Seongsu Park
How North Korean threat groups share infrastructure, reallocate malware tools, and challenge traditional attribution.
dprkthreat-intelligencecyber-espionage+2
Adversary Village
DEF CON 33 Adversary Village — 10 talks from the canonical playlist covering purple teaming, threat emulation, supply chain risks, adversary tradecraft, and cyber economics.
1–24 of 32 talks / 33
Weihan Goh · Joseph Lim · Isaac Soon
Using Android honeytoken tripwires to trigger real-time data destruction against mobile forensics software.
anti-forensicsmobile-forensicsandroid+2
Bobby Kuzma · Michael Odell
Balancing stochastic LLMs and deterministic graph state engines to automate adversarial attack decisions.
adversarial-automationgraph-databasesdecision-trees+2
Daniel Isler
Applying photojournalism principles and invisible theater to seize decisive moments in physical social engineering.
social-engineeringphysical-securityhuman-layer+2
Paul McCarty
Why conventional SCA, SAST, and EDR tools fail against malicious npm packages and how attackers exploit registries.
npmsoftware-supply-chainopen-source-malware+2
Sarah Hume
A battle-tested assumed-compromise methodology for purple teaming that tests detection across the entire killchain.
purple-teamingassumed-compromisekillchain+2
Will Thomas
How Russian state-sponsored APTs weaponize public red team tools and POCs within days of release.
threat-intelligenceaptrussia+2
Adam Pennington · Sydney Marrone · Lauren Proehl
How modern security teams transition from siloed operations to unified, intelligence-driven purple teaming.
purple-teamingadversary-emulationthreat-informed-defense+2
Abhijith 'Abx' B R · Keenan Skelly · Bryson Bort · Anant Shrivastava · Gordon Baum
Why defenders must adopt an adversarial mindset and embed offensive thinking to build true resilience.
adversarial-mindsetthreat-informed-defensered-teaming+2
Nebu Varghese
Transforming breach simulations from technical point tests into quantified economic value for executive leadership.
red-teamingsimulation-frameworkcyber-economics+2
Adversary Village·9 min
Abhijith B.R.
Abhijith B.R. kicks off the inaugural DEF CON 29 Adversary Village, introducing talks, emulation CTFs, and offensive research tracks.
defconadversary-villageorientation+2
Adversary Village·13 min
Stephan Wampouille
Stephan Wampouille demonstrates autonomous lateral movement in Linux networks, chaining benign system behaviors to traverse internal infrastructure undetected.
lateral-movementlinuxautomation+2
Adversary Village·48 min
Jose Garduno
Jose Garduno introduces C2Centipede, an advanced C2 communication framework implementing Fast Flux, Domain Generation Algorithms (DGA), and resilient relays.
c2domain-frontingfast-flux+2
Adversary Village·47 min
Daniel Duggan
Daniel Duggan (Rasta Mouse) shares architectural lessons and design patterns for engineering resilient, stealthy Command & Control (C2) frameworks.
c2c2-frameworkimplants+2
Adversary Village·42 min
Mauro Eldritch · Luis Ramirez
Mauro Eldritch and Luis Ramirez automate unconventional C2 channels, routing command-and-control traffic through messaging apps, social media, and video game servers.
c2covert-channelsocial-media+2
Adversary Village·46 min
Marc Smeets
Marc Smeets demonstrates using RedELK to track blue team investigations during red team operations, exploiting defensive OPSEC failures to maintain access.
redelkopsecblue-team-opsec+2
Adversary Village·34 min
Sergey Chubarov
Sergey Chubarov demonstrates live attack scenarios bridging on-premises Active Directory and Azure AD, exploiting synchronization flaws to compromise hybrid clouds.
hybrid-cloudazure-adactive-directory+2
Adversary Village·25 min
Juneau Jones
Juneau Jones applies mathematical game theory to cyber conflict, modeling rational adversary decision-making, strategic deception, and payoff matrices.
game-theorystrategydeception+2
Adversary Village·30 min
Daniel Isler
Daniel Isler recounts an authorized multi-vector physical intrusion and social engineering red team engagement conducted during the COVID-19 pandemic.
physical-securitysocial-engineeringred-team+2
Adversary Village·31 min
Samuel Kimmons
Samuel Kimmons provides a foundational guide to adversary emulation, explaining how threat intelligence and the MITRE ATT&CK framework guide testing.
adversary-emulationmitre-attackthreat-intel+2
Adversary Village·30 min
Carlos Polop
Carlos Polop presents the new generation of PEAS (LinPEAS/WinPEAS), revealing advanced local privilege escalation techniques across Windows, Linux, and AD.
privilege-escalationlinpeaswinpeas+2
Adversary Village·42 min
Matthew Eidelberg
Matthew Eidelberg breaks down the mechanics of modern EDR evasion, demonstrating API unhooking, AMSI bypasses, and indirect system calls in offensive payloads.
edr-evasionpayloadsamsi+2
Adversary Village·30 min
Sanne Maasakkers
Sanne Maasakkers analyzes real-world nation-state phishing strategies, comparing APT psychological pretexts with traditional red team social engineering.
phishingaptsocial-engineering+2
Adversary Village·30 min
David Hunt
CALDERA creator David Hunt introduces Prelude Operator, an accessible desktop adversary emulation platform designed to automate offensive security testing.
adversary-emulationprelude-operatorcaldera+2