ROOTCON Hacking Conference

168 talks · 2019–2025 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Preempt, Protect, Prevail Key Takeaways from 2025 Sophos Active Adversary Report 2025
• State of Cybersecurity 2023: The Business Impact of Adversaries - Speedtalk from Sophos 2023
• Dissecting APT Malware Against Taiwan in 2019 2019
• 101 Village - Hacking 101 by: Ariz Soriano
• 101 Village - Mobile Pentesting 101 by: Christian Villapando
• A 3-Year Tale of Hacking a Pwn2Own Target by: Orange Tsai
• Accelerating Security Transformation - The Value of Managed Security - SpeedTalk from Nexus
• Active Directory Domination through Configuration Abuse and OPSE by: Mars Cheng & Dexter Chen
• Agents of Chaos - Real World Agentic AI Attack Vectors
• AI Assisted C2 Development by Gabriel Cruz (meaty)
• AI's Underbelly: The Zero-Day Goldmineby: Dan McInerney
• AI-Augmentation – Transforming Security Operations
• AMSI FAILs by: Melvin Langvik
• Anomaly Detection System
• APAD An EDR Grade for WiFi APs
• Apple Health by: Vladimir Katalov
• Attacking Modern Environments Series Attack Vectors on Terraform Environments Inbox by Mazin A.
• Automating Threat Hunting on the Dark Web by: Apurv Singh Gautam (@ASG_Sc0rpi0n)
• Automating your CAN Bus Hacking
• Azure Illuminati: Unveiling the Mysteries of Cloud Exploitation by: Raunak Parmar
• Behind LockerGoga – A Walk Through a Ransomware Attack Worth $40M
• Beneath the Prompt: The Hidden Risks Powering GenAI
• Blockchain Based OT Monitoring Solution BBOTMS by: Asif Hameed Khan / Gagan Jattana
• Breaking Barriers: Using XSS to Achieve RCEby: Aden Yap, Ali Radzali, Azrul Zulkifli, Sheikh Rizan
• Breaking into the iCloud Keychain by: Vladimir Katalov
• Bug Bounty 101
• Bug Bounty Hunting on Steroids by: Anshuman Bhartiya
• Burnout The Security Risk by: Chloé Messdaghi
• Buzzard Crafting your post-exploitation framework against odds by Aravindha Hariharan and Subhaj
• Bypass 2FA Stealing Private Keys by: Maxwell Koh
• Car Hacking Scene in the PH: How Far We've Come by: Jay Turla
• Car Hacking Village (RC14 Recovery Mode)
• Car Hacking Village - An overview of Automotive Defensive Engineering By Scott Sheahan
• Car Hacking Village - Analysis of an In-vehicular network: From CAN bus to infotainment by Div0 CSQ
• Car Hacking Village: Cartint 2.0: An Open-Source Ai-Native Automotive ...
• Car Infotainment Hacking Methodology and Attack Surface Scenarios by: Jay Turla
• Career 101 - 0wning Your Cyber Security Career
• Cellphone Security Exposed: Understanding Interception and Other Cellphone Threats
• Cellular Assault Village: Uncovering Cellphone Risks by: Henry Caga
• Chip Off Forensics
• Click Here For Free TV Chaining Bugs to Takeover Wind Vision Accounts by Leonidas Tsaousis
• Closing Keynote by Randolph Barr
• Crafting your own combat hardware
• Ctrl + Flow + Esc: Escaping Red Team Chaos by Yi Ting Shen, Ariz Soriano
• Custom Software Development - Speedtalk from PhilIT
• Cyber Security Threats to Telecom Networks by: Hardik Mehta
• Data Driven Web Hacking & Manual Testing by: Jason Haddix
• Data Enrichment and Intel to automate operational intel by: Haran Kumar
• Data Privacy and Security; Accountability and Assurance in the Digital Age by: Raymund Liboro
• Defending cloud Infrastructures with Cloud Security Suite by: Shivankar Ma
• Demystifying the Ransomware and IoT Threat by: Christopher Elisan
• Discover vulnerabilities with CodeQL by: Boik Su (@boik_su)
• Discovering C&C in Malicious PDF with obfuscation, encoding and other techniques by Filipi
• Dissecting Exploit Kits by: Daniel Frank
