Adversary Village·9 min
Abhijith B.R.
Abhijith B.R. kicks off the inaugural DEF CON 29 Adversary Village, introducing talks, emulation CTFs, and offensive research tracks.
defconadversary-villageorientation+2
DEF CON 29/Adversary Village across years
Adversary Village DC29
Paris and Bally's Hotels, Las Vegas · 5-8 August 2021 · 23 talks
Adversary Village explores adversary emulation, red teaming tradecraft, active directory tiering attacks, stealthy C2 frameworks, EDR evasion, and offensive automation.
1–22 of 22 talks / 23
Adversary Village·13 min
Stephan Wampouille
Stephan Wampouille demonstrates autonomous lateral movement in Linux networks, chaining benign system behaviors to traverse internal infrastructure undetected.
lateral-movementlinuxautomation+2
Adversary Village·48 min
Jose Garduno
Jose Garduno introduces C2Centipede, an advanced C2 communication framework implementing Fast Flux, Domain Generation Algorithms (DGA), and resilient relays.
c2domain-frontingfast-flux+2
Adversary Village·47 min
Daniel Duggan
Daniel Duggan (Rasta Mouse) shares architectural lessons and design patterns for engineering resilient, stealthy Command & Control (C2) frameworks.
c2c2-frameworkimplants+2
Adversary Village·42 min
Mauro Eldritch · Luis Ramirez
Mauro Eldritch and Luis Ramirez automate unconventional C2 channels, routing command-and-control traffic through messaging apps, social media, and video game servers.
c2covert-channelsocial-media+2
Adversary Village·46 min
Marc Smeets
Marc Smeets demonstrates using RedELK to track blue team investigations during red team operations, exploiting defensive OPSEC failures to maintain access.
redelkopsecblue-team-opsec+2
Adversary Village·34 min
Sergey Chubarov
Sergey Chubarov demonstrates live attack scenarios bridging on-premises Active Directory and Azure AD, exploiting synchronization flaws to compromise hybrid clouds.
hybrid-cloudazure-adactive-directory+2
Adversary Village·25 min
Juneau Jones
Juneau Jones applies mathematical game theory to cyber conflict, modeling rational adversary decision-making, strategic deception, and payoff matrices.
game-theorystrategydeception+2
Adversary Village·30 min
Daniel Isler
Daniel Isler recounts an authorized multi-vector physical intrusion and social engineering red team engagement conducted during the COVID-19 pandemic.
physical-securitysocial-engineeringred-team+2
Adversary Village·31 min
Samuel Kimmons
Samuel Kimmons provides a foundational guide to adversary emulation, explaining how threat intelligence and the MITRE ATT&CK framework guide testing.
adversary-emulationmitre-attackthreat-intel+2
Adversary Village·30 min
Carlos Polop
Carlos Polop presents the new generation of PEAS (LinPEAS/WinPEAS), revealing advanced local privilege escalation techniques across Windows, Linux, and AD.
privilege-escalationlinpeaswinpeas+2
Adversary Village·42 min
Matthew Eidelberg
Matthew Eidelberg breaks down the mechanics of modern EDR evasion, demonstrating API unhooking, AMSI bypasses, and indirect system calls in offensive payloads.
edr-evasionpayloadsamsi+2
Adversary Village·30 min
Sanne Maasakkers
Sanne Maasakkers analyzes real-world nation-state phishing strategies, comparing APT psychological pretexts with traditional red team social engineering.
phishingaptsocial-engineering+2
Adversary Village·30 min
David Hunt
CALDERA creator David Hunt introduces Prelude Operator, an accessible desktop adversary emulation platform designed to automate offensive security testing.
adversary-emulationprelude-operatorcaldera+2
Adversary Village·38 min
Mauricio Velazco
Mauricio Velazco presents PurpleSharp, an open-source C# adversary simulation tool that generates realistic Active Directory attack telemetry across Windows environments.
purplesharpadversary-emulationcsharp+2
Adversary Village·26 min
Shantanu Khandelwal
Shantanu Khandelwal presents GitHub Credentials Stroller, an automated OSINT reconnaissance tool that deep-scans developer repositories for exposed credentials.
reconosintgithub+2
Adversary Village·37 min
Gil Biton
Gil Biton demonstrates building automated CI/CD weaponization pipelines to scale red team payload generation, obfuscation, and EDR evasion testing.
offensive-pipelineweaponizationci-cd+2
Adversary Village·45 min
Cheryl Biswas
Cheryl Biswas analyzes decades of Chinese state-sponsored supply chain intrusions and economic espionage campaigns across global technology sectors.
aptchinasupply-chain+2
Adversary Village·29 min
Atul · Harshal
Atul and Harshal present Tenacity, an adversary emulation tool automating the deployment and testing of complex Windows persistence mechanisms.
tenacitypersistenceadversary-emulation+2
Adversary Village·31 min
Phillip Wylie
Phillip Wylie explores the adversary mindset, offensive philosophy, and psychological motivations essential for effective red teaming and threat emulation.
adversary-mindsetred-teamphilosophy+2
Adversary Village·27 min
Jonas Knudsen
Jonas Knudsen introduces ImproHound, an open-source tool built on BloodHound data to automatically detect Active Directory tiering violations and dangerous access paths.
improhoundbloodhoundactive-directory+2
Adversary Village·1 hr 46 min
Fatih Ozavci
Fatih Ozavci shares systematic methodologies for developing custom tradecraft, repurposing public tools, and tuning evasion for high-maturity adversary simulations.
tradecraftadversary-emulationtooling+2