Revisiting Widevine L3: DRM As A Playground For Hackers - Felipe Custodio Romero
youtu.be/T3Xo4C6vIto
#HackLu
youtu.be/T3Xo4C6vIto
#HackLu
Revisiting Widevine L3: DRM As A Playground For Hackers - Felipe Custodio Romero
YouTube video by Cooper
youtu.be
November 1, 2025 at 10:32 AM
Revisiting Widevine L3: DRM As A Playground For Hackers - Felipe Custodio Romero
youtu.be/T3Xo4C6vIto
#HackLu
youtu.be/T3Xo4C6vIto
#HackLu
To wrap up our presentations at #HackLu, @bluesheeet.bsky.social and @butanol.bsky.social tackled a scary subject: Post-quantum cryptography. 🤯
They demonstrated that it is not as complicated at it seems and why it is crucial to begin integrating it in your products.
They demonstrated that it is not as complicated at it seems and why it is crucial to begin integrating it in your products.
hack.lu 2025
Hack.lu (and CTI summit) is an open convention/conference where people can discuss about computer security, privacy, information technology and its cultural/technical implication on society. It’s the ...
Hack.lu
October 30, 2025 at 4:30 PM
To wrap up our presentations at #HackLu, @bluesheeet.bsky.social and @butanol.bsky.social tackled a scary subject: Post-quantum cryptography. 🤯
They demonstrated that it is not as complicated at it seems and why it is crucial to begin integrating it in your products.
They demonstrated that it is not as complicated at it seems and why it is crucial to begin integrating it in your products.
Still at #HackLu, @remsio.bsky.social and @w0rty.bsky.social shared their research on Livewire's unmarshalling mechanism at #nullcon Berlin. They demonstrated how to achieve RCE with the APP_KEY and extended their laravel-crypto-killer tool to automate the process. 💪
hack.lu 2025
Hack.lu (and CTI summit) is an open convention/conference where people can discuss about computer security, privacy, information technology and its cultural/technical implication on society. It’s the ...
Hack.lu
October 30, 2025 at 4:29 PM
Still at #HackLu, @remsio.bsky.social and @w0rty.bsky.social shared their research on Livewire's unmarshalling mechanism at #nullcon Berlin. They demonstrated how to achieve RCE with the APP_KEY and extended their laravel-crypto-killer tool to automate the process. 💪
Later this month, at #HackLu in Luxembourg, @aeinot.bsky.social and @cybiosity.bsky.social demonstrated how Blue team tooling can be used by attackers for reconnaissance and post exploitation. They also gave insights on detection opportunities. 🧑🎓
October 30, 2025 at 4:27 PM
Later this month, at #HackLu in Luxembourg, @aeinot.bsky.social and @cybiosity.bsky.social demonstrated how Blue team tooling can be used by attackers for reconnaissance and post exploitation. They also gave insights on detection opportunities. 🧑🎓
At hack.lu I gave a presentation about "How to better identify (weaponized) file formats":
- Why do we need to identify file formats accurately?
- Why can the current tools (libmagic, magika) sometimes be bypassed?
- How can we do better?
You can now see it here: youtu.be/Qp5GDh2sj6A
#HackLu
- Why do we need to identify file formats accurately?
- Why can the current tools (libmagic, magika) sometimes be bypassed?
- How can we do better?
You can now see it here: youtu.be/Qp5GDh2sj6A
#HackLu
hack.lu 2025
Hack.lu (and CTI summit) is an open convention/conference where people can discuss about computer security, privacy, information technology and its cultural/technical implication on society. It’s the ...
hack.lu
October 27, 2025 at 4:18 PM
At hack.lu I gave a presentation about "How to better identify (weaponized) file formats":
- Why do we need to identify file formats accurately?
- Why can the current tools (libmagic, magika) sometimes be bypassed?
- How can we do better?
You can now see it here: youtu.be/Qp5GDh2sj6A
#HackLu
- Why do we need to identify file formats accurately?
- Why can the current tools (libmagic, magika) sometimes be bypassed?
- How can we do better?
You can now see it here: youtu.be/Qp5GDh2sj6A
#HackLu
How To Better Identify (Weaponized) File Formats With Ftguess - Philippe Lagadec
youtu.be/Qp5GDh2sj6A
#HackLu
youtu.be/Qp5GDh2sj6A
#HackLu
How To Better Identify (Weaponized) File Formats With Ftguess - Philippe Lagadec
YouTube video by Cooper
youtu.be
October 25, 2025 at 9:57 PM
How To Better Identify (Weaponized) File Formats With Ftguess - Philippe Lagadec
youtu.be/Qp5GDh2sj6A
#HackLu
youtu.be/Qp5GDh2sj6A
#HackLu
French Stealer Ecosystem: The Resurgence Skid Gangs In Cybercrime Space - 0xSeeker
youtu.be/-3dF0zWtO_o
#HackLu
youtu.be/-3dF0zWtO_o
#HackLu
French Stealer Ecosystem: The Resurgence Skid Gangs In Cybercrime Space - 0xSeeker
YouTube video by Cooper
youtu.be
October 25, 2025 at 9:20 PM
French Stealer Ecosystem: The Resurgence Skid Gangs In Cybercrime Space - 0xSeeker
youtu.be/-3dF0zWtO_o
#HackLu
youtu.be/-3dF0zWtO_o
#HackLu
RE: https://infosec.exchange/@ministraitor/115430049959447776
This talk from @wr is a masterpiece if you want to dive into all the gory details of the X.509 certificate format.
