Main Stage·45 min
Romain Cayre · Damien Cauquil
Framework and unified protocol architecture for wireless security research, hardware abstraction, and over-the-air exploitation.
whadwirelessrf+2
DEF CON 32/Main Stage across years
Main Stage DC32
Las Vegas Convention Center · 8-11 August 2024 · 93 talks
DEF CON 32 Main Stage features the conference's headline presentations, fireside chats, and technical security research across hardware, cloud, AI, and offensive tradecraft. Sessions cover silicon-level exploitation, cloud attack paths, reverse engineering, and critical discussions on cybersecurity policy and internet resilience.
1–24 of 93 talks
Main Stage·43 min
Daniel Messe
The legal, ethical, and technical battles surrounding digital shadow libraries, preservation, and public access to information.
shadow-librariescopyrightdigital-rights+2
Main Stage·43 min
David Meléndez · Gabriela Garcia
Practical exploitation of legacy railroad track signaling protocols and physical infrastructure using low-cost hardware.
railwaysignaling-systemsics-ot+2
Main Stage·42 min
Ceri Coburn · Dirk-jan Mollema
Methods and tooling to extract Windows Hello biometric secrets and hijack Primary Refresh Tokens for persistent identity access.
windows-hellobiometricsprt+2
Main Stage·38 min
Closing ceremony for the DARPA Artificial Intelligence Cyber Challenge semifinal round at DEF CON 32.
aixccdarpaai+2
Main Stage·44 min
Enrique Nissim · Krzysztof Okupski
Silicon-level vulnerability in AMD processor System Management Mode enabling persistent Ring-2 privilege escalation invisible to hypervisors.
amdsmmprivilege-escalation+2
Main Stage·44 min
Enrique Nissim · Krzysztof Okupski
Enrique Nissim and Krzysztof Okupski disclose AMDSinkclose, a vulnerability allowing Ring -2 execution and System Management Mode takeover across millions of AMD processors.
amdsmmprivilege-escalation+2
Main Stage·22 min
Alexander Rubin · Martin Rakhmanov
Active deception MySQL honeypot exploiting client-side vulnerabilities (CVE-2023-21980) to drop shells on connecting attackers.
honeypotmysqlcountermeasures+2
Main Stage·41 min
Atlas
Creative reverse engineering techniques used to defeat layered anti-debugging, packing, and code obfuscation in automotive tuning software.
reverse-engineeringobfuscationautomotive+2
Main Stage·40 min
Eduard Agavriloae · Matei Josephs
Analysis of 3.1 million public Amazon Machine Images uncovering exposed credentials, API keys, and account takeover vectors.
awscloudami+2
Main Stage·39 min
Vangelis Stykas
Vulnerabilities and offensive disruption techniques targeting the web management panels of active ransomware operations.
ransomwarec2web-panels+2
Main Stage·36 min
Jon DiMaggio
Inside account of a two-year undercover operation infiltrating the LockBit ransomware syndicate and profiling its leadership.
lockbitransomwareraas+2
Main Stage·37 min
Yakir Kadkoda · Michael Katchinskiy · Ofek Itach
Six critical attack vectors exploiting implicit and internal shadow resources created by AWS services to achieve cross-tenant and account takeover.
awscloudshadow-resources+2
Main Stage·47 min
Vivek Ramachandran · Jeswin Mathai
Exposes Last Mile Reassembly Attacks that bypass enterprise Secure Web Gateways and releases an open-source testing toolkit.
swgwebproxies+2
Main Stage·40 min
Vincent Lenders · Johannes Willbold · Robin Bisping
Software-defined radio signal injection attacks against VSAT satellite modems to deliver rogue firmware and obtain root shell access.
vsatsatellitesdr+2
Main Stage·39 min
Jiaqing Huang · Hao Zheng · Yue Liu
Attack surface exploration of device virtualization within VMware VMKernel and exploitation of eight newly discovered vulnerabilities.
vmwarehypervisorvirtualization+2
Main Stage·44 min
Rob Joyce · The Dark Tangent
Former NSA Cybersecurity Director Rob Joyce and Jeff Moss analyze state-sponsored cyber operations and the strategic impact of AI.
threat-intelligencenation-stateai+2
Main Stage·38 min
HexRabbit Chen
Exploiting netfilter nftables vulnerabilities in the Linux kernel to achieve privilege escalation under kernelCTF mitigations.
nftableskernel-exploitationlinux+2
Main Stage·2 hr 14 min
Official closing ceremonies, contest results, and community awards presentation from the final day of DEF CON 32.
closing-ceremoniesawardscommunity
Main Stage·20 min
Jake Jepson · Rik Chatterjee
Exploiting commercial Electronic Logging Devices (ELDs) over Bluetooth and cellular to deploy a self-propagating truck-to-truck worm.
eldautomotivej1939+2
Main Stage·43 min
Tom Cross · Greg Conti
Defensive strategies and tools to identify digital deception, detect manipulated narratives, and counteract information warfare.
deceptionsocial-engineeringcognitive-security+2
Main Stage·43 min
Yan Shoshitaishvili · Perri Adams
Approaches to modern cybersecurity education, gamified training platforms, and fostering advanced technical skills in hackers.
pwn-collegeeducationctf+2
Main Stage·45 min
Essential orientation and tips for first-time attendees navigating the talks, villages, contests, and culture of DEF CON.
orientationguideculture+1
Main Stage·44 min
Andrew Case · Chad Sellers · Golden G. Richard III
Memory forensics techniques and Volatility 3 plugins designed to detect direct syscalls, module stomping, and EDR bypasses.
memory-forensicsvolatilityedr-evasion+2