defcon34

ESP32-DIV HaleHound Edition for Cheap Yellow Display - Multi-protocol offensive security toolkit

A compact ESP32 Wroom32U toolkit for wireless security—scan, analyze, and spoof RF, Wi-Fi, and BLE protocols, all from an intuitive menu-driven interface. No complex commands or coding required. Designed for ease of use while exploring wireless communication in a responsible, educational manner.

Recon and Threat Intelligence Framework | BlackHat Arsenal 2025 | DEFCON 34 AppSec Village

DEF CON 34 - From Kiosk to Domain Compromise: Learning to Walk Up and Take it All

AtlasLatino is a grassroots effort to give visibility to the work of Latin American researchers and practitioners, across security, machine learning, data science, and more.

A RISC-V CH32V003 embedded UART driver in pure RV32EC Assembler w/ tutorial.

M0us3: Rust implant + Python C2. Full session/command history. AES-GCM, jittered sleep. The first C2 where the mouse bites back. 🐭⚡

EV Charging security testing tool

Attempt at a Rust version of the protocol for the Defcon Laster* Tag badge. https://www.dani.pink/lasertag/about

Just DC34 badge things.

DEFCON34 Badge Hack

Flash a 128x128 image onto a DEF CON 34 badge from your browser over Web Serial. No install required.

Rust port of Bunnie's dc34-image utility to upload custom images to DC34 badges

Cross-server authority injection for MCP agent stacks — find the seam, land the injection, prove the kill. urd find-seams (recon) + analyze (proof). DEF CON 34 RTV.

Write-ups and reproducible analyses for STARPWN CTF 2026 challenges.

A 74-page technical research report on the DEF CON 34 attendee badge and the Baochip-1x mostly-open 22 nm RISC-V SoC. Every claim graded Confirmed / Strong inference / Unknown.

Classic AOL dial-up sign-on animation for the DEF CON 34 badge (1-bit OLED flipbook + Xous player)

A benchmark for password wordlists, and a wordlist that scores well on it

Detection queries, OAuth permission risk matrix, and AI tool risk assessment checklist for measuring shadow AI and approved-software risk in enterprise environments. Validated on Microsoft Defender for Endpoint (KQL) and Rapid7 InsightIDR (LEQL). Released alongside DEF CON 34 talk "The Software Request Trap."