Jurica Radović; Workshop
Somewhere in a public photograph, a street sign is partially visible. The shadow falls at a specific angle. Someone left a comment years ago that does not quite add up. These details are not hints, they are evidence, sitting in the open the whole time.
This workshop is a two-day journey into modern OSINT methodology. On the first day, we'll break down real investigations live, showing how publicly available information can be turned into precise, defensible conclusions. On the second day, the theory disappears and the investigation begins, as participants tackle a series of increasingly challenging OSINT cases in a competitive CTF-style hackathon. Bring a laptop, a browser, and a willingness to chase rabbit holes.
Matthias Kirschner; Talk60
Our litigation against Apple in front of the European Court of Justice, pushing for sustainable long term funding for Free Software in the EU and member states, "Public Money? Public Code!", Device Neutrality, Router Freedom, Free Your Android, assistance with licensing questions, a European coding competition for teenagers, and a tale of software, skateboards, and raspberry ice cream. These are some of the activities by the Free Software Foundation Europe (FSFE), which this year celebrates its 25 anniversary in empowering users to control technology.
How would the world like in our area in 2048, if the FSFE has been successful? This talk will give an overview of the FSFE's vision and invite participants to give feedback on the next decades of our journey.
Santiago Abastante; Workshop120
Type: Intermediate–Advanced
Focus: Adversary emulation, detection engineering, IR workflows
Style: Fast, offensive-defensive, “learn by attacking and defending”
Cloud platforms like Amazon Web Services (AWS) are foundational to many critical infrastructures and enterprise applications, making them prime targets for attackers. In this session, we will not only explore the most relevant attack vectors cybercriminals use to compromise AWS infrastructures but will also simulate these attacks using known threat actor techniques in an adversary emulation context. From initial access to hardcore persistence, this talk will provide a comprehensive look at how attackers operate in AWS environments.
We will take a technical journey through the tactics, techniques, and procedures (TTPs) employed by attackers at every stage of the threat lifecycle, aligned with the MITRE ATT&CK framework. We’ll start by reviewing common methods of initial access, such as exploiting exposed credentials or vulnerabilities in services like IAM, Lambda, and EC2. From there, we’ll detail how attackers escalate privileges, move laterally, and evade detection from tools like CloudTrail.
The session will conclude with an in-depth look at advanced persistence techniques in AWS, including the manipulation of IAM policies, backdooring Lambda functions or Docker containers, and tampering with logs. Along the way, we’ll demonstrate how security teams can implement defensive and detection strategies to mitigate these risks. By leveraging AWS-native services and third-party tools, attendees will learn how to enhance their incident response capabilities.
This hands-on workshop will give attendees practical, technical insights into AWS security, adversary behavior, and how to better defend against sophisticated, persistent attacks. A full hands-on experience, this presentation ensures deep technical immersion.
nm29; Workshop
BALC (BalCCon Amateur Lockpicking Competition) is back again!
BALC is a timed lockpicking competition for amateur participants. Competitors attempt to open a series of locks mounted on a door model using non-destructive techniques. The objective is to open as many locks as possible within the allotted time, with the fastest overall time determining the ranking in case of a tie.
The competition is intended for hobbyists interested in physical security and lockpicking.
Malware Utkonos; Talk60
This talk is about using LLMs to build and modernize software where correctness matters. It follows the work at two scales: modernizing a similarity-digest algorithm that must match its reference implementation bit-for-bit, and building malbench, a local-first triage and clustering workbench for malware analysts.
malbench is a local-first triage and clustering workbench for malware analysts. It pulls samples and threat intelligence from various sources, computes similarity digests, runs YARA rules, and then turns a flat pile of hashes into structure: it clusters and graphs files by features they actually share and weaves several of those lenses into a single view.
I needed a wider variety of hashing algorithms, so in addition to ssdeep and TLSH, I took a dormant 2021 Go port of sdhash, a similarity-digest algorithm used in malware triage and code-reuse detection, and modernized it into a clean, dependency-free, fully-tested library. A deterministic verification corpus and parallel C++/Go harnesses turn the original reference implementation into an oracle: millions of pair comparisons, zero unexplained divergences. Around that sit total test coverage as a drift alarm, strict session and context hygiene, profile-before-you-optimize with one change measured at a time. The result is a repeatable process for adopting and modernizing old code and for building new tools on top of it.
MacLemon; Talk
Compression is all about getting more out of less. We're zipping through different algorithms while packing some bits. Let's find out why there's so many occurrences of the letter Z in compression and also see why compressing some data may end up larger than before.
