# hack.lu **URL:** https://discourse.ossbase.org/c/hack-lu/15.md?page=2 [Latest](https://discourse.ossbase.org/latest.md) · [Categories](https://discourse.ossbase.org/categories.md) · [Tags](https://discourse.ossbase.org/tags.md) **Page:** 3 --- ## [Kernel Primitives to Code Execution on Windows 11 VBS/HVCI/kCET (SSDT/SSDT Shadow hooks) — Juan Sacco](https://discourse.ossbase.org/t/kernel-primitives-to-code-execution-on-windows-11-vbs-hvci-kcet-ssdt-ssdt-shadow-hooks-juan-sacco/1159)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/kernel-primitives-to-code-execution-on-windows-11-vbs-hvci-kcet-ssdt-ssdt-shadow-hooks-juan-sacco/1159 "2026-10-07T08:51:24Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Juan Sacco Abstract This session presents a modern Windows 11 exploit chain for achieving kernel code execution on systems with … --- ## [Yoga for geeks — Georges Kesseler](https://discourse.ossbase.org/t/yoga-for-geeks-georges-kesseler/666)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/yoga-for-geeks-georges-kesseler/666 "2026-10-07T08:51:23Z")
Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Georges Kesseler Abstract Get your day started with a nice intensive yoga session Description Based on ashtanga yoga, this… --- ## [Bad Bears, Careless Kittens: State-Sponsored Espionage Exposed — Ben](https://discourse.ossbase.org/t/bad-bears-careless-kittens-state-sponsored-espionage-exposed-ben/1157)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/bad-bears-careless-kittens-state-sponsored-espionage-exposed-ben/1157 "2026-10-07T08:51:09Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Ben Abstract Nation-state operators are often treated as disciplined, sophisticated, and untouchable. But sometimes, their own i… --- ## [Internet Background Radiation: Exploiting the Void — Paweł Pawliński, Jan Adamski, Jakub Koman, Paul JUNG](https://discourse.ossbase.org/t/internet-background-radiation-exploiting-the-void-pawel-pawlinski-jan-adamski-jakub-koman-paul-jung/1156)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/internet-background-radiation-exploiting-the-void-pawel-pawlinski-jan-adamski-jakub-koman-paul-jung/1156 "2026-10-07T08:51:07Z")
Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Paweł Pawliński, Jan Adamski, Jakub Koman, Paul JUNG Abstract Network telescopes capture vast amounts of unsolicited Interne… --- ## [Signal processing and math for malware RnD for fun and profit — cocomelonc](https://discourse.ossbase.org/t/signal-processing-and-math-for-malware-rnd-for-fun-and-profit-cocomelonc/1155)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/signal-processing-and-math-for-malware-rnd-for-fun-and-profit-cocomelonc/1155 "2026-10-07T08:51:06Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: cocomelonc Abstract Modern AV and EDR platforms treat malware as data: they compute Shannon entropy, match byte patterns, and bl… --- ## [Polling is the Vulnerability: A Case for Event-Driven Cloud Detection — Santi Abastante](https://discourse.ossbase.org/t/polling-is-the-vulnerability-a-case-for-event-driven-cloud-detection-santi-abastante/1154)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/polling-is-the-vulnerability-a-case-for-event-driven-cloud-detection-santi-abastante/1154 "2026-10-07T08:51:04Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Santi Abastante Abstract Attackers don’t need zero-days in the cloud—they exploit detection delays. SIEM-based pipelines create … --- ## [Khmer Shadow: Uncovering a Targeted Cyber Espionage Campaign Against Cambodian Military Intelligence — Subhajeet Singha](https://discourse.ossbase.org/t/khmer-shadow-uncovering-a-targeted-cyber-espionage-campaign-against-cambodian-military-intelligence-subhajeet-singha/1153)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/khmer-shadow-uncovering-a-targeted-cyber-espionage-campaign-against-cambodian-military-intelligence-subhajeet-singha/1153 "2026-10-07T08:51:02Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Subhajeet Singha Abstract Acronis Threat Research Unit uncovered a new APT group, tracked as Khmer Shadow, behind two targeted c… --- ## [Tracking Information Leakers — Csaba Barta](https://discourse.ossbase.org/t/tracking-information-leakers-csaba-barta/1152)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/tracking-information-leakers-csaba-barta/1152 "2026-10-07T08:51:01Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Csaba Barta Abstract Information leakage often involves multiple actors and sources, typically requiring only simple “hacking” t… --- ## [MAD data science for practical C2 detection - the workshop — David Szili, Eva Szilagyi](https://discourse.ossbase.org/t/mad-data-science-for-practical-c2-detection-the-workshop-david-szili-eva-szilagyi/1151)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/mad-data-science-for-practical-c2-detection-the-workshop-david-szili-eva-szilagyi/1151 "2026-10-07T08:50:59Z")
Join us at hack.lu 2026 — Info & Registration Duration: 180 min Type: Training (long) Speakers: David Szili, Eva Szilagyi Abstract Are you tired of single-threaded, unoptimized, PoC code that does not scale in re… --- ## [iOS analysis using the Sysdiagnose analysis framework workshop - advanced session — Christophe Vandeplas, David Durvaux](https://discourse.ossbase.org/t/ios-analysis-using-the-sysdiagnose-analysis-framework-workshop-advanced-session-christophe-vandeplas-david-durvaux/1150)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/ios-analysis-using-the-sysdiagnose-analysis-framework-workshop-advanced-session-christophe-vandeplas-david-durvaux/1150 "2026-10-07T08:50:58Z")
Join us at hack.lu 2026 — Info & Registration Duration: 120 min Type: Training Speakers: Christophe Vandeplas, David Durvaux Abstract This is the second part, or deep dive, of the Sysdiagnose Analysis Framework W… --- ## [Ai-connector: how to connect your local LLM to MISP - a new standard AI MISP module — Aaron Kaplan](https://discourse.ossbase.org/t/ai-connector-how-to-connect-your-local-llm-to-misp-a-new-standard-ai-misp-module-aaron-kaplan/1149)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/ai-connector-how-to-connect-your-local-llm-to-misp-a-new-standard-ai-misp-module-aaron-kaplan/1149 "2026-10-07T08:50:56Z")
Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Aaron Kaplan Abstract LLMs are great for specific tasks in understanding (unstructured or even semi-structured) CTI reports. … --- ## [Mastering Bash for Hackers: Extreme Command-Line Power — Kirils Solovjovs](https://discourse.ossbase.org/t/mastering-bash-for-hackers-extreme-command-line-power-kirils-solovjovs/1148)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/mastering-bash-for-hackers-extreme-command-line-power-kirils-solovjovs/1148 "2026-10-07T08:50:54Z")
Join us at hack.lu 2026 — Info & Registration Duration: 180 min Type: Training (long) Speakers: Kirils Solovjovs Abstract Bash isn’t just an interface to your daily laptop - it’s a weapon. In this hands-on traini… --- ## [Ctrl Alt Compete — Stijn Tomme](https://discourse.ossbase.org/t/ctrl-alt-compete-stijn-tomme/1147)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/ctrl-alt-compete-stijn-tomme/1147 "2026-10-07T08:50:52Z")
Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Stijn Tomme Abstract In a series of technical missions that blend cybersecurity, problem-solving and practical IT skills. Pa… --- ## [Hunting requires a bit of luck — Nicolas DIAZ, Félix Aimé](https://discourse.ossbase.org/t/hunting-requires-a-bit-of-luck-nicolas-diaz-felix-aime/1146)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/hunting-requires-a-bit-of-luck-nicolas-diaz-felix-aime/1146 "2026-10-07T08:50:51Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Nicolas DIAZ, Félix Aimé Abstract Behind the facade of modern Content Delivery Networks (CDNs) like Cloudflare, malicious threat… --- ## [Detecting Linux rootkits: Know where to look in user-space — Hilko Bengen](https://discourse.ossbase.org/t/detecting-linux-rootkits-know-where-to-look-in-user-space-hilko-bengen/1145)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/detecting-linux-rootkits-know-where-to-look-in-user-space-hilko-bengen/1145 "2026-10-07T08:50:49Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Hilko Bengen Abstract Linux rootkits rely on a handful of techniques to hide malicious code. There’s nothing magic that can’t be… --- ## [Flowintel v4.0 - MISP can you hear me ? — Cruciani David](https://discourse.ossbase.org/t/flowintel-v4-0-misp-can-you-hear-me-cruciani-david/1144)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/flowintel-v4-0-misp-can-you-hear-me-cruciani-david/1144 "2026-10-07T08:50:47Z")
Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Cruciani David Abstract Flowintel is a case management platform designed for security analysts, with a particular focus on t… --- ## [Detection Engineering with Sigma — Thomas Patzke](https://discourse.ossbase.org/t/detection-engineering-with-sigma-thomas-patzke/648)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/detection-engineering-with-sigma-thomas-patzke/648 "2026-10-07T08:50:46Z")
Join us at hack.lu 2026 — Info & Registration Duration: 180 min Type: Training (long) Speakers: Thomas Patzke Abstract Sigma is an open and generic format to share log detection signatures. In this hands-on works… --- ## [The Panopticon Paradox: Cybersecurity in the Digital Age of AI-Accelerated Mass Surveillance — Thomas Drake](https://discourse.ossbase.org/t/the-panopticon-paradox-cybersecurity-in-the-digital-age-of-ai-accelerated-mass-surveillance-thomas-drake/1143)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/the-panopticon-paradox-cybersecurity-in-the-digital-age-of-ai-accelerated-mass-surveillance-thomas-drake/1143 "2026-10-07T08:50:44Z")
Join us at hack.lu 2026 — Info & Registration Duration: 60 min Type: Keynote Speakers: Thomas Drake Abstract AI has industrialized both cyberattack and defense, while the same monitoring tools meant to protect us… --- ## [Enhanced Web Fuzzing - Improving your wordlists with tooling and methodology — Vincent Herbulot](https://discourse.ossbase.org/t/enhanced-web-fuzzing-improving-your-wordlists-with-tooling-and-methodology-vincent-herbulot/1142)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/enhanced-web-fuzzing-improving-your-wordlists-with-tooling-and-methodology-vincent-herbulot/1142 "2026-10-07T08:50:42Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Vincent Herbulot Abstract URL fuzzing is a critical step in penetration testing, yet its effectiveness often hinges on the quali… --- ## [MISP Workbench: Hands-on threat intel platform workshop — Luciano Righetti](https://discourse.ossbase.org/t/misp-workbench-hands-on-threat-intel-platform-workshop-luciano-righetti/1141)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/misp-workbench-hands-on-threat-intel-platform-workshop-luciano-righetti/1141 "2026-10-07T08:50:40Z")
Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Luciano Righetti Abstract A hands-on workshop introducing MISP Workbench, a modern threat intelligence platform built for MI… --- ## [Project Rudzik - LLM assisted vulnerability hunting in open source projects — Jeroen Pinoy](https://discourse.ossbase.org/t/project-rudzik-llm-assisted-vulnerability-hunting-in-open-source-projects-jeroen-pinoy/1140)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/project-rudzik-llm-assisted-vulnerability-hunting-in-open-source-projects-jeroen-pinoy/1140 "2026-10-07T08:50:38Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Jeroen Pinoy Abstract Securing core open source projects is important for obvious reasons. AI / LLMs are another potential opti… --- ## [From the Rebellious Cities: Anatomy of a State-Aligned Espionage Campaign — Eliad Kimhy](https://discourse.ossbase.org/t/from-the-rebellious-cities-anatomy-of-a-state-aligned-espionage-campaign-eliad-kimhy/1139)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/from-the-rebellious-cities-anatomy-of-a-state-aligned-espionage-campaign-eliad-kimhy/1139 "2026-10-07T08:50:37Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Eliad Kimhy Abstract When protesters take to the streets, someone is always watching. CRESCENTHARVEST is a cyberespionage campai… --- ## [Poisoned at the Source: Hacking the Software Supply Chain in Your CI/CD Pipeline — Daniel Schwendner](https://discourse.ossbase.org/t/poisoned-at-the-source-hacking-the-software-supply-chain-in-your-ci-cd-pipeline-daniel-schwendner/1138)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/poisoned-at-the-source-hacking-the-software-supply-chain-in-your-ci-cd-pipeline-daniel-schwendner/1138 "2026-10-07T08:50:35Z")
