What Your Body Tells Me: Body Language for the Social Engineer
Chris Hadnagy - What Your Body Tells Me - Body Language for the SE.
Summary
Architecture and Background
What Your Body Tells Me: Body Language for the Social Engineer was presented at DEF CON 22 by Chris Hadnagy. The session explores core technical principles across body-language, social-engineering, non-verbal-communication, human-vulnerabilities, focusing on architectural realities and security trade-offs.
Vulnerability Analysis
The presenters examine common vulnerability patterns, operational challenges, and attack surfaces encountered in real-world scenarios across social-engineering domains.
Exploitation and Demonstrations
Through technical demonstrations, proof-of-concept case studies, or structured methodology walkthroughs, the presentation details attack execution vectors and systemic exposure.
Remediation and Defensive Strategies
The talk concludes with practical defensive guidelines, engineering hardening steps, detection telemetry recommendations, and future research directions for the security community.
Related talks
Main Stage·43 min
Keanu Nys
Demonstrates how red teams can abuse legitimate Microsoft login branding parameters and OAuth endpoints to host convincing, high-trust phishing infrastructure.
Main Stage·36 min
Harrison Sand · Erlend Leiknes
Analyzes the evolution of enterprise phishing defense and demonstrates novel reverse-proxy adversary-in-the-middle tradecraft to bypass modern authentication.
Main Stage·21 min
Russell Phillips
Details physical red team tradecraft for analyzing, cloning, and counterfeiting event security badges, holograms, and laminated credentials.