The Training is CONFIRMED
Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Tuesday, 24 September 2024
• End: Friday, 27 September 2024
• Training hours: 09:00 - 18:00 CEST
  ‎

This is an advanced training designed to push you beyond what you thought was possible and set you on the path to develop your own workflow for offensive zero-day web research. Each of the vulnerabilities presented have either been mirrored from real zero-day or are n-day vulnerabilities that have been discovered by the author with a focus on not just exploitation, but also on the discovery. It teaches how to exploit web technologies without client interaction for maximum impact, i.e. remote code execution.

The training is currently NOT CONFIRMED and the deadline has been extended until the end of August
Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Tuesday, 24 September 2024
• End: Friday, 27 September 2024
• Training hours: 09:00 - 18:00 CEST
  ‎

This class is designed to introduce students to the best tools and technology available for automating vulnerability discovery and crash triage with a focus on delivering a practical approach to applying this technology in real deployments. Through an applied understanding of introductory program analysis and binary translation, techniques for finding various bug classes and methods for improved crash debugging will be discussed. We will take a deep dive into fuzzing, covering all aspects of this practical approach to finding bugs.

The Training is CONFIRMED
Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Tuesday, 24 September 2024
• End: Friday, 27 September 2024
• Training hours: 09:00 - 18:00 CEST
  ‎

The training provides a comprehensive understanding of the architecture of modern EDRs and their underlying Antivirus (AV) systems. It equips security professionals with a deep understanding of modern EDRs and their AV systems, enabling them to better simulate advanced threat scenarios, improve their evasion detection skills, and contribute to the overall enhancement of security within enterprise networks. The training is designed from an attacker's point of view, teaching red-teams how to make their implants stealthier, but it will also teach defenders how to deal with the anti-reversing and the OPSEC techniques demonstrated in class.

The Training is CONFIRMED
Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Tuesday, 24 September 2024
• End: Friday, 27 September 2024
• Training hours: 09:00 - 18:00 CEST
  ‎

Hands-on training course that teaches students how to find and exploit vulnerabilities in embedded devices such as routers, cameras, industrial devices, televisions, microcontrollers, automotive, etc. The course will go in depth into several classes of vulnerabilities, with practical exercises on real and emulated devices of different CPU architectures. Each vulnerability class will be described, studied and then exploited in a variety of different ways. This course aims to bridge the gap between hardware hacking and exploitation, giving students the necessary knowledge they need to become product security experts.

The Training is CONFIRMED
Detailed description and trainer's bio

• 4 days training
• 20 people maximum
• Start: Tuesday, 24 September 2024
• End: Friday, 27 September 2024
• Training hours: 09:00 - 18:00 CEST
  ‎

This training guides researchers through the field of Linux kernel exploitation. In a series of practical labs, the training explores the process of exploiting kernel bugs in a modern Linux distribution on the x86-64 architecture. The training starts with beginner topics but proceeds into advanced areas as well. The beginner chapters include learning how to escalate privileges and bypass foundational mitigations in x86-64 kernels. The advanced chapters are primarily dedicated to the modern slab (heap) exploitation techniques and include an in-depth analysis of the kernel allocators' internals.