dc303 — denver defcon group
upcoming meetings
next meeting
- when
- fri 7-10 pm
- presenter
- Nick Neal
- where
- denhac, 700 Kalamath Street, Denver, CO 80204
This will be an interactive lab covering the reverse engineering of msfvenom’s stageless Windows x64 reverse TCP shellcode. We will cover the basics of Windows internals, x86_64 assembly code in Windows, as well as the obfuscation techniques used by the shellcode author in an attempt to hinder static analysis.
To participate in the lab, you will need a fresh Windows 11 VM with 2 cpu cores, 4GB of RAM, and 64GB of disk space allocated. A script has been provided to set up the VM with the necessary software and configurations before the talk:
https://github.com/nick-neal/msfvenom-win-reveng-lab
also coming up
- when
- fri 7-9 pm
- presenter
- John Hoopes (tilver)
- where
- denhac, 700 Kalamath Street, Denver, CO 80204
John Hoopes (tilver) will present DMA attacks, building mainly on Ulf Frisk’s work. He’ll demo attacks against Linux and Windows, cover ATM security and recent incidents, and discuss DMA against TPM-protected systems and game cheating.
Tilver has been in security for 25 years and collected a pile of esoteric anecdotes that are now being put to shame by AI agents evading their handlers. He’s a founding member of Denhac and has been with DC303 for 20 years.
also coming up
- when
- fri 7-9 pm
- presenter
- Sindhura Kona
- where
- denhac, 700 Kalamath Street, Denver, CO 80204
QR code phishing travels through carrier networks completely unseen - existing spam filters check text but can’t see inside QR code images. My research includes 190 real live scans across 55 participants with zero hesitations, introduces the Signal Switch behavioral framework, and includes a live audience demo where attendees scan a real QR code and experience the attack firsthand.
also coming up
- when
- fri 7-10 pm
- presenter
- Maya Douglas (Ace of Hearts)
- where
- denhac, 700 Kalamath Street, Denver, CO 80204
CTFs. The thrill of getting a flag is unmatched, but the narratives tend to be… flat. But they don’t have to be! Play an analog-horror, ARG-style capture-the-flag set in the heart of Denver. OSINT, crypto, web app vulnerabilities unlock a story about how a fictional man went missing (mostly) without a trace.
I’ll walk you through the story and infrastructure before opening it up for live play. Difficulty is easy to medium. but experience is not necessary (I have non-cyber friends who solved this as well)! See you there.
Ask of the audience: Bring a laptop. To participate, confirm that you have FTP, SSH, and nmap ready to go on your machine. Whether they’re built-in depends on the operating system but the obvious answer is just use Linux.
about
this is the local defcon group for denver, colorado, usa. we meet
typically 4th fridays (alternative dates can be arranged for speakers), 7-9 pm, at
denhac — 700 Kalamath Street, Denver, CO 80204.
first time coming? check out our faq
which covers common questions about our meetup.
not in our area? see other
defcon groups.