Hacktivity - IT Security Festival

373 talks · 2011–2025 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• #Hacktivity2025 // Hacktivity 2025 theme song 2025
• #Hacktivity2023 NOW+NEXT - Summary of the 20th JUBILEE EDITION // 5-6 October 2023 2023
• #Hacktivity2022 // Developer in a Digital Crosshair, 2022 Edition by Mateusz Olejarka 2022
• #Hacktivity2022 // How Attackers Abused DNS in 2021/2022 by Piotr Głaska 2022
• #Hacktivity2022 // Practical EDR Bypass Methods in 2022 by István Tóth 2022
• #Hacktivity2022 NOW+NEXT - Summary of the 19th Edition // 6-7 October 2022 2022
• #Hacktivity2021 - Summary of the 18th Edition // 8 October 2021 2021
• #Hacktivity2021 // CSS Keylogger in 2021 - The Hubris of the Security Community 2021
• #Hacktivity2021 // The Key to an "Entire Kingdom": Pandora FMS - Chained Exploit (CVE-2021-34074) 2021
• #Hacktivity2019 - Summary of the 16th Edition // 25-26 October 2019 2019
• #Hacktivity2020 // Hacking the Hacktivity 2019 badge by Valerio Di Giampetro 2019
• #Hacktivity2018 - Summary of the 15. Jubilee Edition // 12-13 October 2018 2018
• Summary of the 14th Hacktivity - October 20-21, 2017 2017
• Hacktivity 2016 – Press event 2016
• Best of Hacktivity 2013 official 2013
• Hacktivity 2012 - Adrian Furtuna - Digipass Instrumentation for Fun and Profit 2012
• Hacktivity 2012 - Alexander Kornbrust - Self Defending Database 2012
• Hacktivity 2012 - Alexander Polyakov - Top 10 most interesting SAP vulnerabilities and attacks 2012
• Hacktivity 2012 - András Kabai - Hunting and exploiting bugs in kernel drivers 2012
• Hacktivity 2012 - András Tevesz - Neutralizing an AntiVirus program 2012
• Hacktivity 2012 - András Veres-Szentkirályi - USB = Universal Security Bug? 2012
• Hacktivity 2012 - Antonio Barresi, Peter Somogyvari - Android Security - An Introduction 2012
• Hacktivity 2012 - Balázs Bucsay - Paypass vulnerabilities 2012
• Hacktivity 2012 - Bucsay Balázs - Paypass sérülékenységek 2012
• Hacktivity 2012 - Csaba Otti - The security and vulnerability of the biometry 2012
• Hacktivity 2012 - Domonkos Tomcsanyi - Give me a phone that can't be traced 2012
• Hacktivity 2012 - Dr. Boldizsár Bencsáth - What Makes the Analysis of Malware. Like Duqu or Flame? 2012
• Hacktivity 2012 - Gábor Szappanos - Journey to the bottom of a black hole 2012
• Hacktivity 2012 - Joe McCray - Big Bang Theory - Pentesting high security environments 2012
• Hacktivity 2012 - Judit Varga - Amy Farrah Fowler, or the geek girl's case with the tiara 2012
• Hacktivity 2012 - Krisztián Schäffer - Security Code Review 2012
• Hacktivity 2012 - László Biró - Alternative internet 2012
• Hacktivity 2012 - László Tóth Ferenc Spala - Think differently about database hacking P. 2012
• Hacktivity 2012 - Miroslav Stampar - Spot the Web Vulnerability 2012
• Hacktivity 2012 - Otti Csaba - A biometria biztonsága és sérülékenysége 2012
• Hacktivity 2012 - Schäffer Krisztián - Forráskód ellenőrzés biztonsági szempontok alapján 2012
• Hacktivity 2012 - Shakeel Tufail - Software Threat Modeling 2012
• Hacktivity 2012 - Shay Chen - The Diviner - Digital Clairvoyance Breakthrough 2012
• Hacktivity 2012 - Sir David Pepper - Cyberspace and Beyond - Evolution in Action 2012
• Hacktivity 2012 - Sir David Pepper - Kibertér és azon túl - folyamatban az evolúció 2012
