BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//orangecon-2026//speaker//7WUUAN
BEGIN:VEVENT
UID:pretalx-orangecon-2026-YLUTXV@pretalx.com
DTSTART:20260604T145500Z
DTEND:20260604T162500Z
DESCRIPTION:Red teaming social engineering campaigns can fail before they e
 ven start: as soon as your AiTM infrastructure goes live\, automated syste
 ms detect you and takedowns start. This hands-on workshop shows how to har
 den your infrastructure against bots and other prying eyes. We will demons
 trate practical techniques to detect and filter automated traffic\, using 
 Caddy as a “bot deflector”\, custom url path rewriting\, and implement
 ing a scoring-based system to hotswap content in real time. You will also 
 get a behind-the-scenes look at how we manipulate JA4 to reduce detection 
 opportunities and subtly adjust visual elements to evade AiTM detection\, 
 along with a discussion of their limitations. \n\nIf you come prepared wit
 h a virtual machine\, by the end of the workshop\, you will have a local s
 etup to test Evilginx behind Caddy\, understand how to dynamically respond
  to suspected bot traffic\, and gain insight into the strategies our team 
 uses to keep red team infrastructures alive long enough to achieve their o
 bjectives.
DTSTAMP:20260525T192724Z
LOCATION:Workshops 3
SUMMARY:Protecting Your AiTM Infrastructure From Nosy Bots - Bob van der st
 aak\, Rutger Flohil
URL:https://pretalx.com/orangecon-2026/talk/YLUTXV/
END:VEVENT
END:VCALENDAR