Cooper

534 talks · 2016–2025 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Uncovering CVE-2025-43928 In Law Enforcement Surveillance Systems - Tim Philipp Schäfers 2025
• Hack.lu 2023: ACME: Benefits Of An Internet Security Protocol In Your Network - Christophe Brocas 2023
• Hack.lu 2023: Are Leaked Credentials Dumps Used By Attackers? - Xavier Mertens 2023
• Hack.lu 2023: Avoiding The Basilisk's Fangs: State-of-the-art In AI LLM Detection - Jacob Torrey 2023
• HAck.lu 2023: Belgian Cyber Reserve Forces - Christophe Vandeplas 2023
• Hack.lu 2023: Building An Evil Phone Charging Station - Stef Van Dop and Tomás Philippart 2023
• Hack.lu 2023: Case Management by Cruciani 2023
• Hack.lu 2023: Cerebrate - Learning To Run - Andras Iklody 2023
• Hack.lu 2023: Cloaking Malicious Web Content Delivery by Jeroen Pinoy 2023
• Hack.lu 2023: Cobalt Striked? - Vincent Hinderer 2023
• Hack.lu 2023: CTI Is Dead, Long Live CTI! by David 2023
• Hack.lu 2023: Defeating VPN Always-On - Maxime Clementz 2023
• Hack.lu 2023: Deming - ISMS Open Source - Didier Barzin 2023
• Hack.lu 2023: DER Editing, Easy-Peasy With asn1template - William Robinet 2023
• Hack.lu 2023: Detecting VPNs/Proxies By Analyzing Their Attack Patterns Over Time by Emanuel Seemann 2023
• Hack.lu 2023: Do's And Don'ts In File Formats - Ange Albertini 2023
• Hack.lu 2023: Embedded Threats: A Deep Dive Into The ESIM World - Markus Vervier 2023
• Hack.lu 2023: Ensuring IoC Quality At CERT-FR by Victor Barrault 2023
• Hack.lu 2023: Exploring Data Collection, Analysis & Security - P. Ventuzelo & T. Laucournet 2023
• Hack.lu 2023: FOSStering An ISAC: Enabling A Community With Open-Source Tools by JJ Josing 2023
• Hack.lu 2023: GeoOpen And MMDB-Server: An Open Source Solution For IP Address Geoloc. by A. Dulaunoy 2023
• Hack.lu 2023: He Is Everywhere: A Tale Of Lazarus And His Family - JeongGak Lyu and @lazarusholic 2023
• Hack.lu 2023: How Digital Technologies Are Redefining Warfare And Why It Matters - Mauro Vignati 2023
• Hack.lu 2023: How We Build A Collaborative, Trustable, And Crowdsourced CTI - Matthieu Mazzolini 2023
• HAck.lu 2023: Identity In The Era Of Deepfakes, AI And Mass Biometrics Exposure - Vladimir Kropotov 2023
• Hack.lu 2023: Introduction To Cyberwarfare: Theory And Practice - Lukasz Olejnik 2023
• Hack.lu 2023: JTAN - Data Sharing Network - Paweł Pawliński and Alexandre Dulaunoy 2023
• Hack.lu 2023: Kunai: Your New Threat Hunting Tool For Linux by Quentin Jerome 2023
• Hack.lu 2023: Liberate The CSAM Hashsets! - Andras Iklody 2023
• Hack.lu 2023: Malware AV Evasion Tricks: Cryptography In Malware by Cocomelonc 2023
• Hack.lu 2023: MISP Updates by Andras Iklody 2023
• Hack.lu 2023: MISP ↔️ LLM : Automating Free Form CTI Reports - S. Mokkadem, A. Iklody and A. Kaplan 2023
• Hack.lu 2023: MISP42: Connecting CTI And SOC Teams - Remi Seguy 2023
• Hack.lu 2023: Modern IOCs Matching With Suricata - Eric Leblond and Peter Manev 2023
• Hack.lu 2023: Non Vulnerable Package Dependency Resolution - Philippe Ombredanne 2023
• Hack.lu 2023: Ongoing EvilEye Campaigns Targeting CCP Adversaries - Rascagneres Paul 2023
• Hack.lu 2023: Open Wounds: The Last 5 Years Have Left Bluetooth To Bleed - Xeno Kovah 2023
• Hack.lu 2023: Operation Duck Hunt: A Peak Behind The Curtain Of DuckTail - Pol Thill 2023
• Hack.lu 2023: Permissionless Universal Overlays - Dimitrios Valsamaras 2023
• Hack.lu 2023: Permissionless Universal Overlays - Dimitrios Valsamaras 2023
• Hack.lu 2023: PHP Filter Chains: How To Use It - Rémi Matasse (@_remsio_) 2023
• Hack.lu 2023: Pyrrha: Navigate Easily Into Your System Binaries - Eloïse Brocas 2023
• Hack.lu 2023: Raiders Of The Lost Arts - Stefan Hager 2023
• Hack.lu 2023: SBOMs: Are They A Threat Or A Menace? by Philippe Ombredanne 2023
• Hack.lu 2023: Sbud: Infovis In Infosec by Ange Albertini 2023
• Hack.lu 2023: Sigma Project News - Thomas Patzke 2023
• Hack.lu 2023: SLP DoS Amplification: Someone Is Having Fun - Pedro Umbelino 2023
• Hack.lu 2023: Supply Chain Resilience: Challenges & Solutions - Saâd Kadhi 2023
• Hack.lu 2023: Suricata Language Server - Eric Leblond 2023
• Hack.lu 2023: The Composition Analysis Of Binary Java, ELF, Go, And JavaScript Apps by P. Ombredanne 2023
• Hack.lu 2023: The Renaissance Of Cyber Physical Offensive Capabilities - Daniel Kapellmann Zafra 2023
• Hack.lu 2023: The Rise Of Malicious MSIX File - Rintaro Koike and Shogo Hayashi 2023
• Hack.lu 2023: TIDeMEC : A Detection Engineering Platform Homegrown At The EC - Amine Besson 2023
• Hack.lu 2023: Token Smart Contract Analyzer - Thierry Grandjean 2023
• Hack.lu 2023: Token Smart Contract Analyzer by Thierry Grandjean 2023
• Hack.lu 2023: Turbocharging IOC Validation: Become A More Efficient CTI Analyst - Arwa Alomari 2023
• Hack.lu 2023: Unraveling The Cyber Battle Between Ukraine And Russia- Ondrej Nekovar and Jan Pohl 2023