After this talk you'll be confident how to make files smaller and when to not bother trying because you already know why it won't work.
Nikola Ubavić; Talk60
The PKCS#11 standard enables easy integration of hardware tokens with a wide range of software applications, including document suites, web browsers, and password managers. In this talk, we will introduce the fundamentals of PKCS#11 v2 and review a year-long journey of developing an open-source PKCS#11 module for Serbian eID cards. We will present three black-box techniques that were used to analyze proprietary software, and explain how they helped us understand the original PKCS#11 module for Serbian eID cards. The talk does not require prior knowledge of PKCS#11 or smart cards, but basic familiarity with public-key cryptography, web services, and shared libraries is recommended.
Stephan Berger; Talk
For years, a persistent myth suggested that macOS was inherently immune to malware. Today, threat actors are aggressively shattering that illusion by deploying sophisticated initial access chains tailored to bypass macOS defenses. This talk provides a deep-dive analysis of how modern adversaries gain their first foothold on Apple hardware.
We will dissect the entire initial access pipeline, starting with Infection Vectors like deceptive Google Ads, malicious ClickFix campaigns, and sophisticated malvertising that trick users into lowering their guard. From there, we explore the Execution Phase, analyzing how attackers weaponize scripting languages, including traditional Bash and Python, as well as native AppleScript, Compiled AppleScript, Perl, and JavaScript for Automation (JXA).
Finally, we will examine the delivery mechanisms, contrasting the abuse of native Binaries (Mach-O, Platypus-packaged apps, and Electron frameworks) with the trojanization of Storage and Installer Formats (DMGs and PKGs).
Attendees will walk away with a technical understanding of contemporary macOS tradecraft, real-world attacker methodologies, and the insights needed to hunt for and defend against modern Mac-focused threats.
Vukasin Dobromirovic; Talk
Every company deploying a public-facing LLM chatbot inherits the full prompt-injection attack surface: jailbreaks, data exfiltration, PII leakage, indirect injection via retrieved documents. Single-model classifiers and regex filters consistently miss novel attacks, the same way single-AV products missed novel malware a decade ago.
This talk presents an open-source defensive architecture that runs five specialist AI agents in parallel against every prompt and response, each looking at a different attack dimension (injection patterns, semantic intent, encoding tricks, output exfiltration, PII exposure) and aggregates their verdicts before the request reaches the upstream LLM. We'll walk through the architecture, show live attacks bypassing commercial single-model guardrails but caught by the multi-agent pipeline, and discuss the latency/cost tradeoffs that make this practical as inline middleware.
Guergana; Talk
The world of hardware for video art can be intimidating. Compared to the accessible ecosystem for audio makers, dedicated video instruments are often scarce, expensive, or proprietary, creating a high barrier to entry.
The recurboy, a standalone digital video sampler, was designed to challenge this. As an open-source hardware and software project, its goal was to dismantle financial and technical barriers by
empowering artists to build their own instrument. What began as a tool for soldering workshops, however, evolved into something more significant: a vibrant, user-sustained community.
This presentation traces the journey of the recurboy from a shared workshop project to a global grassroots videoart making community.
We'll explore how users, connected through online platforms like a dedicated Facebook group and scanlines.xyz, formed a collaborative network for support, knowledge-sharing, and creative exchange.
This community not only built devices but also collectively problem-solved, shared modifications, and fostered a sense of shared purpose, a momentum recognized by features on platforms
like Adafruit.
The story of the recurboy demonstrates that the most vital outcome of an open-source project can be the community it inspires. It is a case study in how providing an accessible, buildable tool can cultivate a space where practice, learning, and collective care flourish, creating a lasting ecosystem for digital video art.
The project can be found here:
https://github.com/cyberboy666/recurBOY
Hilko Bengen; Talk
Linux rootkits rely on a handful of techniques to hide malicious code. There's nothing magic that can't be overcome, we just have to know from what angle to look.
Jani Kovacs; Talk60
Artificial intelligence is rapidly transforming healthcare, often elevating user experience and improving operational efficiency. In some domains, however, AI is no longer just a convenience — it has become essential. Radiotherapy is one such area. As patient volumes surge, digital oncology systems require significantly higher levels of autonomy to sustain safe, timely, and high‑quality care. This includes not only treatment management, but increasingly, elements of treatment planning as well.
