Adversary Village·9 min
Abhijith B.R.
Abhijith B.R. kicks off the inaugural DEF CON 29 Adversary Village, introducing talks, emulation CTFs, and offensive research tracks.
defconadversary-villageorientation+2
5-8 August 2021 · Paris and Bally's Hotels, Las Vegas
DEF CON 29
19 villages · 304 talks
Villages at this event
Adversary Village
23 talks
Adversary Village explores adversary emulation, red teaming tradecraft, active directory tiering attacks, stealthy C2 frameworks, EDR evasion, and offensive automation.
Aerospace Village
17 talks
Aerospace Village focuses on aviation and space cybersecurity, satellite reverse engineering, avionics CAN and ARINC bus protocols, GPS and ADS-B spoofing, and Hack-A-Sat challenges.
Biohacking Village
20 talks
Biohacking Village explores cybersecurity in healthcare, medical device security, cyberbiosecurity, FHIR APIs, open-source medicine, patient privacy, and biological citizen science.
Blacks in CyberSecurity Village
4 talks
Blacks in CyberSecurity Village promotes diversity, equity, and inclusion in information security, addressing activist OPSEC, infrastructure ownership, and systemic bias in tech.
Blockchain Village
11 talks
Blockchain Village focuses on cryptocurrency security, smart contract auditing, DeFi flash loan exploits, hardware wallet reverse engineering, MEV sandwich attacks, and consensus defense.
Blue Team Village
17 talks
Blue Team Village focuses on defensive security operations, digital forensics and incident response (DFIR), multi-cloud posture, threat intelligence pivoting, Velociraptor, and Osquery detection engineering.
Car Hacking Village
11 talks
Car Hacking Village focuses on automotive cybersecurity, in-vehicle network architectures (CAN, CAN FD, J1939), passive keyless entry exploits, EV charging stations, and ADAS sensor attacks.
Cloud Village
21 talks
Cloud Village focuses on cloud security, container escapes, Kubernetes hardening, AWS and Azure exploitation, multi-cloud IAM toxic combinations, and CaaS runtime analysis.
Crypto and Privacy Village
2 talks
Crypto and Privacy Village explores modern applied cryptography, surveillance defense, digital privacy technologies, and cryptographic protocol implementations.
Ham Radio Village
6 talks
Ham Radio Village explores amateur radio communications, emergency mesh networking (AREDN), satellite contacts, low-power RF propagation, and digital radio modes.
Hardware Hacking Village
5 talks
Hardware Hacking Village focuses on physical hardware reverse engineering, embedded firmware extraction, keystroke injection attacks, USB HID exploitation, and AVR microcontrollers.
ICS Village
24 talks
ICS Village brings together operators, researchers, and government leaders to address critical infrastructure defense, secure PLC coding, OT cloud exploitation, smart meter security, and ransomware resilience.
IoT Village
18 talks
IoT Village highlights embedded firmware analysis, smart home and industrial IoT security, reverse supply chain hardware trojans, silicon RNG entropy, and connected device policy.
Live Presentations
15 talks
Live in-person stage presentations and panels at DEF CON 29, featuring live exploits, closing ceremonies, policy panels, badge making, and covert communications.
Main Stage
68 talks
Main Stage presentations at DEF CON 29, featuring groundbreaking research into Exchange ProxyLogon, HTTP/2 request smuggling, Apple AirTags, eBPF rootkits, mainframe container escapes, and agricultural cybersecurity.
Payment Village
4 talks
Payment Village focuses on financial systems security, ATM hardware exploitation, transaction reversal frauds, payment card validation, and cryptocurrency exchange race conditions.
Recon Village
15 talks
Recon Village explores open-source intelligence (OSINT), external attack surface management, passive DNS tracking, investigative OPSEC, and adversary infrastructure hunting.
Red Team Village
9 talks
Red Team Village focuses on offensive security operations, adversary emulation, AI in hacking, red team infrastructure (CyberWraith), and community CTF competitions.
Voting Village
14 talks
Voting Village focuses on the cybersecurity and physical security of voting machines, election infrastructure, forensic audits, ballot barcodes, and defending against election disinformation.