• Hack.lu 2023: Using Apple Sysdiagnose For Mobile Forensics & Integrity Checks - D Durvaux & A Kaplan 2023
• Hack.lu 2023: Using Bayesian Inference To Detect Cyber Attacks - Emanuel Seemann 2023
• Hack.lu 2023: Velocity Raptor: Accelerating Velociraptor Hunting With Tenzir - Matthias Vallentin 2023
• Hack.lu 2023: Why Does The CTI Industry Struggle With Communicating Uncertainties? by Ondra Rojcik 2023
• Hack.lu 2023: Wintermute: An LLM Pen-Testing Buddy - Aaron Kaplan 2023
• Hack.lu 2023: Yeti: Old Dog, New Tricks - Sébastien Larinier and Thomas Chopitea 2023
• Hack.lu 2023: You Can Learn Anything - Cookie 2023
• Ethical Internet Scanning In 2022 by Patrice Auffret 2022
• Webshells In 2022 by Paul Rascagneres 2022
• Hack.lu 2018 LT: Bettercrypto Is Not Dead - Aaron and David 2018
• Hack.lu 2018 LT: Don't Leave Parts Unknown: A Recipe For Ethical Documentation - Noah Berman 2018
• Hack.lu 2018 LT: GNUNet: You Broke The Internet? Let's Make A GNU One! - sva 2018
• Hack.lu 2018 LT: Junior CTF - Cryptax 2018
• Hack.lu 2018 LT: Karta - Fast Bin Diffing - Eyal 2018
• Hack.lu 2018 LT: Modify RO Data - Michael Hamm 2018
• Hack.lu 2018 LT: PKI Demo With Physical Locks - Gunstick 2018
• Hack.lu 2018 LT: Terms Of Service; Didn't Read - Piks3l 2018
• Hack.lu 2018 LT: Unicorn Stuff From Pastes - Sami 2018
• Hack.lu 2018 LT: War: DNS Resolution Path - Paul Vixie 2018
• Hack.lu 2018: 14 Easy Lessons For Thinking About Complex Adversarial Systems - Eleanor Saitta 2018
• Hack.lu 2018: Abusing Bash For Windows - Antoine Cervoise 2018
• Hack.lu 2018: Building With Privacy By Design - Naomi Freeman 2018
• Hack.lu 2018: Bypassing ISP And Enterprise Anti-DDoS With 90's Technology - Dennis Rand 2018
• Hack.lu 2018: CTF Prize Ceremony - Fluxfingers 2018
• Hack.lu 2018: Digital Safety For Politically Vulnerable Organizations - Matt "Mateo" Mitchell 2018
• Hack.lu 2018: Education And Communication - Ange Albertini 2018
• Hack.lu 2018: Finding The Best TI Provider For A Specific Purpose - A. Hickey and D. Roecher 2018
• Hack.lu 2018: How To Hack A Yacht - Swimming IoT - Stephan Gerling 2018
• Hack.lu 2018: How We Trained The Dragon^W Classified APKs Via ANNs - Roman Graf and Aaron Kaplan 2018
• Hack.lu 2018: Hypervisor-Level Debugger: Benefits And Challenges - Mathieu Tarral 2018
• Hack.lu 2018: IPC - The Broken Dream Of Inherent Security - Thanh Bui and Siddharth "Sid" Rao 2018
• Hack.lu 2018: Let Me Yara That For You! - Dan Demeter 2018
• Hack.lu 2018: Make ARM Shellcode Great Again - Saumil Udayan Shah 2018
• Hack.lu 2018: Mind The (Air)Gap - Erez Yalon and Pedro Umbelino 2018
• Hack.lu 2018: Modern Pentest Tricks For Faster, Wider, Greater Engagements - Thomas Debize 2018
• Hack.lu 2018: Not So Random - Guenaelle De Julis 2018
• Hack.lu 2018: Only An Electron Away From Code Execution - Silvia Väli 2018
• Hack.lu 2018: Practical And Affordable Side-Channel Attacks - Francois Durvaux 2018
• Hack.lu 2018: p≡p - Pretty Easy Privacy For Everyone! - Sva 2018
• Hack.lu 2018: Radical Insurance Groups And Ransomware. - E. Leverett and A. Gangwal 2018
• Hack.lu 2018: Real World: Threat Intelligence - Elle Armageddon 2018
• Hack.lu 2018: Risk Assessment Optimisation With MONARC - Fabien Mathey 2018
• Hack.lu 2018: Serial-Killer: Security Analysis Of Industrial Serial Device Servers - Florian Adamsky 2018
• Hack.lu 2018: Simple Analysis Using pDNS - Irena Damsky ft. A. Dulaunoy, A. Kaplan & P. Vixie 2018
• Hack.lu 2018: Take Your Path Normalization Off And Pop 0days Out! - Orange Tsai 2018
• Hack.lu 2018: The Path Towards Automated Heap Exploitation - Thaís Moreira Hamasaki 2018
• Hack.lu 2018: The Science Behind Social Engineering And An Effective Security Culture - E. Nicaise 2018
• Hack.lu 2018: The Snake Keeps Reinventing Itself - Jean-Ian Boutin and Matthieu Faou 2018
• Hack.lu 2018: Trojans In SS7: How They Bypass All Security Measures - Sergey Puzankov 2018
• Hack.lu 2018: What The Fax?! - Eyal Itkin and Yaniv Balmas 2018
• Hack.lu 2018: Worms That Turn: Nematodes And Neotodes - Matt Wixey 2018
• Hack.lu 2018:Improving Internet Security Through Cooperation: SIE Europe In 2018 - Paul Vixie 2018
• MISP Summit 2018: Building A Security Ecosystem With MISP And McAfee - Martin Ohl 2018
• MISP Summit 2018: Central Intelligence Vetting Platform - Raphael Otto and George Sedky 2018
• MISP Summit 2018: Cruising Ocean Threat Without Sinking Using TheHive, Cortex & MISP - Saâd Kadhi 2018
• MISP Summit 2018: Enrichment and Quality IoC Creation from OSINT - Rui Azevedo 2018
• MISP Summit 2018: From Twitter To MISP: A Way To Catch And Qualify IOCs - S. Larinier and A. Terrier 2018
• MISP Summit 2018: How to integrate MISP with local APT detection systems - Olivier Bertrand 2018
• MISP Summit 2018: Master Of Clusters - Andrea Garavaglia 2018
• MISP Summit 2018: MISP Project - MISP Team 2018
• MISP Summit 2018: Misp42splunk - Rémi Ségui 2018