In this context, cybersecurity is no longer a supporting function; it is a foundational prerequisite for reliable cancer care. The encouraging news is that robust protection is achievable by applying mature, well‑established security standards — adapted thoughtfully for AI‑driven clinical environments. Frameworks such as MITRE ATLAS offer structured approaches tailored to adversarial threats against machine learning systems.
This presentation explores the unique cybersecurity challenges introduced by AI‑enabled healthcare applications and demonstrates a practical strategy for addressing them through a focused use case: an AI Agent designed to support radiotherapy management.
Boris; Workshop
This is a workshop where embroidery meets electronics. It is intended for anyone who is interested in crafting something of their own while learning the basics of embroidery and circuitry, no prior knowledge or experience needed. Once you are done you'll be able to wear your patch and show off your work!
Ignacio Navarro; Talk45
Let's talk about some critical infrastructure that millions of people use every day: Public transportation.
In this talk, I’ll present some findings that I discovered in the public transportation ecosystem of one of the largest cities in Argentina, impacting more than 1.5 million people daily. Reading code, chaining vulnerabilities, weak access controls, and flawed internal designs, I got full access to core mobility systems, from buses to taxis, including DVRs, transport cards, user data, real-time tracking and administrative panels. We’ll walk through the technical exploitation path, the real-world impact and the lessons learned.
Hannes Weissteiner; Talk
The FROST attack fingerprints the websites and apps you use from plain JavaScript in a tab - by measuring SSD contention from the browser. We cover how it works, how realistic the attack is, and who actually needs to care.
Additionally, we show a few other remote side channels to show what is possible in theory for motivated attackers.
Joseph Carson aka Wiretrap; Talk
This session takes attendees inside the privilege escalation mindset. We will explore the techniques attackers use to enumerate systems, discover hidden permissions, abuse trust relationships, collect credentials, and move from restricted access to complete control.
leyrer; Workshop120
Using Kali-Linux and Metasploit to Hack Wordpress
You know the impressive visuals from TV series and Moviies. The Hacker opens a black console window, types fast on the keyboard and suddenly has root on the target system, saving the day. But how does this look like in reality?
If you drop by with a Laptop running Kali-Linux either from USB-Stick or from within a virtual machine, I will walk you through the necessary steps. From analyzing the target system, finding exploits on it on to successfully hacking the "victim" using metasploit. And if you are quick enough and behave, we might even get so far as to remotely crash the system.
Hank Scorpio, Scorpio Hank; Talk
We got called to an Incident Response case. They said it was a limited incident. It turned out not to be.
Christian Lölkes; Workshop
This workshop explores generative art and aims at participants who are already familiar with a programming language and interested in exploring their artistic potential. We will examine cellular automata as a framework for generating visual systems, drawing inspiration from well-known models such as Conway's Game of Life.
The workshop combines short explanatory sections, live coding demos, and guided participant exercises. Participants will implement rule-based simulations, experiment with parameter spaces, and transform iterative processes into visually compelling outputs. Throughout the workshop, we will discuss emergence, complexity and the role of controlled randomness in creative coding.
To provide context, the workshop will also introduce key moments in the history and theory of media art. We will briefly connect computational art practices to early generative pioneers, reflecting on how rule-based systems have shaped artistic discourse. This historical and theoretical framework will give participants a deeper understanding of generative art as a cultural and conceptual practice rather than just a technique.
Attendees will leave with practical strategies for structuring generative systems and visualising performance, as well as inspiration to integrate artistic experimentation into their technical work.
cluosh, georg, Hetti; Workshop120
Clue: This glorious competition pits the sharpest minds and greatest nerds of this illustrous community (or, whoever want's to participate really...) against each other in a battle of wits. Contestants show their prowess and speed in hitting buzzers as well as their knowledge about modern, ancient and archaic topics ranging from security to pop culture, while the audience revels in the geeky glory.
Answer: What is Hacker Jeopardy?
Vladan Nikolic; Talk
How to use AD misconfigurations and features in order to gain access or to escalate privileges. AD is in the heart of most of enterprise networks and is usually a main pilar for identity and access management. Owning AD usually means owning the complete enterprise, so it is quite interesting target for attacks. We will explore some of the most common attack venues against AD.
Nataša Vasić; Talk
Cybersecurity conversations often treat “human error” as the weakest link, but in real organizations the problem usually starts much earlier: in hiring, onboarding, incentives, culture, unclear ownership, social pressure, burnout and badly designed internal processes.
