Camp Schedule

Last update July 26th, 2022

Fri, Sept 23rd
Sat, Sept 24th
Sun, Sept 25th

	Cyber Pompieri
10:30	Roundtable 10:30 - 12:00 Guerre di Rete Roundtable with Guerre di Rete crew and journalists to discuss about www.guerredirete.it hot topics
10:45
11:00
11:15
11:30
11:45
12:00	Camp Closing 12:00 - 13:00 Cyber Saiyan * Thank you and plans for the next years 😀 * Prizes for the CTF teams
12:15
12:30
12:45

	Cyber Pompieri
10:30	Roundtable 10:30 - 12:00 Guerre di Rete Roundtable with Guerre di Rete crew and journalists to discuss about www.guerredirete.it hot topics
10:45
11:00
11:15
11:30
11:45

	Cyber Pompieri
12:00	Camp Closing 12:00 - 13:00 Cyber Saiyan * Thank you and plans for the next years 😀 * Prizes for the CTF teams
12:15
12:30
12:45

RomHack Camp and RomHack2022 Conference are made with 🤍 by Cyber Saiyan

Support us making a donation or becoming a member

Privacy and Cookies Policy

Cyber Saiyan Ente del Terzo Settore – C.F. 97958200582 – VAT 14669161003

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Around
10:00		Camp Opening 10:00 - 11:00 Cyber Saiyan Welcome by Cyber Saiyan staff We will provide information about Camp organization, activities, Code of Conduct etc
10:15
10:30
10:45
11:00			PhySec Lab Part 1: Lockpicking 101 11:00 - 13:00 Luca Bongiorni This 2 hours workshop (max 20 people) wants to be an introductory course to the marvelous world of picking locks. After an overview of the most common types of locks and how they operate, the instructor will show you which type of tools are needed to manipulate and open them. In the second part of this training, you will be provided with a lockpicking kit and some practice locks in order to try yourself.	Introduction and CTF planning 11:00 - 12:00 OWASP Italian Chapter * OWASP Italian Chapter presentation * CTF and workshops presentation
11:15
11:30
11:45
12:00	The Badge 12:00 - 13:00 Cyber Saiyan The Badge Team will present the Camp Badge and how to hack it
12:15
12:30
12:45
13:00	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...
13:15
13:30
13:45
14:00
14:15
14:30
14:45
15:00	One Small step for man, one giant step for researchers 15:00 - 18:00 Gabriel Cirlig This will be a simple and short (in the limit of the Camp splot) introduction into Android reverse engineering, taking the student from zero to hero. No previous reversing knowledge is required and all of the tools will be provided in the form of a VM packed with goodies. The course will cover the basics of Android, APK structure, DEX file internals and how this can be exploited in order to decompile and deobfuscate malware. In addition, hands-on exercises will be provided with fresh malware samples where the knowledge can be put to good use in extracting C2s and other interesting information.	Defense Lab 15:00 - 18:00 Rev3rse Security A defense lab (max 30 people) built on a real AWS envoronment where you will learn howto mitigate 2 real attacks (based on OWASP Automated Threats) to an e-commerce website based on WooCommerce. More information here (in italian): https://blog.rev3rse.it/rev3rse-defense-lab-2022/	PhySec Lab Part 2: Hacking Physical Access Control Systems 15:00 - 17:00 Luca Bongiorni This 2 hours workshop (max 20 people) is designed to provide the attendees a good grasp on how Physical Access Control Systems work and how they can be defeated. During the course there will be multiple real examples and different offensive techniques will be explained. In the second part, it will be also possible to try exploiting them in live against real targets setup for the occasion.
15:15
15:30
15:45
16:00
16:15
16:30
16:45
17:00
17:15
17:30
17:45
19:00	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:15
19:30
19:45
20:00
20:15
20:30
20:45
21:00		Smart Contracts and Security Pitfalls 21:00 - 22:00 Reando “H4t4way” Veshi This talk aims at explaining some of the most common vulnerabilities that are specific to the application level of Blockchain technology by analyzing concrete exploitation case scenarios of these security vulnerabilities. We will also review some of the available tools and applications that detect these vulnerabilities in terms of their approach and effectiveness.	How we made the Camp 21:00 - 22:00 Cyber Saiyan Cyber Saiyan team will explain how the Camp was built and the challenges they had
21:15
21:30
21:45
22:00					Music Party 22:00 - 0:00 Cyber Saiyan Just enjoy the music 🎶 🎶 and relax 🍻 🍻
22:15
22:30
22:45
23:00
23:15
23:30
23:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Around
13:00	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...
13:15
13:30
13:45
14:00
14:15
14:30
14:45
19:00	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:15
19:30
19:45
20:00
20:15
20:30
20:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Around
15:00	One Small step for man, one giant step for researchers 15:00 - 18:00 Gabriel Cirlig This will be a simple and short (in the limit of the Camp splot) introduction into Android reverse engineering, taking the student from zero to hero. No previous reversing knowledge is required and all of the tools will be provided in the form of a VM packed with goodies. The course will cover the basics of Android, APK structure, DEX file internals and how this can be exploited in order to decompile and deobfuscate malware. In addition, hands-on exercises will be provided with fresh malware samples where the knowledge can be put to good use in extracting C2s and other interesting information.
15:15
15:30
15:45
16:00
16:15
16:30
16:45
17:00
17:15
17:30
17:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Around