• Hacktivity 2012 - Steve Mulhearn - The Rise and Fall of DDoS Attacks in 2012 2012
• Hacktivity 2012 - Subecz Ákos - Biztonságtechnikai hiányosságok Magyarországon a mindennapokban 2012
• Hacktivity 2012 - Szabó Áron - Chip-csirip, avagy PKI eszközök alternatív felhasználásai 2012
• Hacktivity 2012 - Székely Tamás - Hello HSRP, viszlát HSRP 2012
• Hacktivity 2012 - Sándor Nagy - NAT Attack 2012
• Hacktivity 2012 - Tamás Székely - Attacking The First Hop Redundancy 2012
• Hacktivity 2012 - Tamás Váradi - Impressioning 2012
• Hacktivity 2012 - Tevesz András - Antivírus program hatástalanítás 2012
• Hacktivity 2012 - Vivek Ramachandran - Cracking WPA/WPA2 Personal and Enterprise for Fun and Profit 2012
• Hacktivity 2012 - Váradi Tamás - Impressziótechnika 2012
• Hacktivity 2012 - Zoltán Balázs - Zombie Browsers, spiced with rootkit extensions 2012
• Hacktivity 2012 - Zsombor Kovács - To secure data is to prepare for jailbreak 2012
• Hacktivity 2012 - Ákos Subecz - Security Problems at Hungarian everydays 2012
• Hacktivity 2012 - Áron Szabó - „Chip-tweet", alternative usage of PKI devices 2012
• Hacktivity 2011 - Vivek Ramachandran: Enterprise Wi-Fo Worms 2011
• #Hackitvity2019 - Interjú az M1 Híradóban (in Hungarian)
• #Hacktivity2019 - Interjú a Duna TV Családbarát című műsorában (in Hungarian)
• #Hacktivity2019 - Riport a TV2 TechGuru című műsorában (in Hungarian)
• #Hacktivity2019 - Összefoglaló videó a WeLoveDigital jóvoltából (in Hungarian)
• #Hacktivity2020 // Anatomy of Automated Account Takeovers by Tal Eliyahu & Begum Calguner
• #Hacktivity2020 // ATTPwn: Adversary Emulation. ATT&CK Automation by Pablo González & Fran Ramírez
• #Hacktivity2020 // Blue Team Over The Air by Besim Altinok
• #Hacktivity2020 // Bring your own demise. The corporate threat of mobile endpoints by János Pallagi
• #Hacktivity2020 // Broken IoT Supply Chain by Martin Hron
• #Hacktivity2020 // China's cheap Xiaomis are low on privacy by Cirlig Gabriel
• #Hacktivity2020 // DevSecOps in the Financial Services Industry by Stéphane Chmielewski
• #Hacktivity2020 // Dissectiong and Comparing Different Binaries to Malware Analysis by Filipi Pires
• #Hacktivity2020 // Distributed Fuzzing with k8s by Anto Joseph
• #Hacktivity2020 // Hacking Facial Recognition Systems by Alexander Polyakov
• #Hacktivity2020 // How Soft Skills Get Hard Results by Scott Asai
• #Hacktivity2020 // Infra security automation in CI/CD: impossible is nothing. 1/2 by Davide Cioccia
• #Hacktivity2020 // Infra security automation in CI/CD: impossible is nothing. 2/2 by Spyros Manglis
• #Hacktivity2020 // Machine Learning Evasion Competition by Zoltán Balázs
• #Hacktivity2020 // Making developers security aware. Lessons learnt. by Mateusz Olejarka
• #Hacktivity2020 // My wife is watching me: The spy inside all of us. by Eddy Willems
• #Hacktivity2020 // Paste Wars: fighting for copypaste freedom by Ignat Korchagin
• #Hacktivity2020 // Penetration testing VoIP UC nowadays by Moritz Abrell
• #Hacktivity2020 // Perception vs Reality by Piotr Pobereźny
• #Hacktivity2020 // Reversing Golang Binaries with Ghidra by Dorka Palotay and Albert Zsigovits
• #Hacktivity2020 // Revisiting a Wireless Alarm System by Matthias Deeg
