# 2025 talks / workshops

**URL:** https://discourse.ossbase.org/c/hack-lu/2025-talks-workshops/16.md?page=1

[Latest](https://discourse.ossbase.org/latest.md) · [Categories](https://discourse.ossbase.org/categories.md) · [Tags](https://discourse.ossbase.org/tags.md)

**Page:** 2

---

## [Palo Alto GlobalProtect : Remote Full Compromise Exploit Chain — Maxime Escourbiac](https://discourse.ossbase.org/t/palo-alto-globalprotect-remote-full-compromise-exploit-chain-maxime-escourbiac/694)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 11:58am UTC](https://discourse.ossbase.org/t/palo-alto-globalprotect-remote-full-compromise-exploit-chain-maxime-escourbiac/694 "2025-10-24T11:58:45Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Maxime Escourbiac Abstract This session provides an in-depth analysis of multiple critical vulnerabilities discovered by Micheli…

---

## [Breaking Android IPC: A Deep Dive into AIDL Fuzzing — Rajanish Pathak](https://discourse.ossbase.org/t/breaking-android-ipc-a-deep-dive-into-aidl-fuzzing-rajanish-pathak/664)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 9:39am UTC](https://discourse.ossbase.org/t/breaking-android-ipc-a-deep-dive-into-aidl-fuzzing-rajanish-pathak/664 "2025-10-24T09:39:24Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Rajanish Pathak Abstract In this talk, we’ll deep dive inro fuzzing Android’s IPC mechanisms, focusing on the AIDL fuzzing in pa…

---

## [Practical intro to deeplearning: chihuahuas vs muffins — Pauline Bourmeau (Cookie), William Robinet](https://discourse.ossbase.org/t/practical-intro-to-deeplearning-chihuahuas-vs-muffins-pauline-bourmeau-cookie-william-robinet/676)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 8:56am UTC](https://discourse.ossbase.org/t/practical-intro-to-deeplearning-chihuahuas-vs-muffins-pauline-bourmeau-cookie-william-robinet/676 "2025-10-24T08:56:28Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: Pauline Bourmeau (Cookie), William Robinet Abstract Once upon a time, an algorithm’s goal was to make a distinction between …

---

## [Livewire : remote command execution through unmarshalling — Rémi Matasse (@\_remsio\_), Pierre Martin (@\_Worty), Pierre MARTIN](https://discourse.ossbase.org/t/livewire-remote-command-execution-through-unmarshalling-remi-matasse-remsio-pierre-martin-worty-pierre-martin/644)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 6:14am UTC](https://discourse.ossbase.org/t/livewire-remote-command-execution-through-unmarshalling-remi-matasse-remsio-pierre-martin-worty-pierre-martin/644 "2025-10-24T06:14:04Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Rémi Matasse (@remsio), Pierre Martin (@\_Worty), Pierre MARTIN Abstract Livewire is a full-stack framework for Laravel that stre…

---

## [2038 is gonna be epoch! — Pedro Umbelino, Trey Darley](https://discourse.ossbase.org/t/2038-is-gonna-be-epoch-pedro-umbelino-trey-darley/679)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 6:12am UTC](https://discourse.ossbase.org/t/2038-is-gonna-be-epoch-pedro-umbelino-trey-darley/679 "2025-10-24T06:12:44Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Pedro Umbelino, Trey Darley Abstract 19 January 2038 at 03:14:07 UTC implementations relying on 32-bit signed integer representa…

---

## [Wyse Management Subversion : Taking over Dell's Wyse Management Suite — Alain Mowat](https://discourse.ossbase.org/t/wyse-management-subversion-taking-over-dells-wyse-management-suite-alain-mowat/647)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 6:11am UTC](https://discourse.ossbase.org/t/wyse-management-subversion-taking-over-dells-wyse-management-suite-alain-mowat/647 "2025-10-24T06:11:48Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Alain Mowat Abstract By it’s own definition, Dell’s Wyse Management Suite is “a secure hybrid cloud management solution for Dell…

---

## [What's New in Suricata 8: Enhanced Detection and Performance — Eric Leblond, Peter Manev](https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 6:11am UTC](https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622 "2025-10-24T06:11:13Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Eric Leblond, Peter Manev Abstract Suricata is a widely-used high performance, open source network analysis and threat detection…

