hack.lu 2023

Version 0.56 Oct. 18, 2023

We released a new schedule version!

Version 0.55 Oct. 17, 2023

We released a new schedule version!

We have a new session: “Supply chain resilience: challenges & solutions” by Saâd Kadhi.

Version 0.54 Oct. 17, 2023

We released a new schedule version!

We have new sessions!

• “DER Editing, Easy-Peasy with asn1template” by William Robinet
• “Do we consider this as a risks already” by Vladimir Kropotov
• “SLP DoS Amplification - someone is having fun” by Pedro Umbelino

Version 0.53 Oct. 17, 2023

We released a new schedule version!

We have moved a session around: “Wintermute: an LLM pen-testing buddy” by Aaron Kaplan (Oct. 17, 2023, 1:55 p.m. → Oct. 19, 2023, 1:40 p.m.)

Version 0.52 Oct. 16, 2023

We released a new schedule version!

We have new sessions!

• “Sigma Project News” by Thomas Patzke
• “Wintermute: an LLM pen-testing buddy” by Aaron Kaplan
• “Are Leaked Credentials Dumps Used by Attackers?” by Xavier Mertens
• “Lessons learned from sharing intel about potential fraud / compromise” by Jeroen Pinoy

Version 0.51 Oct. 16, 2023

We released a new schedule version!

We have a new session: “Suricata Language Server” by Eric Leblond.

Version 0.50 Oct. 16, 2023

We released a new schedule version!

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Case Management” by Cruciani David (Oct. 16, 2023, 2:20 p.m. → Oct. 16, 2023, 2:15 p.m.)
• “GeoOpen and mmdb-server: A Comprehensive Open Source Solution for IP Address Geolocation” by Alexandre Dulaunoy (Oct. 16, 2023, 2:25 p.m. → Oct. 16, 2023, 2:20 p.m.)
• “The composition analysis of binary Java, ELF, Go, and JavaScript apps” by Philippe Ombredanne (Oct. 16, 2023, 2:15 p.m. → Oct. 16, 2023, 2:10 p.m.)
• “Cobalt Striked?” by Vincent Hinderer (Oct. 16, 2023, 2:10 p.m. → Oct. 17, 2023, 1:35 p.m.)

Version 0.49 Oct. 16, 2023

We released a new schedule version!

We have a new session: “Cerebrate - learning to run” by Andras Iklody.

Version 0.48 Oct. 16, 2023

We released a new schedule version!

We have a new session: “Liberate the CSAM hashsets!” by Andras Iklody.

Version 0.47 Oct. 16, 2023

We released a new schedule version!

Version 0.46 Oct. 16, 2023

We released a new schedule version!

We have a new session: “GeoOpen and mmdb-server: A Comprehensive Open Source Solution for IP Address Geolocation” by Alexandre Dulaunoy.

Version 0.45 Oct. 16, 2023

We released a new schedule version!

We have a new session: “Case Management” by Cruciani David.

Version 0.44 Oct. 16, 2023

We released a new schedule version!

We have a new session: “MISP updates” by Andras Iklody.

Version 0.43 Oct. 16, 2023

We released a new schedule version!

We have new sessions!

• “The composition analysis of binary Java, ELF, Go, and JavaScript apps” by Philippe Ombredanne
• “Non vulnerable package dependency resolution” by Philippe Ombredanne

Version 0.42 Oct. 16, 2023

We released a new schedule version!

We have new sessions!

• “Cloaking malicious web content delivery” by Jeroen Pinoy
• “Belgian Cyber Reserve Forces” by Christophe Vandeplas
• “Token Smart Contract Analyzer” by TGrandjean
• “Token Smart Contract Analyzer” by TGrandjean
• “Velocity Raptor: Accelerating Velociraptor Hunting with Tenzir Pipelines” by Matthias Vallentin
• “Cobalt Striked?” by Vincent Hinderer
• “Deming - ISMS Open Source” by Didier Barzin
• “TIDeMEC : A Detection Engineering platform homegrown at the European Commission” by Amine Besson
• “You can learn anything.” by Pauline Bourmeau (Cookie)

Version 0.41 Oct. 13, 2023

We released a new schedule version!

Version 0.40 Oct. 13, 2023

We released a new schedule version!

Version 0.39 Oct. 9, 2023

We released a new schedule version!

Version 0.38 Oct. 5, 2023

We released a new schedule version!

We have new sessions!

• “Kunai workshop: your new Threat Hunting tool for Linux” by Quentin JEROME
• “Building Your Own Workflows in MISP: Tutorial and Hands-on” by Sami Mokaddem

Version 0.37 Oct. 5, 2023

We released a new schedule version!

