BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2026//talk//TK3D8T
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251022T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:SVGosploit - When Steganography Meets Vector Graphics - Saumil Sha
 h
DTSTART;TZID=Europe/Luxembourg:20261022T101500
DTEND;TZID=Europe/Luxembourg:20261022T104500
DTSTAMP:20261009T054102Z
UID:pretalx-hack-lu-2026-TK3D8T@pretalx.com
DESCRIPTION:"A good exploit is one that is delivered in style". 10 years a
 go\, I created and presented\, at Hack.LU\, a practical exploit delivery m
 echanism using steganography and polyglots involving JPEG images. With SVG
 osploit\, I present a practical solution for embedding undetectable malici
 ous content within SVG files. This talk explores the internals of SVG file
 s\, candidate locations for data hiding\, density of data that can be hidd
 en and tools to demonstrate in-browser extraction of steganographic conten
 t.\n\nWhile the world is focussing on bug hunting at scale\, techniques th
 at fly below the radar and stay hidden in plain sight equally contribute t
 o a larger impact in the whole offensive cybersecurity theatre.
LOCATION:Europe
URL:https://pretalx.com/hack-lu-2026/talk/TK3D8T/
END:VEVENT
END:VCALENDAR