• DNS Detection and Response - SpeedTalk from Infoblox
• Expl(IoT): Hacking IoT like a boss by: Aseem Jakhar
• Exploiting ActionScript3 Interpreter by: Boris Larin
• Exploits Exposed: Smarter Scoring, Sharper Defense
• Exploring Android Accessibility Malware - Speedtalk from Appdome
• Farewell WAF Exploiting SQL Injection from Mutation to Polymorphism
• Finding Your Way to Domain Admin Access and Even So, the Game Isn't Over Yet by: Keith Lee
• Fire & Ice; Making and Breaking macOS firewalls by: Patrick Wardle
• From an 'IVI in a box' to a 'CAR in a box' by: Ian Tabor @mintynet
• Fuzzing Revisiting Software Security by Nafiez
• Gathering Cyber Threat Intelligence from the Cyber Criminal Underground by Eric Reyata
• Gathering Vulnerability Intel from Darkweb by: Nandakishore Harikumar
• Getting hands dirty with IOT/Embedded Device Security Testing by: Kaustubh Padwad
• Getting hands dirty with IOT/Embedded Device Security Testing by: Kaustubh Padwad
• Hack the Planet! Desecuritise Cyberspace Keynote by Emil Tan
• Hackers Don't Wear Black Hoodies, They Wear Capes by: Chloé Messdaghi
• Hacking 101 Offensive Operation by s8nph
• Hacking 101 Training (RC14 Recovery Mode Edition)
• Hacking Back Your car by: Kamel Ghali
• Hacking ICS Devices PLCs for FUN
• Hacking Robots Before Skynet by: Lucas Apa
• How to not Fail at Hardware by: Craig Smith
• Hunting Threats with Wireshark Plugins
• I've Injected a DLL You Won't Believe What Happened Next by: @CaptnBanana
• Identity Crisis War Stories from Authentication Failures
• Instant Yara signatures by Rick Wesson
• IoT and JTAG Primer by: Michel Chamberland
• ISOG Membership - Speedtalk from ISOG
• Keeping Up With Modern Automotive Exploitation by Kamel Ghali
• Launching of Siyasat Linux
• Learning after doing 200 Pentests: Speedtalk from Theos
• Making the World Healthier, Safer and Smarter and More Sustainable: Speedtalk from Emerson
• Malware Hunting Using python as attack weapon by Filipi Pires
• Navigating the Network: Active Directory Attacks and OPSEC Strategies
• Navigating the Shift from Opportunistic to Targeted Ransomware Attacks
• Not So Crab Mentality: A True RasS Story by: Christopher Elisan
• OAuth Authentication Bypass by Sheikh Rizan
• Open source docker runtime analysis framework by: Rohit Sehgal
• Panel Discussion: Philippine National ID System
• Phish MOMUKAMO by: Eric Reyata
• Phishing & Education Applying security principles during the pandemic by IJ Puzon
• pi$$ing off an APT by: Ed Williams
• Pilot Study on Semi Automated Patch Diffing by Applying Machine Learning Techniques
• Pursuing Evasive Custom Command & Control C3 by: Mark Ian Secretario / Renzon Cruz
• Quark Engine An Obfuscation Neglect Android Malware Scoring System by: JunWei Song / KunYu Chen
• R For Data Driven Security by: Wilson Chua
• Recon Village - CTI 101 by: Heremias Esquibal
• RECON Village - OSIF by: Eskie Cirrus James Maquilang
• ReconPal Leveraging NLP for Infosec by: Nishant Sharma & Jeswin Mathai
• Red Team Village - Initial Payload Development: The One That Gets Away by: Ian Secretario
• Red Team Village - Introduction to Red Teaming by: TheJanitor
• Red Team Village Workshop No 1
• ROOTCON 10 AV is Dead! Is AV Dead by Berman Enconado
• ROOTCON 10 Big Data Analysis Applied to Network Security by Wilson Chua
• ROOTCON 10 Halcyon by Sanoop Thomas
• ROOTCON 10 Ransomware Battling a Rapidly Changing and Booming Industry by Jaaziel Sam
• ROOTCON 10 Ransomware Battling a Rapidly Changing and Booming Industry by: Jaaziel Sam
• ROOTCON 10 Remote Code Execution via Java Native Deserialization by David Jorm