• MISP Summit 2018: Quantitatively Compare APTs With MISP - E. Leverett and B. Stenning 2018
• Eth0:Winter 2017 CO2 -- Een Slaapverwekkend Verhaal door ECT 2017
• Eth0:Winter 2017 Machine Ethics door Matthijs Pontier 2017
• Eth0:Winter 2017 Makerspaces That Moved Or Will Soon Be Moving door de diverse hackerspaces 2017
• Eth0:Winter 2017 Network Hacking 101 pt 2 door BS 2017
• Eth0:Winter 2017 Opening / Welcome by FailBaitr 2017
• Eth0:Winter 2017 Organizing A 5000 People Hacker Event: SHA2017 door Attilla 2017
• Eth0:Winter 2017 Van Titanic Tot Hacking Team, We Leren Er Maar Weinig Van door Brenno de Winter 2017
• MISP Summit 2017 Barncat: Using MISP For Bulk Surveillance Of Malware by John Bambenek 2017
• MISP Summit 2017 MISP and open formats by Andras Iklody 2017
• MISP Summit 2017 MISP introduction and new features by Alexandre Dulaunoy 2017
• MISP Summit 2017 PyMISP and MISP Objects: a door to new opportunities by Raphael Vinot 2017
• MISP Summit 2017 TheHive and MISP by Saâd Kadhi 2017
• SHA2017 orga meet 1 4 2017 2017
• SHA2017 orga meet 28 1 2017 2017
• SHA2017 orga meet 29 4 2017 2017
• SHA2017 orga meet 3 6 2017 2017
• Hack.lu 2016 2016: The Infosec Crossroads by Saumil Shah 2016
• Hack.lu 2016 A Network of Sorrows: Small Adversaries and Small Allies by Quinn Norton 2016
• Hack.lu 2016 badGPO - Using GPOs for Persistence and Lateral Movement 2016
• Hack.lu 2016 Bootstrapping an Architectural Research Platform by Jacob I. Torrey 2016
• Hack.lu 2016 Bridging political gaps with code by Okhin 2016
• Hack.lu 2016 BtleJuice: the Bluetooth Smart Man In The Middle Framework by Damiel Cauquil 2016
• Hack.lu 2016 Credential Assessment: Mapping Privilege Escalation at Scale by Matt Weeks 2016
• Hack.lu 2016 CTF Prize Ceremony by Fluxfingers 2016
• Hack.lu 2016 Cyber Grand Shellphish: Shellphish and the DARPA Cyber Grand Challenge 2016
• Hack.lu 2016 Enhancing infrastructure cybersecurity in Europe by Rosella Mattioli 2016
• Hack.lu 2016 Exploit generation and JavaScript analysis automation with WinDBG 2016
• Hack.lu 2016 Exploiting and attacking seismological networks… remotely by James Jara 2016
• Hack.lu 2016 Exploiting new default accounts in SAP systems by Joris Van De Vis 2016
• Hack.lu 2016 Fraud detection and forensics on telco networks 2016
• Hack.lu 2016 Hadoop safari : Hunting for vulnerabilities by Mahdi Braik and Thomas Debize 2016
• Hack.lu 2016 House intercoms attacks: when frontdoors become backdoors by Sébastien Dudek 2016
• Hack.lu 2016 Interesting Malware - No, I’m not kidding... by Marion Marschalek 2016
• Hack.lu 2016 KillTheHashes 30 million Malware DNA profiling exercise by Luciano Martins 2016
• Hack.lu 2016 Lightning Talk - Cracking An Egg And Cooking The Chicken by Jacob Torrey 2016
• Hack.lu 2016 Lightning Talk - Metabrik Meets CVE-Search by GomoR 2016
• Hack.lu 2016 Lightning Talk - When Your Firewall Turns Against You by Rene Freingruber 2016
• Hack.lu 2016 Lightning Talk: 0Patch: Be Your Own Software Doctor by Mitja Kolsek 2016
• Hack.lu 2016 Lightning Talk: EmailMadeIn.lu by Martin Bosslet 2016
• Hack.lu 2016 Lightning Talk: Geeks Without Bounds by Chris Kebecka 2016
• Hack.lu 2016 Lightning Talk: Hardware Shredder by Stefan Chorus 2016
• Hack.lu 2016 Lightning Talk: Illusions And Reality Of CERT Business by Sascha Rommelfangen 2016
• Hack.lu 2016 Lightning Talk: iOS Forensics by Pasquale Stirparo 2016
• Hack.lu 2016 Lightning Talk: Lama Project by Valentin Giannini 2016
• Hack.lu 2016 Lightning Talk: Sisyphe, All IP Data In One Place by GomoR 2016
• Hack.lu 2016 Lightning Talk: Start-up Pitch: redowl.com by Peter Heim 2016
• Hack.lu 2016 Lightning Talk: Start-up Pitch: securityscorecard.io by Chris Meidinger 2016
• Hack.lu 2016 Machine Duping: Pwning Deep Learning Systems by Clarence Chio 2016
• Hack.lu 2016 Of Mice and Keyboards: On the Security of Modern Wireless Desktop Sets 2016
• Hack.lu 2016 Secrets in Soft Token: A security study of HID Global Soft Token by Mouad Abouhali 2016
• Hack.lu 2016 Stressed out? Denial of service attacks from the providers’ perspective 2016
• Hack.lu 2016 The Legend of Windows: A Link to the Hash by m4xk and sıx 2016
• Hack.lu 2016 The Metabrik Platform: Rapid Development of Reusable Security Tools by Patrice Auffret 2016
• Hack.lu 2016 Unveiling the attack chain of Russian-speaking cybercriminals 2016
• Hack.lu 2016 When Crypto Fails by Yaniv Balmas and Ben Herzog 2016
• Hack.lu 2016 Where should I host my malware? by Attila Marosi 2016
• Hack.lu 2016 WiFi Exploitation: How passive interception leads to active exploitation 2016
• Hack.lu 2016 Windows systems & code signing protection by Paul Rascagnères 2016
• MISP Summit 2016: A collaborative approach to taxonomies with PyTaxonomies by Raphael Vinot, CIRCL 2016
• MISP Summit 2016: Cyber MISP - how you could integrate MISP in your Cyber team 2016
• MISP Summit 2016: GDPR And Information Sharing by Matthieu Farcot, securitymadein.lu 2016