This talk connects cybersecurity with organizational psychology and HR practice. It explores how companies unintentionally create human-risk conditions long before an employee clicks a phishing link, shares access, ignores a policy, trusts a fake profile or bypasses a procedure to “get the job done”.
The session is intended for security professionals, founders, HR people, managers and anyone interested in the human side of security. It will be practical and beginner-friendly, with examples from recruitment, employee assessment, fake identities, insider-risk patterns and security culture. The goal is not to blame people, but to show how organizations can reduce cyber risk by designing better human systems.
Tonimir Kisasondi; Talk60
Security issues are becoming harder to detect or exploit, especially in well audited targets. Instead of subverting the code flow, an attacker might try to subvert the application logic. This class of vulnerabilities is commonly referred to as business logic vulnerabilities. In this session, we will present the result of a research study where the author manually reviewed about 300 publicly disclosed vulnerability reports and tried to classify and cluster discovered vulnerabilities into a few categories that can be used to secure business logic issues in applications. So let's take a ride through some real life cases and examples on how to manipulate calculation, assumptions, processes, branching, logical and time based TOCTOU and other fun cases on how to break an modern application.
MacLemon; Workshop120
Despite past Karaoke events, the BalCCon Crew still seems to demand more!
We shall deliver.
Your first time at Karaoke? Sing together with other people!
Questions about Karaoke? Approach MacLemon during the event! (Ideally before the Karaoke event.)
BlackCat; Talk
Have you ever sat on a train and wondered how all these tons of steel are moved safely across the tracks or who actually makes sure your train ends up at the correct station? If so, you've come to the right talk!
The German railway system is a fascinating mix of traditional infrastructure, safety-critical logic and increasingly modern systems.
This talk introduces the basics behind it all, from tracks, switches, signals and balises to interlocking systems, train protection and railway communication.
We will look at how safety is built into the systems, why trains do not need speeding tickets, what GSM is still doing in modern rail operations and which protocols may appear when railway technology meets the network stack.
The goal of this talk is to make the hidden systems behind everyday train travel visible and to get the community interested in exploring railway technology.
November; Workshop
Have EDRs taken the glory of in-memory investigation? We' ll go through a side by-side comparison of of incident investigation with modern EDR against traditional memory forensics with volatility3.
(And by comparing we mean complimenting the knowledge and arsenal of blue teams to pick the right solution for the right problem. It's isn't really a competition on what is best, NOR a shameless product selling)
Theory is always good but gaining experience is also important!
We aim to start from memory internals 101 and dive into the analysis of a compromised system using volatility3. We showcase why memory forensics remains a solid option in incident response -even in the age of telemetry, and why rightfully considered an art form.
The workshop aims to be more than an RTFM of volatility3 or use-plugin-and-find flags CTF, but rather equip participants with solid knowledge on linking pieces of evidence to fill the jigsaw puzzle of an incident.
Newbie or seasoned, professional or just curious, this session is for you!
Timo Miettinen; Workshop
Your phone knows more about you than your closest friend. Where you went last Tuesday, who you messaged at 2 AM, which Wi-Fi you joined at the hotel. It's all on the device, waiting to be read. This 3-hour workshop is a hands on introduction to mobile device forensics on iOS and Android using only free and open-source tools. No expensive enterprise kit required.
katzazi; Workshop
Pen and Paper games are Role Playing Games (RPGs) that are meant to be played by a small group of people in person at a table using dice. The most famous one is Dungeons and Dragons (D&D), but there are hundreds of others. Today there are also online tools with which the games can be played, but a lot of people still prefer to play in person. During the game, the players create a story, that is not predefined by a software or program. The story evolves through the collaborative ideas of the players playing. Usually all but one player play a single character while the last player plays the world and everybody else within that world.
Lena Heimberger; Talk60
A lot of people say they want to learn about post-quantum cryptography. One day, your favourite regulation authority asks you to switch to post-quantum in the next five years. While a great motivator to finally learn about PQ, what does that actually mean for you and me, your company and your non-tech friends?
The talk will cover:
- why we need to switch to post-quantum
- are some cryptographic algorithms more vulnerable than others
- what you should change when.
More importantly, we'll talk about the algorithms under the schemes: Which one should you use for your server, and which one is maybe more suited as a conversation topic at dinner parties.
Finally, we'll look ahead: What are academics thinking about, and what is out there beyond key exchange and signatures?
igor; Talk60
Power analysis is a side-channel attack with the goal of extracting secrets from the device based solely on its power consumption. Back in 1998, Kocher, Jaffe, and Jun published the famous paper showing that it's possible to break encryption on many devices using just the power traces, a bit of math and inexpensive equipment. Some twenty-eight years later, this attack still works.
