Talks
Introduces a framework that derives features for fingerprinting and identifying infrastructure.
infrastructureframeworkfingerprinting+2
Talks hack.lu 2026
Luxembourg · October 2026 · 47 talks
Talks from hack.lu 2026.
1–24 of 47 talks
Talks
Dissects how an iOS exploit kit is put together and how its components work, seen from an analyst's side.
mobilemalware-analysisreverse-engineering+1
Talks
Examines how Android phones can be analyzed at scale.
androidmobiledevice+1
Talks
Shows how reverse engineering of CAN bus protocols can be automated to speed up analysis of vehicle networks.
reverse-engineeringautomationnetwork+1
Talks·28 min
Olga Bogolyubova
Argues that trauma and attachment research can explain social engineering vulnerability better than cognitive bias models.
socialengineeringtrust+2
Talks
Examines why security is often bolted onto systems after the fact rather than built in from the start.
appsecarchitecturedevelopment+1
Talks
Covers scaling binary similarity analysis and clustering of compiled code with the BSimVis tool.
reverse-engineeringmalware-analysistool+1
Talks
Traces how command and control infrastructure has evolved from older designs to what comes next.
attackinfrastructureevolution+2
Talks
Examines how code-level security analysis holds up when the attacker's perspective is taken into account.
codeappsecvulnerabilities+1
Talks
Walks through how weak typing in Livewire leads to a pre-authenticated remote code execution flaw.
webvulnerability-researchexploit+1
Talks
Shows where Linux rootkits can hide in user-space and how to look for them.
linuxthreat-detectionmalware-analysis+2
Talks
Explains how firmware cartography with Pyrrha 2.0 maps the structure of a firmware image.
embeddeddevicetool+1
Talks·30 min
Vincent Herbulot
Shows how tagging and ranking wordlist entries by criticality makes web fuzzing faster and better targeted.
webrecontool+2
Talks
Explains how ESC17 abuse of AD Certificate Services can be used to attack HTTPS-enabled WSUS clients.
windowsexploitationattack+1
Talks
Explains how automated analysis of dark web text can infer geographic locations from the data.
intelligencemachine-learningthreat+1
Talks
Dissects a state-aligned espionage campaign, covering its components and how it was structured.
threatintelligenceattack+1
Talks
Covers how global telemetry data can be turned into local remediation steps.
threat-detectionincident-responsesecurity-operations+1
Talks
GoaTracer is a hybrid platform built for dynamic analysis of programs.
malware-analysistoolplatform+1
Talks
Looks at why hostile security tools put engineers off and how UX thinking can make them easier to use.
developertooldefensive-security+2
Talks
Examines why mature security operations centers still fail during incident response, focusing on human factors under pressure.
incident-responsesecurity-operationsteam+2
Talks
Examines how stalkerware command-and-control protocols are reversed and recreated with mock servers for analysis.
malware-analysisreverse-engineeringstalkerware+1
Talks
Examines IPv6, the Y2K38 timestamp rollover and other technical failures that could cause widespread disruption.
risknetworkinternet+1
Talks
Explains how kernel primitives can lead to code execution on Windows 11 with VBS, HVCI and kCET enabled.
kernelwindowsexploitation+1
Talks·30 min
Mathew Caplan
Uses music history and production analogies to explain how identity-driven attacks blend into normal activity and evade detection.
threat-detectionidentityransomware+2