0.8 sec-t-2025 2025-09-10 2025-09-12 3 00:05 https://event.sec-t.org https://event.sec-t.org/media/sec-t-2025/img/sec-t-logo-white-on-black_Nady611.png Europe/Stockholm Main hall Small talk 2025-09-10T13:00:00+02:00 13:00 00:15 A warm welcome to Community Event, a free event open for anyone, with lots of breaks to mingle and maybe grab a drink. ``` /$$$$$$ /$$$$$$$$ /$$$$$$ /$$$$$$$$ /$$__ $$| $$_____/ /$$__ $$|__ $$__/ | $$ \__/| $$ | $$ \__/ | $$ | $$$$$$ | $$$$$ | $$ /$$$$$$ | $$ \____ $$| $$__/ | $$|______/ | $$ /$$ \ $$| $$ | $$ $$ | $$ | $$$$$$/| $$$$$$$$| $$$$$$/ | $$ \______/ |________/ \______/ |__/ ``` sec-t-2025-79956-welcome-to-community-day en false https://event.sec-t.org/sec-t-2025/talk/3QUA7S/ https://event.sec-t.org/sec-t-2025/talk/3QUA7S/feedback/ Main hall Full talk 2025-09-10T13:15:00+02:00 13:15 00:45 AI literacy now commands attention across many organisations in the EU. Article 4—AI Literacy—of the EU AI Act, mandates a baseline level of knowledge for all AI users in scope. This session distils several landmark realisations in LLM security, grounded primarily in Anthropic’s published security research. We conclude with two case studies: rapid prototypes of novel LLM application architectures, as food for thought. Each prototype is analysed from a security-first perspective, while demonstrating the capabilities - and shortcomings - of today’s strongest agentic software-engineering models. sec-t-2025-75420-llm-security-literacy krister hedfors en false https://event.sec-t.org/sec-t-2025/talk/B7ZYQ8/ https://event.sec-t.org/sec-t-2025/talk/B7ZYQ8/feedback/ Main hall Small talk 2025-09-10T14:20:00+02:00 14:20 00:30 Antiforensics refers to a set of techniques, tools, or practices used to hinder, mislead, or obstruct digital forensic investigations. This opens opportunities for attackers to intentionally disable or tamper with logs, use short-lived compute resources like AWS Lambda to carry out malicious actions, and store payloads in less-monitored services like object storage or serverless APIs. Effective cloud forensic readiness requires proactive measures such as enabling comprehensive logging (e.g., CloudTrail, VPC Flow Logs), enforcing strict IAM policies, and integrating tamper-evident storage solutions to preserve the integrity of evidence. In this demo driven technical presentation I’ll begin by introducing the audience on how log collection, security detection and digital forensics is executed in AWS Environments, like what services are needed to ship data to a SIEM, what are the delays we can take advantage of, how Guardduty works and how SOC teams are getting non-cloud-specific logs from servers using SSM. Then I will demonstrate how an attacker can leverage common known blindspots, like the share responsibility model lack of visibility and the internal delays between log generation and log collection, to execute antiforensics techniques with the objective of hindering an investigator’s ability to recover, analyze, or attribute activity related to cloud-based attacks. sec-t-2025-61948-practical-aws-antiforensics Santi Abastante en false https://event.sec-t.org/sec-t-2025/talk/N8SPBQ/ https://event.sec-t.org/sec-t-2025/talk/N8SPBQ/feedback/ Main hall Small talk 2025-09-10T15:10:00+02:00 15:10 00:30 GitHub Actions are the perfect tool for automating all aspects of your software workflows and deployment processes. As Actions have access to source code, this makes them a prime target for (supply-chain) attacks. Learn how to exploit and fix old vulnerabilities, what new vulnerabilities to be aware of, and how to reduce the impact should your Actions get exploited. sec-t-2025-78958-attacking-and-defending-github-actions Simon Gerst en false https://event.sec-t.org/sec-t-2025/talk/TJGL3H/ https://event.sec-t.org/sec-t-2025/talk/TJGL3H/feedback/ Main hall Full talk 2025-09-10T16:00:00+02:00 16:00 00:45 As long as we can communicate securely, everything will be fine. In this talk I will present how one can build an entire decentralised and distributed encrypted network to carry data, voice, text and more - all based on the sanctum project I presented at SEC-t last year. From peer-to-peer and end-to-end encrypted tunnels between laptops, desktops and phones to full on group voice-calls and chatting between these devices, using only sanctum and its underlying protocol. I will deep dive into said protocol, how it works, what the tradeoffs are and how to put this up yourself in a safe and secure way. So put on your hacker hat, and let's hack. sec-t-2025-67818-the-voices-of-confession joris en true https://event.sec-t.org/sec-t-2025/talk/FWGJCR/ https://event.sec-t.org/sec-t-2025/talk/FWGJCR/feedback/ Hardware Hacking Village Workshop 2025-09-10T09:00:00+02:00 09:00 03:30 Workshop: Arduino for total Newbies Even total newbies can learn to make way cool electronic projects with