Search talks

Shareable results across the archive. Difficulty is beginner, intermediate, advanced, or expert.

Filters+

1–24 of 113 talks

SortRelevance Newest

DEF CON · 2025DC33
Auths Gone Wild: When ‘Authenticated’ Means Anyone
Danielle Aminov · Yaara Shriki
DEF CON · 2025DC33
Braving the Storm-2372: The Tempest Decoded
Jenko Hwong
DEF CON · 2025DC33
Building the Cross-Cloud Kill Chain: A DE's Playbook for AWS, Azure & GCP Detections
Gowthamaraj Rajendran
DEF CON · 2025DC33
Cognito, Ergo Some Extra Permissions
Leo Tsaousis
DEF CON · 2025DC33
Command and KubeCTL: Kubernetes Security for Pentesters and Defenders
Mark Manning
DEF CON · 2025DC33
Don't trust Rufus, he's a mole - introducing KIEMPossible
Golan Myers
DEF CON · 2025DC33
Exploring The Possibilities of Azure Fabric Abuses
Viktor Gazdag
DEF CON · 2025DC33
Hypervisor Hangover: Persistence Mechanisms on ESXi - JC(Crashwire) and Nathan
Crashwire · Nathan
DEF CON · 2025DC33
Identity Crisis: The Unmanaged World of Azure Managed Identities - Alon Klayman and Eliraz Levi
Alon Klayman · Eliraz Levi
DEF CON · 2025DC33
May the Least Privilege Be With You
Marios Gyftos · Nikos Vourdas
DEF CON · 2025DC33
No IP, No Problem: Exfiltrating Data Behind IAP
Ariel Kalman
DEF CON · 2025DC33
No Server, No Cry: the Ups and Downs of Building a Scalable Security Serverless Platform
Aviram · Uri Gutman
DEF CON · 2025DC33
Quickstart for a Breach! When Official Installations Expose Your K8 and Your Cloud
Michael Katchinskiy · Yossi Weizman
DEF CON · 2025DC33
Restless Guests: From Subscription to Backdoor Intruder
Simon Maxwell-Stewart
DEF CON · 2025DC33
Spotter - Universal Kubernetes Security Engine
Madhu Akula
DEF CON · 2025DC33
SquarePhish 2.0 - Turning QR Codes into Entra ID Primary Refresh Tokens
Nevada · Kam
DEF CON · 2025DC33
Sweet Deception: Designing Effective M365 Honey Tokens
Ryan O'Donnell
DEF CON · 2025DC33
TencentGoat: An Intentionally Vulnerable Tencent Cloud Environment
Muhammad Yuga Nugraha
DEF CON · 2025DC33
Threat Modelling at Scale: Breaking Down Cloud Complexity
Hanna Papirna · Emma Yuan Fang
DEF CON · 2025DC33
Transforming Identity Protection: Innovating with AI and Attack Paths
Filipi Pires
DEF CON · 2025DC33
Uncovering Hidden Threats: The Risks of Dangling Issuers in Federated Credentials
Gautam Peri
DEF CON · 2025DC33
Weaponizing SageMaker AI: Real-World Offense in Machine Learning Platforms
Shani Peled
DEF CON · 2025DC33
Weaponizing SSM: Practical Exploits and Hardening Techniques for AWS
Rodrigo Montoro
DEF CON · 2025DC33
whoAMI: Discovering and exploiting a large-scale AMI name confusion attack
Seth Art