Join us at hack.lu 2026 — Info & Registration Duration: 180 min Type: Training (long) Speakers: Daniel Schwendner Abstract Last year’s CI/CD attacks didn’t come through the front door, they came pre-installed. In… --- ## [GoaTracer: A Hybrid Dynamic Analysis Platform — Pierre MARTY, Fabrice Sabatier, ROYER](https://discourse.ossbase.org/t/goatracer-a-hybrid-dynamic-analysis-platform-pierre-marty-fabrice-sabatier-royer/1137)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/goatracer-a-hybrid-dynamic-analysis-platform-pierre-marty-fabrice-sabatier-royer/1137 "2026-10-07T08:50:33Z")
Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Pierre MARTY, Fabrice Sabatier, ROYER Abstract Modern malware increasingly relies on packing, process injection, self-modifying … --- ## [Hack your brain — Pauline Bourmeau (Cookie)](https://discourse.ossbase.org/t/hack-your-brain-pauline-bourmeau-cookie/704)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 9:14am UTC](https://discourse.ossbase.org/t/hack-your-brain-pauline-bourmeau-cookie/704 "2025-10-31T09:14:29Z")
Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: Pauline Bourmeau (Cookie) Abstract If you are done hearing about focus on one side and productivity on the other, you are no… --- ## [How to better identify (weaponized) file formats with ftguess — Philippe Lagadec](https://discourse.ossbase.org/t/how-to-better-identify-weaponized-file-formats-with-ftguess-philippe-lagadec/683)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 2\ **Last updated:** [October 28, 2025, 9:40am UTC](https://discourse.ossbase.org/t/how-to-better-identify-weaponized-file-formats-with-ftguess-philippe-lagadec/683 "2025-10-28T09:40:42Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Philippe Lagadec Abstract Ftguess is an open-source tool designed to identify file formats in a more precise and robust way than… --- ## [CLI ambush — William Robinet](https://discourse.ossbase.org/t/cli-ambush-william-robinet/619)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 28, 2025, 9:25am UTC](https://discourse.ossbase.org/t/cli-ambush-william-robinet/619 "2025-10-28T09:25:12Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: William Robinet Abstract In this talk, I’ll present how I discovered a vulnerability common to various TLS/SSL cryptographic too… --- ## [DCOM Turns 20: Revisiting a Legacy Interface in the Modern Threatscape — Julien Bedel](https://discourse.ossbase.org/t/dcom-turns-20-revisiting-a-legacy-interface-in-the-modern-threatscape-julien-bedel/628)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:39pm UTC](https://discourse.ossbase.org/t/dcom-turns-20-revisiting-a-legacy-interface-in-the-modern-threatscape-julien-bedel/628 "2025-10-24T14:39:51Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Julien Bedel Abstract Part of Windows operating system for over 20 years, DCOM (Distributed Component Object Model) has received… --- ## [Automotive Security Analyzer for Exploitability Risks: An Automated and Attack Graph-Based Evaluation of On-Board Networks — Martin Salfer](https://discourse.ossbase.org/t/automotive-security-analyzer-for-exploitability-risks-an-automated-and-attack-graph-based-evaluation-of-on-board-networks-martin-salfer/672)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:32pm UTC](https://discourse.ossbase.org/t/automotive-security-analyzer-for-exploitability-risks-an-automated-and-attack-graph-based-evaluation-of-on-board-networks-martin-salfer/672 "2025-10-24T14:32:13Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Martin Salfer Abstract Our lives depend on automotive cybersecurity, protecting us inside and near vehicles. If vehicles go rogu… --- ## [Exploiting Legit APIs for Covert C2: A New Perspective on Cloud-based Malware Operations — cocomelonc](https://discourse.ossbase.org/t/exploiting-legit-apis-for-covert-c2-a-new-perspective-on-cloud-based-malware-operations-cocomelonc/695)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:12pm UTC](https://discourse.ossbase.org/t/exploiting-legit-apis-for-covert-c2-a-new-perspective-on-cloud-based-malware-operations-cocomelonc/695 "2025-10-24T14:12:18Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: cocomelonc Abstract As modern security defenses evolve, attackers continue to leverage legitimate cloud services for command-and… [Previous page](https://discourse.ossbase.org/c/hack-lu/15.md?page=1) [Next page](https://discourse.ossbase.org/c/hack-lu/15.md?page=3)