Arduino. It’s fun and easy. Itinerary: Intro to Arduino, Everything about Electronics, Learn to Solder, free Arduino software, Program Arduinos, Read schematics, Make a TV-B-Gone on a Solderless Breadboard, Target Practice. This workshop is free and open for non-ticket holders as well. Hardware needed may be purchased on site. sec-t-2025-81056-workshop-arduino-for-total-newbies Mitch Altman en false https://event.sec-t.org/sec-t-2025/talk/KCEQL7/ https://event.sec-t.org/sec-t-2025/talk/KCEQL7/feedback/ Hardware Hacking Village Workshop 2025-09-10T12:45:00+02:00 12:45 01:45 Beginners can now create off-grid, encrypted mesh networks for cheap, with applications in emergency communication, sensor monitoring, and more! These mesh networks have been popping up in cities all over the world, and this class will go over everything a beginner needs to run or build their own nodes. If you've ever wanted to legally create off-grid, encrypted mesh networks that can span over a hundred miles, you can get started with Meshtastic for around $50. This class will serve as a beginner user's guide to Meshtastic, covering everything from hardware basics to advanced software configuration. We will use custom Meshtastic nodes to see real-world results in Las Vegas and explore attacks against mesh networks. Attendees will learn to run their own Meshtastic nodes, select antenna options, and configure software! This workshop is free and open for non-ticket holders as well. Hardware needed may be purchased on site. sec-t-2025-81048-workshop-build-your-own-meshtastic-node-off-grid-encrypted-lora-meshnets-for-beginners Kody Kinzie en false https://event.sec-t.org/sec-t-2025/talk/J998RJ/ https://event.sec-t.org/sec-t-2025/talk/J998RJ/feedback/ Hardware Hacking Village Workshop 2025-09-10T14:45:00+02:00 14:45 02:30 SEC-T 0x10sion Music Synthesizer Badge kit You can buy the kit at the SEC-T shop. Anyone can learn to solder! And anyone can learn to make music, sound (and noise!) with computer chips! All participants will easily learn all of this by making their SEC-T Music Synthesizer Badge from the open hardware kit. This workshop is for everyone -- even total beginners. Code: https://github.com/SEC-T/badge-2024 This workshop is free and open for non-conference ticket holders as well. Hardware needed may be purchased on site. sec-t-2025-81057-workshop-sec-t-music-synthesizer-badge-learn-to-solder Mitch Altman en false https://event.sec-t.org/sec-t-2025/talk/CYRXH7/ https://event.sec-t.org/sec-t-2025/talk/CYRXH7/feedback/ Community Area Workshop 2025-09-10T09:00:00+02:00 09:00 08:00 This workshop requires pre-registration at: https://blackhoodie.re/SecT2025/ Introduction to Linux Malware Reverse Engineering Teachers: Marion Marschalek (@pinkflawd) Topic: Ever wanted to know what a Linux malware looks like from the inside? Wonder no more, we’ll grab our scalpels and teach you autopsy in this class. We’ll go from 0 to hey ransomware! in just one day. This training is very busy, from file formats, loaders and process execution, disassemblers and debuggers, to hey this is encrypting files isn’t it. But don’t worry, we’ll arm you with all the necessary skills! The target will be x86-64 Linux ELF executables. Prerequisites: Bring a laptop with IDAPro Free installed, class materials will be hosted on github. What is BlackHoodie? BlackHoodie is a free, women only reverse engineering workshop and community. More information can be found here: https://www.blackhoodie.re/about/ sec-t-2025-81046-workshop-introduction-to-linux-malware-reverse-engineering Marion Marschalek en false https://event.sec-t.org/sec-t-2025/talk/XCDVCK/ https://event.sec-t.org/sec-t-2025/talk/XCDVCK/feedback/ Main hall Small talk 2025-09-11T09:00:00+02:00 09:00 00:15 A warm welcome and introduction talk about SEC-T by the SEC-T organizers. ``` _____ ______ _____ _______ / ____| ____/ ____| |__ __| | (___ | |__ | | ______| | \___ \| __|| | |______| | ____) | |___| |____ | | |_____/|______\_____| |_| ``` sec-t-2025-79955-welcome-to-sec-t en false https://event.sec-t.org/sec-t-2025/talk/M9FMDP/ https://event.sec-t.org/sec-t-2025/talk/M9FMDP/feedback/ Main hall Small talk 2025-09-11T09:15:00+02:00 09:15 00:30 As Ukraine endures a relentless wave of cyber-attacks during the ongoing conflict, the country’s cyber defense strategies have been put to the ultimate test. This presentation shares lessons from Ukraine’s frontline defense, focusing on the broader strategic impact of cyber warfare, including the significant cyber attack on Kyivstar. The talk will provide valuable insights for those seeking to understand the role of cybersecurity in modern warfare. sec-t-2025-78081-cyber-defence-under-fire-strategic-insights-from-ukraine-s-frontline Yurii Shaposhnikov en true https://event.sec-t.org/sec-t-2025/talk/QG9GNT/ https://event.sec-t.org/sec-t-2025/talk/QG9GNT/feedback/ Main