• MISP Summit 2016: Introduction by Alexandre Dulaunoy, CIRCL 2016
• MISP Summit 2016: MISP And The Information Sharing Standards by Alexandre Dulaunoy, CIRCL 2016
• MISP Summit 2016: MISP New Features And Development Evolution by Andras Iklody, CIRCL 2016
• SHA2017 Orga Meet - 13 aug 2016 2016
• SHA2017 Orga Meet - 24 sept 2016 Part 1/3: Opening and Team Updates 2016
• SHA2017 Orga Meet - 24 sept 2016 Part 2/3: Ethics And Government Discussion 2016
• SHA2017 Orga Meet - 24 sept 2016 Part 3/3: Lightning Talks And Closing 2016
• SHA2017 orga meet 26 11 2016 2016
• SHA2017 orga meet 30 4 2016 part 1 of 2. 2016
• SHA2017 orga meet 30 4 2016 part 2 of 2. 2016
• WordCamp Riga 2016: Security Audit Process Of A WordPress Instance - Kirils Solovjovs 2016
• ...And Performance For All - Andrea Garavaglia
• 101: How To Break IPS & SIEM - Nicol Dankova
• 2038 Is Gonna Be Epoch! - Trey Darley & Pedro Umbelino
• 2038: Defuse Some Time Bombs With Your Writing Skills - Lorenzo Dina
• 4-Byte Hell: When Unicode Enters The Stage - Jonas Hess
• 4-Byte Hell: Your Emoji Is Talking To My LLMs - Jonas Hess
• 5 Years Collecting CyberSecurity Tools - Jonathan Scoupreman
• A Container In A Pod Isn't A Security Boundary: Lateral Movement Into Envoy Sidecars- Michael Rodler
• A Fingerprinting Framework Deriving Features Identifying Infrastructure - Bilal & Bob Van Der Kamp
• A Pragmatic Approach To Build A Threat Landscape - Thomas Patzke
• A Preliminary User Experience Evaluation Of MISP (Work In Progress) - Borce Stojkovski
• A Quick Monologue On Global Inefficiency - Claus Cramon Houmann
• A Quick Retrospective Of A Student Discovering Programming & Other Failures - Sami Mokaddem
• AIL Project: Secrets In Squares - QR Codes - Aurelien Thirion
• An Automated And Attack Graph-Based Evaluation Of On-Board Networks - Martin Salfer
• Analysing The 1991 Lips Eloctro Mechatronic Lock - Walter Belgers
• Analysis And Forecasting Of Exploits With AI - Roman Graf
• Analyzing Android Phones At Scale - Anthony
• Anti-Forensics - You Are Doing It Wrong (Believe Me, I'm An IR Consultant) - Stephan Berger
• Any Sufficiently Advanced Technology Indistinguishable From 01 January 1970 - Trey Darley
• Artemis: How CERT PL Improves The Security Of The Polish Internet - Krzysztof Zając
• Assemble the bits for the lectern.
• Attacking The Developer Environment Through Drive-by Localhost Attacks - Joseph Beeton
• Automating Dark Web CTI Reports With RAG Insight For MISP Sharing - Shing-Li Hung
• Automating The Reverse Engineering Of CAN Bus Protocols - Eric Wagner & Matteo Frigo
• Autonome Cyberabwehr: So stärken KMU ihre digitale Resilienz trotz Fachkräftemangel - Johannes Raff
• Back To The Failure: Did Your Physical Security Evolve In The Last 40 Years? - Simon Geusebroek
• Bad Bears, Careless Kittens: State-Sponsored Espionage Exposed - Ben
• Best Paper Award
• Beyond Post-quantum Stereotypes - Antoine Gicquel & Benjamin Sepe
• Beyond Windows Forensics With Built-in Microsoft Tooling - Thomas Fischer
• Blowing Up Gas Stations For Fun And Profit - Pedro Umbelino
• Bolting On Security Is The Best We Can [Generally] Do, So Grab A Wrench - Jacob Torrey
• Breakdown Of The Pre-Attack Framework - Stijn Vande Casteele
• Breaking Android IPC: A Deep Dive Into AIDL Fuzzing - Rajanish Pathak & Hardik Kamlesh Mehta
• Breaking Industrial Protocol Translation Devices Before The Research Begins - Claire Vacherot
• Brute Force In, IOCs Out: Feeding MISP From Cowrie Honeypots With Velociraptor - Stefan Jumarea
• BSimVis: Scaling Binary Similarity And Clustering With Ghidra - Thomas Caillet
• Bug Bounty aus Sicht von NIS2, DORA und CRA - Andreas Schneider
• Bugs In The Human Code: Help Timo - Paul Hirtz
• Building A Pipeline To Analyse IOS Devices At Scale - David Durvaux & Christophe Vandeplas
• C2 Evolution From The Past To Tomorrow - Xavier Mertens
• Call For Failure 2 - Various
• Call For Failure 4 - Various
• Call For Failure 5 - Various
• Catching Phish Using Publicly Accessible Information - Aurimas Rudinskis
• CLI Ambush - William Robinet
• Code-Level Security Analysis: What About The Attacker? - Sebastien Bardin
• Communities – The Underestimated Super Power Of Cyber Threat Intelligence by Markus Ludwig
• Community Orchestration Via Cerebrate by Andras Iklody
• Comprehensive Analysis Of Modern Satellite Vulnerabilities And Emerging Attack Surfaces - Vic Huang
• Compromising Threat Actor Communications - Ben (@polygonben)
• Containing The Threat: Analyzing Cryptomining Campaigns - Bogdan Trufanda & Mihai Vasilescu
• Coruna: An IOS Analyst Studying The Anatomy Of An Exploit Kit - Roussille Benoît & David Durvaux
• Cratos: Use Your Bloody Indicators - Dennis Rand
• CTF Challenge Prize
• CTF Prizegiving Ceremony - Hack.lu
• CTF Prizes - Hack.lu
• CTI Operational Procedures With Jupyter Notebooks And MISP by Koen Van Impe
• Cyrus - The story Of No Cloud - Guillaume Ginis
