# 2025 talks / workshops **URL:** https://discourse.ossbase.org/c/hack-lu/2025-talks-workshops/16.md [Latest](https://discourse.ossbase.org/latest.md) · [Categories](https://discourse.ossbase.org/categories.md) · [Tags](https://discourse.ossbase.org/tags.md) --- ## [About the 2025 talks / workshops category](https://discourse.ossbase.org/t/about-the-2025-talks-workshops-category/125)

**Author:** [@rommelfs-gh](https://discourse.ossbase.org/u/rommelfs-gh)\ **Replies:** 0

--- ## [Soldering Workshop - Learn by doing — Bernard Sadaka](https://discourse.ossbase.org/t/soldering-workshop-learn-by-doing-bernard-sadaka/1218)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/soldering-workshop-learn-by-doing-bernard-sadaka/1218 "2026-10-07T08:52:58Z")

Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Bernard Sadaka Abstract As part of our stand/village at hack.lu 2026, syn2cat would like to offer the opportunity for partic… --- ## [HHAMMERRing the Noise: AI-Agentic Threat Hunting with Suricata and the Power of EVE Metadata — Peter Manev, Eric Leblond](https://discourse.ossbase.org/t/hhammerring-the-noise-ai-agentic-threat-hunting-with-suricata-and-the-power-of-eve-metadata-peter-manev-eric-leblond/1217)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/hhammerring-the-noise-ai-agentic-threat-hunting-with-suricata-and-the-power-of-eve-metadata-peter-manev-eric-leblond/1217 "2026-10-07T08:52:57Z")

Join us at hack.lu 2026 — Info & Registration Duration: 120 min Type: Training Speakers: Peter Manev, Eric Leblond Abstract HHAMMERRing the Noise: AI-Agentic Threat Hunting with Suricata and the Power of EVE Meta… --- ## [Social Event & Call for Failures & PowerPoint Karaoke](https://discourse.ossbase.org/t/social-event-call-for-failures-powerpoint-karaoke/1216)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/social-event-call-for-failures-powerpoint-karaoke/1216 "2026-10-07T08:52:55Z")

Join us at hack.lu 2026 — Info & Registration Duration: 180 min Type: Training (long) Abstract Combined Social Event & Call for Failures & PowerPoint Karaoke Description Combined Social Event & Call for Failures &… --- ## [In bed with Qubes OS, hands-on workshop — William Robinet](https://discourse.ossbase.org/t/in-bed-with-qubes-os-hands-on-workshop-william-robinet/1215)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/in-bed-with-qubes-os-hands-on-workshop-william-robinet/1215 "2026-10-07T08:52:54Z")

Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: William Robinet Abstract During this session, we’ll explore various aspects of Qubes OS through demonstrations, hands-on lab… --- ## [Hack.lu Hackathon](https://discourse.ossbase.org/t/hack-lu-hackathon/1214)

Join us at hack.lu 2026 — Info & Registration Duration: 180 min Type: Training (long) Abstract Pizza & Open Source Hacking Description Pizza & Open Source Hacking View on pretalx --- ## [Zero-Knowledge cracking of a 1983 Apple II Hardware Copy Protection — Inbar Raz](https://discourse.ossbase.org/t/zero-knowledge-cracking-of-a-1983-apple-ii-hardware-copy-protection-inbar-raz/1213)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/zero-knowledge-cracking-of-a-1983-apple-ii-hardware-copy-protection-inbar-raz/1213 "2026-10-07T08:52:51Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Inbar Raz Abstract I have cracked HUNDREDS of copy-protected games and other software in my youth, but all of it was on the IBM … --- ## [Glucose in the Air: Wireless Medical IoT Without a Trust Anchor — Mohamed Ouad, Bartek Górkiewicz](https://discourse.ossbase.org/t/glucose-in-the-air-wireless-medical-iot-without-a-trust-anchor-mohamed-ouad-bartek-gorkiewicz/1212)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/glucose-in-the-air-wireless-medical-iot-without-a-trust-anchor-mohamed-ouad-bartek-gorkiewicz/1212 "2026-10-07T08:52:49Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Mohamed Ouad, Bartek Górkiewicz Abstract Continuous glucose monitors (CGMs) stream health information over Bluetooth Low Energy … --- ## [Applied Transformer NLP for Cybersecurity — Pauline Bourmeau (Cookie)](https://discourse.ossbase.org/t/applied-transformer-nlp-for-cybersecurity-pauline-bourmeau-cookie/1211)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/applied-transformer-nlp-for-cybersecurity-pauline-bourmeau-cookie/1211 "2026-10-07T08:52:47Z")