Goran; Talk45
REGOČ is my crew of specialized AI agents — architect, engineer, researcher, security, QA and more — that I work with daily through Telegram and voice to deliver real things: help in PCB design, firmware, reverse-engineering ...
Ismayil; Talk
Students already use LLMs for almost everything: explaining concepts, writing reports, debugging their labs, and sometimes skipping the hard part of learning altogether. And they will not stop when they graduate: the habits formed in a lecture hall follow them into the SOC and the codebase, which makes how we teach with these tools a security problem, not just an academic one.
This talk briefly sets out why we care about LLMs, the economics, the energy, and the jobs behind the hype, then draws on hands-on experience teaching cybersecurity at the University of Turku. I'll share where LLMs genuinely help students and where they quietly erode the skills the field depends on.
Kirils Solovjovs, Iceman; Talk60
Kirils & friends got so excited about the FERMAX intercom system, that they nerd-sniped Iceman to join in on the hunt for MIFARE Desfire cards.
This is a journey into research on a shoe string and our realizations under the way. Detours, Dead Ends and Scope Creep are real.
Kirils Solovjovs; Workshop120
Think you can bluff your way through a security talk with zero prep? Now is your chance! At Security Impress Karaoke, you'll be handed a totally random, security-themed slide deck you’ve never seen before - and have just 3 minutes to present it like a pro.
No experience? No problem. This is all about having fun, thinking fast, and impressing the crowd with your creativity (or chaos). Whether you're a seasoned hacker or just security-curious, come take the podium and let’s see what you’ve got!
Malware Utkonos; Workshop120
Shellcode is often treated as a dark art: small, opaque, and inseparable from exploit folklore. This workshop takes the opposite approach. It breaks shellcode down as a disciplined form of constrained systems programming, where every byte, register, calling convention, memory reference, and control-flow decision matters.
Participants will learn how shellcode is structured, how position-independent code works, and why common instruction patterns such as call/pop, base-register anchoring, stack construction, and compact control-transfer sequences appear so frequently in real-world payloads. The workshop will also cover Windows internals relevant to shellcode, including TEB and PEB access, API discovery, API hashing, syscall resolution, and indirect syscall techniques. Finally, it will explore more advanced building blocks such as tiny disassemblers, trampolines, and API interception hooks.
The goal is not to teach copy-paste payload development, but to give reverse engineers, malware analysts, exploit developers, and detection engineers a clear mental model for how shellcode actually works.
Sava, Miša; Workshop
Come join us and make your own TETRA base station!
Sava, Miša; Talk
Terrestrial Trunked Radio, or TETRA, is a standard for radio communications. Until recently, designing and operating a trunked system based on this standard was prohibitively difficult without using a dedicated commercial base station. Such equipment was often expensive and difficult to acquire.
Building on research and developmet work by MidnightBlueLabs, new projects have been released and TETRA has become much easier to deploy and use.
In this talk we will introduce some of the basic concepts of radio communications, digital communications, share our experience with developing software for radios using TETRA, some of the legal hoops we had to go through, and we will even have a short demo.
This talk will cover a lot of technical subjects, but no previous experience is expected.
Arad Donenfeld; Talk45
With the use of AI agents catching wind across the offensive security space, from social engineering to vulnerability research, it was inevitable that malware would follow suit. While most discussions focus on targeting AI, using it to generate malicious payloads at a malware’s runtime, or “vibe coding” it, we went a step further: we built a system where AI is the sole participant in the malware creation process itself.
We will begin by talking about how we got to this point, what sparked the idea, and jump into comparing different models – showing which gave the best code, which was most evasive, which prompts worked the best, and what we used in the agent.
We will then dig into the generation process itself – we will show the challenges with earlier approaches, how we solved them, how to build the workflow to maximize the malware’s capability and randomization, how it managed to break signatures, and how to generate millions of samples.
We will finish by showing how attackers are using similar methods, look at real examples in the wild, and discuss how to use these techniques for ourselves, both as attackers and defenders.