• DCOM Turns 20: Revisiting A Legacy Interface In The Modern Threatscape - Julien Bedel
• Decoding Galah: An LLM Powered Web Honeypot - Adel Karimi
• Deep Dive Into Livewire, From Weak Typing To Pre-Authenticated RCE - Rémi Matasse
• Defeating APT10 Compiler-level Obfuscations - Takahiro Haruyama
• Defeating Bluetooth Low Energy 5 PRNG For Fun And Jamming - Damien Cauquil
• Detecting Linux Rootkits: Know Where To Look In User-Space - Hilko Bengen
• Detection And Response For Linux Without EDR - Hilko Bengen
• Detection Coverage In Today's Blue Team World - Claus
• DeTT&CT: Mapping Your Blue Team To MITRE ATT&CK - Ruben Bouman and Marcus Bakker
• DFIQ: Codifying Digital Forensic Intelligence - Thomas Chopitea
• DGA-Detect: Using Machine Learning For Collaborative DGA Detection - Tammo Krueger
• Die Sisyphus-Arbeit der IT-Sicherheit? - Peter Berlich
• Digic8 Oracle - Laurent Clevy
• Disconnecting Games With A Single Packet: An Unreal Untold Story - Hugo Bertin
• Discover How EclecticIQ Platform And MISP Go Together - Aleksander Mancic
• Disturbance: On The Sorry State Of Cybersecurity And Potential Cures - Saad Kadhi
• Diving Into Firmware Cartography With Pyrrha 2.0 - Eloïse Brocas
• DNS On Fire - Warren Mercer and Paul Rascagneres
• DocIntel: A Context-Centric Threat Intelligence Platform by Antoine Cailliau
• DOS Software Security: Is There Anyone Left To Patch A 25-year Old Vulnerability? - Alexandre Bartel
• Dredge: An Open Source Framework For Cloud Incident Response - Santi Abastante
• Eat, Sleep, Crash Drones, Repeat - Futex
• Effectiveness In Simplicity: The Taskmasters APT - Elmar Nabigaev
• Empowering Cybersecurity Outreach And Learning... - David Durvaux & Alexandre Dulaunoy
• Enhanced Web Fuzzing: Improving Your Wordlists With Tooling And Methodology - Vincent Herbulot
• ESC17: Using ADCS To Attack HTTPS-Enabled WSUS Clients - Alexander Neff
• EventList, Matching Windows Event Log IDs With MITRE ATT&CK - Miriam Wiesner
• Exploit Password Management Software To Obtain Credential From Memory - Efstratios Chatzoglou
• Exploiting Bug Report Systems In The Game Industry - Andreia Gaita
• Exploiting Legit APIs For Covert C2: A New Perspective On Cloud-based Malware Operations- Cocomelonc
• Exploring Internet Services: Exposing Vulnerabilities And Misconfiguration At Scale - Gregory Boddin
• Exploring Threats Leveraging Blockchains - Paul Rascagneres
• Fearless File Identification - Quentin Jerome
• Field Guide To Physical Attacks Against Full-disk Encryption - Edouard D'hoedt & Hayk Gevorgyan
• Fighting AI-Generated Vulnerability Disclosures With AI-Generated Advisories - Alexandre Dulaunoy
• Fileless Malware Infection And Linux Process Injection In Linux OS - Hendrik Adrian
• Firefighting At Universities: Stay Calm And Play SOCCER - Nicol Dankova
• Floorbox Battle - Georges Kesseler
• Flowintel - Flow Your Management - Cruciani David
• Following the digital breadcrumbs - Julia Badertscher & Antonio De la Torre
• French Stealer Ecosystem: The Resurgence Skid Gangs In Cybercrime Space - 0xSeeker
• From 0 To Millions: Protecting Against AitM Phishing At Scale - Jacob Torrey
• From Buzzword To Battlefield: The Cybersecurity Challenges Of Smart Cities - Marina Bochenkova
• From Text To Terrain: Automated Geolocation Analysis Of Dark Web Data - Laura Bernardy
• From The Rebellious Cities: Anatomy Of A State-Aligned Espionage Campaign - Eliad Kimhy
• From YAML To Root: CI/CD Pipeline Attacks And Countermeasures - Hugo
• Future Of Websites Without DDoS - Lukáš Kršek
• Für eine handlungsfähige und wohlhabende Schweiz durch Wissenschaft und Technologie - Hannes Gassert
• Generating MITRE ATT&CK DNA For Groups Of Actors - Sergey Polzunov
• Ghosts'n'Gadgets: Common Buffer Overflows That Still Haunt Our Networks - Stanislav Dashevskyi
• Global Telemetry To Local Remediation - Sebastian Wagner and Jon Flaherty
• GoaTracer: A Hybrid Dynamic Analysis Platform - Pierre Marty and Victor Royer
• Google Play: 3.8 Million Android Apps And Counting - Aleksandr Pilgun
• Hack42 FPGA Workshop
• Hack42 Lecture: The Gigatron by Walter Belgers
• Hack42: Operation Rubicon - Crypto Museum Eindhoven
• Hacking For Hoodies: MISP Edition - Jeroen Pinoy
• Hacktivism As A Defense Technique In A Cyberwar. #FRD Lessons For Ukraine - Kostiantyn Korsun
• Hey Dude, Where's My Switch? - Nicol Dankova
• Hostile Tools Aren't A Badge Of Honour: UX For Security Engineers - Chris Horsley
• How I Learned To Stop Worrying And Love The NLF - Fukami
• How Much Time We Had For IPv6 Preparation? - Nicol Dankova
• How To Better Identify (Weaponized) File Formats With Ftguess - Philippe Lagadec
• How To Better Integrate Continuous Improvement Into Security Monitoring - Desiree Sacher
• How to f*** up BB - Denis Morel
• How To Fail Your CTI Usage by Paul Jung
• Human Side Of Incident Response Failures: Why Mature SOCs Still Break Under Pressure - Meera Tamboli