Join us at hack.lu 2026 — Info & Registration Duration: 120 min Type: Training Speakers: Pauline Bourmeau (Cookie) Abstract A hands-on two-hour workshop covering applied transformer-based NLP for cybersecurity us… --- ## [BTR Reforged: Weaponizing Defender's Remediation Driver as a Kernel Operation Primitive — Jiří Vinopal](https://discourse.ossbase.org/t/btr-reforged-weaponizing-defenders-remediation-driver-as-a-kernel-operation-primitive-jiri-vinopal/1210)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/btr-reforged-weaponizing-defenders-remediation-driver-as-a-kernel-operation-primitive-jiri-vinopal/1210 "2026-10-07T08:52:46Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Jiří Vinopal Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? Wha… --- ## [Analyzing Android Phones at Scale — Anthony](https://discourse.ossbase.org/t/analyzing-android-phones-at-scale-anthony/1209)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/analyzing-android-phones-at-scale-anthony/1209 "2026-10-07T08:52:44Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Anthony Abstract Mobile devices have become the primary targets for highly sophisticated, targeted spyware and state-sponsored s… --- ## [Accelerate your reverse engineering process using SightHouse — Sami Babigeon](https://discourse.ossbase.org/t/accelerate-your-reverse-engineering-process-using-sighthouse-sami-babigeon/1208)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/accelerate-your-reverse-engineering-process-using-sighthouse-sami-babigeon/1208 "2026-10-07T08:52:42Z")

Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Sami Babigeon Abstract Reverse engineers frequently encounter firmware or large binaries containing a mixture of proprietary… --- ## [C2 Evolution From the Past to Tomorrow — Xavier Mertens](https://discourse.ossbase.org/t/c2-evolution-from-the-past-to-tomorrow-xavier-mertens/1207)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/c2-evolution-from-the-past-to-tomorrow-xavier-mertens/1207 "2026-10-07T08:52:41Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Xavier Mertens Abstract Since malware evolved with time, they established communications with a server to work smoothly. Most of… --- ## [Unintended Computations — Nicolas Seriot](https://discourse.ossbase.org/t/unintended-computations-nicolas-seriot/1206)

