Creator Stage·21 min
Stephen Bono · Rachael Tubbs
Reflects on a decade of IoT Village security research, vulnerability discoveries, and the evolution of connected device defense.
iotcommunityvulnerability-research+2
DEF CON 33/Creator Stage across years
Creator Stage DC33
Las Vegas Convention Center · 8–10 August 2025 · 75 talks
DEF CON 33 Creator Stage showcases technical presentations, hardware demonstrations, and research by independent security creators, builders, and practitioners. Talks cover embedded hardware exploitation, automotive and aerospace security, maritime systems, industrial control networks, vulnerability disclosure, and applied machine learning.
1–24 of 75 talks
Creator Stage·23 min
Tim Clevenger
Provides practical engineering best practices for deploying physical access control systems, covering supervised wiring, tamper resistance, and badge encryption.
access-controlphysical-securitysmartcard+2
Creator Stage·38 min
Federico Lucifredi
Tutorial on keyboard attack vectors, ranging from hardware keyloggers and Van Eck phreaking electromagnetic emanations to acoustic typing eavesdropping.
hardwareside-channelrf+2
Creator Stage·22 min
SolaSec
Presents a structured Ghidra methodology for reverse engineering stripped ARM Cortex bare-metal and FreeRTOS embedded binaries using SVD and BSim plugins.
ghidrareverse-engineeringarm+2
Creator Stage·20 min
James Utley
Explores bio-cryptography and biological key generation as decentralized cryptographic primitives resilient against post-quantum computational attacks.
biometricscryptographypost-quantum+2
Creator Stage·36 min
Quinn Dombrowski
Highlights community-driven emergency web archiving efforts by Saving Ukrainian Cultural Heritage Online (SUCHO) to preserve cultural data during crisis.
communityopen-sourcedigital-rights+2
Creator Stage·25 min
Amelia Shapiro
Analyzes Chinese state-sponsored intelligence requirements and strategic cyber operations targeting the global healthcare and biotechnology sectors.
threat-intelligencechinahealthcare+2
Creator Stage·19 min
Katherine Rackliffe
Presents empirical results from a university research study evaluating user vulnerability and defensive safeguards against AI voice-cloned vishing attacks.
social-engineeringdeepfakevoice-cloning+2
Creator Stage·23 min
Jeff Greer
Explores the architecture of a hybrid virtual ship simulator augmented with marine engine and instrument emulators for maritime security research.
maritimesimulation-frameworkics-ot+2
Creator Stage·25 min
Michael Schloh MsvB · Chad Calease · Param D Pithadia
Introduces the DEF CON cryptocurrency track, covering emerging industry trends, upcoming workshops, the vendor area, and the Cryptocurrency Cyber Challenge.
communityblockchaincryptocurrency+2
Creator Stage·26 min
Chelsea Button · Alfonso Tinoco · Elaine Shi
Explains oblivious computation algorithms to hide access patterns in encrypted databases, with applications across blockchains, contact discovery, and AI.
cryptographyblockchainprivacy+2
Creator Stage·39 min
Greg Conti · Tom Cross
Explores the structural, offensive technical capabilities inherent in modern tech platforms and the risks posed when companies, insiders, or nation-states weaponize them.
surveillancethreat-intelligencecloud+2
Creator Stage·21 min
Carson Green · Rik Chatterjee
Discloses an unauthenticated firmware update vulnerability in marine autopilots, allowing arbitrary CAN injection via NMEA 2000 chart plotters.
maritimeautopilothardware+2
Creator Stage·52 min
Dane Sherrets · Shlomie Liberow
Deep dives into adversarial prompt injection, context poisoning, and RAG manipulation flaws to help researchers find and demonstrate high-impact AI vulnerabilities.
ai-securityprompt-injectionbug-bounty+2
Creator Stage·37 min
Bobby Graydon · Ege Feyzioglu
Explains how elevator floor lockouts function and how improperly configured elevator controllers and hoistways can be bypassed to access restricted floors.
physical-securityaccess-controlelevator+2
Creator Stage·21 min
Utvecklas · George
Traces the evolution of wallet draining attacks across Ethereum, Solana, and TON, demonstrating token spoofing exploits and transaction tracking methods.
blockchaincryptocurrencydrain-attacks+2
Creator Stage·20 min
Emma Stewart
Separates cyberattacks from physical power dynamics, analyzing grid oscillations, transformer fires, and blackstart scenarios to diagnose grid disturbances.
critical-infrastructureics-otincident-analysis+2
Creator Stage·39 min
Herming Chiueh · Jason Vogt · Frank Smith
Taiwanese digital affairs officials and experts discuss digital blockade scenarios, undersea infrastructure protection, and cyber-resilience against nation-state threats.
geopoliticsundersea-cablescritical-infrastructure+2
Creator Stage·26 min
Constantine Macris · Anissa Elias
Constructs a testbed NMEA 2000 CAN bus system to develop deterministic sensor fingerprints and detect anomalous traffic in maritime vessel networks.
maritimenmea2000can-bus+2
Creator Stage·21 min
Craig Heffner
Breaks down practical software and hardware techniques for decrypting obfuscated and encrypted IoT firmware without requiring advanced cryptography math.
hardwarereverse-engineeringhardware+2
Creator Stage·37 min
Langston Clements · Dan Goga
Details custom hardware designs and social engineering tactics to remotely clone RFID access badges from a distance, including HID iClass SE downgrade attacks.
rfidaccess-controlhardware+2
Creator Stage·56 min
Shawn
Walks through the full physical penetration testing lifecycle, from breach-focused reconnaissance to delivering actionable security upgrades for clients.
physical-securityreconosint+2
Creator Stage·25 min
Abhinav Pandagale
Takes a behind-the-scenes look at designing and manufacturing the Bug Bounty Village electronic badge, combining multi-layer PCBs and interactive CTF puzzles.
hardwareelectronicsctf+2
Creator Stage·48 min
Asher Davila
Examines the challenges of analyzing Go-based IoT malware and demonstrates reversing techniques using the Pumabot surveillance botnet as a case study.
malwaregolangiot+2