Talk/Event Schedule

Thursday

Thursday - 00:00 PDT

Thursday - 01:00 PDT

Thursday - 02:00 PDT

Thursday - 03:00 PDT

Thursday - 04:00 PDT

Thursday - 05:00 PDT

Thursday - 06:00 PDT

Thursday - 07:00 PDT

Thursday - 08:00 PDT

Thursday - 09:00 PDT

Thursday - 10:00 PDT

Thursday - 11:00 PDT

Thursday - 12:00 PDT

Thursday - 13:00 PDT

Thursday - 14:00 PDT

Thursday - 15:00 PDT

Thursday - 16:00 PDT

Thursday - 17:00 PDT

Thursday - 18:00 PDT

Thursday - 19:00 PDT

Thursday - 20:00 PDT

Thursday - 21:00 PDT

Talk/Event Descriptions

CON - Thursday - 00:00-16:59 PDT

Accepted contests not yet posted on HackerTracker (or info.defcon.org):

Crack Me If You Can (CMIYC)
Telechallenge 
The Hack-n-Attack Hacker Homecoming Heist Tin Foil Hat Contest

The above contests have been accepted and (to the best of my knowledge) will happen at DEF CON 30, but I'm missing crucial information required for the publishing process. If you are a contest organizer and you have Basecamp access, please reach out to me (@aNullValue) as soon as possible. If you do not have Basecamp access, please reach out to the DEF CON department lead or goon that is your primary point of contact.

SOC - Thursday - 09:00-17:59 PDT

All chillout lounges are planned to be open 09:00 - 18:00 for chillout purposes. Each may be open at other times for parties, meetups, etc.

Entertainment schedule:

09:00 to 12:00 - Pie & Darren
12:00 to 13:30 - Kampf
13:30 to 14:30 - s1gnsofl1fe
14:30 to 15:30 - Merin MC
15:30 to 16:30 - Rusty
16:30 to 18:00 - djdead

SOC - Thursday - 18:00-20:59 PDT

DDV - Thursday - 16:00-18:59 PDT

SOC - Thursday - 17:00-16:59 PDT

Please note: the Caesars Forum Unity Ballroom is at the "front" of Caesars Forum, beside Demo Labs, across from room 216 (the Contest-CTF area).

SOC - Thursday - 12:00-11:59 PDT

Please note: the Caesars Forum Unity Ballroom is at the "front" of Caesars Forum, beside Demo Labs, across from room 216 (the Contest-CTF area).

SOC - Thursday - 21:00-01:59 PDT

WS - Thursday - 09:00-12:59 PDT

In this workshop we will roll back our sleeves and learn how TCP/IP really works - the handshake, options, sequence/ack numbers, retransmissions, TTL, and much more. This workshop welcomes all cybersecurity and wireshark experience levels.

Materials

Just a laptop with a copy of Wireshark. I will provide the sample pcaps for analysis.

Prereq

None

WS - Thursday - 14:00-17:59 PDT

Materials

Laptop with enough power for a moderately sized Linux VM Administrative access to the laptop 8GB RAM minimum 30GB harddrive space Virtualbox or another virtualization platform installed

Prereq

Basic computer science background (x86_64 assembly, stack, programming skills in C & Python) Basic binary exploitation skills (buffer overflow exploitation, ROP, ASLR, etc.) - Familiar with Linux developer tools such as the command line, Python scripting and GDB.

WS - Thursday - 14:00-17:59 PDT

Among the recent cloud hacks, around 97 percent are due to misconfigurations and various surveys suggest that in most cases, people were not aware of how misconfiguration can happen in various circumstances. Azure security is a mammoth in itself and a lot of people struggle in getting started with it, for the same reason many cloud administrators and developers are not aware of how misconfigurations and vulnerable applications can be leveraged to get a foothold on the account.

This workshop is a power course for Azure security, we will first cover the fundamentals and building blocks of Azure then we will take a look at the threatscape and attack vectors.

Materials

A laptop with the latest web browser and network connectivity A Kali VM (Virtual Box, VMWare, WSL)

Prereq

Basic knowledge of Linux and Networking

WS - Thursday - 14:00-17:59 PDT

Materials

Students will need to come with the following: A laptop capable of running an Ubuntu VM (or an install of Ubuntu). The VM/OS installation guide will be given out before Defcon. Digital Signals Processing is typically very computationally intensive, so I recommend a laptop with a 4 core processor and 8GB of RAM.

A Software Defined Radio, as this workshop is bring-your-own-device. I highly recommend a RTL2832 chip based kit that comes with a USB-powered SDR and an antenna mount. Two brands to consider are RTL-SDR and Nooelec. They are essentially the same, and I would pick whatever SDR is in stock at the time. Make sure to pick the kit that comes with the antenna accessories and not just the USB dongle. It should be between $40 to $50 USD: https://www.rtl-sdr.com/buy-rtl-sdr-dvb-t-dongles/ https://www.nooelec.com/store/sdr/sdr-receivers/nesdr-smart.html

If you already own a SDR (like a HackRF or one of the RTL-chip dongles) you can also use that. Just make sure to bring/buy an antenna.

Due to supply-chain issues, if you need to purchase a SDR for this workshop I highly recommend doing so ASAP.

