Main Stage·36 min
Lennert Wouters
KU Leuven researcher Lennert Wouters demonstrates a custom hardware modchip that executes voltage fault injection on the SpaceX Starlink user terminal to bypass secure boot.
starlinksatellitefault-injection+2
DEF CON 30/Main Stage across years
Main Stage DC30
Caesars Forum, Flamingo, Harrah's, and Linq, Las Vegas · 11-14 August 2022 · 91 talks
Main Stage presentations at DEF CON 30 covering cutting-edge hardware hacking, cloud security, binary exploitation, automotive systems, cryptography, satellite communications, and cyber policy.
1–24 of 89 talks / 91
Main Stage·44 min
Yolan Romailler
Yolan Romailler designs a cryptographic dead man's switch for vulnerability disclosure, using timelock encryption and witness networks to ensure ethical release.
cryptographytimelock-encryptionresponsible-disclosure+2
Main Stage·44 min
Jason Healey
Cyber conflict historian Jason Healey reflects on the evolution of cybersecurity from the 1970s to modern national policy, sharing lessons for researchers.
historycyber-conflictpolicy+2
Main Stage·44 min
Chris Inglis · Kim Zetter
National Cyber Director Chris Inglis joins journalist Kim Zetter for a fireside chat on the National Cybersecurity Strategy and public-private defense partnerships.
policynational-cyber-directorstrategy+2
Main Stage·27 min
Asaf Gilboa · Ron Ben-Yitzhak
Asaf Gilboa and Ron Ben-Yitzhak present a stealthy credential dumping technique that abuses native Windows Error Reporting (WER) to dump LSASS without alerts.
lsasscredential-dumpingwer+2
Main Stage·44 min
Billy Jheng · Muhammad Ramdhan
Billy Jheng and Muhammad Ramdhan demonstrate multiple novel container escape vectors in Google Kubernetes Engine (GKE) to achieve host node takeover.
gkekubernetescontainer-escape+2
Main Stage·42 min
Jimmy Wylie
Dragos principal researcher Jimmy Wylie breaks down PIPEDREAM, a modular industrial attack toolkit developed by state-sponsored actors to disrupt industrial processes.
pipedreamicsmalware+2
Main Stage·21 min
Jonghyuk Song · Soohwan Oh · Woongjo Choi
Researchers from Hyundai AutoEver present a low-cost virtual testbed for automotive Ethernet, fuzzing SOME/IP and DoIP protocol stacks to find ECU vulnerabilities.
automotiveautomotive-ethernetfuzzing+2
Main Stage·44 min
Kyle Avery
Kyle Avery presents techniques for evading in-memory scanners (PE-sieve, Moneta, YARA), demonstrating advanced sleep obfuscation and heap encryption.
memory-scanningyarape-sieve+2
Main Stage·20 min
ColdwaterQ
ColdwaterQ demonstrates backdooring Python pickle files in machine learning models, weaponizing PyTorch and TensorFlow weights for silent remote code execution.
picklesmachine-learningsupply-chain+2
Main Stage·42 min
James Kettle
PortSwigger head of research James Kettle unveils browser-powered desync attacks, turning victim web browsers into desynchronization weapons against major websites.
http-request-smugglingbrowser-securitydesync+2
Main Stage·32 min
Nikita Kurtin
Nikita Kurtin uncovers universal Android permission bypass vulnerabilities affecting over 98% of active devices, subverting signature and privileged protection levels.
androidpermission-bypassipc+2
Main Stage·49 min
Jimi 'jimi2x' Allee
Jimi Allee demonstrates escaping enterprise-enrolled Chromebook kiosk mode using a Raspberry Pi Pico Ducky and living-off-the-land command injection.
chromebookjailbreakpico-ducky+2
Main Stage·44 min
Nick Powers · Steven Flores
Nick Powers and Steven Flores show how Microsoft ClickOnce technology can be abused for stealthy phishing initial access, bypassing Mark-of-the-Web and AppLocker.
clickonceinitial-accessphishing+2
Main Stage·2 hr 6 min
The concluding closing ceremonies for DEF CON 30, celebrating community accomplishments, contest winners, and conference wrap-up announcements.
closing-ceremoniesawardscommunity+2
Main Stage·21 min
Kenneth Geers
Kenneth Geers analyzes cyber operations in the Russia-Ukraine war, dissecting destructive wiper malware, Viasat satellite outages, and hacktivist mobilization.
russia-ukrainecyberwarwiper-malware+2
Main Stage·59 min
The official DEF CON 30 contest closing ceremonies celebrate the winners and record-breaking achievements across all conference contests and challenges.
contestawardsceremonies+2
Main Stage·32 min
Samuel Erb · Justin Gardner
Samuel Erb and Justin Gardner share the story of finding and exploiting a complex RCE exploit chain against KASM Workspaces streaming software.
kasm-workspaceswebapp-pentestingrce+2
Main Stage·40 min
Dongsung Kim
Dongsung Kim demonstrates how modern browser features and emerging Web APIs can be chained to resurrect Cross-Site Request Forgery (CSRF) despite SameSite cookies.
csrfsamesitebrowser-security+2
Main Stage·18 min
Ionut Cernica
Ionut Cernica demonstrates novel side-channel attacks against Tor HTTP Onion Services, leaking the real backend IP address through HTTP header discrepancies.
tordeanonymizationside-channel+2
Main Stage·46 min
Bill Graydon
Bill Graydon analyzes high-security lock designs featuring moving key elements, demonstrating bypasses, casting tricks, and 3D printing duplication techniques.
locksporthigh-security-locks3d-printing+2
Main Stage·21 min
Patrick Wardle · Tom McGuire
Patrick Wardle and Tom McGuire expose commercial security vendors who covertly copied open-source macOS security tools into commercial enterprise products.
open-sourceintellectual-propertyreverse-engineering+2
Main Stage·23 min
Slava Makkaveev
Slava Makkaveev reverse engineers Xiaomi's Trusted Execution Environment (TEE), discovering critical vulnerabilities that allow forging mobile payment transactions.
teetrustzonexiaomi+2
Main Stage·20 min
Miana E. Windall · Micsen
Miana Windall and Micsen investigate offline RFID access control systems, demonstrating how to forge cryptographic card data to create universal digital skeleton keys.
rfidaccess-controloffline-locks+2