#hacklu2025 — Public Fediverse posts

I think @Ange will like @wr’s file format tricks from #hacklu2025 !

ASCII art in a valid certificate??
Video in a certificate? And it’s valid?

Nice work Wil!

I think @Ange will like @wr’s file format tricks from #hacklu2025 !

ASCII art in a valid certificate??
Video in a certificate? And it’s valid?

Nice work Wil!

As #hacklu2025 draws slowly towards a happy ending and many many presentations and conversations later, by and with so many fantastic people, I’d like to propose to you to meet up again in the spring, instead of waiting all until #hacklu2026.

If you’re interested you can continue the conversations at @BSidesLuxembourg on the dates May 6-8th, 2026.

CFP, call for sponsors, call for workshops, call for volunteers and villages and events and (yourideahere) will open in the coming weeks.

As #hacklu2025 draws slowly towards a happy ending and many many presentations and conversations later, by and with so many fantastic people, I’d like to propose to you to meet up again in the spring, instead of waiting all until #hacklu2026.

If you’re interested you can continue the conversations at @BSidesLuxembourg on the dates May 6-8th, 2026.

CFP, call for sponsors, call for workshops, call for volunteers and villages and events and (yourideahere) will open in the coming weeks.

This picture is titled "I'm a professional social media influencer" :)
#hacklu #hacklu2025

This picture is titled "I'm a professional social media influencer" :)
#hacklu #hacklu2025

Last before lunch is @Cocomelonc with a talk on covert C2 -> “Exploiting legit APIs for covert C2: A new perspective on cloud-based malware operations”

At #hacklu2025

Last before lunch is @Cocomelonc with a talk on covert C2 -> “Exploiting legit APIs for covert C2: A new perspective on cloud-based malware operations”

At #hacklu2025

"Quand Llama pas bien codé, llama crasher" #hacklu2025 conférence sur l'analyse sécurité du code de ollama.

"Quand Llama pas bien codé, llama crasher" #hacklu2025 conférence sur l'analyse sécurité du code de ollama.

Next up is Fluxfingers’ Paul Gerste with a lethal sounding talk “Lethal language models: From Bit Flip to RCE in Ollama”

#hacklu2025

Next up is Fluxfingers’ Paul Gerste with a lethal sounding talk “Lethal language models: From Bit Flip to RCE in Ollama”

#hacklu2025

The Russian underground has ads for “arson” “surveillance” and more types of #hybridwarfare capabilities.

It seems there’s some (not unexpected, not the first time) connection between Russians Gov and the underground…

#hacklu #hacklu2025

The Russian underground has ads for “arson” “surveillance” and more types of #hybridwarfare capabilities.

It seems there’s some (not unexpected, not the first time) connection between Russians Gov and the underground…

#hacklu #hacklu2025

Next up is another #hacklu “frequent flyer” Vladimir Kropotov with “Russian speaking underground- changes in the risks, attack surface and modus operandi”

At #hacklu2025

Next up is another #hacklu “frequent flyer” Vladimir Kropotov with “Russian speaking underground- changes in the risks, attack surface and modus operandi”

At #hacklu2025

The Van Helsing RAS groups have entire affiliate marketing campaigns including promo videos!

And the Van Helsing group had some internal strife/beef and everything they had was leaked online.

#hacklu2025

The Van Helsing RAS groups have entire affiliate marketing campaigns including promo videos!

And the Van Helsing group had some internal strife/beef and everything they had was leaked online.

#hacklu2025

Now its time for something that looks like an Intel-ops type of talk: “Persōna theory: Infiltration & Deception of emerging threats groups” and its @tammyharper on stage presenting at #hacklu2025

The recruitment phase is a really good point to infiltrate groups that look to build an affiliate type operation

Now its time for something that looks like an Intel-ops type of talk: “Persōna theory: Infiltration & Deception of emerging threats groups” and its @tammyharper on stage presenting at #hacklu2025

The recruitment phase is a really good point to infiltrate groups that look to build an affiliate type operation

#hacklu2025

#hacklu2025

Last talk before the morning break is a cloud! related talk by Hugo: “From YAML to Root: CI/CD pipeline attacks and countermeasures”

At #hacklu2025 !

@spirit is apparently his handle, but maybe not on here…?

Last talk before the morning break is a cloud! related talk by Hugo: “From YAML to Root: CI/CD pipeline attacks and countermeasures”

At #hacklu2025 !

@spirit is apparently his handle, but maybe not on here…?

For those at #hacklu2025 :

Please vote for the best talk at
http://discourse.ossbase.org

For those at #hacklu2025 :

Please vote for the best talk at
http://discourse.ossbase.org

Next up are Etienne Charon and Khadim with an actual #carsecurity talk at #hacklu2025 ! One of the first carsec talks I remember ever at #hacklu.

“Audit and retrospective of an automotive application: Carplay”

#iamthecavalry

Next up are Etienne Charon and Khadim with an actual #carsecurity talk at #hacklu2025 ! One of the first carsec talks I remember ever at #hacklu.

“Audit and retrospective of an automotive application: Carplay”

#iamthecavalry

Second up today is Maxine Escourbiac breaking into Palo Alto GlobalProtect clients in “Palo Alto GlobalProtect: Remote full compromise exploit chain” at #hacklu2025

Second up today is Maxine Escourbiac breaking into Palo Alto GlobalProtect clients in “Palo Alto GlobalProtect: Remote full compromise exploit chain” at #hacklu2025

Opening the final (day 4) of #hacklu2025 are Rajanash Pathak and Hardik Kamlesh Mehta who’re going deep into android IPC with their talk: “Breaking android IPC: A deep dive into AIDL fuzzing”

Opening the final (day 4) of #hacklu2025 are Rajanash Pathak and Hardik Kamlesh Mehta who’re going deep into android IPC with their talk: “Breaking android IPC: A deep dive into AIDL fuzzing”

@Regit Suricata is now available as a library!!

#hacklu2025

@Regit Suricata is now available as a library!!

#hacklu2025

Its now @Regit and Peter Manev presenting the detection and performance improvements released with the recent #Suricata8 release

#hacklu2025

Its now @Regit and Peter Manev presenting the detection and performance improvements released with the recent #Suricata8 release

#hacklu2025

Guess which of these 5 vulnerabilities/CVEs is the RCE

#hacklu2025

Guess which of these 5 vulnerabilities/CVEs is the RCE

#hacklu2025

And from the remote server, any device connected to it can be compromised! #hacklu2025

And from the remote server, any device connected to it can be compromised! #hacklu2025

There’s an application used to connect remote repositories. Using a path traversal vulnerability, it’s possible to remotely take control of any such (also internet exposed of which there’s quite a few).

#hacklu2025

There’s an application used to connect remote repositories. Using a path traversal vulnerability, it’s possible to remotely take control of any such (also internet exposed of which there’s quite a few).

#hacklu2025

First up at #hacklu2025 after an Epoch and the afternoon break (get your devices and applications made 2038 safe) we have Alain Mowat on stage digging into the Dell thin client called “Wyse Management Suite” which can manage Wyse devices but also a ton of other devices!

First up at #hacklu2025 after an Epoch and the afternoon break (get your devices and applications made 2038 safe) we have Alain Mowat on stage digging into the Dell thin client called “Wyse Management Suite” which can manage Wyse devices but also a ton of other devices!

#hacklu2025 #2038epoch

#hacklu2025 #2038epoch

2042 in iOS calendar #hacklu2025 #2038epoch

2042 in iOS calendar #hacklu2025 #2038epoch

Really enjoying #hacklu2025 for the simple bits of wisdom