• #Hacktivity2020 // Service Mess to Service Mesh by Rob Richardson
• #Hacktivity2020 // Speeding Up Linux Disk Encryption by Ignat Korchagin
• #Hacktivity2020 // State of the Art Phishing by Six
• #Hacktivity2020 // Stuxnet Attack by Dr. Mo Ashouri
• #Hacktivity2020 // The 5G Battle by Róbert Moody and Bence Horváth
• #Hacktivity2020 // The Great Hotel Hack: Adventures in attacking hospitality industry. Etizaz Mohsin
• #Hacktivity2020 // Working with proof key for code exch. to comm. with the cloud by Milecia McGregor
• #Hacktivity2020 // XPC exploitation by Csaba Fitzl
• #Hacktivity2021 // 4 Weird Google VRP Bugs in 40 Minutes
• #Hacktivity2021 // A Common Bypass Pattern to Exploit Modern Web Apps
• #Hacktivity2021 // C2Centipede: APT Level C2 Communications for Common Reverse HTTP Shell Tools
• #Hacktivity2021 // Cloud Security Monitoring and Evasion Techniques
• #Hacktivity2021 // Detection Engineering: Building Custom Detection Controls for Cloud Environments
• #Hacktivity2021 // DNS in Offensive Techniques
• #Hacktivity2021 // Exploring & Exploiting Zero-Click Remote Interfaces of Modern Huawei Smartphones
• #Hacktivity2021 // GALILEO: In GPS We Trust?
• #Hacktivity2021 // GhostEmperor: From ProxyLogon to Kernel Mode, Story of a Modern Day Rootkit
• #Hacktivity2021 // Hackers Deserve Rights
• #Hacktivity2021 // How to Bypass Data Exfiltration Detection with Malicious Cryptography Techniques
• #Hacktivity2021 // How to Upgrade Enterprise Security Using Numeric Technique
• #Hacktivity2021 // How to Use Cheated Cryptography to Overload Your Server
• #Hacktivity2021 // Investigating the Exploitability of Trusted Execution Environments
• #Hacktivity2021 // Malware Hunting - Using Python as Attack Weapon
• #Hacktivity2021 // Millions for Nothing and Clicks for Free
• #Hacktivity2021 // MIPS-X: The Next IoT Frontier
• #Hacktivity2021 // Mobile App Security Testing is Also Essential
• #Hacktivity2021 // Mount(ain) of Bugs
• #Hacktivity2021 // Penetration Testing Management: Problems in Large Corporations
• #Hacktivity2021 // Secure by Design: Microservice Application Architecture Assessment
• #Hacktivity2021 // Security Awareness in Development
• #Hacktivity2021 // Security Issues of an Apartment Intercom and Door Lock System
• #Hacktivity2021 // The History of Hacking AI Systems
• #Hacktivity2021 // Vulnerabilities: When Securing Your Own Environment is No Longer Enough
• #Hacktivity2022 // A GREAT Sewing Workshop by Pierre Delcher
• #Hacktivity2022 // A New Default Value of OpenSSL could Multiply a DoS Potential by Szilárd Pfeiffer
• #Hacktivity2022 // Applying ATT&CK to Analyze Ransomware Campaigns by Marc Rivero López
• #Hacktivity2022 // Automating Binary Analysis with Ghidra's P-Code by Gergely Révay
• #Hacktivity2022 // Automotive Threat Intelligence... by Péter Venesz & Giuseppe Serio
• #Hacktivity2022 // Broad View to Automotive Security & Penn testing by András Kabai & László Tóth
• #Hacktivity2022 // Bug Bounty és Responsible Disclosure a Változó Kibertér Árnyékában - Kerekasztal
• #Hacktivity2022 // Cybersecurity Cannot Ignore Climate Change by Chloé Messdaghi
• #Hacktivity2022 // DDoS Testing Your Infrastructure, including IPv6 SYN floods by Henrik Kramselund
• #Hacktivity2022 // DiceyF Deploys the GamePlayerFramework by Kurt Baumgartner & Georgy Kucherin