Prereq

None, this is a workshop for complete beginners, although having some basic python knowledge would be a plus

CON - Thursday - 00:00-15:59 PDT

DC - Thursday - 08:00-14:30 PDT

The published hours for the merch area are only an approximation: supplies are limited, and when merch is sold out, the merch area will close. (We intend to update this schedule to reflect their true operating status, but this is strictly best-effort.)

WS - Thursday - 09:00-12:59 PDT

He has been a pentester for IOActive, head of security for an MMO company, and on the internal pentest team for the Xbox One at Microsoft. Along the way, he volunteered on anti-censorship projects, which resulted in his conversion to Golang and the development of the ratnet project (github.com/awgh/ratnet). A few years ago, he co-founded the Binject group to develop core offensive components for Golang-based malware, and Symbol Crash, which focuses on sharing hacker knowledge through trainings for red teams, a free monthly Hardware Hacking workshop in Seattle, and podcasts. He is currently developing a ratnet-based handheld device for mobile encrypted mesh messaging (www.crowdsupply.com/improv-labs/meshinger).

In the workshop you’ll solve a series of challenges, each in a contained virtualized network where it’s just you and your targets. We’ll start with a networking crash course to introduce you to packets and their layers, as well as how to use Wireshark to dig in and explore further. We'll practice network sniffing and scanning to find your targets, and of course how to execute a man-in-the-middle attack via ARP spoofing to intercept local network traffic. With those techniques, we'll go through challenges including extracting plaintext passwords, TCP session hijacking, DNS poisoning, and SMTP TLS downgrade. All together, this workshop aims to give you the tools you need to start attacking systems at the network layer.

Materials

A laptop with Linux or a Linux VM (MacOS can also work, but have a VM installed as a backup). These software tools (detailed installation instructions will be provided in the materials ahead of DEFCON):

• OpenVPN: Connect to the challenges you will be hacking
• Wireshark (tcpdump also works): Capture and dissect network traffic
• netcat (nc): Swiss-army-knife of networking
• nmap: Scan and search for vulnerable targets
• bettercap: Man-in-the-middle attack tool and network attack platform
• python3 (optional): Build new attack tools

Prereq

Basic experience with Linux command-line tools

Basic familiarity with networking (e.g. you know what IP and MAC addresses are, you could set up your home router, and host a LAN party)

CON - Thursday - 00:00-09:59 PDT

Once entered, contestants are provided a random opponent. Locate your opponent and challenge them to a contest: rock-paper-scissors, Ddakji, staring contest, etc. Winners receive their opponents’ targets and the game continues until we reach the top 4. The Octopus Champion is then decided at a special tournament with events designed by the Octopus Master.

Phases:

Recruitment/Registration: until Friday Aug 12 10:00 Mandatory On-site Sign-in: Friday Aug 12 10:00 - 12:00 Individual Phase: Friday Aug 12 12:00 - Sunday Aug 14 10:00 Final 8 Phase: Sunday Aug 14 10:00 - 11:00

PYV - Thursday - 09:00-13:59 PDT

Please join the DEF CON Discord and see the #payv-labs-text channel for more information.

WS - Thursday - 14:00-17:59 PDT

Then we’ll start hacking! Your goal will be to take control of a model train and robotic arms to capture a real flag! The CTF will be guided so that everyone learns something and gets a chance to get most flags!

Materials

Just a laptop with a modern web browser. Students will be provided with cloud VMs to perform the exercises.

Prereq

None

WS - Thursday - 09:00-12:59 PDT

Guillaume has spoken and given workshops at various conferences like BSidesLV, BsidesSF, DEF CON, RSAC, Thotcon and Northsec on many topics, including mobile security, endpoint security, logging and monitoring.

Materials

A laptop with internet access, a web browser, virtualization app such as VirtualBox or VMware, and Docker (on main OS or in a VM). We recommend bringing at least one or two VMs (Mac, Windows or Linux) ready to use as osquery clients.

Prereq

Basic understanding of operating systems and networking. No knowledge of Fleet or osquery itself is needed.

SOC - Thursday - 16:00-17:59 PDT

CON - Thursday - 12:00-09:59 PDT

This puzzle can be done virtually, but if you’re on-site, you’re welcome to stop by the village to discuss it as well!

WS - Thursday - 09:00-12:59 PDT

Materials

Laptop with virtualization software. A Windows virtual machine A Kali Linux Virtual Machine.

Prereq

Beginner to intermediate programming/scripting skills. Prior experience with C# helps but not required. Beginner static and dynamic malware analysis skills.

SOC - Thursday - 18:00-01:59 PDT

SOC - Thursday - 16:00-21:59 PDT

The humans of Vegas invite you to the 16th in-carne-tion of this unofficial welcome party. Go AFK 4 BBQ off-Strip and make us the first stop on your DC30 reunion tour. Burgers and dogs are provided; attendees are encouraged to pitch in with more food, drinks, volunteer labor, rides, and and everything that makes this cookout something to remember.

Grab flyers from an Info Booth after Linecon, check out https://www.toxicbbq.org for the history of this event, and watch #ToxicBBQ on Twitter for the latest news.