10:00		Camp Opening 10:00 - 11:00 Cyber Saiyan Welcome by Cyber Saiyan staff We will provide information about Camp organization, activities, Code of Conduct etc
10:15
10:30
10:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Around
13:00		Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...
13:15
13:30
13:45
14:00
14:15
14:30
14:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Around
10:00	Linux Kernel Exploitation 10:00 - 13:00 Hacktive Security [sponsor's content] L'obiettivo di questo workshop (massimo 30 persone) è di introdurre i partecipanti al mondo della Kernel Exploitation su Linux. Una conoscenza di C è altamente consigliata così come una conoscenza (anche generale e non approfondita) dei concetti di binary exploitation. La classe includerà un'introduzione teorica al Kernel Linux e ai suoi LKM (Linux Kernel Modules), assembly x86_64, le vulnerabilità più comuni ed i relativi concetti di exploitation (e differenze dall'exploitation userland), mitigazioni correnti e finalmente hands-on labs per spawnare il tanto desiderato "uid=0". Pre-requisiti Hardware: Una VM Linux (o Linux nativo) basato su architettura Intel (è possibile utilizzare M1 con alcune accortezze, ma il lavoro di "adattamento" è a carico del partecipante causa limitazioni di tempo) che supporti l'utilizzo di "qemu-system-x86_64". [sponsor's content]			Boss of the SOC 10:00 - 14:00 SPLUNK [sponsor's content] What is BOTS? Boss of the SOC (BOTS) is a capture the flag competition created by Splunk where attendees are able to practice their search and investigation skills, while working through provided scenarios. They are competing against each other and peers for prizes and bragging rights. We suggest you play in teams of up to 3 people to give the best chance of winning. Who should play? All skill levels are welcome, from learning, to advanced security skills that can try to dominate the competition. The Scenario You and your team will role play as the quirky Security Analyst “Alice Bluebird”, a security analyst at Frothly, a thriving home brewing supply company. Why? Just because it’s a pandemic doesn’t mean Frothly has stopped defending its network. Contestants will pivot through a brand new, realistic dataset using Splunk’s analytics-driven security platform and the wild, wild web. All the while racing the clock ( and the globe) to identify the who, how, and where through a series of full forensic investigations. [sponsor's content]
10:15
10:30		RomHack2022 Conference Live Streaming 10:30 - 17:30 Cyber Saiyan Live streaming of RomHack 2022 Conference inside Camp facilities 10:30-10:40 Conference opening 10:40-11:10 James Forshaw The Vendor / Researcher Relationship Needs Improvement 11:10-12:00 Dr Nestori Syynimaa Attacking Azure AD by abusing Synchronisation API: The story behind 40.000 USD in bug bounties 12:00-12:50 Davide TheZero Security in a Immutable web3 World: Breaching Smart Contracts 12:50-14:00 Conference Lunch 14:00-14:50 Markus Vervier and Yasar Klawohn DES-On-Fire: Breaking Physical Access Control 14:50-15:40 Cas van Cooten Nimbly Navigating a Nimiety of Nimplants: Writing Nim Malware Like The Cool Kids 15:40-16:30 Rohan Aggarwal Bypassing Anti-Cheats & Hacking Competitive Games 16:30-17:20 Edoardo Rosa You shall not PassRole! 17:20-17:30 Closing
10:45
11:00
11:15
11:30
11:45
12:00
12:15
12:30
12:45
13:00	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...		Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...
13:15
13:30
13:45
14:00				Coding for kids 14:00 - 17:00 Donne 4.0 The event is for all kids from 8 to 14 year old, even without any previous coding experience. Kids and teens will be divided in groups according to their age and knowledge (if any) and will be guided in the development of a nice game in Scratch, a free visual coding language from MIT Media Lab.
14:15
14:30
14:45
15:00	PhySec Lab Part 1: Lockpicking 101 15:00 - 17:00 Luca Bongiorni This 2 hours workshop (max 20 people) wants to be an introductory course to the marvelous world of picking locks. After an overview of the most common types of locks and how they operate, the instructor will show you which type of tools are needed to manipulate and open them. In the second part of this training, you will be provided with a lockpicking kit and some practice locks in order to try yourself.		ZAP 15:00 - 16:30 OWASP Italian Chapter OWASP Zed Attack Proxy (ZAP) https://www.zaproxy.org/ is the world’s most widely used web app scanner, free and open source, actively maintained by a dedicated international team of volunteers. During this workshop you will learn more about ZAP proxy
15:15
15:30
15:45
16:00
16:15
16:30
16:45
17:00
17:15	PhySec Lab Part 2: Hacking Physical Access Control Systems 17:15 - 19:15 Luca Bongiorni This 2 hours workshop (max 20 people) is designed to provide the attendees a good grasp on how Physical Access Control Systems work and how they can be defeated. During the course there will be multiple real examples and different offensive techniques will be explained. In the second part, it will be also possible to try exploiting them in live against real targets setup for the occasion.
17:30
17:45
18:00
18:15
18:30
18:45
19:00		Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:15	Free time 19:15 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:30
19:45
20:00
20:15
20:30
20:45
21:00		Jobs in Cyber Security 21:00 - 22:00 Guerre di Rete An open discussion modarated by Guerre di Rete on jobs in cyber with ROmHack conference spakers on stage
21:15
21:30
21:45
22:00					Music Party 22:00 - 0:00 Cyber Saiyan Just enjoy the music 🎶 🎶 and relax 🍻 🍻
22:15
22:30
22:45
23:00
23:15
23:30
23:45