• #Hacktivity2022 // Everyday Numbers to Break Not So Everyday Software by Márk Módly
• #Hacktivity2022 // Fault Injection (FI) Attacks Against Embedded Systems by András Kabai
• #Hacktivity2022 // From Red to Black and Beyond... by Albert Zsigovits & Robert Neumann
• #Hacktivity2022 // Fuzzing Trusted Applications in OP-TEE via Shared Memory by Roland Nagy
• #Hacktivity2022 // Hacking AppLocker Cache by Grzegorz Tworek
• #Hacktivity2022 // How an Android Application can Drain Your Wallet? by Dimitrios Valsamaras
• #Hacktivity2022 // How Instantly Upgrade Your Legay Code in Minutes? by Tomas Votruba
• #Hacktivity2022 // How to Kickstart a Security Program? by Ottucsák József
• #Hacktivity2022 // Making Sense of Firmware Images - The Journey... by Márton Illés
• #Hacktivity2022 // Metaverse (in)Security by Ali Abdollahi
• #Hacktivity2022 // No Parking, No Problem! by Ignacio Navarro
• #Hacktivity2022 // Pwned in Space by Paul Coggin
• #Hacktivity2022 // Security Assesment of Embedded Firewalls - a Case Study by Csongor Ferenczi
• #Hacktivity2022 // Security in IoT – the Investigation of Bluetooth Low Energy by János Kepics
• #Hacktivity2022 // Sisyphus and the CVE Feed... by Keziah Plattner & Kadia Mashal
• #Hacktivity2022 // Spin That Steering Wheel by Domokos Nagy
• #Hacktivity2022 // The Great Hospital Hack !! by Mirza Burhan Baig
• #Hacktivity2022 // Web3 + Scams = It's a Match! by Zoltán Balázs
• #Hacktivity2022 // What are We Missing in Web Applications? by Mirza Burhan Baig
• #Hacktivity2023 // It Was Harder to Sniff Bluetooth Through My Mask During the Pandemic…
• #Hacktivity2023 // 7 Steps to Secure a SaaS Platform – the Worlds Biggest Companies Trust
• #Hacktivity2023 // AI Security
• #Hacktivity2023 // API Security Assurance via E2E Testing
• #Hacktivity2023 // Beyond Fun and Games: Understanding the Threat Landscape of Extended Reality
• #Hacktivity2023 // Can We Break the Fault Injection Mitigation Bob?
• #Hacktivity2023 // Carved in Stone: Malware [ab]use of the Bitcoin Blockchain
• #Hacktivity2023 // Clashing EV Chargers in The Pentesting Arena
• #Hacktivity2023 // Elevating OAuth2.0 for Security of Native Clients
• #Hacktivity2023 // Examining the Explanatory Factors of Malicious Hacking Behaviors
• #Hacktivity2023 // Formshaker
• #Hacktivity2023 // Get Deception In Your Environment Now!
• #Hacktivity2023 // How Attackers Find & Exploit Secrets in Source Code
• #Hacktivity2023 // How to Hack and Defend (Your) Open Source?
• #Hacktivity2023 // Pwning into Power System Center
• #Hacktivity2023 // Reality or Myth: Unhackable Application (Using Zero Trust)
• #Hacktivity2023 // Roundtable Discussion about NIS2 Directive (in Hungarian)
• #Hacktivity2023 // SIEM Slam: Tricking Modern SIEMs with Fake Logs and Confusing Blue Teams
• #Hacktivity2023 // SOCKS Over RDP/Citrix (Pentesting Over Jump Boxes)
• #Hacktivity2023 // Supply Chain Attacks
• #Hacktivity2023 // That’s Just a Tool – Not Good Nor Bad. That Part is Up to YOU
• #Hacktivity2023 // The New SaaS Cyber Kill Chain
• #Hacktivity2023 // The Power of Coercion Techniques in Windows Environments
• #Hacktivity2023 // Unraveling the Veins of Automotive Vulnerabilities
• Abdul Aziz Hariri - Onix: Zero Day Initiative Ruined my Life!
