Evan Tobac

We just hacked @donie (with his consent) and here's a breakdown of how we cracked his password. At a high level, we used a data breach site, the password cracking tool @hashcat, and a custom wordlist and ruleset. This is how it went down.

Be me. Get invited by @RachelTobac & @evantobac to play craps. Side note: when the Tobacs invite you to gamble, you go. They are 🔥. Arrive at Palms casino. Find $5 craps table. Put $100 bill down. Dealer(?) picks it up and gives it a weird look. Hands it to another dealer. She immediately says "Oh that's fake..." *gulp* Wut. Pit boss called over. Security called over. They take a look at the rest of my money, it's all good. Take the $100 bill to the cage, tell me to wait. Come back 10 min later. "It's counterfeit, we can't give it back." Sadge. 😭 They still let me play tho. Still no idea where / how I got it. 🤨

@mrjhnsn @RachelTobac @defcon Really enjoyed our conversation. Great meeting you in person!

Hangin with the amazing @RachelTobac and @evantobac in the backrooms at @defcon

One of my favorite people in the @defcon universe is @_MG_ Go buy his hacking tools, you’ll have a blast.

The @socialproofsec @defcon 33 Clue Hunt in ON! This challenge is short, it’s just 1 clue. Coin & sticker will both be of value. Intersect to gain the clearest view. Tell me, @evantobac, or Keymaster the secret word IRL or DM to win a Hacker Buff for you. Find us at @sec_defcon.

I just live hacked @ArleneDickinson (Dragons' Den star - Canada's Shark Tank) by using her breached passwords, social media posts, an AI voice clone, & *just 1 picture* for a deepfake live video call. Thank you @ElevateTechCA @Mastercard for asking me to demo these attacks live!

Very cool, portable tool to get insight into USB cables from @alvaroprieto .

@MakeItHackin @PCBWayOfficial We are living in the future! Thanks for the explainer video!

Print Full Color onto Circuit Boards! Thanks to @PCBWayOfficial for sponsoring this video. Bring your projects to life at pcbway.com #tricorder #arduino #circuitboard #defcon #badgelife

Great writeup of reversing and troubleshooting a malfunctioning Beaglebone Black Lots of tools and techniques used (UART, JTAG, Saleae, EMIF Tuning, tinySA, ARM Reversing, etc.)

Without telling me your age, what's the first video game you ever played. GIFs only.

For anyone who wanted a key but didn't get one. Now you can print your own!

@alvaroprieto @digikey @MouserElec @JLCPCB Hey! This is really handy and compact! Super cool work

New release for my USB Cable tester. I updated it to use components available on @digikey and @MouserElec which can be hand soldered. Don't worry though! You can still use an older release to get @JLCPCB to build them for you :) github.com/alvarop/usb_c_…

@rekdt @defcon I see a fully assembled badge coin combo next to the key

Here’s all my @defcon 32 stickers, badges, and patches, tag yourself if you see yours

@thatstraw Not seeing enough love for Plan 9's Sam editor doc.cat-v.org/plan_9/4th_edi…

Choose only 1

@JoshHyde9 @d0nutptr Agree. This is how we learn binary, hexadecimal, and even decimal. It's how we write it out by hand.

@d0nutptr Big endian because I read left to right

Which is your preference?

@_sn0ww @TheDukeZip @jaimefilson @SecureAerospace It was awesome hanging out in the merch booth with him! Happy to talk badges any time. ☎️🖥️🤖

He now wants to make his own badge next year and thankful for wisdom from @TheDukeZip @jaimefilson @evantobac He loved all of the villages he went to, especially @SecureAerospace He also said the Goons were cool

My 16yo attended @defcon for the first time this year I asked him what he thought about it, he said "everyone I talked to was so cool and open to talking to me or teaching me things" 😭🥰

@VillaRoot @_nextjenn @RachelTobac

@_nextjenn @RachelTobac @evantobac I agree, they are actually great people! Always helping out!

@racheltobac and @evantobac are amazing! They are a must-follow for anyone into social engineering

@_nextjenn @RachelTobac You are an incredible social engineer yourself, @_nextjenn! Glad we got to hang out in @sec_defcon this year!

What's the fair market value on goon money these days?

@UCantS33ME @RachelTobac @socialproofsec @defcon @sec_defcon Congrats again!

@RachelTobac @socialproofsec @defcon @sec_defcon Thanks Rachel, @evantobac for a great time. The Clue Hunt was really well constructed and fun! Now to the victor, the spoils! 😍😍😍 #whatabeauty

Our @socialproofsec @defcon Clue Hunt is starting tomorrow & it’s bigger than ever before! Our 1st clue & Keymasters will be at @sec_defcon starting Friday (you get the 1st clue in line) Teaser of prizes below — our challenge coin completes a circuit on our badge, lighting it up!

@BrandonAshinoff @RachelTobac @socialproofsec @defcon @sec_defcon Congrats and Great Job!

Thank you to @RachelTobac @evantobac and @socialproofsec for a super fun clue hunt at @defcon in the @sec_defcon village! Awesome prize at the end!