We have a new session: “As We Are Many” by Michael Hamm.

We have moved a session around: “Dismantle the bomb” by Stijn Tomme (Oct. 18, 2023, 4:30 p.m. → Oct. 18, 2023, 4:15 p.m.)

Version 0.36 Oct. 5, 2023

We released a new schedule version!

We sadly had to cancel a session: “Secure Coding: Fix from the root” by Gopika S

Version 0.35 Oct. 4, 2023

We released a new schedule version!

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Your unknown Twins: Identity in the era of Deepfakes, AI and mass Biometrics exposure” by Vladimir Kropotov (Oct. 18, 2023, 5 p.m. → Oct. 18, 2023, 4:15 p.m.)
• “PHP filter chains: How to use it” by Rémi Matasse (@_remsio_), Pierre Martin (@_Worty) (Oct. 18, 2023, 5:30 p.m. → Oct. 18, 2023, 4:45 p.m.)

Version 0.34 Oct. 2, 2023

We released a new schedule version!

We have new sessions!

• “Dismantle the bomb” by Stijn Tomme
• “Dismantle the bomb” by Stijn Tomme

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Kunai: your new Threat Hunting tool for Linux” by Quentin JEROME (Oct. 18, 2023, 5 p.m. → Oct. 19, 2023, 5:15 p.m.)
• “Dismantle the bomb” by Stijn Tomme (Oct. 17, 2023, 10:30 a.m., Schengen 1 and 2 → Oct. 17, 2023, 4:30 p.m., Echternach&Diekirch)
• “Your unknown Twins: Identity in the era of Deepfakes, AI and mass Biometrics exposure” by Vladimir Kropotov (Oct. 19, 2023, 5:15 p.m. → Oct. 18, 2023, 5 p.m.)

Version 0.33 Oct. 2, 2023

We released a new schedule version!

We have new sessions!

• “Dismantle the bomb” by Stijn Tomme
• “Dismantle the bomb” by Stijn Tomme
• “Dismantle the bomb” by Stijn Tomme
• “Dismantle the bomb” by Stijn Tomme
• “Dismantle the bomb” by Stijn Tomme
• “Dismantle the bomb” by Stijn Tomme
• “Dismantle the bomb” by Stijn Tomme

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “The new Sigma Toolchain” by Thomas Patzke (Echternach&Diekirch → Hollenfels)
• “Build your own malware analysis pipeline using open source tools” by Michał Praszmo, psrok1, Jarosław Jedynak (Echternach&Diekirch → Vianden&Wiltz)
• “Dismantle the bomb” by Stijn Tomme (Oct. 19, 2023, 10 a.m., Schengen 1 and 2 → Oct. 19, 2023, 2 p.m., Echternach&Diekirch)
• “DFIRTrack - The Incident Response Tracking Application” by Mathias Stuhlmacher, Lionne Stangier (Echternach&Diekirch → Vianden&Wiltz)

Version 0.32 Sept. 29, 2023

We released a new schedule version!

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Embedded Threats: A Deep Dive into the eSIM World” by Markus Vervier (Oct. 19, 2023, 2 p.m. → Oct. 18, 2023, 2 p.m.)
• “Open Wounds: The last 5 years have left Bluetooth to bleed” by Xeno Kovah (Oct. 18, 2023, 2 p.m. → Oct. 19, 2023, 2 p.m.)

Version 0.31 Sept. 27, 2023

We released a new schedule version!

Version 0.30 Sept. 25, 2023

We released a new schedule version!

We have moved a session around: “Yeti - old dog, new tricks” by Thomas Chopitea, Sébastien Larinier (Oct. 16, 2023, 5 p.m. → Oct. 17, 2023, 5:55 p.m.)

Version 0.29 Sept. 21, 2023

We released a new schedule version!

We have a new session: “Non-state actors’ cyber activity in Armed Conflict: impact, implications and remediation” by Deleted User, Mauro Vignati, Elena Rückheim.

Version 0.28 Sept. 19, 2023

We released a new schedule version!

Version 0.27 Sept. 18, 2023

We released a new schedule version!

Version 0.26 Sept. 18, 2023

We released a new schedule version!

We have a new session: “Internet exposure of satellite modems, and their vulnerabilities” by Patrice Auffret, Arnaud Girault.

Version 0.25 Sept. 18, 2023

We released a new schedule version!

Version 0.24 Sept. 18, 2023

We released a new schedule version!

Version 0.23 Sept. 16, 2023

We released a new schedule version!