---

## [Hacking for hoodies: MISP edition — Jeroen Pinoy](https://discourse.ossbase.org/t/hacking-for-hoodies-misp-edition-jeroen-pinoy/635)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 24, 2025, 6:07am UTC](https://discourse.ossbase.org/t/hacking-for-hoodies-misp-edition-jeroen-pinoy/635 "2025-10-24T06:07:14Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Jeroen Pinoy Abstract Cyber threat information sharing continues to be important. The tools we use for this should be regularly …

---

## [Building a pipeline to analyse iOS devices at scale — David Durvaux, Christophe Vandeplas](https://discourse.ossbase.org/t/building-a-pipeline-to-analyse-ios-devices-at-scale-david-durvaux-christophe-vandeplas/640)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 4:28pm UTC](https://discourse.ossbase.org/t/building-a-pipeline-to-analyse-ios-devices-at-scale-david-durvaux-christophe-vandeplas/640 "2025-10-23T16:28:19Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: David Durvaux, Christophe Vandeplas Abstract Building a pipeline to analyse iOS devices at scale Overview and Abstract This talk…

---

## [My other ClassLoader is your ClassLoader: Creating evil twin instances of a class — Dimitrios Valsamaras](https://discourse.ossbase.org/t/my-other-classloader-is-your-classloader-creating-evil-twin-instances-of-a-class-dimitrios-valsamaras/638)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 4:27pm UTC](https://discourse.ossbase.org/t/my-other-classloader-is-your-classloader-creating-evil-twin-instances-of-a-class-dimitrios-valsamaras/638 "2025-10-23T16:27:31Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Dimitrios Valsamaras Abstract The class loader is a fundamental component of the Java Virtual Machine, responsible for dynamical…

---

## [Field guide to physical attacks against full-disk encryption — Edouard D'hoedt, Hayk Gevorgyan](https://discourse.ossbase.org/t/field-guide-to-physical-attacks-against-full-disk-encryption-edouard-dhoedt-hayk-gevorgyan/660)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 4:26pm UTC](https://discourse.ossbase.org/t/field-guide-to-physical-attacks-against-full-disk-encryption-edouard-dhoedt-hayk-gevorgyan/660 "2025-10-23T16:26:51Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Edouard D’hoedt, Hayk Gevorgyan Abstract How safe is your “encrypted” laptop when someone walks off with it? Full-disk encrypti…

---

## [One day at the Internet Storm Center — Xavier Mertens](https://discourse.ossbase.org/t/one-day-at-the-internet-storm-center-xavier-mertens/636)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 12:06pm UTC](https://discourse.ossbase.org/t/one-day-at-the-internet-storm-center-xavier-mertens/636 "2025-10-23T12:06:36Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Xavier Mertens Abstract Born in 2001, the Internet Storm Center (or ISC) is a volunteer-driven threat-monitoring and early-warni…

---

## [Attacking The Developer Environment Through Drive-by Localhost Attacks — Joseph Beeton](https://discourse.ossbase.org/t/attacking-the-developer-environment-through-drive-by-localhost-attacks-joseph-beeton/673)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 12:05pm UTC](https://discourse.ossbase.org/t/attacking-the-developer-environment-through-drive-by-localhost-attacks-joseph-beeton/673 "2025-10-23T12:05:49Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Joseph Beeton Abstract There is a widespread belief that services that are only bound to localhost are not accessible from the o…

---

## [Instrumenting software builds to detect stealth backdoors and other curiosities — Hilko Bengen](https://discourse.ossbase.org/t/instrumenting-software-builds-to-detect-stealth-backdoors-and-other-curiosities-hilko-bengen/685)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 12:04pm UTC](https://discourse.ossbase.org/t/instrumenting-software-builds-to-detect-stealth-backdoors-and-other-curiosities-hilko-bengen/685 "2025-10-23T12:04:59Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Hilko Bengen Abstract The backdoor that had been added to xz-utils by an unknown threat actor (CVE-2024-3094) may be seen as a w…

