AGENDA

Two days of conferences | 20 speakers

09:00

Registration, coffee & croissants

10:00

Introduction

15 min

10:15

Opening Keynote

Bruce Dang, Thai Duong | 45 min

Coffee break

30 min

11:30

Coruna vax - Deep dive and takeaways

Littlelailo | 45 min

Reinventing the vPhone — A Next-Generation iOS Security Research Platform

Maximilian Paß | 30 min

Lunch

1h30

14:15

The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!

Orange Tsai | 45 min

Consoling Windows: Racing the Console Driver to escape the sandbox

Guillaume André | 45 min

Dirty Pedit: Semantic Variant Hunting for Root in Under a Second

Rajat Gupta | 45 min

Coffee break

45 min

17:15

Wasm Spills The Beans on Chrome and Safari

Javier Jimenez | 45 min

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux

Quentin Kaiser | 45 min

Welcoming participants, coffee & croissants

30 min

09:30

Freedom of the Cache - Democratizing Page Caches With RDMA

Philip Tsukerman | 45 min

The Cloud Runs on GPUs. So Do We: Breaking Out Through GPU Drivers

Lei Lu, Ji'an Zhou | 45 min

Coffee break

30 min

11:30

Revisiting SecureROM Adventures

Steven De Franco | 45 min

MTEscape: Bypassing ARM's Asynchronous MTE with General Memory Corruption Vulnerabilities

Kyeongmin Kim, Insu Yun | 45 min

Lunch

1h30

14:30

Full Root: Kernel-driver page uaf and confused-deputy vuln in Samsungs DualDAR subsystem

Lukas Maar | 45 min

Double Agents: Weaponizing Synchronization Mechanisms to Reliably Exploit Race Conditions

Robert Huey | 45 min

Coffee break

45 min

16:45

When Picos Attack – USB Exploit Engineering

Alex Plaskett | 45 min

Parcel Security in Android: From Mismatch to Use-After-Free

Yang Kudurshian, John Wu | 45 min

Closing session

15 min

AGENDA

Two days of conferences | 20 speakers

Day 1 - Friday 16th of October | Day 2 - Saturday 17th of October

09:00

Registration, coffee & croissants

10:00

Introduction

10:15

Opening Keynote

11:00

Coffee break

11:30

Coruna vax - Deep dive and takeaways

12:15

Reinventing the vPhone — A Next-Generation iOS Security Research Platform

12:45

Lunch

14:15

The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!

15:00

Consoling Windows: Racing the Console Driver to escape the sandbox

15:45

Dirty Pedit: Semantic Variant Hunting for Root in Under a Second

16:30

Coffee break

17:15

Wasm Spills The Beans on Chrome and Safari

18:00

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux

19:00

Social event & Speedrun challenge finals

Day 1 - Friday 16th of October | Day 2 - Saturday 17th of October

09:00

Welcoming participants, coffee & croissants

09:30

Freedom of the Cache - Democratizing Page Caches With RDMA

10:15

The Cloud Runs on GPUs. So Do We: Breaking Out Through GPU Drivers

11:00

Coffee break

11:30

Revisiting SecureROM Adventures

12:15

MTEscape: Bypassing ARM's Asynchronous MTE with General Memory Corruption Vulnerabilities

13:00

Lunch

14:30

Full Root: Kernel-driver page uaf and confused-deputy vuln in Samsungs DualDAR subsystem

15:15

Double Agents: Weaponizing Synchronization Mechanisms to Reliably Exploit Race Conditions

16:00

Coffee break

16:45

When Picos Attack – USB Exploit Engineering

17:30

Parcel Security in Android: From Mismatch to Use-After-Free

18:30

Closing session

19:00

Closing party