DEF CON 24/Main Stage across years
Paris and Bally's Hotels, Las Vegas · 4–7 August 2016 · 74 talks
Main Stage presentations at DEF CON 24 feature the conference's premier security research across hardware exploitation, mobile chipset vulnerabilities, telecom protocols, and offensive tradecraft. Sessions spotlight breakthrough zero-day research, kernel security, critical infrastructure resilience, and automated cyber defense.
1–24 of 73 talks / 74
Main Stage·46 min
Joe FitzPatrick · Joe Grand
Veteran hardware hackers Joe FitzPatrick and Joe Grand share decades of debugging wisdom, detailing common hardware bricking hazards and how to unbrick equipment.
Main Stage·41 min
Kai Zhong
Kai Zhong introduces 411, an open-source alert management framework built on top of Elasticsearch to curate high-fidelity security alerts and minimize alert fatigue.
Main Stage·20 min
Max Bazaliy
Max Bazaliy reviews the evolution of Apple's exploit mitigations in iOS 9 and 10, detailing modern bypasses against sandbox restrictions, KPP, and code signing.
Main Stage·38 min
Matteo Beccaro · Matteo Collura
Matteo Beccaro and Matteo Collura demonstrate penetrating interconnected smart city infrastructure, including municipal sensor networks and electronic signage.
Main Stage·45 min
Bryant Zadegan · Ryan Lester
Bryant Zadegan and Ryan Lester show how modern web standards like Service Workers and Content Security Policy headers can be subverted for client-side persistence.
Main Stage·22 min
Fred Bret-Mounet
Fred Bret-Mounet analyzes residential solar inverter gateways, demonstrating cloud API flaws and local hardware backdoors enabling remote panel shutdown.
Main Stage·33 min
bigezy · saci
bigezy and saci demonstrate Pinworm, a tool analyzing and stripping leaking communication metadata in transit across compromised network connections.
Main Stage·37 min
int0x80
int0x80 delivers an entertaining showcase of anti-forensic techniques designed to frustrate incident responders and poison forensic artifact analysis pipelines.
Main Stage·42 min
Hendrik Schmidt · Brian Butterly
Hendrik Schmidt and Brian Butterly audit cellular telecommunication base stations (eNodeBs), demonstrating practical firmware extraction and exploitation methods.
Main Stage·36 min
Luke Young
Luke Young explores structural vulnerabilities in internet routing and reflection services, calculating theoretical pathways for adversaries to generate historic multi-terabit DDoS floods.
Main Stage·43 min
Zack Fasel · Erin Jacobs
Zack Fasel and Erin Jacobs demonstrate reverse engineering and exploiting widespread connected consumer devices, revealing critical design and firmware vulnerabilities.
Main Stage·45 min
Ronny Bull · Jeanna Matthews · Kaitlin Trumbull
Ronny Bull, Jeanna Matthews, and Kaitlin Trumbull examine cross-VM side-channel attacks, hypervisor escape mechanisms, and memory isolation flaws in virtualized cloud environments.
Main Stage·30 min
Jonathan Christofer Demay
Jonathan Christofer Demay introduces auditing methods and custom Scapy extensions for sniffing, injecting, and testing 6LoWPAN mesh networks.
Main Stage·39 min
Jmaxxz
Jmaxxz audits leading smart door lock systems, demonstrating authentication bypasses and physical lock opening via unencrypted BLE telemetry.
Main Stage·39 min
K2
K2 introduces BlockFighter2, an execution-tracing framework utilizing binary hooking to inspect and manipulate control flow within compiled code at runtime.
Main Stage·46 min
Joe Grand · Zoz
Joe Grand and Zoz introduce BSODomizer HD, an FPGA-powered HDMI man-in-the-middle device that injects Blue Screens of Death and visual artifacts into live video feeds.
Main Stage·16 min
Grant Bugher
Grant Bugher details protocol tunneling and authentication bypass techniques to obtain unrestricted internet access across restrictive hotel and airport captive portals.
Main Stage·18 min
Jonathan Christofer Demay · Arnaud Lebrun
Jonathan Christofer Demay and Arnaud Lebrun unveil CANSPY, a modular auditing tool enabling live packet interception, modification, and injection on CAN buses.
Main Stage·1 hr 20 min
The Dark Tangent
DEF CON founder Jeff Moss and the organizers wrap up DEF CON 24, announcing contest winners, black badge recipients, and conference statistics.
Main Stage·41 min
Jake Kambic
Jake Kambic explores Microsoft's Cryptography Next Generation (CNG) APIs, demonstrating techniques to extract plaintext session keys from Schannel in memory.
Main Stage·51 min
Shellphish
The Shellphish team shares architectural details of Mechanical Phish, their autonomous Cyber Grand Challenge system for vulnerability discovery and binary patching.
Main Stage·26 min
Mike Walker · Arati Prabhakar
DARPA leaders Mike Walker and Arati Prabhakar present awards to the top autonomous cyber defense systems competing in the historic Cyber Grand Challenge.
Main Stage·43 min
Benjamin Holland
Benjamin Holland explores building stealthy in-memory rootkits targeting the Java Runtime Environment via bytecode manipulation without modifying disk binaries.
Main Stage·43 min
Ulf Frisk
Ulf Frisk unveils PCILeech, an open-source hardware tool performing direct memory access attacks to bypass OS protections and execute kernel shellcode.