#hacklu #cybersecurity #certificate #threatintel
This talk from @wr is a masterpiece if you want to dive into all the gory details of the X.509 certificate format.
#hacklu #cybersecurity #certificate #threatintel
infosec.exchange
October 25, 2025 at 8:29 AM
RE: https://infosec.exchange/@ministraitor/115430049959447776
This talk from @wr is a masterpiece if you want to dive into all the gory details of the X.509 certificate format.
#hacklu #cybersecurity #certificate #threatintel
This talk from @wr is a masterpiece if you want to dive into all the gory details of the X.509 certificate format.
#hacklu #cybersecurity #certificate #threatintel
Beyond Post-quantum Stereotypes - Antoine Gicquel & Benjamin Sepe
YouTube video by Cooper
youtu.be
October 24, 2025 at 3:28 PM
DCOM Turns 20: Revisiting A Legacy Interface In The Modern Threatscape - Julien Bedel
youtu.be/QSOjcQzLMA0
#HackLu
youtu.be/QSOjcQzLMA0
#HackLu
DCOM Turns 20: Revisiting A Legacy Interface In The Modern Threatscape - Julien Bedel
YouTube video by Cooper
youtu.be
October 24, 2025 at 2:38 PM
DCOM Turns 20: Revisiting A Legacy Interface In The Modern Threatscape - Julien Bedel
youtu.be/QSOjcQzLMA0
#HackLu
youtu.be/QSOjcQzLMA0
#HackLu
Automotive Security Analyzer For Exploitability Risks: An Automated And Attack Graph-Based Evaluation Of On-Board Networks - Martin Salfer
youtu.be/LseD22_ph78
#HackLu
youtu.be/LseD22_ph78
#HackLu
An Automated And Attack Graph-Based Evaluation Of On-Board Networks - Martin Salfer
YouTube video by Cooper
youtu.be
October 24, 2025 at 2:22 PM
Automotive Security Analyzer For Exploitability Risks: An Automated And Attack Graph-Based Evaluation Of On-Board Networks - Martin Salfer
youtu.be/LseD22_ph78
#HackLu
youtu.be/LseD22_ph78
#HackLu
Lightning Talk:
Revisiting RAND’s Lost Monte Carlo Simulations: Sharla Perrine, Paul Baran, And The True Business Case For The Internet - Trey Darley
youtu.be/FCdEhYVHvzw
#HackLu
Revisiting RAND’s Lost Monte Carlo Simulations: Sharla Perrine, Paul Baran, And The True Business Case For The Internet - Trey Darley
youtu.be/FCdEhYVHvzw
#HackLu
Sharla Perrine, Paul Baran, And The True Business Case For The Internet - Trey Darley
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:59 PM
Lightning Talk:
Revisiting RAND’s Lost Monte Carlo Simulations: Sharla Perrine, Paul Baran, And The True Business Case For The Internet - Trey Darley
youtu.be/FCdEhYVHvzw
#HackLu
Revisiting RAND’s Lost Monte Carlo Simulations: Sharla Perrine, Paul Baran, And The True Business Case For The Internet - Trey Darley
youtu.be/FCdEhYVHvzw
#HackLu
Threat Actor Tripping On The Finish Line - Rasmus
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:57 PM
4-Byte Hell: When Unicode Enters The Stage - Jonas Hess
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:54 PM
Reverse Engineering, For Real - Henri Ahola
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:53 PM
Bugs In The Human Code: Help Timo - Paul Hirtz
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:52 PM
Lightning Talk:
Fake Likes, Real Risks: Mapping Fake Social Activity Shops in Europe - Sviatlana Höhn & Anastasia "Asya" Sergeeva
youtu.be/BHhk0tdAdXY
#HackLu
Fake Likes, Real Risks: Mapping Fake Social Activity Shops in Europe - Sviatlana Höhn & Anastasia "Asya" Sergeeva
youtu.be/BHhk0tdAdXY
#HackLu
Mapping Fake Social Activity Shops in Europe - Sviatlana Höhn & Anastasia "Asya" Sergeeva
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:51 PM
Lightning Talk:
Fake Likes, Real Risks: Mapping Fake Social Activity Shops in Europe - Sviatlana Höhn & Anastasia "Asya" Sergeeva
youtu.be/BHhk0tdAdXY
#HackLu
Fake Likes, Real Risks: Mapping Fake Social Activity Shops in Europe - Sviatlana Höhn & Anastasia "Asya" Sergeeva
youtu.be/BHhk0tdAdXY
#HackLu
Exploiting Legit APIs For Covert C2: A New Perspective On Cloud-based Malware Operations - Cocomelonc
youtu.be/l2G2TZvzj0E
#HackLu
youtu.be/l2G2TZvzj0E
#HackLu
youtu.be
October 24, 2025 at 1:41 PM
Exploiting Legit APIs For Covert C2: A New Perspective On Cloud-based Malware Operations - Cocomelonc
youtu.be/l2G2TZvzj0E
#HackLu
youtu.be/l2G2TZvzj0E
#HackLu
Lethal Language Models: From Bit Flip To RCE In Ollama - Paul Gerste
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:39 PM
Russian-speaking Underground:- Changes In - Vladimir Kropotov
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:17 PM
From YAML To Root: CI/CD Pipeline Attacks And Countermeasures - Hugo
YouTube video by Cooper
youtu.be
October 24, 2025 at 1:14 PM