hall Small talk 2025-09-11T09:45:00+02:00 09:45 00:30 Whether it is for applications, operating systems, databases, etc. anything that reads, writes, manipulates data must be using an encoding. On modern days, it will mostly always be UTF-8 by default, sometimes UTF-16, both are Unicode standards. Security auditors and researchers often manipulate data or protocols, but what about manipulating the underlying encoding? Unicode has become the one encoding to rule them all, replacing hundreds of old standards. At first glance, it could feel like a simplification. It is not. All those old encodings where ultra-basic while Unicode is overwhelmingly complex beyond what you can imagine until reading the specifications. Over the years, the lack of awareness about Unicode and its complexity have led to a lot of issues and implementation errors. The version 16.0 of the Unicode Standard is 1140 pages long, and there are over 60 UAX (Unicode Standard Annexes), UTS (Unicode Technical Standards), UTR (Unicode Technical Reports), each of which is comparable to an IETF RFC. During the last 3 years, I have analysed about 15 programming languages, none of which is fully implementing 100% of the Unicode standard. Any piece of software around you is probably using Unicode, but none of them have complete implementation of it and all of them a probably different. What could go wrong? sec-t-2025-78876-unicode-as-low-level-attack-primitive noraj en false https://event.sec-t.org/sec-t-2025/talk/DS3EAC/ https://event.sec-t.org/sec-t-2025/talk/DS3EAC/feedback/ Main hall Full talk 2025-09-11T10:45:00+02:00 10:45 00:45 In the run up to Google’s plans to dump 3rd party cookies, marketing firms (a $1.7 TRILLION dollar industry) were sent into a complete panic. These firms relied heavily on 3rd party cookies in order to better attribute CPM (cost per 1000 clicks) and how many of those clicks turned into sales. So advertisers could better study human behavior and trends in order to more effectively sell products. As a former Security Engineer at the Largest Independent Digital Marketing firm in the world, I had a unique view into the evils that these companies were developing in order to not only maintain a few into consumer trends but to increase these views, increase the invasiveness of these techniques, and increase the cooperation between all levels of the industry from display point (streaming service), device point (iPhone, TV), location points (via ISP), to sales point. This talk is a peek under the curtain for the server side data harvesting that agencies have developed, and how they’ve managed to twist this further invasion into so-called consumer protection and increased privacy. sec-t-2025-65257-adware-as-a-service Sean "4dw@r3" Juroviesky en false https://event.sec-t.org/sec-t-2025/talk/ZDRKV9/ https://event.sec-t.org/sec-t-2025/talk/ZDRKV9/feedback/ Main hall Small talk 2025-09-11T11:30:00+02:00 11:30 00:30 If you’re used to seeing user enumeration marked as informational or excluded from bug bounty program scopes, you’re not alone. User enumeration is one of those findings that’s hard to prove as impactful, but also hard to get rid of. This talk will dive into user enumeration and demonstrate its real impact, something that might make clients reconsider the severity of this finding. sec-t-2025-66489-i-know-who-your-users-are-abusing-user-enumeration-for-osint-and-bug-bounty Anton Linné en false https://event.sec-t.org/sec-t-2025/talk/3NPMEZ/ https://event.sec-t.org/sec-t-2025/talk/3NPMEZ/feedback/ Main hall Full talk 2025-09-11T13:00:00+02:00 13:00 00:45 Just as Vulnerability Research is an important area of focus at Google, so is Vulnerability Response to critical and complex security vulnerabilities. These responses not only safeguards the security of Google's products and users but also extends its reach to millions of devices connected to the Internet, in certain instances, including the case I'm going to share here in details. In this talk, I'd like to go through a recent incident at Google, including technical details, in which I was the global lead. The incident involves the discovery by a Google's security researcher of a critical CPU vulnerability (Reptar) and the extensive remediation efforts across all of Google's products and systems. The incident presented a confluence of intriguing technical challenges and unique operational complexities. I plan to elaborate on the strategies employed by Google to address these challenges effectively, emphasizing the time constraints and pressures under which we operated. sec-t-2025-63277-inside-google-s-discovery-remediation-of-a-critical-cpu-vulnerability Yousif Hussin en false https://event.sec-t.org/sec-t-2025/talk/UCPFRS/ https://event.sec-t.org/sec-t-2025/talk/UCPFRS/feedback/ Main hall Small talk 2025-09-11T13:45:00+02:00 13:45 00:30 Offensive security adopts an