---

## [Compromising Threat Actor Communications — Ben (@polygonben)](https://discourse.ossbase.org/t/compromising-threat-actor-communications-ben-polygonben/705)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 12:03pm UTC](https://discourse.ossbase.org/t/compromising-threat-actor-communications-ben-polygonben/705 "2025-10-23T12:03:35Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Ben (@polygonben) Abstract This talk exposes how a simple OPSEC mistake—a threat actor testing malware on his own production sys…

---

## [Nightmare on NTLM street: Legacy’s Revenge — Marina Bochenkova](https://discourse.ossbase.org/t/nightmare-on-ntlm-street-legacy-s-revenge-marina-bochenkova/620)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 23, 2025, 12:02pm UTC](https://discourse.ossbase.org/t/nightmare-on-ntlm-street-legacy-s-revenge-marina-bochenkova/620 "2025-10-23T12:02:50Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Marina Bochenkova Abstract We know the world runs on legacy. We know it’s not supposed to. But when vendors or LinkedInfluencers…

---

## [In bed with Qubes OS - tips & tricks exchange party — William Robinet](https://discourse.ossbase.org/t/in-bed-with-qubes-os-tips-tricks-exchange-party-william-robinet/663)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 2\
**Last updated:** [October 23, 2025, 10:10am UTC](https://discourse.ossbase.org/t/in-bed-with-qubes-os-tips-tricks-exchange-party-william-robinet/663 "2025-10-23T10:10:45Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: William Robinet Abstract I’ve been using Qubes OS in my professional life since 2017 (version 3.2). With this workshop, I w…

---

## [Integrating Zeek With Third-Party Applications — Christian Kreibich](https://discourse.ossbase.org/t/integrating-zeek-with-third-party-applications-christian-kreibich/651)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 4:57pm UTC](https://discourse.ossbase.org/t/integrating-zeek-with-third-party-applications-christian-kreibich/651 "2025-10-22T16:57:00Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Christian Kreibich Abstract The Zeek network monitor offers a range of mechanisms to interact with it while up and running. Exam…

---

## [What Malware Leaves Behind: Analysing Forensic Traces of Ransomware — Ankshita Maunthrooa](https://discourse.ossbase.org/t/what-malware-leaves-behind-analysing-forensic-traces-of-ransomware-ankshita-maunthrooa/653)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 4:56pm UTC](https://discourse.ossbase.org/t/what-malware-leaves-behind-analysing-forensic-traces-of-ransomware-ankshita-maunthrooa/653 "2025-10-22T16:56:14Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Ankshita Maunthrooa Abstract This session explores the forensic remnants left behind by ransomware on an infected machine. Throu…

---

## [Security Monitoring and Response in Large Linux Environments — Hendrik Schmidt, Hilko Bengen](https://discourse.ossbase.org/t/security-monitoring-and-response-in-large-linux-environments-hendrik-schmidt-hilko-bengen/661)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 2:48pm UTC](https://discourse.ossbase.org/t/security-monitoring-and-response-in-large-linux-environments-hendrik-schmidt-hilko-bengen/661 "2025-10-22T14:48:30Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Hendrik Schmidt, Hilko Bengen Abstract This talk delves into strategies and practices for large-scale security monitoring of Lin…

---

## [Digic8 Oracle — laurent clevy](https://discourse.ossbase.org/t/digic8-oracle-laurent-clevy/618)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 2:47pm UTC](https://discourse.ossbase.org/t/digic8-oracle-laurent-clevy/618 "2025-10-22T14:47:34Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: laurent clevy Abstract Digic8 Oracle Decrypting camera updates without knowing neither the key, nor algorithms (at first) Since …

---

## [Open source is a virus — Philippe Ombredanne](https://discourse.ossbase.org/t/open-source-is-a-virus-philippe-ombredanne/669)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 2:35pm UTC](https://discourse.ossbase.org/t/open-source-is-a-virus-philippe-ombredanne/669 "2025-10-22T14:35:16Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Philippe Ombredanne Abstract Discover how we hacked YARA and built rules to effectively detect open source software sources and …

---

## [Smack my LLM up! — Jindrich Karasek](https://discourse.ossbase.org/t/smack-my-llm-up-jindrich-karasek/701)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 12:31pm UTC](https://discourse.ossbase.org/t/smack-my-llm-up-jindrich-karasek/701 "2025-10-22T12:31:30Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Jindrich Karasek Abstract This session dissects a real-world case study where an actor weaponized automation flaws in Meta’s LLM…