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Nicolas Seriot Abstract A printer language, a Jira rule, and Unicode transliteration are rarely treated as execution environment… --- ## [When Victims Become Infrastructure: Inside Ink Dragon’s Victim-Based Relay Network — Israel Gubi, Eli Smadja](https://discourse.ossbase.org/t/when-victims-become-infrastructure-inside-ink-dragon-s-victim-based-relay-network-israel-gubi-eli-smadja/1205)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/when-victims-become-infrastructure-inside-ink-dragon-s-victim-based-relay-network-israel-gubi-eli-smadja/1205 "2026-10-07T08:52:37Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Israel Gubi, Eli Smadja Abstract Some of the most effective malicious traffic is the traffic no one thinks to question. In the I… --- ## [Surveilling Politicians, Unmasking Influencers, Fake Likes and Dying Together — Dries Depoorter](https://discourse.ossbase.org/t/surveilling-politicians-unmasking-influencers-fake-likes-and-dying-together-dries-depoorter/1204)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/surveilling-politicians-unmasking-influencers-fake-likes-and-dying-together-dries-depoorter/1204 "2026-10-07T08:52:36Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Dries Depoorter Abstract This talk takes you inside the technical and creative process behind projects that have made internatio… --- ## [Unmasking the Facade: Stealthy EtherRAT Distribution via Impersonated Administrative Tools on GitHub — Wojciech Bohatyrewicz, Piotr Bienias](https://discourse.ossbase.org/t/unmasking-the-facade-stealthy-etherrat-distribution-via-impersonated-administrative-tools-on-github-wojciech-bohatyrewicz-piotr-bienias/1203)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/unmasking-the-facade-stealthy-etherrat-distribution-via-impersonated-administrative-tools-on-github-wojciech-bohatyrewicz-piotr-bienias/1203 "2026-10-07T08:52:34Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Wojciech Bohatyrewicz, Piotr Bienias Abstract In early 2026, Atos Threat Research Center (TRC) identified a sophisticated, high-… --- ## [ESC17: Using ADCS to Attack HTTPS-Enabled WSUS Clients — Alexander Neff](https://discourse.ossbase.org/t/esc17-using-adcs-to-attack-https-enabled-wsus-clients-alexander-neff/1202)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/esc17-using-adcs-to-attack-https-enabled-wsus-clients-alexander-neff/1202 "2026-10-07T08:52:33Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Alexander Neff Abstract The Active Directory Certificate Service (ADCS) has been studied extensively, which lead to an entire ca… --- ## [Bad out of Hell - FAT File System — Michael Hamm](https://discourse.ossbase.org/t/bad-out-of-hell-fat-file-system-michael-hamm/1201)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/bad-out-of-hell-fat-file-system-michael-hamm/1201 "2026-10-07T08:52:31Z")

Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Michael Hamm Abstract This training is about how to hide data on storage media, by abusing the file systems ‘defect cluster’… --- ## [BSimVis: Scaling Binary Similarity and Clustering with Ghidra — Thomas Caillet](https://discourse.ossbase.org/t/bsimvis-scaling-binary-similarity-and-clustering-with-ghidra-thomas-caillet/1200)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/bsimvis-scaling-binary-similarity-and-clustering-with-ghidra-thomas-caillet/1200 "2026-10-07T08:52:30Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Thomas Caillet Abstract When analyzing malware campaigns, firmware variants, or large binary datasets, analysts often face a wal… --- ## [Global Telemetry to Local Remediation: Operationalizing Threat Intelligence for the Underserved — Sebastian Wagner, Jon Flaherty](https://discourse.ossbase.org/t/global-telemetry-to-local-remediation-operationalizing-threat-intelligence-for-the-underserved-sebastian-wagner-jon-flaherty/1199)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 0\ **Last updated:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/global-telemetry-to-local-remediation-operationalizing-threat-intelligence-for-the-underserved-sebastian-wagner-jon-flaherty/1199 "2026-10-07T08:52:28Z")

Join us at hack.lu 2026 — Info & Registration Duration: 30 min Type: Talk Speakers: Sebastian Wagner, Jon Flaherty Abstract Across the world many organizations that communities depend on every day— such as school… --- ## [Hack your brain — Pauline Bourmeau (Cookie)](https://discourse.ossbase.org/t/hack-your-brain-pauline-bourmeau-cookie/704)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 9:14am UTC](https://discourse.ossbase.org/t/hack-your-brain-pauline-bourmeau-cookie/704 "2025-10-31T09:14:29Z")

Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: Pauline Bourmeau (Cookie) Abstract If you are done hearing about focus on one side and productivity on the other, you are no… --- ## [How to better identify (weaponized) file formats with ftguess — Philippe Lagadec](https://discourse.ossbase.org/t/how-to-better-identify-weaponized-file-formats-with-ftguess-philippe-lagadec/683)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 2\ **Last updated:** [October 28, 2025, 9:40am UTC](https://discourse.ossbase.org/t/how-to-better-identify-weaponized-file-formats-with-ftguess-philippe-lagadec/683 "2025-10-28T09:40:42Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Philippe Lagadec Abstract Ftguess is an open-source tool designed to identify file formats in a more precise and robust way than… --- ## [CLI ambush — William Robinet](https://discourse.ossbase.org/t/cli-ambush-william-robinet/619)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 28, 2025, 9:25am UTC](https://discourse.ossbase.org/t/cli-ambush-william-robinet/619 "2025-10-28T09:25:12Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: William Robinet Abstract In this talk, I’ll present how I discovered a vulnerability common to various TLS/SSL cryptographic too… --- ## [DCOM Turns 20: Revisiting a Legacy Interface in the Modern Threatscape — Julien Bedel](https://discourse.ossbase.org/t/dcom-turns-20-revisiting-a-legacy-interface-in-the-modern-threatscape-julien-bedel/628)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:39pm UTC](https://discourse.ossbase.org/t/dcom-turns-20-revisiting-a-legacy-interface-in-the-modern-threatscape-julien-bedel/628 "2025-10-24T14:39:51Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Julien Bedel Abstract Part of Windows operating system for over 20 years, DCOM (Distributed Component Object Model) has received… --- ## [Automotive Security Analyzer for Exploitability Risks: An Automated and Attack Graph-Based Evaluation of On-Board Networks — Martin Salfer](https://discourse.ossbase.org/t/automotive-security-analyzer-for-exploitability-risks-an-automated-and-attack-graph-based-evaluation-of-on-board-networks-martin-salfer/672)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:32pm UTC](https://discourse.ossbase.org/t/automotive-security-analyzer-for-exploitability-risks-an-automated-and-attack-graph-based-evaluation-of-on-board-networks-martin-salfer/672 "2025-10-24T14:32:13Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Martin Salfer Abstract Our lives depend on automotive cybersecurity, protecting us inside and near vehicles. If vehicles go rogu… --- ## [Exploiting Legit APIs for Covert C2: A New Perspective on Cloud-based Malware Operations — cocomelonc](https://discourse.ossbase.org/t/exploiting-legit-apis-for-covert-c2-a-new-perspective-on-cloud-based-malware-operations-cocomelonc/695)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:12pm UTC](https://discourse.ossbase.org/t/exploiting-legit-apis-for-covert-c2-a-new-perspective-on-cloud-based-malware-operations-cocomelonc/695 "2025-10-24T14:12:18Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: cocomelonc Abstract As modern security defenses evolve, attackers continue to leverage legitimate cloud services for command-and… --- ## [Lethal Language Models: From Bit Flip to RCE in Ollama — Paul Gerste](https://discourse.ossbase.org/t/lethal-language-models-from-bit-flip-to-rce-in-ollama-paul-gerste/621)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:11pm UTC](https://discourse.ossbase.org/t/lethal-language-models-from-bit-flip-to-rce-in-ollama-paul-gerste/621 "2025-10-24T14:11:38Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Paul Gerste Abstract AI and LLMs are everywhere, but how are they actually implemented? In this session, we will take a detailed… --- ## [Russian-speaking underground - changes in the risks, attack surface and modus operandi — Vladimir Kropotov](https://discourse.ossbase.org/t/russian-speaking-underground-changes-in-the-risks-attack-surface-and-modus-operandi-vladimir-kropotov/649)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 1:18pm UTC](https://discourse.ossbase.org/t/russian-speaking-underground-changes-in-the-risks-attack-surface-and-modus-operandi-vladimir-kropotov/649 "2025-10-24T13:18:36Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Vladimir Kropotov Abstract Criminal business processes are significantly reshaped in recent years due to appearance and accessib… --- ## [From YAML to Root: CI/CD Pipeline Attacks and Countermeasures — Hugo](https://discourse.ossbase.org/t/from-yaml-to-root-ci-cd-pipeline-attacks-and-countermeasures-hugo/637)

**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 1:15pm UTC](https://discourse.ossbase.org/t/from-yaml-to-root-ci-cd-pipeline-attacks-and-countermeasures-hugo/637 "2025-10-24T13:15:28Z")

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Hugo Abstract As CI/CD pipelines become integral to modern software development through systems like Azure DevOps or GitHub Acti… [Next page](https://discourse.ossbase.org/c/hack-lu/2025-talks-workshops/16.md?page=1)