attacker's mindset and techniques to strengthen defenses. The field has evolved to incorporate more complex tooling and increased automation and, recently, large language models (LLMs). While early AI lacked rigor for security professionals, recent autonomous agents now outperform humans in CTF competitions. In this talk, we explore how recent advancements in AI can be leveraged in the offensive workflow. First, we examine techniques to enable adversarial use of LLMs. Second, we focus on recent advancements of offensive use of AI throughout the cyber kill chain. To ground these ideas, we conclude by presenting a case study on automating exploit generation for blockchain. Smart contracts, which underpin the decentralized finance ecosystem and collectively govern billions of dollars, are particularly vulnerable due to their immutable and open characteristics. We present our early work on agentic use of AI to aid smart contract auditors in their existing vulnerability detection workflow. This talk aims to show how you, as a security practitioner, can begin leveraging AI methods to scale your existing workflows while also grounding your understanding of the evolving capabilities that adversaries have at their disposal. sec-t-2025-79078-offensive-security-with-machine-learning-applications-and-a-blockchain-case-study Vivi AnderssonSofia Bobadilla en false https://event.sec-t.org/sec-t-2025/talk/QKTYVQ/ https://event.sec-t.org/sec-t-2025/talk/QKTYVQ/feedback/ Main hall Full talk 2025-09-11T14:45:00+02:00 14:45 00:45 The increasing reliance on digital systems in modern rocketry, from design and manufacturing to launch operations and in-flight control, introduces significant cybersecurity vulnerabilities. This presentation, "Ignition Under Fire," explores the diverse attack vectors targeting rocket propulsion systems, examining potential consequences ranging from mission delays and data breaches to catastrophic failures. We will analyze the complex interplay of software, hardware, and network components within propulsion systems, identifying key weaknesses susceptible to exploitation. The presentation will delve into specific attack scenarios, software manipulation, sensor spoofing, and network intrusion, highlighting the potential impact on critical parameters like thrust, fuel flow, and combustion stability. Furthermore, we will discuss the unique challenges in securing these complex systems. We will explore how a Zero Trust architecture can be implemented to enhance security by enforcing strict access control, micro-segmentation, and continuous authentication and authorization throughout the propulsion system. sec-t-2025-65294-ignition-under-fire-exploring-cybersecurity-attack-vectors-in-rocket-propulsion Paul Coggin en false https://event.sec-t.org/sec-t-2025/talk/JAVP9M/ https://event.sec-t.org/sec-t-2025/talk/JAVP9M/feedback/ Main hall Small talk 2025-09-11T15:30:00+02:00 15:30 00:30 Red Teams and Blue Teams thrive when they grow through iterative progress. However, I've historically witnessed Red Teams strive for logarithmic growth when caught by the Blue Team. This ultimately slows progress leaving a vast swath of median capabilities unexplored. This talk is an interactive journey through open source detections, where we will bypass detections in a collaborative and iterative fashion. Attendees will gain a framework for leveling-up their Security programs, and hopefully pick up a few technical tricks along the way. Audience participation is highly encouraged. sec-t-2025-78609-applied-detections-bypass int0x80 en false https://event.sec-t.org/sec-t-2025/talk/VMZMWD/ https://event.sec-t.org/sec-t-2025/talk/VMZMWD/feedback/ Main hall Full talk 2025-09-11T16:15:00+02:00 16:15 00:45 Do you travel with expensive stuff? Do you like feeling safe about leaving your expensive stuff in your hotel room? Have you ever had anything stolen out of your room, or discovered someone has gained access to your room while you weren't there? .. what about .. other rooms? Maybe not EXACTLY a hotel room? I've presented on securing hotel rooms in the past, but adding home assistant, zwave devices, co2 sensors and millimeter wave radar it's become a whole new game - a VERY interesting one! With graphs and remote access! sec-t-2025-64107-how-to-bug-hotel-rooms-v2-0 Dan Tentler en false https://event.sec-t.org/sec-t-2025/talk/XFGJYK/ https://event.sec-t.org/sec-t-2025/talk/XFGJYK/feedback/ Main hall Full talk 2025-09-11T17:30:00+02:00 17:30 01:00 During SEC-T each year we take one hour out of the schedule to allow lightning speakers to do brief presentations on stage. A smaller dinner is served in the form of wraps. - **Jesper**: Hello from SecurityFest - **Erik:** Life as an IPv4 address - Insights from a worldwide honeypot network - **Alfred:** goSnoop: Using the Linux Kernel and eBPF for Syscall and DNS Monitoring - **kdk:** Bypassable fingerprinting: lessons learned from a queer social network - **Mikael Bååth:** Vide coding for veterans - **Astrid:** This is (not) a printer on the Internet - **Ignacio Navarro:** Insert coin: Hacking Arcades for Fun - Your talk here? If you wish to hold a lightning talk (_maximum_ 15 minutes), send us at email at cfp@sec-t.org. Please include a sentence or two what the talk is about, and a rough time estimate to make planning easier! --- ``` ____ _____ ____ _____ / ___|| ____/ ___| |_ _| \___ \| _|| | _____| | ___) | |__| |__|_____| | |____/|_____\____| |_| ``` sec-t-2025-80656-lightning-talks-dinner-wraps en false https://event.sec-t.org/sec-t-2025/talk/AQU8CM/ https://event.sec-t.org/sec-t-2025/talk/AQU8CM/feedback/ Hardware Hacking Village Workshop 2025-09-11T09:30:00+02:00 09:30 00:45 In this workshop, we'll upgrade a cute cat lamp with programmable LED hardware, walk through flashing it with WLED to give it custom animations, and then reflashing it to turn it into a sneaky WiFi hacking device. Workshop will involve beginner-level soldering and assembly skills. Great for cat-lovers and those looking to get into DIY IoT projects. Soldering and assembly tools will be provided, and hardware kits needed may purchased on-site. The workshop is free for all conference attendees (not including hardware). sec-t-2025-81054-workshop-make-your-very-own-evil-iot-cat-lamp-with-wled Michael Raymond en false https://event.sec-t.org/sec-t-2025/talk/YPRM3V/ https://event.sec-t.org/sec-t-2025/talk/YPRM3V/feedback/ Hardware Hacking Village Workshop 2025-09-11T10:30:00+02:00 10:30 02:15 SEC-T 0x10sion Music Synthesizer Badge kit You can buy the kit at the SEC-T shop. Anyone can learn to solder! And anyone can learn to make music, sound (and noise!) with computer chips! All participants will easily learn all of this by making their SEC-T Music Synthesizer Badge from the open hardware kit. This workshop is for everyone -- even total beginners. Code: https://github.com/SEC-T/badge-2024 The workshop is free for all conference attendees (not including hardware). sec-t-2025-81058-workshop-sec-t-music-synthesizer-badge-learn-to-solder Mitch Altman en false https://event.sec-t.org/sec-t-2025/talk/UDQK8V/ https://event.sec-t.org/sec-t-2025/talk/UDQK8V/feedback/ Hardware Hacking Village Workshop 2025-09-11T13:00:00+02:00 13:00 01:45 Beginners can now create off-grid, encrypted mesh networks for cheap, with applications in emergency communication, sensor monitoring, and more! These mesh networks have been popping up in cities all over the world, and this class will go over everything a beginner needs to run or build their own nodes. If you've ever wanted to legally create off-grid, encrypted mesh networks that can span over a hundred miles, you can get started with Meshtastic for around $50. This class will serve as a beginner user's guide to Meshtastic, covering everything from hardware basics to advanced software configuration. We will use custom Meshtastic nodes to see real-world results in Las Vegas and explore attacks against mesh networks. Attendees will learn to run their own Meshtastic nodes, select antenna options, and configure software! The workshop is free for all conference attendees (not including hardware). sec-t-2025-81049-workshop-build-your-own-meshtastic-node-off-grid-encrypted-lora-meshnets-for-beginners Kody Kinzie en false https://event.sec-t.org/sec-t-2025/talk/L98W77/ https://event.sec-t.org/sec-t-2025/talk/L98W77/feedback/ Hardware Hacking Village Workshop 2025-09-11T15:00:00+02:00 15:00 01:30 Workshop: TV-B-Gone / Learn to Solder Anyone can learn to solder! And a fun way to do learn is by making this wonderful little device that encourages you to turn off TVs in public places! It works on a huge percentage of all TVs in the world. Airports, bars, schools, waiting rooms… Works from 50 meters away! The workshop is free for all conference attendees (not including hardware). sec-t-2025-81059-workshop-tv-b-gone-learn-to-solder Mitch Altman en false https://event.sec-t.org/sec-t-2025/talk/3TYWA8/ https://event.sec-t.org/sec-t-2025/talk/3TYWA8/feedback/ Hardware Hacking Village Workshop 2025-09-11T16:45:00+02:00 16:45 01:45 Meshtastic is a long range, encrypted, off-grid mesh protocol that features many powerful modules, configurations, and settings. For beginners just getting started, it can be confusing to dive into these features! In this workshop, we'll explore the exciting modules that make Meshtastic more fun and useful. We'll cover how to customize the encryption, add hardware like GPS and sensors, and change the default transmission settings to adapt to specific environments. Attendees will learn to customize their Meshtastic nodes for any situation using the built in modules and settings. We'll also explore attacks against Meshtastic, and how to get involved in your local area! What