We have a new session: “CTI is dead, long live CTI!” by David.

Version 0.22 Sept. 15, 2023

We released a new schedule version!

Version 0.21 Sept. 14, 2023

We released a new schedule version!

We have a new session: “Your unknown Twins: Identity in the era of Deepfakes, AI and mass Biometrics exposure” by Vladimir Kropotov.

Version 0.20 Sept. 14, 2023

We released a new schedule version!

Version 0.19 Sept. 14, 2023

We released a new schedule version!

We have moved a session around: “CyberChef: Enhancing Existing Operations and Adding New Operations” by Didier Stevens (Oct. 18, 2023, 2 p.m. → Oct. 19, 2023, 2 p.m.)

Version 0.18 Sept. 14, 2023

We released a new schedule version!

We have a new session: “Customize Your Own Command & Control: Design and Code Your Own Implant in a Real Infrastructure” by Guillaume Prigent, Adrien Barchapt-Perrot.

We have moved a session around: “An Introduction to ARM64 Assembly and Shellcode” by Saumil Shah (Hollenfels → Vianden&Wiltz)

Version 0.17 Sept. 14, 2023

We released a new schedule version!

We have a new session: “How Digital Technologies are Redefining Warfare and Why It Matters” by Mauro Vignati.

Version 0.16 Sept. 13, 2023

We released a new schedule version!

We have a new session: “How Crowdsec is building a collaborative, trustable, and crowdsourced CTI to change the cybersecurity landscape” by Matthieu Mazzolini.

Version 0.15 Sept. 11, 2023

We released a new schedule version!

We have new sessions!

• “Do's and don'ts in file formats” by Ange Albertini
• “Sbud: infovis in infosec” by Ange Albertini

Version 0.14 Sept. 11, 2023

We released a new schedule version!

We have a new session: “Yeti - old dog, new tricks” by Thomas Chopitea, Sébastien Larinier.

Version 0.13 Sept. 11, 2023

We released a new schedule version!

Version 0.12 Sept. 8, 2023

We released a new schedule version!

We have a new session: “FOSStering an ISAC: Enabling a Community with Open-Source Tools” by JJ Josing.

Version 0.11 Sept. 8, 2023

We released a new schedule version!

We have new sessions!

• “Introduction to cyberwarfare: theory and practice” by Lukasz Olejnik
• “Full Stack Forensics with FOSS” by Thomas Chopitea, Sébastien Larinier

Version 0.10 Sept. 7, 2023

We released a new schedule version!

We have new sessions!

• “Ensuring IoC quality at CERT-FR” by Barrault Victor
• “Defeating VPN Always-On” by Maxime Clementz
• “Managing spam, phishing and other boring tasks with your users and constituents” by Raphaël Vinot
• “Managing spam, phishing and other boring tasks with your users and constituents” by Raphaël Vinot
• “Reviving our oldest Tool - Using Bayesian inference to detect cyber attacks” by Emanuel Seemann
• “MISP42: connecting CTI and SOC teams” by Remi Seguy
• “Digital Tug of War: Unraveling the Cyber Battle Between Ukraine and Russia” by Ondrej Nekovar, Jan
• “Detecting VPNs/proxies by analyzing their attack patterns over time” by Emanuel Seemann
• “He is everywhere: A tale of Lazarus and his family” by JeongGak Lyu, @lazarusholic
• “Building an evil phone charging station.” by Stef van Dop, Tomás Philippart
• “Secure Coding: Fix from the root” by Gopika S
• “DFIRTrack - The Incident Response Tracking Application” by Mathias Stuhlmacher, Lionne Stangier
• “The rise of malicious MSIX file” by Shogo Hayashi, Rintaro Koike
• “JTAN - data sharing network” by Alexandre Dulaunoy, Paweł Pawliński
• “Embedded Threats: A Deep Dive into the eSIM World” by Markus Vervier
• “The new Sigma Toolchain” by Thomas Patzke
• “Build your own malware analysis pipeline using open source tools” by Michał Praszmo, psrok1, Jarosław Jedynak
• “Operation Duck Hunt - A peak behind the curtain of DuckTail” by Pol Thill
• “Using systematic code reuse analysis to create robust YARA rules” by Jonas Wagner, Carlos Rubio Ricote

Version 0.9 Sept. 5, 2023

We released a new schedule version!

We have a new session: “Raiders of the Lost Arts” by Stefan Hager.

Version 0.8 Sept. 5, 2023

We released a new schedule version!

We have new sessions!