Boris; Lightning talk
PCBs don't have to be green rectangles hidden inside electronics, they can be works of art. This beginner friendly talk explores the creative side of PCB design, covering the tools, the colors and finishes available, and fun techniques like silkscreen artwork, exposed copper, and backlit LEDs. Whether you want to make badges, decorations, or simply beautiful electronics, this talk will show you how to get started.
skullollipop, Marko Jesic, Jaddes; Workshop
An interactive ARG where you try to outsmart a character (chat bot) into helping you reach your goal using a terminal to help you figure out clues.
georg, cluosh; Talk60
The story so far: In the beginning closed Hard- and Software was created.
This has made a lot of people very angry and been widely regarded as a bad move.
(Wrong book, I know...)
Andreas, Markus, Kevin; Talk45
In under an hour we will show how cheap IoT devices can expose serious security risks in your home network
We analyzed a range of low-cost connected devices and will present
the best vulnerabilities we found.
Following our analysis of low low-cost connected devices, we will give an introduction to IoT pentesting.
Concretely we present our methodology to analyze real-world devices and
present our findings and uncovered exploitation paths.
Finally we will talk about mitigations and discuss why exploiting IoT devices in 2026 is still as easy as
a decade ago.
Anita Cwynar; Talk
SAP powers some of the world's most critical business processes and that's exactly why attackers love it. Despite its importance, SAP security remains a blind spot for many security teams.
Drawing on a decade of hands-on experience defending SAP environments, this session explores why SAP systems are such attractive targets, how the threat landscape has evolved, and the security pitfalls that organizations repeatedly overlook. Through real-world lessons learned, we'll examine common misconfigurations, overlooked attack paths, and the unique challenges of securing enterprise-critical SAP systems.
Rather than focusing solely on what can go wrong, the session also provides practical guidance on improving SAP security hygiene, reducing attack surface, and preventing the issues that attackers most commonly exploit.
Whether you're a security practitioner, SOC analyst, penetration tester, or architect with little or no prior SAP experience, you'll leave with a clearer understanding of the risks hidden within SAP environments and actionable ideas to better protect one of the enterprise's most valuable assets.
This is a vendor-neutral, non-commercial session focused entirely on practical knowledge, real-world experience, and lessons learned from the field.
Erik de Jong; Talk
While AI assisted tools are helping us speed run the analysis of unknown protocols, we still need to have a solid foundation to make sense of the larger picture. In this talk I will focus on three topics for that initial step of the investigation before analysis tools or even dissectors start to make sense.
Maja Miljanić, TheProxy; Talk
We built hardware challenges for Serbian national CTF... twice. Building a good hardware challenge is a balancing act between security, education, creativity, and logistics. The talk follows the entire process, from the initial idea and vulnerability selection to hardware and challenge design, storytelling, participant experience, manufacturing, and deployment at the competition.
Technical level: Beginner/Intermediate. No prior hardware security experience or preparation is required. The talk is intended for anyone interested in hardware, embedded systems, cybersecurity, or CTF challenge design.
Dennis Giese; Talk
Electronic lockers are everywhere - offices, gyms, hotels, hospitals, co-working spaces. You choose a PIN, toss in your stuff, and trust that it's safe. The same goes for electronic safes in hotel rooms and offices. But what does the lock actually do with your PIN? Turns out, it remembers it. And not very carefully.
We demonstrate how someone with access to a single open locker or safe can extract credentials, clone manager keys, and open every lock in an installation using cheap and widely available tools. More critically, we show how harvested PINs open more than just lockers: the same PIN that protects your locker or hotel safe often unlocks your phone, your laptop, and your bank card.
We discuss why reusing a PIN across devices is a terrible idea, how RFID credentials stored in locks can be used to open doors they were never meant to open, and whether vendors have actually fixed anything since we first told them about these issues.
If you've ever chosen the same PIN for your locker, your safe, and your phone - this talk is for you.
Andrei; Talk45
Your bug bounty / pentest scope is a list of ASN and domains. Your attack surface isn't.
Modern cloud architectures expand beyond those horizons - Lambda function URLs, API Gateway endpoints, S3 buckets, CloudFront distributions, container registries, and CI artifacts deploy outside the visible domain space, weakly monitored and missing from official scope.
So: whoarethey? This talk provides the answers to that key question - how to map a target company's cloud-heavy infrastructure with a pure black-box approach, beyond standard methods. Alongside a brief recap of the regular recon (acquisitions, subdomain enumeration) for completeness, the focus will be on cloud-asset recon. You will learn how to find all the APIs of any given cloud and almost all the cloud domains with user workloads or content - and how to attribute them to a specific company.
For hunters and pentesters tired of running the same methods against the same scope with the same results and wondering where the bugs went.