Main Track 1 DC25

Main Track 1·46 min

• DEF CON
• Malware
• Date: Aug 2017
• Location: Las Vegas

Philip Tully, Michael T Raggo

AI-powered steganography hiding data in social network images beyond human visual perception.

Main Track 1·30 min

• DEF CON
• OSINT
• Date: Aug 2017
• Location: Las Vegas

Hanno Bõck

Exploiting CT logs to discover and attack web applications through their exposed certificates.

Main Track 1·22 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Dimitry Snezhkov

Establishing covert command and control through HTTP webhooks on approved business websites.

Main Track 1·44 min

• DEF CON
• Community
• Date: Aug 2017
• Location: Las Vegas

Matt Joyce

Using digital forensics techniques to recover history and data from vintage hardware artifacts.

Main Track 1·40 min

• DEF CON
• Cloud
• Date: Aug 2017
• Location: Las Vegas

Scott Behrens, Jeremy Heffner

Application-layer DoS targeting expensive service calls to cause cascading microservice failures.

Main Track 1·48 min

• DEF CON
• Blue Team
• Date: Aug 2017
• Location: Las Vegas

Ilja van Sprundel

Comparative security audit of NetBSD, OpenBSD, and FreeBSD kernels to identify vulnerability patterns.

Main Track 1·45 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

XlogicX

Demonstrating that x86 assembly instructions have multiple valid machine-code representations.

Main Track 1·20 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Dor Azouri

Exploiting Windows BITS service state files to inject jobs and execute code as NT AUTHORITY/SYSTEM.

Main Track 1·41 min

• DEF CON
• Hardware
• Date: Aug 2017
• Location: Las Vegas

Christopher Domas

Exhaustively searching the x86 instruction set to uncover secret instructions, hardware glitches, and hypervisor flaws.

Main Track 1·41 min

• DEF CON
• Wireless
• Date: Aug 2017
• Location: Las Vegas

Marc Newlin, Logan Lamb, Chris Grayson

Critical vulnerabilities in ISP-provided gateways enabling wireless interception of all network traffic.

Main Track 1·37 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Gil Cohen

Named pipes as application-level entry vectors for buffer overflows, DoS, and code injection attacks.

Main Track 1·41 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Artem Kondratenko

Exploitation development for critical Cisco Catalyst switch vulnerabilities enabling full device control.

Main Track 1·1 hr 23 min

• DEF CON
• Community
• Date: Aug 2017
• Location: Las Vegas

Closing remarks and celebration from DEF CON 25, reflecting on the conference and community.

Main Track 1·38 min

• DEF CON
• AppSec
• Date: Aug 2017
• Location: Las Vegas

Remote code execution vulnerabilities in JSON parsers across .NET and Java libraries.

Main Track 1·37 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

MEATPISTOL

Open source modular framework for creating malware implants and automating C2 infrastructure.

Main Track 1·47 min

• DEF CON
• Policy
• Date: Aug 2017
• Location: Las Vegas

James Langevin · Will Hurd

Representatives Will Hurd and James Langevin discuss federal cybersecurity policymaking, legislative oversight, and government collaboration with the hacker community.

Main Track 1·44 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Saif El Sherei

Complete walkthroughs of Windows kernel exploitation using GDI bitmap objects with released exploits.

Main Track 1·43 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Andy Robbins, Will Schroeder

Using Active Directory DACL misconfigurations to achieve domain compromise and persistence.

Main Track 1·34 min

• DEF CON
• Policy
• Date: Aug 2017
• Location: Las Vegas

Professor Plum

Exploring how to make an internet that improves society through code, business, lawsuits, and legislation.

Main Track 1·19 min

• DEF CON
• Malware
• Date: Aug 2017
• Location: Las Vegas

Hyrum Anderson

AI agent using reinforcement learning to modify malware and evade ML-based antivirus detection.

Main Track 1·32 min

• DEF CON
• Mobile
• Date: Aug 2017
• Location: Las Vegas

Avi Bashan, Slava Makkaveev

Comprehensive overview of Android packers and techniques to unpack and analyze packed applications.

Main Track 1·16 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Salvador Mendoza

Using audio transmission and Bluetooth to spoof magstripe data and perform mass card attacks.

Main Track 1·41 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

spaceB0x

Discovering and exploiting CI/CD build system vulnerabilities for container compromise and persistence.

Main Track 1·40 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Marina Simakov, Igal Gofman

Lesser-known persistence mechanisms using Kerberos delegation and advanced authentication abuse.