to bring: Computer with Google Chrome, iOS or Android smartphone. What you get: 1 Bluetooth Nugget+ LoRa Backpack + weather sensor The workshop is free for all conference attendees (not including hardware). sec-t-2025-81051-workshop-meshtastic-for-hackers-set-up-configure-deploy-nodes-for-advanced-use Kody Kinzie en false https://event.sec-t.org/sec-t-2025/talk/CJZCLL/ https://event.sec-t.org/sec-t-2025/talk/CJZCLL/feedback/ Club SEC-T Recreation 2025-09-11T12:30:00+02:00 12:30 07:00 Play retro games, chill, hang out, and listen to low volume music DJ:ed by Syntax Error. ``` _ __ _ | |/ /__ _ _ __ __ _| |_ ___ __ _ __ _ _ __ ___ ___ _ __ ___ | ' // _` | '__/ _` | __/ _ \/ _` |/ _` | '_ ` _ \ / _ \ '__/ __| | . \ (_| | | | (_| | || __/ (_| | (_| | | | | | | __/ | \__ \ |_|\_\__,_|_| \__,_|\__\___|\__, |\__,_|_| |_| |_|\___|_| |___/ |___/ ``` sec-t-2025-81149-karategamers-retro-arcade Weyland en false https://event.sec-t.org/sec-t-2025/talk/EVJ3ZK/ https://event.sec-t.org/sec-t-2025/talk/EVJ3ZK/feedback/ Club SEC-T Performance 2025-09-11T19:30:00+02:00 19:30 00:30 The official party for SEC-T starts, and opens for non-ticket holders. Club SEC-T is -free- to attend for anyone 18 years or older, whether you're a conference guest or just want a ridiculously geeky Thursday night and don't even know what SEC-T is! This also means, as a conference guest, you're free to invite your non-ticket-holding friends. Official Facebook event: https://www.facebook.com/events/2110818196113594 sec-t-2025-81239-club-sec-t-opens-for-the-public en false https://event.sec-t.org/sec-t-2025/talk/LPPTHF/ https://event.sec-t.org/sec-t-2025/talk/LPPTHF/feedback/ Club SEC-T Contest 2025-09-11T20:00:00+02:00 20:00 01:30 Join us for another quiz with great music and visual clues! Some questions are more security related than others but all of it is fun! It's a though one so feel free to use your favorite search engine or other means to win. Created by Weyland. ``` ____ _ _ ____ _____ ____ _____ / ___| |_ _| |__ / ___|| ____/ ___| |_ _| | | | | | | | '_ \ \___ \| _|| | _____| | | |___| | |_| | |_) | ___) | |__| |__|_____| | \____|_|\__,_|_.__/ |____/|_____\____| |_| ``` sec-t-2025-81153-weyland-s-quiz Weyland en false https://event.sec-t.org/sec-t-2025/talk/NVYJQX/ https://event.sec-t.org/sec-t-2025/talk/NVYJQX/feedback/ Club SEC-T Performance 2025-09-11T21:30:00+02:00 21:30 01:00 ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** Live Artist Performance ** sec-t-2025-81154-artist en false https://event.sec-t.org/sec-t-2025/talk/YYGZCB/ https://event.sec-t.org/sec-t-2025/talk/YYGZCB/feedback/ Club SEC-T Performance 2025-09-11T22:30:00+02:00 22:30 02:30 ** Syntax Error DJs are putting on a Party ** Syntax Error DJs are putting on a Party ** Syntax Error DJs are putting on a Party ** Syntax Error DJs are putting on a Party ** Syntax Error DJs are putting on a Party ** Syntax Error DJs are putting on a Party ** Syntax Error DJs are putting on a Party ** sec-t-2025-81156-syntax-error-djs Weyland en false https://event.sec-t.org/sec-t-2025/talk/8DLCGT/ https://event.sec-t.org/sec-t-2025/talk/8DLCGT/feedback/ Main hall Full talk 2025-09-12T09:00:00+02:00 09:00 00:45 Armed conflict accelerates technological development while exposing our blind spots in threat awareness. Even seemingly harmless diagnostic data from drones can be weaponized—with potentially deadly consequences. This talk will include a live demonstration of advanced techniques used to intercept and locate drone operators in real-world war zones. Using the example of a three-day military operation in Ukraine, we’ll walk through how RF weaknesses can be exploited to detect and counter drone threats, and how custom tools can be built to track operators in the field. sec-t-2025-79616-gotcha-how-to-track-down-a-drone-operator-in-the-heart-of-war Michał Kłaput en false https://event.sec-t.org/sec-t-2025/talk/SNZ8XW/ https://event.sec-t.org/sec-t-2025/talk/SNZ8XW/feedback/ Main hall Full talk 2025-09-12T10:00:00+02:00 10:00 00:45 In this talk, we peel back the curtain on the Secure Software Development Lifecycle (SSDLC) and explore some real war stories. Rather than focusing on idealized process models or textbook solutions, this session highlights some messy, funny, and sometimes frustrating real-world scenarios AppSec professionals face every day. Each phase of the OWASP SAMM framework becomes a round of mistake bingo, revealing lessons learned along the way. You’ll laugh, you’ll cringe, and you’ll likely recognize more than a few of these examples from your own experience. sec-t-2025-74422-a-game-of-ssdlc-mistake-bingo Hendrik NobenStephan Van Dyck en false https://event.sec-t.org/sec-t-2025/talk/SGBNCS/ https://event.sec-t.org/sec-t-2025/talk/SGBNCS/feedback/ Main hall Full talk 2025-09-12T11:15:00+02:00 11:15 00:45 Breaking into supermarket systems, ticketing