DEF CON 29/Main Stage across years
Paris and Bally's Hotels, Las Vegas · 5-8 August 2021 · 68 talks
Main Stage presentations at DEF CON 29, featuring groundbreaking research into Exchange ProxyLogon, HTTP/2 request smuggling, Apple AirTags, eBPF rootkits, mainframe container escapes, and agricultural cybersecurity.
1–24 of 68 talks
Main Stage·42 min
Tomer Bar · Eran Segal
SafeBreach researchers analyze five years of Windows CVE patterns to predict recurring vulnerability classes and discover new zero-day local privilege escalations.
Main Stage·49 min
Agent X
The New York Times information security team shares the unique threat landscape facing investigative journalists, source protection, and operational security.
Main Stage·45 min
Rotem Bar
Rotem Bar turns static application security testing (SAST) tools and linters against developers, weaponizing malicious repositories to achieve RCE during source code scanning.
Main Stage·43 min
Yuhao Weng · Steven Seeley · Zhiniang Peng
Star-V Lab researchers take a deep dive into Microsoft SharePoint Server, chaining multiple zero-day vulnerabilities to achieve unauthenticated remote code execution.
Main Stage·41 min
Christopher Wade
Christopher Wade details actionable exploitation techniques to bypass signature verification in modern Android and embedded bootloaders, deploying unsigned firmware.
Main Stage·49 min
Laura Abbott · Rick Altherr
Laura Abbott and Rick Altherr break ARM TrustZone-M hardware isolation on the NXP LPC55S69 microcontroller, elevating privileges from Non-Secure to Secure world.
Main Stage·43 min
Jacob Baines
Jacob Baines demonstrates how unprivileged Windows users can install vulnerable, signed third-party printer drivers (BYOVD) to escalate to SYSTEM on fully patched hosts.
Main Stage·43 min
Jacob Baines
Abusing Windows print driver installation as a path from low privilege toward SYSTEM.
Main Stage·45 min
Patrick Wardle
Patrick Wardle dissects CVE-2021-30657, a zero-click logic bug in macOS application bundles that completely bypassed Apple File Quarantine, Gatekeeper, and Notarization.
Main Stage·54 min
Ian Vitek
Ian Vitek audits Sweden's prototype retail Central Bank Digital Currency (e-krona), uncovering architectural vulnerabilities in Corda token implementations.
Main Stage·45 min
Bill Graydon
Bill Graydon demonstrates defeating supervised alarm wiring in physical intrusion detection systems, bypassing End-of-Line resistors and sensor loops.
Main Stage·1 hr 24 min
Christian Dameff · Jeff Tully · Jessica Wilkerson · Josh Corman
Dr. Christian Dameff, Dr. Jeff Tully, Jessica Wilkerson, and Josh Corman answer live community questions on protecting hospitals from cyber extortion.
Main Stage·58 min
Christian Dameff · Jeff Tully · Jessica Wilkerson · Josh Corman
Clinical cyber experts debate the escalating impact of ransomware attacks on hospital clinical care, ICU mortality rates, and national healthcare resiliency.
Main Stage·22 min
Joseph Gabay
How supermarket cart locks can be analyzed and abused as a shopping-system denial path.
Main Stage·49 min
Guillaume Fournier · Sylvain Afchain · Sylvain Baubeau
Security researchers demonstrate offensive and defensive eBPF capabilities, manipulating kernel tracing data to conceal attacks and building resilient detectors.
Main Stage·49 min
Barak Sternberg
Barak Sternberg exposes vulnerabilities in browser extensions, demonstrating how to weaponize privileged extension APIs into persistent browser rootkits.
Main Stage·43 min
Tamas K. Lengyel
Tamas K. Lengyel leverages Xen hypervisor VM-forking and Intel Processor Trace to create an ultra-high-speed hypervisor-level kernel fuzzing framework.
Main Stage·53 min
Damian Zabrocki · Alex Matrosov
Hardware security experts execute electromagnetic and voltage fault injection on RISC-V silicon, corrupting trap vectors (MTVEC) to bypass Secure Boot.
Main Stage·52 min
Cedric Owens
Cedric Owens details modern attack paths in non-Active Directory macOS environments, including Gatekeeper bypasses, cloud IdaaS targeting, and post-exploitation tradecraft.
Main Stage·19 min
Ionut Cernica
Ionut Cernica analyzes automated hacker tooling and exploit scripts, demonstrating how predictable exploit traffic leaks target data to network eavesdroppers over TLS.
Main Stage·44 min
Matthew Bryant
Matthew Bryant delves into Google Workspace exploitation, weaponizing Google Apps Script to bypass enterprise security perimeters and establish persistent cloud backdoors.
Main Stage·26 min
Eugene Lim · Glenice Tan · Tan Kee Hock
Singapore government researchers construct an automated spear-phishing pipeline powered by OpenAI's GPT-3 API, comparing AI-generated phishing to human campaigns.
Main Stage·39 min
Thomas Roth
Thomas Roth (stacksmashing) glitches the Apple AirTag within days of release, dumping microcontroller firmware and re-flashing the device with custom Find My payloads.
Main Stage·35 min
Justin Perdok
Justin Perdok exploits User-ID mapping features in Palo Alto and SonicWall enterprise firewalls, spoofing domain identities to bypass network segmentation rules.
