Talks
Introduces a framework that derives features for fingerprinting and identifying infrastructure.
infrastructureframeworkfingerprinting+2
October 2026 · Luxembourg
hack.lu 2026
1 session · 47 talks
Sessions at this event
All hack.lu 2026 talks
1–24 of 47 talks
Talks
Dissects how an iOS exploit kit is put together and how its components work, seen from an analyst's side.
mobilemalware-analysisreverse-engineering+1
Talks
Examines how Android phones can be analyzed at scale.
androidmobiledevice+1
Talks
Shows how reverse engineering of CAN bus protocols can be automated to speed up analysis of vehicle networks.
reverse-engineeringautomationnetwork+1
Talks·28 min
Olga Bogolyubova
Argues that trauma and attachment research can explain social engineering vulnerability better than cognitive bias models.
socialengineeringtrust+2
Talks
Examines why security is often bolted onto systems after the fact rather than built in from the start.
appsecarchitecturedevelopment+1
Talks
Covers scaling binary similarity analysis and clustering of compiled code with the BSimVis tool.
reverse-engineeringmalware-analysistool+1
Talks
Traces how command and control infrastructure has evolved from older designs to what comes next.
attackinfrastructureevolution+2
Talks
Examines how code-level security analysis holds up when the attacker's perspective is taken into account.
codeappsecvulnerabilities+1
Talks
Walks through how weak typing in Livewire leads to a pre-authenticated remote code execution flaw.
webvulnerability-researchexploit+1
Talks
Shows where Linux rootkits can hide in user-space and how to look for them.
linuxthreat-detectionmalware-analysis+2
Talks
Explains how firmware cartography with Pyrrha 2.0 maps the structure of a firmware image.
embeddeddevicetool+1
Talks·30 min
Vincent Herbulot
Shows how tagging and ranking wordlist entries by criticality makes web fuzzing faster and better targeted.
webrecontool+2
Talks
Explains how ESC17 abuse of AD Certificate Services can be used to attack HTTPS-enabled WSUS clients.
windowsexploitationattack+1
Talks
Explains how automated analysis of dark web text can infer geographic locations from the data.
intelligencemachine-learningthreat+1
Talks
Dissects a state-aligned espionage campaign, covering its components and how it was structured.
threatintelligenceattack+1
Talks
Covers how global telemetry data can be turned into local remediation steps.
threat-detectionincident-responsesecurity-operations+1
Talks
GoaTracer is a hybrid platform built for dynamic analysis of programs.
malware-analysistoolplatform+1
Talks
Looks at why hostile security tools put engineers off and how UX thinking can make them easier to use.
developertooldefensive-security+2
Talks
Examines why mature security operations centers still fail during incident response, focusing on human factors under pressure.
incident-responsesecurity-operationsteam+2
Talks
Examines how stalkerware command-and-control protocols are reversed and recreated with mock servers for analysis.
malware-analysisreverse-engineeringstalkerware+1
Talks
Examines IPv6, the Y2K38 timestamp rollover and other technical failures that could cause widespread disruption.
risknetworkinternet+1
Talks
Explains how kernel primitives can lead to code execution on Windows 11 with VBS, HVCI and kCET enabled.
kernelwindowsexploitation+1
Talks·30 min
Mathew Caplan
Uses music history and production analogies to explain how identity-driven attacks blend into normal activity and evade detection.
threat-detectionidentityransomware+2