• Hunting For Linux Extended File Attributes - Xavier Mertens
• HZ Rat Goes China: Following The Tail Of An Unknown Backdoor by Axel Wauer
• ICRC's Trust And Safety: Armed Conflict - Vitaly Savenkov
• In Curation We Trust: Generating Contextual And Actionable Threat Intelligence by Robert Nixon
• In-Depth Study Of Linux Rootkits: Evolution, Detection, And Defense - Stephan Berger
• Incident Reporting Made Easy, Using Draugnet - Andras Klody
• Incident Response When Hackers Try To Steal Your Spotlight - Melina Phillips
• Infering Threat-Actor Location By Looking At Their Activity Over Time - Alexandre Dulaunoy
• Inside The Stalkerware Factory: Reversing C2 Protocols And Building Mock Servers- Sébastien Larinier
• Instrumenting Software Builds To Detect Stealth Backdoors And Other Curiosities - Hilko Bengen
• Integrating New Tools In Your Workflows Within Minutes In MISP - Sami Mokaddem
• Integrating Zeek With Third-Party Applications - Christian Kreibich
• intelmq.ai - Adding ML Model Support To Intelmq - Aaron Kaplan and Sebastian Wagner & Jürgen Brandl
• Internal Domain Name Collision 2.0 - Philippe Caturegli
• Introducing HAMISPA: High Availability MISP In AWS - Tiago Faria
• IoT Hacks Humans: Unexpected Angles Of Human Process Compromise - Vladimir Kropotov
• IPv6, Y2K38 & The Other Cyber-Catastrophes - Nicol Dankova
• Jim Manico on OAuth Security
• Jim Manico on OWASP Proactive Controls
• Kaitai Struct: A Tool For Dealing With Binary Formats - Petr Pucil & Mikhail Yakshin
• Kernel Primitives To Code Execution On Windows 11 VBS/HVCI/kCET (SSDT/SSDT Shadow Hooks)- Juan Sacco
• KEV Is Not One List - Cédric Bonhomme
• Keys To The City: The Trade-Off Between Revenue & Privacy In Monetizing SDKs - Dimitrios Valsamaras
• Kill MD5 - Demystifying Hash Collisions - Ange Albertini
• KubeHound: Identifying Attack Paths In Kubernetes Clusters At Scale With No Hustle - Julien Terriac
• Large Language Models in Cybersecurity: Threats, Exposure and Mitigation - Vincent Lenders
• Last Night A DJ Erased My Drive: A Journey Through Cybersecurity, Chaos, And Control - Mathew Caplan
• Latest Updates on Kunai - Quentin Jerome
• Learn Anything - Reload - Pauline Bourmeau (Cookie)
• Lessons Learned From (Almost) 8 Years Of Sigma Development - Thomas Patzke
• Lessons Learned From Sharing Intel About Potential Fraud # Compomise - Jeroen Pinoy
• Lethal Language Models: From Bit Flip To RCE In Ollama - Paul Gerste
• Leveraging KVM As A Debugging Platform - Mathieu Tarral
• Lightning Talk 1 - Various
• Lightning Talk 2 - Various
• Lightning Talk 3 - Various
• Lightning Talk 4 - Various
• Lightning Talk 5 - Various
• Lightning Talk 6 - Various
• Lightning Talk 7 - Various
• Livewire: Remote Command Execution Through Unmarshalling - Rémi Matasse & Pierre Martin
• LLM: Let's Leak More - Yves Pellaton & Ksandros Apostoli
• LOLBlue : Living Off The Land With Blue Team Tools - Maxence Fossat & Antoine C
• LT: AIL-Framework New Version by Aurel
• LT: ATAK by JL
• LT: B.o.D.: Bytes Over DNS- Didier Stevens
• LT: Hardware Keylogger Forensics: Are There Any Potential IoCs? by Michael
• LT: iocmite by Sebastien Larinier
• LT: MISP-Guard by Luciano
• LT: News From The Automation Department by Sascha Rommelfangen
• LT: Ransomlook.io by Alexandre Dulaunoy
• LT: TLP, PAP, Just The Two Of Us by Olivier Memin
• LT: Typosquatting-finder: Overview And Demo by David Cruciani
• LTECruiser: An Extremely Low Cost LTE Experimentation Framework - Edoardo Mantovani
• Luks Full Disk Encryption Upside-Down - Michael Hamm
• Machine Learning That Stays Out Of The Way - Cédric Bonhomme
• Making IOT Great Again - David Durvaux & Marc Durvaux
• Maldocs: AutoCAD & VBA - Didier Stevens
• Malware And Hunting For Persistence: How Adversaries Exploit Your Windows? - Cocomelonc
• Mapping Fake Social Activity Shops in Europe - Sviatlana Höhn & Anastasia "Asya" Sergeeva
• MaSSO - A Malicious Auth SSO Utility - Francesco Lacerenza & Mohamed Ouad
• Meet Operational Challenges With MISP On An Air-gapped Network by Olivier Memin & Victor Barrault
• Meet Plum, The Challenge Of Your Own ASR For Free - Paul Jung
• Memory Forensics Analysis Of Cisco IOS XR 32 Bits Routers With 'Amnesic-Sherpa' - Solal Jacob
• Mercator: Mapping The Information System - Didier Barzin
• MISP Playbooks, Proving The Value Of Cyber Threat Intelligence And ICS-CSIRT.io - Koen Van Impe
• MISP Project Future - MISP Project
• MISP Project: One Year Of Improvements - MISP Project
• MISP Sync Process (Or How To Make MISP Sync 500x Faster) - Richard Van Den Berg
• MISP Web Scraper by Koen Van Impe
• MISP Workbench - Luciano Righetti
• MISP Workflow: An Improved Way To Support Your CTI Pipelines by Sami Mokaddem
• Mit CRYSTALS-Kyber gegen die dunkle Seite der Quantenwelt - Reza Hedayat
• My Crimeware Digital Garden - Pierre-Marc Bureau