• Adrian Vollmer - Attacking RDP with Seth
• AI in Adversarial hands
• AI Security Landscape - Tales and Techniques from the Frontlines
• Aleksandar Nikolic – Guided Fuzzing And Binary Blobs
• Aleksandr Kolchanov - Attacks on GSM Alarms, Smart Homes, Ind. Control Sys. & Smartwatches for Kids
• Aleksandr Timorin - SCADA Deep Inside: Protocols and Security Mechanisms
• Alex Plaskett & James Loureiro - The Mate Escape – Android Pwn2Owning
• Aman Sachdev & Himanshu Sharma - Hacking Real Life Financial Applications
• Andrea Pierini - WHOAMI /PRIV - Show Me Your Privileges and I Will Lead You to System
• András Fehér, Csaba Otti - Face Recognition Systems
• Anto Joseph - Bug hunting using symbolic virtual machines
• Arun Mane & Nikhil Bogam - Making Anomaly Detection System(ADS) for Vehicles - Canbus and Lin
• Asad Qureshi - Using Open Source Intelligence to Investigate CryptoCurrency Cybercrime
• Attila Marosi - Troubleshooting
• Attila Szász & Gergő Hosszú - Dive into Magenta – fuzzing Google’s new kernel
• Axelle Apvrille - Playing Hide and Seek with Dalvik Executables
• Axelle Apvrille – Fitness Tracker: Hack in Progress
• Balint Varga-Perke, 'Buherator' - Heureka - The Suspicious Thing Is That It's Not Suspicious
• Balázs Bucsay - XFLTReaT: Building a Tunnel
• Balázs Bucsay – Chw00t: Breaking Unices' chroot solutions
• Balázs Zoltán - Bypass firewalls, application white lists, secure remote desktops in 20 seconds
• Barnabás Sztán-Kovács - Notwork Security
• Ben Seri & Gregory Vishnepolsky - BlueBorne Explained
• Benjamin Tamási - Hacking CCTV systems
• Boldizsár Bencsáth – BAB0: A custom sample that bypassed cutting-edge APT attack detection tools
• Brian Gorenc - From Bounties to Bureaucracy // Keynote Speech
• Bálint Varga-Perke (Buherátor) - Corrupting Ancient Spirits - Penetration Testing Oracle Forms
• Bíró László Miklós – Titkosítás és visszafejtés a fizikai réteg szintjén
• Charlie Miller - Car Hacking
• Charlie Miller - Mobile Threats - Hype vs. Reality
• Charlie Miller - Mobile Threats - Hype vs. Reality (Magyar)
• Christina Lekati - Social Engineering through Social Media
• Costin Raiu / keynote - APT Paleontology in the age of cyber
• Csaba Fitzl - Exploit generation with WinDGB
• Csaba Fitzl - Gatekeeper - Bypass or Not Bypass?
• Csaba Fitzl - How to convince a malware to avoid us?
• Csaba Fitzl, Miklós Desbordes-Korcsev – Exploit generation, JavaScript analysis automation
• Csaba Krasznay - Cyber soldiers in the world -- how to become a military hacker?
• Csizmazia-Darab István - A vírustörténelem legnagyobb baklövései
• Csongor Tamás - Examples of Locality Sensitive Hashing & their Usage for Malware Classification
• Daniel Bohannon – Invoke-Obfuscation: PowerShell obFUsk8tion
• Daniel Gruss – Microarchitectural Incontinence - You would leak too if you were so fast!
• Danijel Grah, Milan Gabor - Vaccinating Android
• Dave Lewis - Sharks Petrol These Waters / Keynote Presentation
• Demystifying Internal Threat Intelligence
• Dmitriy Chastuchin - Injecting evil code in your SAP J2EE systems
• Dmitry Chastuhin, Dmitry Yudin –Getting access to the SAP server via SAP Management Console
• Domonkos Tomcsanyi - GSM - have we overslept the last wake-up call?
• Domonkos Tomcsanyi - Yet Another Way To Cause DoS for GSM Devices
• Dr. Bartók Sándor Péter - Informatikai igazságügyi laboratóriumok szakmai szolgáltatásai
• Dr. Boldizsár Bencsáth - How to Gather Intelligence on Targeted Attacks - Tricks and Tips
• Dr. Boldizsár Bencsáth - What happened to targeted malware attacks last year?
