Red Team Village·58 min
Tyler Boykin
50 Shades of Sudo Abuse Tyler Boykin.
red-teamoffensive-securitycommunity
DEF CON Safe Mode/Red Team Village across years
Red Team Village Safe Mode
Virtual (Discord and Twitch) · 6-9 August 2020 · 101 talks
Red Team Village at DEF CON Safe Mode focuses on offensive security operations, adversary emulation, evasion tradecraft, payload creation, physical implants, and purple teaming.
1–24 of 101 talks
Red Team Village·58 min
Tyler Boykin
Tyler Boykin reviews Linux privilege escalation vectors stemming from sudoers misconfigurations, from common GTFOBins low-hanging fruit to subtle binary abuse.
sudoprivilege-escalationlinux+2
Red Team Village·51 min
All of the threats: Intelligence, modelling and hunting through an ATT&CKers lens - Tim Wadhwa-Brown
Tim Wadhwa-Brown
All of the threats: Intelligence, modelling and hunting through an ATT&CKers lens.
red-teamoffensive-securityadversary-emulation
Red Team Village·51 min
Tim Wadhwa-Brown
Tim Wadhwa-Brown demonstrates how to construct threat intelligence models and hypotheses from first principles when standardized ATT&CK data is missing.
threat-intelligencethreat-modelingmitre-att-ck+2
Red Team Village·1 hr 1 min
Kyle Benac
Kyle Benac presents a structured methodology for auditing Android applications, analyzing hybrid frameworks, IPC intent vulnerabilities, and insecure storage.
androidmobile-pentestingreverse-engineering+2
Red Team Village·22 min
Kürşat Akıncı · Mert Can Coşkuner
Kürşat Akıncı and Mert Can Coşkuner analyze modern Android malware techniques, from multi-stage droppers bypassing Google Play Protect to dynamic evasion.
androidmobile-malwareevasion+2
Red Team Village·1 hr
Anthony Rose
APTs LOVE PowerShell and Why You Should Too.
red-teamoffensive-securitymalware
Red Team Village·1 hr
Anthony Rose · Jake Krasnov
Anthony Rose and Jake Krasnov debunk the myth that PowerShell is dead for red teams, showing how modern adversaries weaponize PowerShell while evading AMSI and logging.
powershellobfuscationamsi-bypass+2
Red Team Village·1 hr 52 min
Lee McWhorter
Attacking Layer 3 ( Lab ).
red-teamoffensive-securityadversary-emulation
Red Team Village·46 min
Collaborative Project
ATTPwn: Adversarial Emulation and Offensive Techniques Collaborative Project.
red-teamoffensive-securityadversary-emulation
Red Team Village·46 min
Pablo González
Pablo González presents ATTPwn, an open-source adversary emulation framework designed to automate MITRE ATT&CK techniques and validate defensive controls.
attpwnadversary-emulationmitre-att-ck+2
Red Team Village·46 min
Apurv Gautam
Apurv Gautam demonstrates building automated crawlers and threat intelligence collectors to monitor Tor darknet markets and paste sites for leaked corporate data.
dark-webtorthreat-hunting+2
Red Team Village·48 min
Ankur Chowdhary
Dr. Ankur Chowdhary discusses autonomous penetration testing frameworks using attack graphs and reinforcement learning to plan and execute attack paths.
automated-pentestingai-securityattack-graphs+2
Red Team Village·1 hr 4 min
Noa Novogroder
Noa Novogroder explores parallels between computer science and molecular biology, showing how viruses executed code injection in biological cells 1.5 billion years ago.
biologycode-injectiongenetics+2
Red Team Village·58 min
Corey Ham · Matt Eidelberg
Breaking the Attack Chain.
red-teamoffensive-securityadversary-emulation
Red Team Village·58 min
Corey Ham · Matt Eidelberg
Corey Ham and Matt Eidelberg analyze why targeted attack chains succeed, exploiting systemic blindspots between IT operations and security monitoring.
killchainlateral-movementactive-directory+2
Red Team Village·40 min
Leron Gray
Leron Gray dives into Python 3.8's PEP 578 audit hooks (sys.addaudithook), exploring their architectural design, runtime inspection capabilities, and bypasses.
pythonaudit-hookspep-578+2
Red Team Village·23 min
Bypassing in Mobile Network From Red-Team Points of View.
red-teamoffensive-securitymobile
Red Team Village·43 min
Justin Hutchens
Justin Hutchens demonstrates bypassing Multi-Factor Authentication (MFA) using real-time adversary-in-the-middle reverse proxies to capture authenticated session tokens.
mfa-bypassreverse-proxyphishing+2
Red Team Village·23 min
Ali Abdollahi
Ali Abdollahi analyzes cellular core network security mechanisms, reviewing IMSI catchers, diameter routing flaws, and protocol bypasses from a red team perspective.
cellularmobile-securitylte+2
Red Team Village·1 hr
Eduardo Arriols
Eduardo Arriols breaks down stealthy backdoor deployment and persistent access techniques across enterprise Windows networks, evading blue team hunts.
persistencebackdoorc2+2
Red Team Village·52 min
Ryan Elkins
Combining notebooks, datasets, and cloud for the ultimate automation factory.
red-teamoffensive-securitycloud
Red Team Village·46 min
Jorge Orchilles
SCYTHE CTO Jorge Orchilles details how to safely emulate multi-stage human-operated ransomware campaigns to test enterprise detection and response.
ransomwareadversary-emulationpurple-team+2