---

## [Silent Killers: Unmasking a Large-Scale Legacy Driver Exploitation Campaign — Jiří Vinopal](https://discourse.ossbase.org/t/silent-killers-unmasking-a-large-scale-legacy-driver-exploitation-campaign-jiri-vinopal/671)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 12:20pm UTC](https://discourse.ossbase.org/t/silent-killers-unmasking-a-large-scale-legacy-driver-exploitation-campaign-jiri-vinopal/671 "2025-10-22T12:20:27Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Jiří Vinopal Abstract What if your trusted security solutions could be silently disarmed without warning? What if a long-forgott…

---

## [Slipping Through the Cracks: How Malicious Emails Evade Detection — Elyssa Boulila](https://discourse.ossbase.org/t/slipping-through-the-cracks-how-malicious-emails-evade-detection-elyssa-boulila/624)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 12:17pm UTC](https://discourse.ossbase.org/t/slipping-through-the-cracks-how-malicious-emails-evade-detection-elyssa-boulila/624 "2025-10-22T12:17:27Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Elyssa Boulila Abstract Organizations increasingly adopt policies that encourage employees to report emails they perceive as pot…

---

## [Reversing a Pay Phone for Fun but No Profit — Inbar Raz](https://discourse.ossbase.org/t/reversing-a-pay-phone-for-fun-but-no-profit-inbar-raz/684)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 12:14pm UTC](https://discourse.ossbase.org/t/reversing-a-pay-phone-for-fun-but-no-profit-inbar-raz/684 "2025-10-22T12:14:41Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Inbar Raz Abstract The “Telecard” Israeli Payphones entered service in 1990, and at the height of their career there were 27,000…

---

## [Exploring Threats Leveraging Blockchains — Rascagneres Paul](https://discourse.ossbase.org/t/exploring-threats-leveraging-blockchains-rascagneres-paul/625)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 12:12pm UTC](https://discourse.ossbase.org/t/exploring-threats-leveraging-blockchains-rascagneres-paul/625 "2025-10-22T12:12:03Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Rascagneres Paul Abstract Why blockchain matters to Threat Intelligence? The presentation will try to reply to this question. Th…

---

## [A pragmatic approach to build a threat landscape — Thomas Patzke](https://discourse.ossbase.org/t/a-pragmatic-approach-to-build-a-threat-landscape-thomas-patzke/623)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 12:11pm UTC](https://discourse.ossbase.org/t/a-pragmatic-approach-to-build-a-threat-landscape-thomas-patzke/623 "2025-10-22T12:11:15Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Thomas Patzke Abstract Building an actionable organization-specific threat landscape for an organization is a challenging task. …

---

## [Back to basics - Exploring OpenSSH: hands-on workshop for beginners — William Robinet](https://discourse.ossbase.org/t/back-to-basics-exploring-openssh-hands-on-workshop-for-beginners-william-robinet/659)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 3\
**Last updated:** [October 22, 2025, 11:23am UTC](https://discourse.ossbase.org/t/back-to-basics-exploring-openssh-hands-on-workshop-for-beginners-william-robinet/659 "2025-10-22T11:23:03Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 120 min Type: Training Speakers: William Robinet Abstract This workshop is intended for novices who want to improve their practical knowledge and experience…

---

## [Threat detection engineering with Suricata — Eric Leblond, Peter Manev](https://discourse.ossbase.org/t/threat-detection-engineering-with-suricata-eric-leblond-peter-manev/699)

<div class="topic-metadata">

**Author:** [@system](https://discourse.ossbase.org/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2025, 9:51am UTC](https://discourse.ossbase.org/t/threat-detection-engineering-with-suricata-eric-leblond-peter-manev/699 "2025-10-22T09:51:09Z")

</div>

Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: Eric Leblond, Peter Manev Abstract This hands-on workshop provides an in-depth exploration of advanced techniques for maximi…

[Previous page](https://discourse.ossbase.org/c/hack-lu/2025-talks-workshops/16.md)

[Next page](https://discourse.ossbase.org/c/hack-lu/2025-talks-workshops/16.md?page=2)
