WOOT 2025 closing Keynote
"Escaping Cantor's Find-Fix Cycle"
by Falcon Darkstar Momot from Dartmouth College and Aiven.io

Last papers session "Exploit All the Things" (Chair: Cristine Hoepers)
- Soufian El Yadmani: SecurePoC—detecting malicious GitHub exploits
- Andrea Mambretti: SoK on kernel vuln discovery & auto exploit generation
- Junho Lee: BOOTKITTY—stealth bootkit-rootkit for modern OSes

WOOT 2025 late morning session: Application Security (Chair: Yves Younan)
- Gabriel Karl Gegenhuber: Prekey Pogo—WhatsApp handshake weaknesses
- Manuel Karl: Formula injection in real-world spreadsheets
- Jannik Hartung: PHP foot-gun case study (Best paper award !)

WOOT 2025 day 2 starts with another Physical Attacks session (Chair: A. Zonenberg):
- Valentin Huber: Deep dive into FRAM fault injection effects
- Boyapally Harishma: Side-channel reality check on ARM Cortex-A72
- Wooyeon Jo: PLC memory exploitation in industrial systems

WOOT 2025 last session today Network Security :
- Mehrdad Hajizadeh: DeepRed: AI-driven red teaming vs ML-NIDS
- Shujie Zhao: Stealth BGP hijacks under uRPF
- Anqi Chen: FUZZVPN: Hunting OpenVPN vulns

WOOT 2025 1st session of the afternoon, "Hacking at a Distance" with:
- Tommaso Sacchetti on large scale Bluetooth Security Testing
- Chengsong Diao: Vulnerabilities in Master Lock Smart Locks
- Seyyed Ali Ayati Acoustic Side-Channel on keyboards

First session, on hardware security:
Two talks on attacking the @raspberrypi.com RP2350 by @nsinusr.bsky.social and Andrew D. Zonenberg.
One talk on exploiting software using hardware fault injections by Zhenyuan Liu

This year artefact evaluation was mandatory! Thanks, Marcel Busch for chairing the artifact reviews!

Co-chairs openning remarks.

WOOT 2025 Conference starting in Seattle.
The program prepared by @noopwafel.bsky.social and @naehrdine.bsky.social includes sessions on hardware security, wireless attacks, network security.
And tomorrow physical attacks, application security.
And Keynote by Falcon Darkstar Momot