• My Other ClassLoader Is Your ClassLoader: Creating Evil Twin Instances - Dimitrios Valsamaras
• NeuroCTI - A Custom LLM For CTI: Benchmarking, Successes, Failures & Lessons Learned - Aaron Kaplan
• New Features In The Zeek Network Monitor - Christian Kreibich
• New Tales Of Wireless Input Devices - Gerhard Klostermeier and Matthias Deeg
• Nightmare On NTLM Street: Legacy’s Revenge - Marina Bochenkova
• No SSH To Your Router? Vendor Might Have Things To Hide - Stanislav Dashevskyi & Francesco La Spina
• Notfallplan: Handeln statt Reagieren - Nicolas Germiquet
• Nothing To See Here! On Cloaking Malicious Web Content Delivery - Jeroen Pinoy
• OCR-Bench: Benchmarking VLMs For Text Extraction & Image Description - William Robinet
• Offensive Security 101 by Wick-Ed
• One Day At The Internet Storm Center - Xavier Mertens
• Oops, I Hacked It Again: Tales And Disclosures - Ignacio Navarro
• Open Source Is A Virus - Philippe Ombredanne & Prabhu Subramanian
• OpenTide: The Engine Behind Agentic Detection Engineering - Remi Seguy
• OpenTIDE: When TI Made Actionable Drives Your Threat Detection - Remi Seguy
• Operation IXIM: Preventing A Botnet Of Millions Of PopCorn Time Users - Niels Teusink
• OSINT On Agent Swarms - Steffen Iwan
• OverLAPS: Overriding LAPS Logic- Antoine Goichot
• Palo Alto GlobalProtect: Remote Full Compromise Exploit Chain - Maxime Escourbiac
• Peekaboo: Threat And Malware Emulation - cocomelonc
• Pentests Using LLMs - Al Mochkin
• Perspectives On Social Engineering: Beyond Cognitive Bias And Digital Literacy - Olga Bogolyubova
• Phish Perfect: How I Broke The Thing While Trying To Protect It - Melina Phillips
• Phishing Detection Using Various Parts Of DNS Ecosystem - Piotr Białczak & Michał Hałoń
• Piercing The Veil: Server Side Request Forgery Attacks On Internal Networks - Alyssa Herrera
• Plum Anno 1.. - Paul Jung
• Polling Is The Vulnerability: A Case For Event-Driven Cloud Detection - Santi Abastante
• Practical Self-XSS Exploitation and Novel Attacks with Cookie Tossing - Thomas Houhou
• Prize-giving Ceremony - Hack.lu orga
• Project Rudzik: LLM Assisted Vulnerability Hunting In Open Source Projects - Jeroen Pinoy
• Project Update: Dredge A Cloud Incident Response Toolkit - Santi Abastante
• Protocol Design: Lessons Learned - Danilo Bargen
• Pwn2Own: Hacking IoT Devices - Adam
• Quantum Cybersecurity: Pioneering A Secure Future - Samira Chaychi & Sharif Shahini
• R3SPOND: Navigating The Maze Of Incident Response - Franziska Büttner
• RANGE42: An Open Source Cyber Range - Benjamin Collas
• ReconPi - Martijn Baalman
• Red Team Story: Offline SCCM Backup Secrets Decryption - Martino
• Refrigeration As Critical Infrastructure: Analyzing The Cyberattack On French Supermarkets - Doriane
• Reverse Engineering Android Apps With ACVTool - Aleksandr Pilgun
• Reverse Engineering, For Real - Henri Ahola
• Reversing A Pay Phone For Fun But No Profit - Inbar Raz
• Revisiting Widevine L3: DRM As A Playground For Hackers - Felipe Custodio Romero
• Running Circles Around Threat Actor Tooling Using Javascript Data Visualisation - Chris Horsley
• Running Exercises with SkillAegis - Sami Mokaddem
• Russian-speaking Underground:- Changes In - Vladimir Kropotov
• Say Cheese - How I Ransomwared Your DSLR Camera - Eyal Itkin
• Scaling MISP With The Cloud by Mikesh Nagar
• Scaling Sighting - Sebastien Tricaud
• Scam As A Service Powered By Telegram - Aurimas Rudinskis
• Security Awareness Training That Works - Michel Ruefenacht
• Security Awareness: Eine starke Sicherheitskultur etablieren - Marcus Beyer
• Security for individuals and small businesses - Dario Salice
• Security Implications of LoRaWAN Environments - Manfred Heinz
• Security Knowledge Framework
• Security Monitoring And Response In Large Linux Environments - Hilko Bengen & Hendrik Schmidt
• Security Pitfalls In Distributed Erlang And Elixir Systems - Jean-Louis Huynen
• Sensor & Logic Attack Surface Of Driverless Vehicles - Zoz
• Setting up the tripod and camera
• Sharing IoC - Wrong Answers Only - Deborah Servili
• Sharing IOC With Customers And Partners by Cyril Bras
• Sharla Perrine, Paul Baran, And The True Business Case For The Internet - Trey Darley
• Sigma Unleashed: A Realistic Implementation - Mathieu Le Cleach
• Signal Processing And Math For Malware RnD For Fun And Profit - Cocomelonc
• Silent Killers: Unmasking A Large-Scale Legacy Driver Exploitation Campaign - Jiří Vinopal
• Six Degrees Of RACF SPECIAL: Mainframe Attack Paths - Jonathan Prince
• Slipping Through The Cracks: How Malicious Emails Evade Detection - Elyssa Boulila
• Slovakian Lessons On Proactive Cybersecurity & Vuln Disclosure - Michal Rampášek & Alexander Valach
• Smack My LLM Up! - Jindrich Karasek
• Smartphone Apps: Let's Talk About Privacy - Axelle Apvrille
• Spicy — Generating Robust Parsers For Protocols & File Formats - Benjamin Bannier
• spispy: Opensource SPI Flash Emulation - Trammell Hudson