• Dr. Dániel Eszteri - Legal Background of Cybercrime
• Dr. Leitold Ferenc Horváth Botond - Védekezés kártevők C&C forgalma ellen
• Dániel Komáromy – Offense wins games, Defense wins nothing
• Dávid Liptay & Júlia Borbála Csuha - CANmap – Network Discovery on CAN
• Dávid Török - A Friendly Guide on How to Avoid Getting Pwned Out of Business - a Hacker's Memento
• Dávid Török - My Adventures in Disabling Intel ME 12
• Ethical hacking in Hungary: Roundtable discussion (in Hungarian)
• Evgeny Neyolov - Inside the illegal traffic sales
• Fabian Yamaguchi – Mining for Bugs with Graph Database Queries
• Fehér András, Kapitány Sándor, Martinkovics Dániel, Otti Csaba - Íriszazonosítás
• Fehér András, Kapitány Sándor, Martinkovics Dániel, Otti Csaba – Kézben a biztonság (?)
• Fehér András, Otti Csaba - Arcfelismerő rendszerek
• Felix 'FX' Lindner - keynote speaker
• Ferenc Leitold, Ph.D Botond Horváth - Protection against the C&C traffic of malware
• Francisco Ramirez - GANs and Roses: Weaponizing the CEO Scam Fraud with AI and Autoencoders
• František Střasák & Jan Fajfer - Increasing Efficiency of Encr. Traffic Analysis of People at Risk
• Gabriel Cirlig & Stefan Tanase - Smart Car Forensics & Vehicle Weaponization
• Gabriel Cirlig - ADBHoney - Analyzing the ADB Malware Ecosystem
• George Webster, Julian Kirsch – A Study of the Rich Header and Respective Malware Triage
• Gergely Biczók - Interdependent Privacy & the Psychology of Likes
• Gergely Révay - Security implications of the Cross-Origin Resource Sharing
• Gerhard Klostermeier, Matthias Deeg – Of Mice and Keyboards
• Glenn Ten Cate – OWASP Security knowledge Framework - Survival is not mandatory
• Gábor Molnár - Handcrafting ASCII Flash Files for Fun and Profit
• Gábor Molnár – War Stories from Google’s Vulnerability Reward Program
• Gábor Németh - Fruitful Solutions – What To Use a Bank-Card Sized Computer For?
• Gábor Pék - eNeMI: Evading the state-of-the-art hardware protection of I/O virtualization
• Gábor Pék, Tamás Koczka – !SpamAndHex hacks around the world
• Gábor Szappanos - Advanced(?) Persistent Shellcode
• Gábor Szappanos - Practical Shellcode Analysis
• Gábor Szappanos - The Nigerians are in the Spajz
• Gábor Szappanos – Comparing the incomparables
• Géza Tényi - Management of Confidential Information and Data Protection In Cloud Computing
• Harman Singh - Active Directory Threats & Detection
• Haroon Meer / keynote - Time to play "D"
• How to find rootkits in the linux kernel
• Ignat Korchagin - Exploiting USB/IP in Linux
• Ignat Korchagin - Live-Patching Weak Crypto with OpenSSL Engines
• Inbar Raz - Under Pressure: Real World Damage with TPMS Spoofing
• Inbar Raz - Under the Hood – The Automotive Challenge
• Itay Cohen & Ari Eitan - The Red Square - Mapping the Connections Inside Russia's APT Ecosystem
• Ivan Yushkevich Wordlists: from statistics to genetic
• Jack S (linkcabin) - Becoming the Quiz Master: Thanks RE
• Jason Chan - Building a Glass House
• Jason Zhang – Make “Invisible” Visible: Case Studies in PDF Malware
• Jennifer Janesko - Facepalm and Carry On: A Tale of I’s O’s and T’s
• Jochanan Sommerfeld – DDoS protection technology is far from being “install & forget”
• joernchen of Phenoelit – Your Web app, those hackers & you
• Jos Weyers – Lock Impressioning
• Jos Weyers – Post-its, post-its, post-its everywhere (and how they relate to physical keys)
• Joxean Koret - Pigaios: A Tool for Diffing Source Codes against Binaries
• Julien Thomas - Limitations of Android permission system
• Kelly Shortridge - To Err is Human / Keynote Presentation
• Kelly Shortridge – "The Art of Explanation: Behavioral Models of InfoSec"
• Kirils Solovjovs - Tools for effortless reverse engineering of MikroTik routers
• Kocsis Tamás & Kovács Bálint - Az Információszivárgás Monitorozása Open Source Eszközökkel
• Komáromy Dániel - Enter The Snapdragon!