platforms, and more. I’ll share some of my latest hacking stories, showing how I found the vulnerabilities, reported them, and collaborated with the companies. We’ll dive into tools, the challenges of disclosure, the importance of being “ethical”, lessons learned and how these experiences help improve security and build trust between hackers and organizations. sec-t-2025-69136-oops-i-hacked-it-again-tales-and-disclosures Ignacio Navarro en false https://event.sec-t.org/sec-t-2025/talk/SVBXCR/ https://event.sec-t.org/sec-t-2025/talk/SVBXCR/feedback/ Main hall Full talk 2025-09-12T13:00:00+02:00 13:00 00:45 In June 2025 XBOW became the first AI Agent to reach #1 on Hacker1 USA ranking. But how does a hacking agent work? Can you build your own? Can it collect bug bounties while you drink Martinis on the beach? Hacking is about curiosity, building and breaking things. In this session we explore how we can integrate Large Langue Models (LLMs) with Model Context Protocols (MCPs) to automate & orchestrate complex attacks Then we look into how secure are AI agents and how can they be hacked sec-t-2025-74909-llm-x-mcp-x-kali-building-breaking-ai-agents Andrei Agape en false https://event.sec-t.org/sec-t-2025/talk/R7HVLL/ https://event.sec-t.org/sec-t-2025/talk/R7HVLL/feedback/ Main hall Small talk 2025-09-12T13:55:00+02:00 13:55 00:30 Identity has become the new perimeter and in Microsoft Entra ID (formerly Azure Active Directory), it’s also the easiest one to break. Misconfigured apps, over-scoped permissions, and weak conditional access open the door to attackers who know where to look. In this talk, we’ll walk through real-world Entra ID misconfigurations that led to privilege escalation and domain-wide compromise all of which have been reproduced in EntraGoat, a new open-source lab that simulates these attack paths in a CTF-style environment. You’ll see step-by-step demos of how attackers exploit these flaws, how defenders can detect them, and how you can use the lab to train, teach, or test in your own environment. Whether you’re red team, blue team, or just Entra-curious, you’ll walk away with practical techniques and a tool to keep practicing. sec-t-2025-68519-breaking-entra-real-world-cloud-identity-attacks-you-can-recreate Tomer NahumJonathan Elkabas en false https://event.sec-t.org/sec-t-2025/talk/WWWX7Q/ https://event.sec-t.org/sec-t-2025/talk/WWWX7Q/feedback/ Main hall Small talk 2025-09-12T14:30:00+02:00 14:30 00:30 Traditional SIEM solutions focus on detecting attacks—but what if we flipped the script? Instead of waiting for adversaries to act, defenders can use SIEM proactively to identify local privilege escalation risks before they’re exploited. By analyzing Sysmon and Windows event logs, blue teams can uncover hidden misconfigurations in services, scheduled tasks, DLL loads, and centralized application deployments that could allow an attacker to escalate privileges to SYSTEM. In some cases, this approach might even reveal new CVEs lurking in your environment. This talk will showcase practical techniques for leveraging SIEM as an offensive discovery tool, helping defenders think like attackers to strengthen security from within. sec-t-2025-66325-offensive-siem-when-the-blue-team-switches-perspective Erkan EkiciShanti Lindström en false Vulnerability found in EPSON printer drivers EPSON Security Notifications https://event.sec-t.org/sec-t-2025/talk/XVLLAY/ https://event.sec-t.org/sec-t-2025/talk/XVLLAY/feedback/ Main hall Full talk 2025-09-12T15:30:00+02:00 15:30 00:45 Bluetooth vulnerability assessment is still in the dark ages. We still don't have a good handle on all the devices that are affected by the exploitable-over-the-air vulnerabilities that we disclosed in Texas Instruments and Silicon Labs firmware back in 2020. But we've been chipping away at the problem! We released "Blue2thprinting" in 2023 as our starting point towards something akin to nmap OS fingerprinting, but with a focus on learning what we could about the specific Bluetooth chip or firmware versions, to identify known-vulnerable versions. We delved into the thousands of pages of Bluetooth specs to extract bits and pieces, packets and profiles, that had interesting information to share about what a device is. But even as we continue to add new types of data to enrich our understanding of what devices are, and whether they're vulnerable to known CVEs, there's just *so much* that's still unknown! In this talk we'll discuss the updates to Blue2thprinting to allow for P2P researcher data sharing and crowdsourcing, and how that can help broaden the global knowledge of Bluetooth vulnerability applicability. And we'll also highlight the ridiculous number of tantalizing known unknowns; and encourage you to join the BlueCrew on our Journey Into Mystery! sec-t-2025-74995-crowdsourcing-bluetooth-identity-to-understand-bluetooth-vulnerability