DEF CON · 2025DC33
How API Flaws Led to Admin Access to 1k+ USA Dealers & Control of Yr Car
Eaton Zveare
Search
Search talks
Shareable results across the archive. Difficulty is beginner, intermediate, advanced, or expert.
Filters+
Year
Conference
Track
Difficulty
Topic
hardware493community465privacy364reverse-engineering324vulnerability-research302policy240iot217critical-infrastructure186
Showing the most common topics.
DEF CON · 2025DC33
Auths Gone Wild: When ‘Authenticated’ Means Anyone
Danielle Aminov · Yaara Shriki
DEF CON · 2025DC33
Evolution of Drain Attacks
Utvecklas · George
DEF CON · 2025DC33
Referral Beware, Your Rewards Are Mine
Whit Taylor
DEF CON · 2025DC33
Secure Code Is Critical Infrastructure: Hacking Policy for Public Good
Tanya Janca
DEF CON · 2025DC33
Sometimes You Find Bugs, Sometimes Bugs Find You
Jasmin Landry
DEF CON · 2025DC33
7 Vulns in 7 Days: Breaking Bloatware Faster Than Vendors Can Ship
Julian Horoszkiewicz
DEF CON · 2025DC33
AutoDetection & Exploitation of DOM Clobbering Vuln at Scale
Zhengyu Liu · Jianjia Yu
DEF CON · 2025DC33
Browser Extension Clickjacking: One Click and Your Cloud Is Pwned
Lior Shmueli · Tomer Peled
DEF CON · 2025DC33
Client or Server? Hidden Sword of Damocles in Kafka
Ji'an Zhou · Ying Zhu · ZiYang Li
DEF CON · 2025DC33
How a Vuln in Dealer Software Could've Unlocked Your Car
Eaton Zveare · R Piyush
DEF CON · 2025DC33
HTTP/1.1 Must Die! The Desync Endgame
James 'albinowax' Kettle
DEF CON · 2025DC33
Orion: Fuzzing Workflow Automation
Max Bazalii · Marius Fleischer
DEF CON · 2025DC33
Passkeys Pwned: Turning WebAuthn Against Itself
S Pratap Singh · J Lin · D Seetoh
DEF CON · 2025DC33
Paywall Optional: Stream for Free w/ New Technique, RRE
Farzan Karim
DEF CON · 2025DC33
Playing Dirty w/o Cheating - Getting Banned for Fun
S Collins · M Muench · T Chothia
DEF CON · 2025DC33
Remote Code Execution via MIDI Messages
Anna Antonenko
DEF CON · 2025DC33
Unveiling the Perils of the TorchScript Engine in PyTorch
Ji'an Zhou · Lishuo Song
DEF CON · 2025DC33
Examining Access Control Vulnerabilities in GraphQL: A Feeld Case Study
Bogdan Tiron
NORTHSEC · 2025northsec
NSEC2022
DEF CON · 2025DC33
Dominion ICX Simple Hacks Daunting Recoveries
Drew Springall · Davis · Marks
DEF CON · 2025DC33
Is E2E Verifiability a Magic Bullet for Online Voting
John Odum
DEF CON · 2025DC33
It's Not Safe Yet: Online Voting in Practice
Michael Specter
DEF CON · 2024DC32
0.0.0.0 Day: Exploiting Localhost APIs from the Browser
Avi Lumelsky · Gal Elbaz