All DC29 talks
1–24 of 299 talks / 304
Adversary Village·13 min
Stephan Wampouille
Stephan Wampouille demonstrates autonomous lateral movement in Linux networks, chaining benign system behaviors to traverse internal infrastructure undetected.
lateral-movementlinuxautomation+2
Adversary Village·48 min
Jose Garduno
Jose Garduno introduces C2Centipede, an advanced C2 communication framework implementing Fast Flux, Domain Generation Algorithms (DGA), and resilient relays.
c2domain-frontingfast-flux+2
Adversary Village·47 min
Daniel Duggan
Daniel Duggan (Rasta Mouse) shares architectural lessons and design patterns for engineering resilient, stealthy Command & Control (C2) frameworks.
c2c2-frameworkimplants+2
Adversary Village·42 min
Mauro Eldritch · Luis Ramirez
Mauro Eldritch and Luis Ramirez automate unconventional C2 channels, routing command-and-control traffic through messaging apps, social media, and video game servers.
c2covert-channelsocial-media+2
Adversary Village·46 min
Marc Smeets
Marc Smeets demonstrates using RedELK to track blue team investigations during red team operations, exploiting defensive OPSEC failures to maintain access.
redelkopsecblue-team-opsec+2
Adversary Village·34 min
Sergey Chubarov
Sergey Chubarov demonstrates live attack scenarios bridging on-premises Active Directory and Azure AD, exploiting synchronization flaws to compromise hybrid clouds.
hybrid-cloudazure-adactive-directory+2
Adversary Village·25 min
Juneau Jones
Juneau Jones applies mathematical game theory to cyber conflict, modeling rational adversary decision-making, strategic deception, and payoff matrices.
game-theorystrategydeception+2
Adversary Village·30 min
Daniel Isler
Daniel Isler recounts an authorized multi-vector physical intrusion and social engineering red team engagement conducted during the COVID-19 pandemic.
physical-securitysocial-engineeringred-team+2
Adversary Village·31 min
Samuel Kimmons
Samuel Kimmons provides a foundational guide to adversary emulation, explaining how threat intelligence and the MITRE ATT&CK framework guide testing.
adversary-emulationmitre-attackthreat-intel+2
Adversary Village·30 min
Carlos Polop
Carlos Polop presents the new generation of PEAS (LinPEAS/WinPEAS), revealing advanced local privilege escalation techniques across Windows, Linux, and AD.
privilege-escalationlinpeaswinpeas+2
Adversary Village·42 min
Matthew Eidelberg
Matthew Eidelberg breaks down the mechanics of modern EDR evasion, demonstrating API unhooking, AMSI bypasses, and indirect system calls in offensive payloads.
edr-evasionpayloadsamsi+2
Adversary Village·30 min
Sanne Maasakkers
Sanne Maasakkers analyzes real-world nation-state phishing strategies, comparing APT psychological pretexts with traditional red team social engineering.
phishingaptsocial-engineering+2
Adversary Village·30 min
David Hunt
CALDERA creator David Hunt introduces Prelude Operator, an accessible desktop adversary emulation platform designed to automate offensive security testing.
adversary-emulationprelude-operatorcaldera+2
Adversary Village·38 min
Mauricio Velazco
Mauricio Velazco presents PurpleSharp, an open-source C# adversary simulation tool that generates realistic Active Directory attack telemetry across Windows environments.
purplesharpadversary-emulationcsharp+2
Adversary Village·26 min
Shantanu Khandelwal
Shantanu Khandelwal presents GitHub Credentials Stroller, an automated OSINT reconnaissance tool that deep-scans developer repositories for exposed credentials.
reconosintgithub+2
Adversary Village·37 min
Gil Biton
Gil Biton demonstrates building automated CI/CD weaponization pipelines to scale red team payload generation, obfuscation, and EDR evasion testing.
offensive-pipelineweaponizationci-cd+2
Adversary Village·45 min
Cheryl Biswas
Cheryl Biswas analyzes decades of Chinese state-sponsored supply chain intrusions and economic espionage campaigns across global technology sectors.
aptchinasupply-chain+2
Adversary Village·29 min
Atul · Harshal
Atul and Harshal present Tenacity, an adversary emulation tool automating the deployment and testing of complex Windows persistence mechanisms.
tenacitypersistenceadversary-emulation+2
Adversary Village·31 min
Phillip Wylie
Phillip Wylie explores the adversary mindset, offensive philosophy, and psychological motivations essential for effective red teaming and threat emulation.
adversary-mindsetred-teamphilosophy+2
Adversary Village·27 min
Jonas Knudsen
Jonas Knudsen introduces ImproHound, an open-source tool built on BloodHound data to automatically detect Active Directory tiering violations and dangerous access paths.
improhoundbloodhoundactive-directory+2
Adversary Village·1 hr 46 min
Fatih Ozavci
Fatih Ozavci shares systematic methodologies for developing custom tradecraft, repurposing public tools, and tuning evasion for high-maturity adversary simulations.
tradecraftadversary-emulationtooling+2
Aerospace Village·28 min
Pearce Barry
Pearce Barry revives hardware bridging tools in Metasploit, connecting CAN bus and serial hardware interfaces directly into avionics attack surfaces.
can-busmetasploitavionics+2
Aerospace Village·24 min
Joshua Smailes
Joshua Smailes demonstrates injecting forged digital air traffic control messages via CPDLC, executing man-in-the-middle attacks on oceanic flights.
cpdlcatcmitm+2