• SPOT - Spear-Phishing Overwatching Tool - Mathieu Fourcroy and Pauline Bourmeau & William Robinet
• Spreading Malware With USB Keys: Does It Still Work? - Didier Barzin
• SQL Injection Isn't Dead: Smuggling Queries At The Protocol Level - Paul Gerste
• Suricata Lua Support - Eric Leblond
• Surveilling Politicians, Unmasking Influencers, Fake Likes And Dying Together - Dries Depoorter
• SVGosploit: When Steganography Meets Vector Graphics - Saumil Shah
• The Beauty Of Vibe Coding - Andras Iklody
• The Bot Census: A Year Inside Malware's Telegram Ecosystem - Manuel Boll
• The CVE-Search Design Failure(s) - Alexandre Dulaunoy & Cédric Bonhomme
• The Difficulty In Ascribing Attack Frameworks To ICS Cyber Attacks - Andrew Roberts
• The Gist Of Hundreds Of Incident Response Cases - Stephan Berger
• The Glitch In The Matrix - Marion Marschalek
• The Good, The Bad And The Ugly Of Responsible Disclosure - Chrissy Morgan
• The Good, The Bad, And The Ugly: Microsoft Copilot - Inbar Raz & Michael Bargury
• The Good, The Bug And The Ugly: Dissecting A Linux Kernel USB N-Day- Ferdinand Jarisch & Moritz Buhl
• The Heavy Shadow Of Imposter Syndrome - Tammy Harper
• The Holy Grail For STIX And MISP Format - Misp-stix by Christian Studer
• The New Indicator Scoring Method Introduced In MISP 2.4.116 - Sami Mokaddem
• The Ouroboros Of Cybercrime: Threat Actors Go From Pwn To Pwn'd - Estelle Ruellan & Stuart Beck
• The Panopticon Paradox: Cybersecurity In The Age Of AI-Accelerated Mass Surveillance - Thomas Drake
• The Path To Be Just The Right Amount Of Paranoid (Cybersecurity Edition) - Denim Latić
• The Road To Hell Is Paved With Bad Passwords - Chris Kubecka
• The Struggles To Make CSAF Actionable - Sebastian Wagner
• The Web Of Cognitive Warfare - Jindrich Karasek
• The Web-Hacker's Guide to Mobile Application Security -Testing- Sandro Volery
• The XE Files: Trust No Router - James Atack
• Threat Actor Tripping On The Finish Line - Rasmus
• Threat Intelligence Contextualized Knowledge Base - Jeroen Klaver and Leandro Velasco
• Tiplines Today - Harlo Holmes
• Tools To Streamline Creation Of Technical Presentations - Kirils Solovjovs
• Top findings in bug bounty programs - Michael Schläpfer
• Training and Education in Cyber Security - Claudia Zeuren
• Tricking The Thieves: Turning [Session] Tokens Into [Canary] Tokens - Jacob Torrey
• Trying To Clean-Up The CPE Flipping Mess - Alexandre Dulaunoy
• Turning The Tables: Command & No Control - Ben
• Uncovering A Cyber Espionage Campaign Against Cambodian Military Intelligence - Subhajeet Singha
• Uncovering How Cybercriminals Are Exploiting The Employment Market - Ionuț Baltariu
• Understanding File Type Identifiers & Scanners - Ange Albertini
• Unintended Computations - Nicolas Seriot
• Unmasking The Facade: Stealthy EtherRAT Distribution - Wojciech Bohatyrewicz and Piotr Bienias
• Unsichtbarer Mehrwert: Das optimieren vorhandener Sicherheitsmechanismen - Andreas Achterholt
• Update From MITRE - Rich Struse
• Update On Atomic Threat Coverage - Daniil Yugoslavskiy
• Update On MISP - Alex Dulaunoy
• Update On SIGMA - Thomas Patzke
• Using LLM Locally - Pauline Bourmeau (Cookie)
• Utilising MISP Into Your Incident Response Plan - Dennis Rand
• Vertrauen aufbauen: Cybersicherheit als Herzstück Ihrer Produktstrategie - Ralph Hutter
• Visualising MISP And Att&ck Data In Maltego - Christophe Vandeplas
• Visualize The Potential: MISP To Power BI by Robert Nixon
• Visualizing ATT&CK Data In Maltego - Christophe Vandeplas
• Vulnerability Lookup - Cédric Bonhomme
• Warum IT-Dienstleister von einer Zertifizierung profitieren - Florian Muff
• Weaponizing Defender's Remediation Driver As A Kernel Operation Primitive - Jiří Vinopal
• Weaponizing The GPU And Windows Cloud Filter For File-Less Execution And Priv Esc - David Shandalov
• What Can Time Based Analysis Say In Ransomware Cases? by David Rufenacht and Jorina Baron
• What Malware Leaves Behind: Analysing Forensic Traces Of Ransomware - Ankshita Maunthrooa
• What The Log?! So Many Events, So Little Time... - Miriam Wiesner
• What's HOT In MISPland: Latest Development And Roadmap Update by Andras Iklody
• What's New In Suricata 8: Enhanced Detection And Performance - Peter Manev & Eric Leblond
• What's Wrong With OT Security? How Easily Things Break When You Squeeze Them - Krzysztof Chudzik
• WHIDS Integration With MISP - Quentin Jerome
• WHIDS Update by Quentin Jerome
• Who Contains The Containers - Ioana Andrada and Emilien
• Who Is A Good CNA? - Cédric Bonhomme
• Why Does Strategic Threat Intelligence Matter? by Louise Taggart
• WIRI: Wordpress Incident Response Training Infrastructure - Andreia-Irina Ocanoaia
• Wyse Management Subversion: Taking Over Dell's Wyse Management Suite - Alain Mowat
• You Just Got A CTI Program Funded. Now What? - Lukas Vytautas Dagilis
• Zero-Knowledge Cracking Of A 1983 Apple II Hardware Copy Protection - Inbar Raz