DEF CON 34 - Main - C2YA Inside the Adversary's Inbox - Vitaly Simonovich
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
85 findings exploitable from the internet with zero prior access. 28 takedown chains. Crypto failures that let you decrypt all C2 traffic with one recovered key. Here's how I got there. I'd been using coding agents to find bugs in software. Then I thought: what if I did this from the defender's side, against the tools that threat actors actually use? I pointed LLM-assisted research at five C2 frameworks: Havoc, Mythic, Sliver, Covenant, AdaptixC2. Six months later, 251 design flaws, behavioral weaknesses, and vulnerabilities. Validated every finding in realistic lab environments.
Description from DEF CON.
Explained
The technology and terms in this story. Learn more
- ConceptCommand and control · C2The servers attackers use to send instructions to their malware and receive stolen data.
- TechnologyLLM · Large language modelAn AI model trained on huge amounts of text to understand and generate language, such as ChatGPT or Claude.
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
