DC Groups·14 min
Grifter
Grifter spotlights DC801 in Salt Lake City, Utah, sharing the history of one of the earliest DEF CON local groups and community hackerspace organizing.
6-9 August 2015 · Paris and Bally's Hotels, Las Vegas
12 villages · 213 talks
DC Groups
1 talks
DEF CON Groups presentations and community spotlights showcasing local chapters, technical projects, and hacker community organizing.
Main Stage
87 talks
Main Stage presentations at DEF CON 23 cover landmark cybersecurity research across binary analysis, Android internals, Active Directory exploitation, and physical data destruction. Sessions feature pioneering work on symbolic execution frameworks, telecommunications infrastructure attacks, satellite communications, and critical policy debates.
Presentations Attack
17 talks
Presentations Attack at DEF CON 23 features offensive security talks covering penetration testing, network attacks, web application security, wireless exploits, and hardware hacking techniques (17 talks).
Presentations Auto
3 talks
Presentations on Automotive Hacks at DEF CON 23 covers connected vehicle security, remote cellular exploitation, CAN bus injection, and wireless key fob replay attacks.
Presentations Bio
2 talks
Presentations on Biohacking at DEF CON 23 covers medical device security, honeypot deployment for healthcare infrastructure, and the ethical frontiers of human augmentation.
Presentations Crypto
5 talks
Presentations on Cryptography at DEF CON 23 covers secure messaging protocols, applied cryptographic primitives, cryptocurrency brainwallet cracking, and SSL/TLS time synchronization bypasses.
Presentations Hardware and Lockpicking
4 talks
Presentations on Hardware and Lockpicking at DEF CON 23 covers physical security, embedded device exploitation, electronic safe bypassing, and hardware root-of-trust security.
Presentations Internet of Things
3 talks
Presentations on the Internet of Things at DEF CON 23 explores security vulnerabilities in connected consumer hardware, embedded Linux appliances, smart home protocols, and ZigBee wireless networks.
Presentations Panels
11 talks
Presentations Panels at DEF CON 23 features expert panel discussions, Q&A sessions, and keynote debates covering policy, digital rights, cryptography, hardware firmware attacks, and security community culture.
Presentations Social Engineering
4 talks
Presentations on Social Engineering at DEF CON 23 explores human-layer vulnerabilities, open-source intelligence gathering, digital surveillance tradecraft, lock pattern predictability, and identity fraud.
Presentations Wireless
2 talks
Presentations on Wireless security at DEF CON 23 covers point-to-point radio proxying, distributed 802.11 spectrum monitoring, and Software-Defined Radio tradecraft.
Village Presentations
74 talks
Village Presentations at DEF CON 23 spans technical workshops across Packet Capture, Lock Picking, IoT, Hardware Hacking, Wireless, Vehicle Hacking, Social Engineering, Crypto & Privacy, and BioHacking Villages.
1–24 of 211 talks / 213
DC Groups·14 min
Grifter
Grifter spotlights DC801 in Salt Lake City, Utah, sharing the history of one of the earliest DEF CON local groups and community hackerspace organizing.
Main Stage·47 min
1057
1057 unpacks the intricate multi-stage cryptographic puzzles and hidden Easter eggs integrated into the DEF CON 23 electronic badge challenge.
Main Stage·54 min
Bruce Potter
Bruce Potter provides a no-nonsense framework for security practitioners to communicate risk mathematically and align defensive engineering with business realities.
Main Stage·48 min
Sean Pierce
Sean Pierce details weaponizing Windows Application Compatibility Shims for stealthy, reboot-persistent execution and user-mode API redirection.
Main Stage·47 min
Ryan O'Neill
Ryan O'Neill introduces the Extended Core File Snapshot (ECFS) format, enabling granular dead-state forensic reconstruction of injected Linux processes.
Main Stage·53 min
Zoz
Zoz presents an explosive, empirical study of physical data destruction, testing lasers, acids, and thermite to evaluate irreversible magnetic storage obliteration.
Main Stage·46 min
Yan Shoshitaishvili · Fish Wang
Yan Shoshitaishvili and Fish Wang introduce angr, the open-source binary analysis platform combining symbolic execution and static analysis for automated vulnerability research.
Main Stage·46 min
Dennis Maldonado
Dennis Maldonado analyzes vulnerabilities in commercial electronic access control systems, demonstrating Wiegand sniffing, RFID badge cloning, and physical request-to-exit bypasses.
Main Stage·44 min
Yuriy Bulygin
Intel Security researcher Yuriy Bulygin explores firmware and hardware emulation vulnerabilities in modern hypervisors, demonstrating SMM privilege escalation from guest VMs.
Main Stage·40 min
John Menerick
John Menerick explores attack vectors against Git source control workflows, demonstrating malicious hook injection and commit metadata spoofing.
Main Stage·46 min
Daniel Crowley · Damon Smith
Daniel Crowley and Damon Smith reveal techniques for embedding covert web bugs and beacons within common document formats to leak recipient IP and environment data.
Main Stage·43 min
Yuwei Zheng · Haoqi Shan
Qihoo 360 researchers Yuwei Zheng and Haoqi Shan demonstrate hacking a VxWorks-based femtocell base station to construct a low-cost cellular traffic capture and monitoring appliance.
Main Stage·48 min
Rob Bathurst · Jeff Thomas
Rob Bathurst and Jeff Thomas explore deploying honeytokens and canary files to detect unauthorized lateral movement and insider threat access early.
Main Stage·34 min
Vivek Ramachandran
Vivek Ramachandran introduces Chellam, a driverless Wi-Fi intrusion detection system and host firewall designed to detect Evil Twins, honeypots, and hosted network backdoors on Windows.
Main Stage·44 min
Vivek Ramachandran
Vivek Ramachandran presents Chigula, an extensible open-source Python framework for 802.11 wireless intrusion detection, packet forensics, and automated attack fingerprinting.
Main Stage·1 hr 27 min
The Dark Tangent
Jeff Moss (The Dark Tangent) and the DEF CON organizers close out DEF CON 23, announcing contest winners, black badge awards, and event highlights.
Main Stage·27 min
The Dark Tangent
The DEF CON contest leads and organizers celebrate the winners across the capture the flag tournaments, badge challenges, and village competitions.
Main Stage·46 min
Alessandro Di Federico · Yan Shoshitaishvili
Alessandro Di Federico and Yan Shoshitaishvili demonstrate weaponizing the ELF dynamic linker to execute arbitrary code before main() without modifying executable sections.
Main Stage·21 min
Mahdi Namazifar
Mahdi Namazifar details statistical and linguistic modeling techniques to detect Domain Generation Algorithm (DGA) domain queries in enterprise DNS telemetry.
Main Stage·45 min
Patrick Wardle
Patrick Wardle introduces dynamic library (dylib) hijacking on OS X, demonstrating stealthy local privilege escalation and persistence vectors in Apple applications.
Main Stage·46 min
Katie Moussouris · David Anderson
Katie Moussouris and David Anderson debate the unintended consequences of proposed Wassenaar Arrangement export controls on vulnerability research tools.
Main Stage·43 min
David Mortman
David Mortman reviews Docker container security architecture, establishing baseline deployment hardening guidelines, seccomp filters, and kernel capability drops.
Main Stage·43 min
Colin Flynn
Colin Flynn demonstrates hardware power analysis and voltage glitching using ChipWhisperer to extract AES keys and bypass firmware boot verification.
Main Stage·43 min
Daniel Selifonov
Daniel Selifonov explores advanced memory corruption exploitation primitives, demonstrating deterministic heap layout manipulation and mitigation bypasses.