Media Summary: Exploits of insecure serialization leading to remote code execution have been a common attack against .NET applications for ... HTTP requests are traditionally viewed as isolated, standalone entities. In this session, I'll introduce techniques for remote, ... Who likes paying to ride the subway? Sure, you could hop the fare gates, but that can be athletically challenging and simply isn't ...

Def Con 31 Second Breakfast - Detailed Analysis & Overview

Exploits of insecure serialization leading to remote code execution have been a common attack against .NET applications for ... HTTP requests are traditionally viewed as isolated, standalone entities. In this session, I'll introduce techniques for remote, ... Who likes paying to ride the subway? Sure, you could hop the fare gates, but that can be athletically challenging and simply isn't ... Logs are a vital component for maintaining application reliability, performance, and security. They serve as a source of information ... On May 4th, the White House announced the AI Village at For the last 6 years my colleagues and I have been tracking the activities of the cyber-mercenaries we call Dark Caracal. In this ...

C2 servers of mobile and Windows malware are usually left to their own fate after they have been discovered and the malware is ... The enshittification of the internet follows a predictable trajectory: first, platforms are good to their users; then they abuse their ... Bloatware. We all hate it, and most of us are good at avoiding it. But some vendor tools – especially those managing critical ... In 2018, a secure communications app called Anom started to gain popularity among organized criminals. Soon, top tier drug ... The Internet was supposed to give us access to the world's information, so that people, everywhere, would be able to know the ... What is it actually like to support and balance a global anonymity network, with users ranging from political dissidents to national ...

Photo Gallery

DEF CON 31 - Second Breakfast Implicit & Mutation Based Serialization Vulns in  NET - Jonathan Birch
albinowax - HTTP Desync Attacks: Smashing into the Cell Next Door - DEF CON 27 Conference
DEF CON 31 - Infinite Money Glitch - Hacking Transit Cards -  Bertocchi, Campbell, Gibson, Harris
DEF CON 31 - Weaponizing Plain Text  ANSI Escape Sequences as a Forensic Nightmare - STÖK
DEF CON 31 - Hack the Future - Why Congress & White House Support AI Red Teaming  - Austin Carson
DEF CON 31 War Stories - Tracking the Worlds Dumbest Cyber Mercenaries - Cooper Quintin
DEF CON 31 - The Art of Compromising C2 Servers  A Web App Vulns Perspective - Vangelis Stykas
DEF CON 31 - An Audacious Plan to Halt the Internet's Ensh*ttification  - Cory Doctorow
DEF CON 33 - 7 Vulns in 7 Days - Breaking Bloatware Faster Than It’s Built - Leon 'leonjza' Jacobs
DEF CON 32 - Inside the FBI’s Secret Encrypted Phone Company ‘Anom’ - Joseph Cox
DEF CON 32 - Counter Deception: Defending Yourself in a World  Full of Lies - Tom Cross, Greg Conti
DEF CON 33 - Stories from a Tor dev - Roger 'arma' Dingledine
View Detailed Profile
DEF CON 31 - Second Breakfast Implicit & Mutation Based Serialization Vulns in  NET - Jonathan Birch

DEF CON 31 - Second Breakfast Implicit & Mutation Based Serialization Vulns in NET - Jonathan Birch

Exploits of insecure serialization leading to remote code execution have been a common attack against .NET applications for ...

albinowax - HTTP Desync Attacks: Smashing into the Cell Next Door - DEF CON 27 Conference

albinowax - HTTP Desync Attacks: Smashing into the Cell Next Door - DEF CON 27 Conference

HTTP requests are traditionally viewed as isolated, standalone entities. In this session, I'll introduce techniques for remote, ...

DEF CON 31 - Infinite Money Glitch - Hacking Transit Cards -  Bertocchi, Campbell, Gibson, Harris

DEF CON 31 - Infinite Money Glitch - Hacking Transit Cards - Bertocchi, Campbell, Gibson, Harris

Who likes paying to ride the subway? Sure, you could hop the fare gates, but that can be athletically challenging and simply isn't ...

DEF CON 31 - Weaponizing Plain Text  ANSI Escape Sequences as a Forensic Nightmare - STÖK

DEF CON 31 - Weaponizing Plain Text ANSI Escape Sequences as a Forensic Nightmare - STÖK

Logs are a vital component for maintaining application reliability, performance, and security. They serve as a source of information ...

DEF CON 31 - Hack the Future - Why Congress & White House Support AI Red Teaming  - Austin Carson

DEF CON 31 - Hack the Future - Why Congress & White House Support AI Red Teaming - Austin Carson

On May 4th, the White House announced the AI Village at

DEF CON 31 War Stories - Tracking the Worlds Dumbest Cyber Mercenaries - Cooper Quintin

DEF CON 31 War Stories - Tracking the Worlds Dumbest Cyber Mercenaries - Cooper Quintin

For the last 6 years my colleagues and I have been tracking the activities of the cyber-mercenaries we call Dark Caracal. In this ...

DEF CON 31 - The Art of Compromising C2 Servers  A Web App Vulns Perspective - Vangelis Stykas

DEF CON 31 - The Art of Compromising C2 Servers A Web App Vulns Perspective - Vangelis Stykas

C2 servers of mobile and Windows malware are usually left to their own fate after they have been discovered and the malware is ...

DEF CON 31 - An Audacious Plan to Halt the Internet's Ensh*ttification  - Cory Doctorow

DEF CON 31 - An Audacious Plan to Halt the Internet's Ensh*ttification - Cory Doctorow

The enshittification of the internet follows a predictable trajectory: first, platforms are good to their users; then they abuse their ...

DEF CON 33 - 7 Vulns in 7 Days - Breaking Bloatware Faster Than It’s Built - Leon 'leonjza' Jacobs

DEF CON 33 - 7 Vulns in 7 Days - Breaking Bloatware Faster Than It’s Built - Leon 'leonjza' Jacobs

Bloatware. We all hate it, and most of us are good at avoiding it. But some vendor tools – especially those managing critical ...

DEF CON 32 - Inside the FBI’s Secret Encrypted Phone Company ‘Anom’ - Joseph Cox

DEF CON 32 - Inside the FBI’s Secret Encrypted Phone Company ‘Anom’ - Joseph Cox

In 2018, a secure communications app called Anom started to gain popularity among organized criminals. Soon, top tier drug ...

DEF CON 32 - Counter Deception: Defending Yourself in a World  Full of Lies - Tom Cross, Greg Conti

DEF CON 32 - Counter Deception: Defending Yourself in a World Full of Lies - Tom Cross, Greg Conti

The Internet was supposed to give us access to the world's information, so that people, everywhere, would be able to know the ...

DEF CON 33 - Stories from a Tor dev - Roger 'arma' Dingledine

DEF CON 33 - Stories from a Tor dev - Roger 'arma' Dingledine

What is it actually like to support and balance a global anonymity network, with users ranging from political dissidents to national ...