• Kuba Gretzky - Phishing Through Modern 2FA Defences With Evilginx
• Lajos Muha, Dr. - Interpretation of the Act on Information Security
• Leigh-Anne Galloway - Money makes money: How to buy an ATM and what you can do with it
• Levente Buttyán, András Szijj, Zsolt Szalay – Hacking cars in the style of Stuxnet
• László Miklós Biró – Let's hijack an airplane!
• László Miklós Bíró - IoT Devices, Were Are You and What Do you Do?
• László Miklós Bíró - Tempest, the hidden source of data leakage
• László Tóth, Ferenc Spala - What's common in Oracle and Samsung?
• Marc Lampo - Designing DNS Flows for Security
• Marcell Molnár - Hacking ATMs on a Budget
• Marina Krotofil – Rocking the pocket book: hacking chemical plant for competition and extortion
• Marosi Attila – A Hacking Team rosszindulatú programjai
• Martin Knobloch – Secure software, start appreciating your developers!
• Maróy Ákos, Bodoky Tamás - Anonim adatszivárogtatás a GlobaLeaks platform segítségével
• Mateusz Olejarka - REST API, pentester's perspective
• Mateusz Olejarka – Approaching the unknown: Windows Phone application security assessment guide
• Matthias Deeg - Bypassing an Enterprise-Grade Biometric Face Authentication System
• Mehmet Ince - A heaven for Hackers: Breaking Log/SIEM Products
• Micha Borrmann - CVSS is a big botch/Scoring systems do not help to improve the IT security
• Micha Borrmann – Attacking all your IPv4 devices at home from the Internet via Dual-Stack Lite
• Mihály Zágon - "The Only Thing That Is Constant Is Change"
• Mike Ossmann - Keynote Speech at #Hacktivity2018
• Mikhail Egorov - Hunting for bugs in Adobe Experience Manager webapps
• Mikhail Egorov - What’s Wrong with WebSocket APIs? Unveiling Vulnerabilities in WebSocket APIs.
• Mikko Hypponen - The Cyber Arms Race
• Mikko Hypponen - The Cyber Arms Race (Magyar)
• MTVA Híradó - Élő bejelentkezés a Hacktivity konferenciáról
• Muha Lajos, Dr. - Információbiztonsági törvény értelmezése
• Márk Vinkovits – I play Jack of Information Disclosure – How to do threat modeling via playing cards
• Nicolas Grégoire - Hunting for Top Bounties
• Norbert Tihanyi – Modification of the prime generation method of the OpenSSL library
• Omar Eissa - Network Automation is not your Safe Haven
• Omer Coskun – Why nation-state malwares target Telco Networks: Regin and its counterparts
• Paolo Stagno - A Drone Tale: All Your Drones Belong To Us
• Paul M. Wright - Oracle 12c Security - Defense and Attack
• Philip Young - Smashing the Mainframe for Fun and Prison Time
• Pornsook Kornkitichai – Defend PowerShell Attacks When All Else Fails
• Renáta Hodován – Fuzzinator, a browser fuzzing framework
• René Freingruber – Bypassing application whitelisting in critical infrastructures
• Robert Lipovsky - The "Facebook PokerAgent"
• Rodrigo Branco - How Offensive Security is Defining the Way We Compute // Keynote Speech
• Roland Kamarás - Locky: anti-analysis techniques used by the ransomware
• ROUNDTABLE DISCUSSION
• Ruchna Nigam - Android Packers: Separating from the Pack
• Róbert Kiss, Attila Zsellér - Security Alerts That Are Worth A Phone Call
• Róbert Neumann - What's 4k in real Money?
