DEF CON 33 (August 7–10, 2025). Las Vegas Convention Center.

Dates and venue per the DEF CON 33 home page. Slides, demo videos, and recordings are in the DEF CON 33 media archive; abstracts are on the main-track speakers page.

The agent-, cipher-, identity-, and RF-relevant talks from the DEF CON 33 media archive — a curated slice of the program. One-line reads are drawn from the published abstracts; none of these were attended. Every link points at a file in the archive listing.

Tier 1 — agents and LLMs.

• Ben Nassi, Or Yair, Stav Cohen — Invitation Is All You Need! — "promptware" delivered through a Google Calendar invite to invoke Gemini for Workspace agents. Indirect prompt injection with no GPUs and no white-box access, which is the point. slides
• Keane Lucas — Claude: Climbing a CTF Scoreboard Near You — Claude entered in CCDC, PicoCTF, and HackTheBox: top 3% on PicoCTF, plus the failure modes (lapsing into security philosophy, inventing flags when stuck). The harness is the story. slides
• Cyrus Parzian — Loading Models, Launching Shells — code execution from ONNX, HDF5, Feather, YAML, JSON, and NPZ under default library behavior. Everyone distrusts pickle; fewer distrust the rest. slides
• Ji'an Zhou, Lishuo Song — Safe Harbor or Hostile Waters — RCE from torch.load(weights_only=True), the documented safe path, via its TorchScript support (CVE-2025-32434). Zhou returns at DEF CON 34 with another weights_only bypass. slides
• Tobias Diehl — Mind the Data Voids — seeding sparse topics so Copilot answers with attacker content under Microsoft's authority, including C2 install steps. Retrieval poisoning by absence. slides
• Olivier Bilodeau, Estelle Ruellan — Mid-Heist Selfies — an LLM reading the infection-time screenshots in stealer logs to name the vector and extract IoCs. LLM as triage. slides

Tier 2 — ciphers, encoding, solvers.

• Joseph Gabay — The One Bitcoin Heist — a custom Hashcat module for brainwallet passphrases that closed a 2014 puzzle in December 2024. Combinatorial search over uncertain clues. slides
• Gabriel Gegenhuber, Maximilian Günther — Silent Signals — delivery receipts in WhatsApp and Signal as a side channel for online status, screen activity, and device usage. The cipher holds; the metadata talks. slides
• Erwin Karincic, Dale Wooden — One Key, Two Key, I Just Stole Your goTenna Key — one unauthenticated RF packet overwrites stored public keys on goTenna Pro, so AES-256 protects the attacker. Key distribution, not the cipher, is the weak link. slides
• Agostino Panico — De-Virtualizing the Dragon — DragonSlayer: symbolic execution plus taint tracking to lift nested VM-based protectors (VMProtect, Themida). Formal-methods adjacent. slides

Tier 2 — identity and auth.

• Marco Casagrande, Daniele Antonioli — CTRAPS — client impersonation and API confusion against CTAP, the FIDO2 client-to-authenticator protocol. slides
• Shourya Pratap Singh, Jonny Lin, Daniel Seetoh — Passkeys Pwned — proxying WebAuthn API calls from injected script to forge passkey registration and authentication. slides
• Keanu Nys — Turning Microsoft's Login Page into our Phishing Infrastructure — credential capture on the real login.microsoftonline.com, not a look-alike. slides
• Shang-De Jiang, Dong-Yi Ye, Tung-Lin Lee — Original Sin of SSO — PRT cookie theft on macOS through the Intune Company Portal, and Entra ID persistence by device forgery. slides

Tier 2 — RF.

• Cooper Quintin, oopsbagel — Recording PCAPs from Stingrays With a $20 Hotspot — Rayhunter, a cell-site-simulator detector reading Qualcomm DIAG control-plane traffic on a cheap hotspot. slides
• George Chatzisofroniou — Breaking Wi-Fi Easy Connect — security and privacy analysis of DPP 3.0, the WPS replacement, where usability choices widen the attack surface. slides
• Andrew Logan — Voice Cloning Air Traffic Control — cloned controller voices over unauthenticated AM radio, and where runway crossings make that dangerous. slides

• DEF CON 33 home page — dates and venue
• DC33 main-track speakers and abstracts
• DC33 presentations archive
• DC33 villages and creators archive
• DEF CON 34 — the following year