Main Stage·36 min
Ron Ben Yizhak
Ron Ben Yizhak introduces #NoFilter, a novel privilege escalation technique abusing the Windows Filtering Platform to achieve SYSTEM execution without token manipulation.
windowswfpprivilege-escalation+2
DEF CON 31/Main Stage across years
Main Stage DC31
Caesars Forum, Flamingo, Harrah's, and Linq, Las Vegas · 10-13 August 2023 · 100 talks
DEF CON 31 Main Stage features flagship research, keynotes, and presentations spanning firmware and hardware reverse engineering, advanced operating system exploitation, cloud and identity vulnerabilities, AI red teaming, and landmark cybersecurity policy discussions.
1–24 of 100 talks
Main Stage·20 min
Ceri Coburn
Ceri Coburn demonstrates privilege escalation across mixed-vendor environments where Linux/Unix MIT and Heimdal Kerberos stacks integrate with Windows Active Directory.
kerberosactive-directorylinux+2
Main Stage·44 min
Noam Moshe · Sharon Brizinov
Claroty Team82 reveals how cloud connectivity features in Western Digital and Synology NAS devices allow remote compromise and full RCE across millions of devices.
nascloudpwn2own+2
Main Stage·46 min
Bramwell Brizendine · Davy Kusuma
Dr. Bramwell Brizendine and Davy Kusuma present ROP ROCKET, an automated ROP compiler supporting Heaven's Gate architecture switching and bad-byte gadget synthesis.
ropexploit-developmentheavens-gate+2
Main Stage·39 min
David Pekoske · Sean Lyngaas · Jen Easterly
TSA Administrator David Pekoske, CISA Director Jen Easterly, and CNN's Sean Lyngaas discuss modernizing cybersecurity regulations for US transportation infrastructure.
critical-infrastructuretsacisa+2
Main Stage·46 min
Cory Doctorow
Cory Doctorow analyzes platform decay across Big Tech monopolies and outlines a policy and technical roadmap for interoperability, privacy, and user self-help.
enshittificationantitrustdigital-rights+2
Main Stage·46 min
Cory Doctorow
Cory Doctorow delivers an encore analysis on the decay of monopoly web platforms, advocating for aggressive antitrust action and adversarial interoperability.
enshittificationantitrustdigital-rights+2
Main Stage·35 min
Austin Emmitt
Austin Emmitt demonstrates bypassing Apple's iOS 16 NSPredicate restrictions, achieving 100% reliable PAC bypasses and code execution in SpringBoard.
nspredicateiosmacos+2
Main Stage·18 min
David McGrew · Brandon Enright · Andrew Chi
Cisco researchers run Batch GCD factorization across 100M+ public X.509 certificates, recovering private RSA keys from low-entropy embedded devices.
cryptanalysisrsax509+2
Main Stage·48 min
Farzan Karimi · Xingyu Xing · Eugene Rodionov
Google Android Red Team details offensive security evaluations of Pixel smartphone baseband modems using SDRs to discover remote cellular vulnerabilities.
basebandpixelsdr+2
Main Stage·40 min
John Novak
John Novak details an exploit chain in Microsoft Azure AD B2C, recovering signing keys to forge administrative tokens across customer tenants and the MSRC portal.
azure-ad-b2coauthcryptography+2
Main Stage·37 min
Mathias Krog · Christian Skovsende
Reverse engineers Intel CPU microcode on Goldmont cores, achieving persistent userspace microcode patching on Linux to create hardware backdoors in x86 execution.
microcodeintelx86+2
Main Stage·43 min
Dan Petro · David Vargas
Dan Petro and David Vargas disclose over a dozen cryptographic and implementation flaws in the Open Supervised Device Protocol (OSDP) securing physical access control.
osdpaccess-controlmitm+2
Main Stage·46 min
Alex Tereshkin · Adam Zabrocki
NVIDIA offensive researchers detail chaining a dozen vulnerabilities in AMI MegaRAC BMCs, demonstrating remote exploitation to flash persistent implants into server SPI flash.
bmcipmihardware+2
Main Stage·37 min
good pseudonym
Dissects enterprise Private Branch Exchange (PBX) and Unified Communications platforms, chaining Java execution and PHP decryption bugs to gain root shells.
pbxvoiprce+2
Main Stage·50 min
Aapo Oksman
Aapo Oksman introduces certmitm, an automated tool designed to discover and exploit insecure TLS client certificate validation flaws across iOS, Windows 11, and embedded devices.
tlscertificatesmitm+2
Main Stage·30 min
Tiffany Rad · Austin Shamlin
Tiffany Rad and Austin Shamlin highlight pro-bono civil cyber defense, using OSINT and student clinics to protect human rights organizations and combat human trafficking.
civil-defensehuman-rightsosint+2
Main Stage·18 min
Dongsung Kim
Demonstrates browser-based internal network port scanning using precise JavaScript timing side-channels to map intranet devices without elevated privileges.
browser-securityport-scanningtiming-attacks+2
Main Stage·1 hr 54 min
The Dark Tangent
The Dark Tangent and DEF CON senior staff close out DEF CON 31 with official event recaps, community statistics, and Black Badge awards.
closing-ceremoniesawardshacker-culture+1
Main Stage·40 min
Josep Rodriguez
Josep Rodriguez demonstrates contactless buffer overflow vulnerabilities in NFC payment readers across major ATM and POS brands, enabling ATM jackpotting.
nfcatmpos+2
Main Stage·54 min
The Contest Goons announce competition winners, present awards, and recap tournament highlights across all official contests at DEF CON 31.
contestawardshacker-culture+1
Main Stage·45 min
Joe Slowik
Joe Slowik analyzes leaked Russian NTC Vulkan documentation, contextualizing state-sponsored offensive cyber programs, automated scanning, and attack infrastructure.
vulkan-filesthreat-intelligenceapt+2
Main Stage·21 min
Perri Adams
DARPA Program Manager Perri Adams and industry leaders announce the AI Cyber Challenge (AIxCC) to automate software vulnerability discovery and remediation.
aixccdarpaai-security+2
Main Stage·1 hr 3 min
Long-time organizers and community members welcome newcomers to DEF CON, sharing tips, cultural norms, and strategies to navigate the world's largest hacker convention.
orientationculturecommunity+2