War Stories·49 min
Jeffrey Knockel · Mona Wang
Exposes flawed custom network encryption in popular Chinese IME keyboard apps that allow network eavesdroppers to intercept keystrokes from 800 million users.
cryptanalysisprivacyandroid+2
DEF CON 32/War Stories across years
War Stories DC32
Las Vegas Convention Center · 8-11 August 2024 · 9 talks
DEF CON 32 War Stories features first-hand accounts from seasoned security researchers, investigators, and defenders detailing high-profile investigations and complex vulnerability discoveries. Presentations explore real-world digital forensics, reverse engineering operations, supply chain compromises, and federal law enforcement operations.
1–9 of 9 talks
War Stories·25 min
Sam Curry
Chronicles an investigation into a compromised home modem that led to discovering centralized ISP vulnerabilities exposing millions of broadband devices.
appsecroutersvulnerability-research+2
War Stories·39 min
Joseph Cox
Investigates the FBI's undercover operation running the encrypted phone app Anom, detailing the platform backdoor and law enforcement network compromise.
privacysurveillancenational-security+2
War Stories·43 min
Joe Grand · Bruno Krauss
Reverse engineers vintage RoboForm password generator routines to exploit weak PRNG randomness and recover millions in locked Bitcoin wallets.
cryptanalysisreverse-engineeringghidra+2
War Stories·47 min
Jayson E. Street
Demonstrates how generative AI tools enhance phishing and vishing operations and outlines strategies to build organizational situational awareness.
social-engineeringphishingai+2
War Stories·22 min
Anthony Kava
Goes behind the scenes of a high-profile homicide investigation to show how command-line utilities and digital evidence unmasked an online stalker.
forensicsinvestigationlinux+2
War Stories·29 min
Tony Sager
Reflects on a 35-year NSA career in defensive vulnerability analysis and the evolution of cybersecurity standards like the Critical Security Controls.
historypolicyblue-team+2
War Stories·39 min
Thomas Boejstrup Johansen
Details a year-long investigation running eight wpad.tld domains that received over one billion DNS requests and enabled unauthenticated traffic interception.
wpadreconproxies+2
War Stories·39 min
Ken Gannon · Ilyes Beghdadi
Recounts NCC Group's Pwn2Own Toronto exploit chain compromising the Xiaomi 13 Pro via malicious hyperlinks and app store vulnerabilities.
androidmobileexploitation+2