Main Stage·42 min
Micah Lee
Micah Lee recounts the Signalgate investigation, dissecting mobile forensic extraction techniques, operational security failures, and secure messaging tradecraft.
privacysignal-appopsec+2
DEF CON 33/Main Stage across years
Main Stage DC33
Las Vegas Convention Center · 8–10 August 2025 · 106 talks
DEF CON 33 Main Stage features the conference's headline presentations, keynotes, and technical security research across hardware, cloud, AI, and offensive tradecraft. Sessions cover silicon exploitation, Active Directory attack paths, kernel vulnerabilities, zero-day research, and critical discussions on privacy and policy.
1–24 of 106 talks
Main Stage·43 min
richinseattle · Netspooky · Chompie
Editors and contributors celebrate four decades of Phrack magazine, reviewing foundational exploit techniques, hacker journalism, and counterculture history.
hacker-historyhacker-culturecommunity
Main Stage·40 min
Julian Horoszkiewicz
Demonstrates rapid vulnerability discovery methodologies that uncovered seven zero-day local privilege escalation flaws in pre-installed OEM bloatware.
vulnerability-researchprivilege-escalationwindows+2
Main Stage·44 min
Wesley McGrew
Wesley McGrew analyzes digital forensics and unallocated space across 500,000 Commodore 64 floppy disk images to uncover early hacker subcultures and ephemera.
hacker-historyforensicsculture+2
Main Stage·38 min
Yoav Magid
Analyzes the architecture of Apple Intelligence and Private Cloud Compute, identifying privacy risks and data leakage vectors across on-device and cloud models.
appleai-securityprivacy+2
Main Stage·49 min
Cooper Quintin · Lisa Femia · Thorin Klosowski · Alexis Hancock · Hannah Zhao
Electronic Frontier Foundation attorneys, technologists, and activists answer community questions on digital rights, surveillance law, privacy legislation, and AI policy.
policyprivacydigital-rights+2
Main Stage·38 min
Zhengyu Liu · Jianjia Yu
Introduces Hulk, the first dynamic analysis tool to automatically detect and generate exploit payloads for complex DOM Clobbering vulnerabilities at web scale.
appsecdom-clobberingxss+2
Main Stage·39 min
Agostino Panico
Presents a dynamic analysis framework for automatically unpacking and deobfuscating nested virtual-machine-based software protectors used in advanced malware.
reverse-engineeringobfuscationvirtualization+2
Main Stage·38 min
David Ledbetter
Demonstrates physical and firmware attack vectors against Windows Recovery environments to extract BitLocker encryption keys from TPM and memory.
full-disk-encryptionwindowsside-channel+2
Main Stage·47 min
Hugo Gonzalez · Caleb Howell
Deconstructs the anti-cheat and runtime integrity mechanisms in Pokemon Go, demonstrating mobile reverse engineering and integrity bypass tradecraft.
anti-cheatreverse-engineeringmobile+2
Main Stage·39 min
David Cash · Rich Warren
Reveals an architectural vulnerability in cloud-managed enterprise VPNs that allowed unauthenticated administrative takeover and network pivoting across corporate tenants.
vpncloudauthentication+2
Main Stage·39 min
David Cash · Rich Warren
Discloses a critical vulnerability in cloud-managed enterprise VPN platforms that allowed unauthenticated administrative takeover across thousands of corporate networks.
vpncloudauthentication+2
Main Stage·41 min
George Chatzisofroniou
Conducts a comprehensive security analysis of Wi-Fi Easy Connect (Device Provisioning Protocol v3.0), uncovering protocol design flaws and implementation vulnerabilities.
wirelesswifiprotocols+2
Main Stage·50 min
Lior Shmueli · Tomer Peled
Exposes UI redressing and clickjacking vectors in popular browser extensions that trick users into granting administrative cloud permissions with a single click.
browser-extensionsclickjackingcloud+2
Main Stage·40 min
Mikko Hypponen
Mikko Hypponen explores the preservation of historic malware samples, early virus artistry, and four decades of digital threats in the Malware Museum.
malwarehistorycommunity+2
Main Stage·44 min
Mark Carney · Victoria Kumaran
Introduces the first open-source, low-cost hackable quantum sensor using Nitrogen-Vacancy centers in diamond to explore quantum sensing applications.
quantum-computingsensorshardware+2
Main Stage·47 min
Qidan He
Discloses new Intent redirection vulnerabilities in modern Android frameworks that bypass destination checks to achieve LaunchAnyWhere privilege escalation.
androidmobile-securityprivilege-escalation+2
Main Stage·47 min
Qidan He
Demonstrates novel Intent redirection and LaunchAnyWhere privilege escalation techniques in modern Android platform frameworks.
androidmobile-securityprivilege-escalation+2
Main Stage·43 min
Tim 'diff' Becker
Presents an automated framework for generating universal return-oriented programming chains and bypassing ASLR across modern operating system binaries.
ropaslrbinary-exploitation+2
Main Stage·42 min
Alex Holden
Examines the internal operations, financial infrastructure, and sabotage tactics behind major underground darknet carding markets.
dark-webfinancial-crimethreat-intelligence+2
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
physical-securityhardwarehardware+2
Main Stage·35 min
Andrew Brandt
Sophos researcher Andrew Brandt chronicles a five-year investigation into Chinese nation-state campaigns weaponizing zero-days against perimeter firewall appliances.
aptthreat-intelligencechina+2
Main Stage·34 min
Ji'an Zhou · Ying Zhu · ZiYang Li
Reveals critical architectural and deserialization vulnerabilities across Apache Kafka client and server implementations, enabling remote code execution.
kafkaappsecremote-code-execution+2
Main Stage·45 min
Christopher Domas
Christopher Domas demonstrates how software-controlled microarchitectural stresses induce transient hardware faults to achieve cross-ring privilege escalation.
siliconhardwareprivilege-escalation+2