CSIT Village·24 min
Kang Hao
Kang Hao explores android security: javascript bridge is falling down at DEF CON SG1, examining android-security and practical defenses.
android-securitywebviewjavascript-bridge+1
Conference hub
DEF CON
4,921 talks across 214 villages. Villages are a DEF CON thing — filter by village, year, track, or topic.
Filters+
1–24 of 4640 talks / 4921
CSIT Village·18 min
Theodore Lee
Theodore Lee examines reverse engineering (RE) is time consuming and resource intensive.
malware-analysisreverse-engineeringbinary-analysis+1
CSIT Village·13 min
Daniel Siok
Daniel Siok examines what does an air-gapped system really mean in practice.
air-gapsystem-hardeningnetwork-isolation+1
CSIT Village·19 min
Sim Wei Jun
Sim Wei Jun examines this presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level.
sql-injectionpostgresqlprotocol-exploitation+1
CSIT Village·24 min
Jun Rong · Javier Koh
Jun Rong and Javier Koh examines this talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router.
router-securityfirmware-exploitationembedded-security+1
CSIT Village·21 min
Anton Chua
Anton Chua examines this session re-examines physical security assumptions in Cyber Defence structures.
cyber-physical-systemsphysical-securitycritical-infrastructure+1
CSIT Village·38 min
Ernest Ang
Ernest Ang explores from chrome renderer, to mouse, to system at DEF CON SG1, examining browser-exploitation and practical defenses.
browser-exploitationchromiumprivilege-escalation+1
CSIT Village·30 min
Chua Meng Han
Chua Meng Han examines critical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today.
vulnerability-researchcve-researchexploit-development+1
CSIT Village·19 min
Loke Yan Hao
Loke Yan Hao examines we share our findings from using AI tools for web penetration testing on bug bounty programmes.
ai-securitybug-bountypenetration-testing+1
CSIT Village·40 min
Kenneth Huang Shaoqi
Kenneth Huang Shaoqi examines compilers generate all our code, but they don’t get it right all the time.
compiler-securitybinary-exploitationvulnerability-research+1
CSIT Village·22 min
Poh Cai Min · Shawn Pang
Poh Cai Min and Shawn Pang examines grammar-based fuzzing made painless.
fuzzingapi-securitygrammar-fuzzing+1
CSIT Village·25 min
Kendrick Yeo · Eugene Ong
Kendrick Yeo and Eugene Ong examines during this session, we will share simulated water testbed, and the attacks that can work on it.
ics-otdigital-twinsindustrial-control-systems+1
CSIT Village·27 min
Eugene Lim
Eugene Lim examines audiovisual hardware - from web conferencing cameras to meeting room systems - is deeply embedded in modern enterprises' physical attack surface.
audiovisual-hardwareembedded-securityhardware-hacking+1
CSIT Village·22 min
Koh Kian Woon
Koh Kian Woon examines as AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders.
browser-exploitationheap-exploitationcfg-bypass+1
CSIT Village·13 min
Lim Jing Qiang
Lim Jing Qiang examines using the rubber ducky to deploy a large payload in an air-gapped environment is no easy feat.
rubber-duckyusb-attackspayload-delivery+1
CSIT Village·17 min
Daryl Lim · Zhi Kai
Daryl Lim and Zhi Kai examines a thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation.
api-securitytoken-securitycryptographic-protocols+1
CSIT Village·20 min
Kan Onn Kit
Kan Onn Kit examines in stripped binaries, malware analysts often struggle in a sea of raw offsets and pointer arithmetic.
reverse-engineeringstruct-reconstructiondecompiler+1
CSIT Village·24 min
Shao Xiang
Shao Xiang examines understanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically strengthen defenses.
adversary-emulationthreat-modelingred-team+1
CSIT Village·16 min
Arne Sim
Arne Sim examines the InfoSecurity Challenge (TISC) is one of Singapore's most anticipated Capture-the-Flag competition (CTF), hosted annually by CSIT.
ctfchallenge-designinfosec-education+1
CSIT Village·27 min
James Tan
James Tan examines join us as we go behind-the-scenes of threat hunting and investigation.
threat-huntingthreat-detectiondetection-engineering+1
CSIT Village·24 min
Sng Peng Boon
Sng Peng Boon examines we share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared.
bug-bountyweb-application-securitygovernment-security+1
CSIT Village·27 min
Liu Wen Kai · Martin Koh
Liu Wen Kai and Martin Koh examines during this session, we will share an automated end-to-end AI workflow to perform digital analysis on Windows images with capabilities of fully on-premise investigation.
ai-securityai-agentsdigital-forensics+1
Main Stage·44 min
Cybertiger · Colonel Panic · The Wrew
Cybertiger, Colonel Panic, and The Wrew introduce low-cost counter-surveillance hardware built around the ESP32 to detect tracking devices.
surveillanceesp32hardware-hacking+3
Main Stage·45 min
Bruce Schneier
Bruce Schneier examines how artificial intelligence systems hack human institutions, tax codes, financial markets, and legal frameworks.
artificial-intelligenceai-securitypolicy+2