Recon Village·24 min
Eli Woodward
Maps the infrastructure behind Cl0p's exploitation campaigns, from hosting and ASN reuse to reconnaissance that preceded some attacks by years.
threatintelligenceinfrastructure+3
DEF CON 34/Recon Village across years
Recon Village DC34
Las Vegas Convention Center · 6–9 August 2026 · 13 talks
Recon Village talks from DEF CON 34.
1–13 of 13 talks
Recon Village·25 min
S Prasath · Chandru J · M Kumar
Presents CyberKB, a proof-of-concept recon platform where an AI agent named Keke drives offensive tools over a searchable knowledge base of scan data.
aireconintelligence+2
Recon Village·25 min
Michael Reimsbach · Rishi C
Shows how to spot fake job candidates with OSINT, from reverse image searches and public records to document checks and personal privacy hygiene.
open-sourceintelligenceprivacy+2
Recon Village·22 min
Anthony Russell
Shows how to constrain LLM-driven recon agents to fixed binaries, sanitized inputs, and structured outputs so they run reliably against real targets.
airecontool+2
Recon Village·31 min
Jason Haddix
Shows how to build AI pentesting agents from markdown skill files, using a JavaScript analysis workflow and a live hackbot build as the worked example.
aireconweb+2
Recon Village·36 min
Miranda Tedholm
Shows how Quora keeps deleted questions, activity logs and banned-user traces visible to anyone who knows a username, useful for OSINT investigators.
open-sourceintelligenceprivacy+2
Recon Village·43 min
Redon Gashi · Amend Gashi
Shows how attackers locate exposed LLM inference servers and leaked API keys, validate them, and route agent tooling through them at no cost.
aireconinfrastructure+1
Recon Village·41 min
Niko Dekens
Explains how reliance on AI erodes OSINT analysts' critical thinking, with real cases of fake imagery and mistranslation and four habits to keep conclusions defensible.
intelligenceaiopen-source+2
Recon Village·24 min
David Cass
Maps common open-source recon tasks, from scraping and subdomain enumeration to API calls, onto their likely criminal and civil legal exposure.
intelligencereconbug-bounty+2
Recon Village·25 min
Kumar Ashwin · Anant Shrivastava
Tracks how credentials leaked in the Shai-Hulud npm worm campaigns stay usable for months, and what their leftover names reveal about infrastructure.
supply-chainreconintelligence+2
Recon Village·29 min
John McCary
Shows how cross-referencing registry records, reverse DNS, and service responses across all of IPv4 exposes mismatched and impersonated network infrastructure.
reconintelligenceinfrastructure+2
Recon Village·28 min
Avishai Efrat · Roey Ben Chaim
Shows how attackers find thousands of exposed AI agents across Copilot Studio, Agent Builder, custom GPTs and MCP servers using enumeration and OSINT.
aireconopen-source+2
Recon Village·19 min
Fae Carlisle
Shows how JARM TLS fingerprints and reused server configurations can cluster adversary infrastructure even after domains and IP addresses change.
infrastructurethreatintelligence+2