• ROOTCON 10 Remote Code Execution via Java Native Deserialization by David Jorm
• ROOTCON 10 Reverse Engineering Swift Apps by Michael Gianarakis
• ROOTCON 10 Shifting Paradigms from Windows to Mac by Nicholas Ramos and Michelle Morales
• ROOTCON 10 Certificate Based Strong Client Authentication by Lawrence E. Hughes
• ROOTCON 10 ComeLEAK from Hacking to Behind Bars by godflux & XY
• ROOTCON 10 Cyber Security Threats in Digital Advertising by Karl Dominguez
• ROOTCON 10 Demistifying a Malware Attack by Christopher Elisan
• ROOTCON 10 Doodle
• ROOTCON 10 Exploiting Home Routers by Eskie Maquilang
• ROOTCON 10 Tranewreck by Jeff Kitson
• ROOTCON 16 Soundtrack by Icetre Normal
• ROOTCON 16 Sponsors AVP Loop
• ROOTCON 20 Opening Remarks by Shipcode
• SAP Incident Response, How To Attack and Defend! by: Jordan Santarsieri
• Scarlet OT - OT adversary emulation for fun and profitby: Vic Huang & Sol Yang
• SCARY HACKS by Tikbalang
• Securing Process Control Data Transmission to the Blockchain Network
• Security and Hacking Issues with The METAVERSE: Speedtalk from ISOG
• Security for AI vs. AI for Security
• Skrull Like A King From File Unlink to Persistence by: Sheng-Hao Ma
• Speedtalk Appdome - Where dyld you hide? Leveraging the iOS Mach-O Exe
• SpeedTalk Appdome: Sounds Like a Skill Issue by: Idan Elkayam
• Speedtalk CyberShield - Antifragile Cyber Resilience
• Speedtalk ISOG - Securing a Legacy: Protecting Cyberspace
• SpeedTalk Nexus The Trust Exploit Breaking the Human AI Trust Boundary by Moira Bernice Ngo
• SpeedTalk Pentera - The LOLBAS Odyssey: Tracing the Path of Finding Hidden Gems in Executables
• Speedtalk Qualys - The Journey to Risk Management and Beyond
• Speedtalk RTCo - Quantifying Cyber Risks to Get Leadership Support
• SpeedTalk Theos Intersection of DFIR, Hacking and AI by Paul Jackson
• Speedtalk Theos - Red Teaming Uncensored: The Hard-Hitting Realities of Offensive Security
• SpeedTalk Viettel RaaS A Real Case Study by Henry Nguyen
• Strategies on Securing Your Banks & Enterprises by: Jayson E. Street
• Tales from the Frontlines: Speedtalk from Mandiant
• Teardown of an EV Charger for Security Research and When EV Chargers Attack!
• Technical Surveillance Counter Measure TSCM by: JJ Giner
• The Creation of the Out-Of-Band Anti Virus Dock (OOBAVD) by: Yu Pengfei and Tan Jing Zhi
• The Curious case of knowing the unknown by Vandana Verma Sehgal
• The Goon 001
• The Kill Chain Future of Cyber in Defense by Harshit Agrawa
• The Man In The Middle Attack Against a Certain Password Manager
• The Rise of Security Assistants Over Security Audit Services by: Yuri Chemerkin
• The Role of Hackers in Securing the Country's Cyberspace
• The Year of the C2 by: Quentin Rhoads Herrera and Charles Dardaman
• Thunder and Lightning: Dual Forces in the Digital Skies
• Thunder and Lightning: Dual Forces in the Digital Skies
• Tracking Adversaries through Signals Intelligence - Speedtalk from Security Scorecard
• Two Devices Walk into Azure… One’s a Phish
• Unifying Cybersecurity The New “Infinity War”: Speedtalk from Cyware
• Unleashing Cyber Chaos by: Scott Jarkoff and Aaron Ng
• Using Wordpress comments section as a CC for fun by Juan Karlo Licudineaccidentalrebel
• Why DFIR needs a hacker mindset - SpeedTalk from Kroll
• Why trust 0x00 Trust Matters: Speedtalk from Nexus Technologies
• Workshop: Cyber Threat Intelligence 101
• Workshop: Red Teaming in the Cloud
• z3r0 to h3r0 Targeting Crown Jewels over the Internet
• Zero Trust in the era of cloud by: Vandana Verma Sehgal aka InfosecVandana