• Sebastian Garcia – The Network Behavior of Targeted Attacks
• Sergej Proskurin, Tamás K. Lengyel – Stealthy, Hypervisor-based Malware Analysis
• Shahar Tal - I hunt TR-069 admins: pwning ISPs like a boss
• Stefan Marsiske – Post-quantum is the new cyber!!5!
• Stephan Gerling - Hacking Yachts Remotely via Satcom or Maritime Internet Router
• Szakály Tamás - Lopott bájtok a videokártyán -- a GPU, mint anti-rce eszköz
• Szakály Tamás, Rajtmár Ákos - eXploitable Markup Language
• Szilárd Pfeiffer - TOTP is not a Silver Bullet
• Székely Tamás - DDoS-t vettem a vásárban bitpénzzel
• Tamas K. Lengyel - Virtual Machine Introspection to Detect and Protect
• Tamas Szakaly - Stolen bytes on the video card -- the GPU as an anti-rce device
• Tamas Szakaly, Ákos Rajtmár - eXploitable Markup Language
• Tamás Jós, Attila Bogár - is BitTorrent really providing anonymity?
• Tamás Kocsis & Bálint Kovács - Fight Against Fake News Sites Using Open Source Tools (in Hungarian)
• Tamás Szakály – Help, I've got ANTs!!!
• Tamás Szakály – Shall we play a game?
• Tamás Székely - One a Penny, Two a Penny Hot DDoS run
• Thaís Moreira Hamasaki - The (not so profitable) Path towards Automated Heap Exploitation
• The Big Software Supply Chain Security Problem
• Thomas Debize - A Decade of Infosec Tools
• Tibor Bősze - Cryptocurrencies: The Other Side of the Coin
• Timur Khrotko - AppSec, the Untrustable Security
• Travis Goodspeed - Some Thoughts on Literate Disassembly and Symbol Porting
• Travis Goodspeed – A Keynote in Praise of Junk Hacking
• Tényi Géza, Dr. - Bizalmas információk kezelése és adatvédelem a felhőszolgáltatásban
• Tünde Lendvai - Chinese Social Credit System - Security Issues and Social Impact
• Vaagn Toukharian - HTTP Time Bandit
• Varga-Perke Bálint, Buherátor - Heureka - Az a gyanús ami nem gyanús
• Vincent Ruijter - ~Securing~ Attacking Kubernetes
• Vladimir Katalov – iOS Acquisition Methods Compared
• Váradi Tamás, Zánthó Csaba - Lamellás vs. csapos zárak biztonsága
• Váradi Tamás– Tárcsás zárak nyitásának eszközei és módszerei
• Yury Chemerkin - (In-) Efficiency of security features on mobile security and compliance
• Yury Chemerkin - Breaking Smart. Hacking Health, Wearable and Smart Apps to Prevent Leaking
• Zane Lackey - Attack-driven defense
• Zoltán Alexin - European and Hungarian Approach to Personal Data Protection
• Zoltán Balázs - Alice in eXploitland, attack and defense evolution
• Zoltán Balázs - Ethereum Smart Contract Hacking Explained like I’m Five
• Zoltán Balázs - How to hide your browser 0-days
• Zoltán Balázs - How to pwn a Windows domain?
• Zoltán Balázs - Oldschool is Still Cool
• Zoltán Balázs – Sandbox detection for the masses: leak, abuse, test
• Zoltán Balázs – The real risks of the IoT security-nightmare: Hacking IP cameras through the cloud
• Zoltán L. Németh – Memory corruption vulnerabilities, runtime mitigations and their bypasses
• Zoltán Wollner - Behind the Rabbit and beyond the USB
• Zoz – Data Demolition: Gone in 60 Seconds
• Zsombor Kovács - Cheaters for Everything from Minesweeper to Mobile Banking Applications
• Zsombor Kovács – Semi-automated mapping of iOS binaries
• Zsombor Kovács, Gergő Köpenczei - Advanced Tracing and Monitoring of Android Applications
• Ákos Maróy, Tamás Bodoky - Anonim whistleblowing using the GlobaLeaks platform
• Áron Szabó – Post-kvantumkriptográfia: prím kérdések = príma kérdések