Xeno Kovah en false https://event.sec-t.org/sec-t-2025/talk/HMMVQP/ https://event.sec-t.org/sec-t-2025/talk/HMMVQP/feedback/ Main hall Small talk 2025-09-12T16:15:00+02:00 16:15 00:30 Ever wondered how to start your first red teaming engagement? This session will teach real-world methodologies for collecting, analyzing, and applying threat intelligence in offensive security engagements. Participants will gain hands-on experience in extracting TTPs from threat reports, building adversary emulation plans, and using tools like the MITRE ATT&CK Navigator to plan intelligence-driven red team operations. Attendees will also receive custom worksheets and templates to support their future assessments. sec-t-2025-75181-build-your-first-threat-emulation-plan Fredrik Sandström en false https://event.sec-t.org/sec-t-2025/talk/BZUDJB/ https://event.sec-t.org/sec-t-2025/talk/BZUDJB/feedback/ Hardware Hacking Village Workshop 2025-09-12T09:00:00+02:00 09:00 01:45 In this workshop, you’ll learn to write Bad USB scripts to hack computers using a cute, cat-shaped hacking tool called the USB Nugget. You’ll learn to write scripts to get computers of any operating system to do your bidding in seconds, and also how to automate nearly any desired action remotely. If you want to learn about simple scripting and HID attacks this workshop is for you! The USB Nugget kit may be purchased at the workshop. sec-t-2025-81062-workshop-learn-badusb-hacking-with-the-usb-nugget Michael Raymond en false https://event.sec-t.org/sec-t-2025/talk/YSE7YV/ https://event.sec-t.org/sec-t-2025/talk/YSE7YV/feedback/ Hardware Hacking Village Workshop 2025-09-12T11:00:00+02:00 11:00 01:30 Workshop: TV-B-Gone / Learn to Solder Anyone can learn to solder! And a fun way to do learn is by making this wonderful little device that encourages you to turn off TVs in public places! It works on a huge percentage of all TVs in the world. Airports, bars, schools, waiting rooms… Works from 50 meters away! The training is free for all conference attendees. Needed hardware may be purchased at the workshop. sec-t-2025-81060-workshop-tv-b-gone-learn-to-solder Mitch Altman en false https://event.sec-t.org/sec-t-2025/talk/GWJSRD/ https://event.sec-t.org/sec-t-2025/talk/GWJSRD/feedback/ Hardware Hacking Village Workshop 2025-09-12T12:45:00+02:00 12:45 01:45 Beginners can now create off-grid, encrypted mesh networks for cheap, with applications in emergency communication, sensor monitoring, and more! These mesh networks have been popping up in cities all over the world, and this class will go over everything a beginner needs to run or build their own nodes. If you've ever wanted to legally create off-grid, encrypted mesh networks that can span over a hundred miles, you can get started with Meshtastic. This class will serve as a beginner user's guide to Meshtastic, covering everything from hardware basics to advanced software configuration. We will use custom Meshtastic nodes to see real-world results in Las Vegas and explore attacks against mesh networks. Attendees will learn to run their own Meshtastic nodes, select antenna options, and configure software! Needed hardware may be purchased at the workshop. sec-t-2025-81050-workshop-build-your-own-meshtastic-node-off-grid-encrypted-lora-meshnets-for-beginners Kody Kinzie en false https://event.sec-t.org/sec-t-2025/talk/DFCKUX/ https://event.sec-t.org/sec-t-2025/talk/DFCKUX/feedback/ Hardware Hacking Village Workshop 2025-09-12T14:45:00+02:00 14:45 01:45 Meshtastic is a long range, encrypted, off-grid mesh protocol that features many powerful modules, configurations, and settings. For beginners just getting started, it can be confusing to dive into these features! In this workshop, we'll explore the exciting modules that make Meshtastic more fun and useful. We'll cover how to customize the encryption, add hardware like GPS and sensors, and change the default transmission settings to adapt to specific environments. Attendees will learn to customize their Meshtastic nodes for any situation using the built in modules and settings. We'll also explore attacks against Meshtastic, and how to get involved in your local area! What to bring: Computer with Google Chrome, iOS or Android smartphone. What you get: 1 Bluetooth Nugget+ LoRa Backpack + weather sensor (can be purchased at the workshop). sec-t-2025-81052-workshop-meshtastic-for-hackers-set-up-configure-deploy-nodes-for-advanced-use Kody Kinzie en false https://event.sec-t.org/sec-t-2025/talk/Z7HXLK/ https://event.sec-t.org/sec-t-2025/talk/Z7HXLK/feedback/ Club SEC-T Recreation 2025-09-12T09:00:00+02:00 09:00 03:00 ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** Karategamers Retro Arcade ** sec-t-2025-81157-karategamers-retro-arcade Weyland en false https://event.sec-t.org/sec-t-2025/talk/SDBQJY/ https://event.sec-t.org/sec-t-2025/talk/SDBQJY/feedback/