DEF CON Arsenal Tools (DArTs)🎯

📥Trace point for all #hacking tools, scripts, & resources showcased or used by #security researchers at @defcon #defcon | Curator: @DefconParrot

[DEF CON Arsenal Tools (DArTs)🎯 @DCArsenalTools]

Help us expand, categorize, & organize #DEFCON Arsenal Tools—curated annually from top #security researchers at @defcon conf.

Your contributions will make it easier for the community to discover, filter, and utilize these powerful tools.

Get involved> https://t.co/trPHYxtDa4

[.... @jcldf]

@defcon #defcon32 hardware hacking e-zine here: https://t.co/7bR2iHn8FH

[Hot Fiendish Dr. Noid Summer @_noid_]

In honor of @defcon's 31st birthday. I present you the DEFCON 1 program in its entirety

[coriankenne͈̮̝͌̒́d̛͚̘̭̖̞̋́́̚ỹ̩̝͚̫̲̆̋̀͞ ✱ @CoryKennedy]

Dear Hackers,

Have you or a loved one ever wished you had a way to identify all the @defcon #stickerwall stickers?
If you have, I made you a gift .

https://t.co/MhZmomq8up --> https://t.co/1oMPj47E4u

https://t.co/DrxfKflUUM --> Public Google Sheet output

[Harshleen @0xharshleen]

Cracking 5G/4G LTE Routers -Remote Code Execution to Adjacent Attacks👾
https://t.co/ZvtnCIwsxn

[Gameel Ali 🤘 @MalGamy12]

A new ransomware strain named #Yurei has emerged. It is believed to be a variant of PrincessLocker and is written in Go.
sample: https://t.co/hy0X8J3dHO
sample: https://t.co/kIeMfqN35H
sample: https://t.co/ooueAbFwEz
rule: https://t.co/bElzz5X7tI

[Gcv @gcvftw]

This is legit what I've been searching for without knowing it. Thank you! @kmcnam1

https://t.co/D0LKRaG7AZ

[Tony @flamurtony]

Just built my latest DIY project: The Pickle Rick Badge

Raspberry Pi + LEDs + PS4 motor + sound + 3D-printed parts = wearable chaos. Inspired by the Def Con community and I’m planning to add CTF challenges soon.

Build:
https://t.co/nG0W66s8nq

#DefCon #CTF #DIY #Cybersecurity

[DEF CON Arsenal Tools (DArTs)🎯 @DCArsenalTools]

We may drop direct author link(s) from curated tools—expired domains often get repurposed -/+

For example, one @defcon speaker’s slide has a link that now redirects to p0rn. We’ll stick to official + archived sources to keep things safe. #defcon #infosec

https://t.co/sDRgWzB4jS

[Mery @merytkdsj]

Si os gustó nuestra charla en DEFCON33, atención estos cracks que presentaron una charla muy buena hace 2 años en #defcon.
- Explican secure boot, vulnerabilidades y bypasses
- Son originales, nada de copias
- Comparten TODO
https://t.co/3w01vHsHsK
https://t.co/qMiXXcCTcr

[Masih Moafi @MasihMoafi1]

@RedTeamVillage_ @defcon https://t.co/boSZCJGdJW

[Adam Doupé @adamdoupe]

Super excited that the source code for my series of @defcon Finals CTF with @nautilus_ctf challenges jukebooox is officially released:
https://t.co/PyCGtYmXtF

[DEF CON Parrot🦜 @DefconParrot]

Demoed a tool or script at #DEFCON? Give it more visibility—contribute to the DEF CON Arsenal Tools repo: https://t.co/qudm5flknt

Explore the curated collection and add your own=>
https://t.co/Xf0Rj40oeT

#DEFCON #CyberSecurity #InfoSec #OpenSource #Security

[Tomer Nahum @TomerNahum1]

Today, together with Jonathan Elkabas, we're releasing EntraGoat - A Deliberately Vulnerable Entra ID Environment.

Your own hands-on Entra lab for identity attack simulation.

Built for red teams, blue teams and identity nerds.

Check it out here👉https://t.co/5qlXQiSYHS

[Mark Manning @antitree]

Here's a writeup for a tool I released at #DEFCON Cloud Village called "pilreg". It also might help if you're playing @jaybeale 's Kubernetes CTF.

Thanks to @JonJohnsonJr for teaching me about whiteout files which this tool hunts for.

https://t.co/2UJINYAyZV

[Sigtrap @killminus5]

Goodbye @defcon
Thanks for the presentions and all the @defconparties .
CU next year.
Final #defcon33 release: Zploit - Cyber Underground (No Logs, No Limits)
https://t.co/NauROrDgVm

[flanker017 @flanker_hqd]

Years later it’s still thrilled to be on #DEFCON stage. The presentation has been released here: https://t.co/NYNGSYf0zk

[_leon_jacobs(💥) @leonjza]

Hah! Made it to a LWiS release with my collection of bloatware exploits released @defcon earlier this month!

Check out the repo that has POC's for CVE-2025-3462, CVE-2025-3463, CVE-2025-27812, CVE-2025-27813, CVE-2025-5491 and CVE-2025-27811

https://t.co/f1OFLvLxyM

[Monnappa K A @monnappa22]

A few days back at #DEFCON, I released the Garuda Threat Hunting Framework — crafted for manual threat hunting & detection. Here is the link: https://t.co/YlR8MYOVmm
When integrated with LLMs, it enables AI-powered autonomous threat hunting.
https://t.co/WnYcGQSuCY

[Synacktiv @Synacktiv]

The GroupPolicyBackdoor tool, presented at #DEFCON 2025, is now available on Synacktiv's GitHub: https://t.co/CWLknch5RZ
This python utility offers a stable, modular and stealthy exploitation framework targeting Group Policy Objects in Active Directory!

[Zeeshan Khan ⚡🜏 | InfoSec & Chaos @zeeshankghouri]

Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G & 4G LTE Routers
Slides and demos: https://t.co/uYmL99ohvB