AGENDA

Two days of conferences | 23 speakers

09:00

Registration, coffee & croissants

10:00

Introduction

15 min

10:15

Caught in the wild, past, present and future

Clem1 | 45 min

Coffee break

30 min

11:30

What the hell is Windows's CLIP Service - Reversing and exploiting the obfuscated code at its core

Philippe Laulheret | 45 min

0-click RCE on Tesla Model 3 through TPMS Sensors

David Berard, Thomas Imbert | 30 min

Lunch

1h30

14:15

Guest Revolution: Our Story of Compromising the Host Kernel from the VMware Guest

Junoh Lee, Gwangun Jung | 45 min

DMAKiller: Unleashing the Power of DMA to Escape from QEMU/KVM

Yongkang Jia, Yiming Tao, Xiao Lei | 30 min

Exploiting File Writes in Hardened Environments - From HTTP Request to ROP Chain in Node.js

Stefan Schiller | 30 min

Coffee break

45 min

16:45

Defense through Offense: Building a 1-click Calling Exploit targeting Messenger for Android

Andrew Calvano, Octavian Guzu, Ryan Hall | 45 min

Tales of a RCE in a video game

Thomas Dubier | 30 min

Lightning talks & beers

1 h

09:00

Welcoming participants, coffee & croissants

1h15

10:15

Pwning Blockchain for Fun and Profit: Exploiting an RCE Vulnerability in the Solana validator

Ginoah | 45 min

Coffee break

30 min

11:30

0-click RCE on the IVI component: Pwn2Own Automotive edition

Mikhail Evdokimov | 45 min

HSM Security and Exploitation of USB over SPI bug

Sergei Volokitin | 30 min

Lunch

1h30

14:15

Unleashing a 0day: Pivoting Capabilities and Conquering the Linux Kernel

Pedro Pinto | 45 min

Proxying to Kernel : Streaming vulnerabilities from the Windows Kernel

An-Jie Yang | 45 min

Coffee break

45 min

16:30

Utilizing Cross-CPU Allocation to Exploit Preempt-Disabled Linux Kernel

Mingi Cho, Wongi Lee | 45 min

AMD Sinkclose: Universal Ring -2 Privilege Escalation

Enrique E Nissim, Krzysztof Okupski | 45 min

Closing session

15 min

Prepare your venue at Hexacon

Brace yourselves, it is going to be amazing

Reserve your place

Talks and speakers

Trainings

AGENDA

Two days of conferences | 23 speakers

Day 1 - Friday 4th of October | Day 2 - Saturday 5th of October

09:00

Registration, coffee & croissants

10:00

Introduction

10:15

Caught in the wild, past, present and future

11:00

Coffee break

11:30

What the hell is Windows's CLIP Service - Reversing and exploiting the obfuscated code at its core

12:15

0-click RCE on Tesla Model 3 through TPMS Sensors

12:45

Lunch

14:15

Guest Revolution: Our Story of Compromising the Host Kernel from the VMware Guest

15:00

DMAKiller: Unleashing the Power of DMA to Escape from QEMU/KVM

15:30

Exploiting File Writes in Hardened Environments - From HTTP Request to ROP Chain in Node.js

16:00

Coffee break

16:45

Defense through Offense: Building a 1-click Calling Exploit targeting Messenger for Android

17:30

Tales of a RCE in a video game

18:15

Lightning talks & beers

19:30

Social event

Day 1 - Friday 4th of October | Day 2 - Saturday 5th of October

09:00

Welcoming participants, coffee & croissants

10:15

Pwning Blockchain for Fun and Profit: Exploiting an RCE Vulnerability in the Solana validator

11:00

Coffee break

11:30

0-click RCE on the IVI component: Pwn2Own Automotive edition

12:15

HSM Security and Exploitation of USB over SPI bug

12:45

Lunch

14:15

Unleashing a 0day: Pivoting Capabilities and Conquering the Linux Kernel

15:00

Proxying to Kernel : Streaming vulnerabilities from the Windows Kernel

15:45

Coffee break

16:30

Utilizing Cross-CPU Allocation to Exploit Preempt-Disabled Linux Kernel

17:15

AMD Sinkclose: Universal Ring -2 Privilege Escalation

18:00

Closing session

Prepare your venue at Hexacon

Brace yourselves, it is going to be amazing