• “PXF-X - A modular python framework to hunt, extract and enrich Post-Exploitation Framework artifacts” by Joel Doenne
• “Kunai: your new Threat Hunting tool for Linux” by Quentin JEROME
• “Kunai: your new Threat Hunting tool for Linux” by Quentin JEROME

Version 0.7 Sept. 5, 2023

We released a new schedule version!

Version 0.6 Sept. 5, 2023

We released a new schedule version!

We have new sessions!

• “Three Ways to Reverse-Engineering Cryptographic Functions” by Finn Steglich
• “A deep dive into Maritime Cybersecurity.” by JACQ
• “SBOMs: are they a threat or a menace?” by Philippe Ombredanne

Version 0.5 Sept. 5, 2023

We released a new schedule version!

We have a new session: “Cratos - Use your bloody indicators” by Dennis Rand.

Version 0.4 Sept. 5, 2023

We released a new schedule version!

We have a new session: “Dismantle the bomb” by Stijn Tomme.

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “ACME: benefits of deploying an Internet Security protocol inside your corporate network” by Christophe Brocas (Oct. 18, 2023, 2:30 p.m. → Oct. 18, 2023, 3:30 p.m.)
• “Turbocharging IOC validation: Become a more efficient CTI analyst” by Arwa Alomari (Oct. 16, 2023, 3:30 p.m. → Oct. 17, 2023, 2:30 p.m.)
• “Almost 2 years after log4j .. if your PSIRT has survived, Are the Lessons learned or not learned on security incident & vulnerability management ?” by FrederiqueD, Thales (Oct. 18, 2023, 3:30 p.m. → Oct. 19, 2023, 9:30 a.m.)
• “Threat actors & surveillance companies targeting telecom operators” by Alexandre De Oliveira (Oct. 17, 2023, 5 p.m. → Oct. 17, 2023, 4:45 p.m.)
• “Pyrrha: navigate easily into your system binaries” by Eloïse Brocas (Oct. 17, 2023, 4:30 p.m. → Oct. 17, 2023, 4:15 p.m.)
• “PHP filter chains: How to use it” by Rémi Matasse (@_remsio_), Pierre Martin (@_Worty) (Oct. 18, 2023, 5 p.m. → Oct. 18, 2023, 5:30 p.m.)
• “Permissionless Universal Overlays” by Dimitrios Valsamaras (Oct. 19, 2023, 11 a.m. → Oct. 19, 2023, 10:40 a.m.)

Version 0.3 Sept. 5, 2023

We released a new schedule version!

We have new sessions!

• “Malware AV evasion tricks. Cryptography in malware” by cocomelonc
• “ACME: benefits of deploying an Internet Security protocol inside your corporate network” by Christophe Brocas
• “Why does the CTI industry struggle with communicating uncertainties?” by Ondra Rojcik
• “Almost 2 years after log4j .. if your PSIRT has survived, Are the Lessons learned or not learned on security incident & vulnerability management ?” by FrederiqueD, Thales
• “Threat actors & surveillance companies targeting telecom operators” by Alexandre De Oliveira
• “Turbocharging IOC validation: Become a more efficient CTI analyst” by Arwa Alomari
• “Open Wounds: The last 5 years have left Bluetooth to bleed” by Xeno Kovah
• “How to operationalize CTI - A real world example” by Melanie Niethammer
• “Avoiding the basilisk's fangs: State-of-the-art in AI LLM detection” by Jacob Torrey
• “Cryptocurrency & Web3 OSINT Workshop” by Patrick Ventuzelo, Tanguy Laucournet, Mohammed Benhelli
• “IPFS Unveiled: Exploring Data Collection, Analysis, and Security” by Patrick Ventuzelo, Tanguy Laucournet
• “Permissionless Universal Overlays” by Dimitrios Valsamaras
• “Analyzing Cobalt Strike Beacons, Servers and Traffic” by Didier Stevens
• “CyberChef: Enhancing Existing Operations and Adding New Operations” by Didier Stevens

Version 0.2 Sept. 4, 2023

We released a new schedule version!

We have new sessions!

• “An Introduction to ARM64 Assembly and Shellcode” by Saumil Shah
• “The Renaissance of Cyber Physical Offensive Capabilities” by Daniel Kapellmann Zafra
• “Pyrrha: navigate easily into your system binaries” by Eloïse Brocas
• “Ongoing EvilEye Campaigns Targeting CCP Adversaries” by Rascagneres Paul
• “Using Apple Sysdiagnose for mobile forensics and integrity checks” by David Durvaux, Aaron Kaplan
• “Modern IOCs matching with Suricata” by Eric Leblond, Peter Manev

Version 0.1 Sept. 4, 2023

We released our first draft schedule!