools-UPDATED.pdf Whitepaper Here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Craig-Young-How-To-Train-Your-RFID-Hacking-Tools-WP-UPDATED.pdf Extras: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Craig-Young-Extras.rar How to Train Your

Atlas - Fun with Symboliks

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here:https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Atlas-Fun-With-Symboliks.pdf Fun with Symboliks atlas dude at Grimm Asking the hard questions... and getting answer! Oh binary, where art thine vulns? Symbolic analysis has been a "thing" for 20 years, and yet it's still left largely to the obscure and the academic researchers (and NASA). several years ago, Invisigoth incorporated the Symboliks subsystem into the Vivisect binary analysis

Yuwei Zheng & Haoqi Shan - Build a free cellular...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Yuwei-Zheng-Haoqi-Shan-Build-a-Free-Cellular-Traffic-Capture-Tool-with-a-VxWorks-Based-Femto.pdf Build a free cellular traffic capture tool with a vxworks based femoto Yuwei Zheng Senior security researcher, Qihoo 360 Technology Co. Ltd. Haoqi Shan Wireless/hardware security researcher, Qihoo 360 Technology Co. Ltd. In recent years, more and more products, are integrated with cellular modem,

Nemus - Hacking SQL Injection for Remote Code...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here:https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Lance-Buttars-Nemus-Hacking-SQL-Injection-for-Remote-Code-Execution-on-a-LAMP-UPDATED.pdf Hacking SQL Injection for Remote Code Execution on a LAMP stack Nemus Software Engineer Remember that web application you wrote when you where first learning PHP? Ever wonder how vulnerable that code base is? Through the perspective of an attacker you will see how SQL injection can lead to data loss and

Paul Amicelli & David Baptiste - How to secure the...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Paul-Amicelli-David-Baptiste-How-to-secure-the-keyboard-chain.pdf How to secure the keyboard chain Paul Amicelli Student from IT Engineering School - ESIEA in Laval, France Baptiste David Engineer from IT Engineer School - ESIEA in Laval, France Keyloggers are hardware or software tools that record keystrokes. They are an overlooked threat to the computer security and user’s privacy. As

Peter Desfigies, Joshua Brierton, Naveed Ul Islam -...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Desfigies-Brierton-Islam-Guests-N-Goblins.pdf References:https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Desfigies-Brierton-Islam-Guests-N-Goblins-References.txt Guests N’ Goblins: Exposing Wi-Fi Exfiltration Risks and Mitigation techniques Peter Desfigies Cyber Security Investigations Unit, TELUS Security Solutions Joshua Brierton Sr. Security Analyst,

Saif El-Sherei & Etienne Stalmans - Extending Fuzzing...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Saif-El-Sherei-Etienne-Stalmans-SensePost-Introducing-Wadi-Fuzzer.pdf Extending Fuzzing Grammars to Exploit Unexplored Code Paths in Modern Web Browsers Saif El-Sherei Analyst, SensePost Etienne Stalmans Analyst, SensePost Fuzzing is a well-established technique for finding bugs, hopefully exploitable ones, by brute forcing inputs to explore code paths in an application. In recent years,

Sarah Edwards - Ubiquity Forensics - Your iCloud and...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Sarah-Edwards-Ubiquity-Forensics.pdf Ubiquity Forensics - Your iCloud and You Sarah Edwards Test Engineer, Parsons Corporation & Author/Instructor, SANS Institute Ubiquity or "Everything, Everywhere” - Apple uses this term describe iCloud related items and its availability across all devices. iCloud enables us to have our data synced with every Mac, iPhone, iPad, PC as well as accessible with

Tony Trummer & Tushar Dalvi - QARK: Android App...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Tony-Trummer-Tushar-Dalvi-QARK.pdf QARK: Android App Exploit and SCA Tool Tony Trummer Staff Information Security Engineer/LinkedIn Tushar Dalvi Sr. Security Engineer/LinkedIn Ever wonder why there isn't a metasploit-style framework for Android apps? We did! Whether you're a developer trying to protect your insecure app from winding up on devices, an Android n00b or a pentester trying to pwn

Zack Allen & Rusty Bower - Malware in the Gaming...

DEF CON 23 [Audio] Speeches from the Hacker Convention ·

2015/10/16

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Zack-Allen-Rusty-Bower-Malware-In-Gaming.pdf Malware in the Gaming Micro-economy Zack Allen Lead Research Engineer, ZeroFOX Rusty Bower Information Security Engineer Microeconomics focuses on how patterns of supply and demand determine price and output in individual markets [1]. Within recent years, micro-economies have flourished within the Audio game industry. Companies like Valve rely

133 results

DEF CON 23 [Audio] Speeches from the Hacker Convention

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs