Gabriel is a software developer turned rogue, went from developing apps for small businesses to 2M+ DAU Facebook games while keeping an eye for everything shiny and new. For a couple of years he shifted gears and started a career as a security researcher while speaking at various conferences (SAS, AVAR, PHDays) showcasing whatever random stuff he hacked. With a background in electronics engineering and various programming languages, he likes to dismantle and hopefully put back whatever he gets his hands on.

During the Camp

• One Small step for man, one giant step for researchers – on Friday, September 23rd @ 15:00 (Aspira Malware)
  This will be a simple and short (in the limit of the Camp splot) introduction into Android reverse engineering, taking the student from zero to hero. No previous reversing knowledge is required and all of the tools will be provided in the form of a VM packed with goodies. The course will cover the basics of Android, APK structure, DEX file internals and how this can be exploited in order to decompile and deobfuscate malware. In addition, hands-on exercises will be provided with fresh malware samples where the knowledge can be put to good use in extracting C2s and other interesting information.

[ Twitter | LinkedIn ]

Luca Bongiorni, has more than 15 years of experience in InfoSec and has been mostly involved into the Offensive side of it. He holds a B.Sc. in Security Networks & Systems and also some certifications (GCFA, GPEN, GRID). He is also actively involved in R&D, where the main fields are: Radio Networks, Hardware Hacking, (Industrial) Internet of Things and Physical Security. He created WHID – We Hack In Disguise – in 2017 with the goal of Prototyping Offensive & Opensource Hardware Implants for conducting HID & Mousejacking Attacks and Bypass AirGapped Environments.

During the camp

• PhySec Lab Part 1: Lockpicking 101 – on Friday, September 23rd @ 11:00 (Perimetro) and Saturday, September 24th @ 15:00 (Aspira Malware)
  This 2 hours workshop (max 20 people) wants to be an introductory course to the marvelous world of picking locks. After an overview of the most common types of locks and how they operate, the instructor will show you which type of tools are needed to manipulate and open them. In the second part of this training, you will be provided with a lockpicking kit and some practice locks in order to try yourself.

• PhySec Lab Part 2: Hacking Physical Access Control Systems – on Friday, September 23rd @ 15:00 (Perimetro) and Saturday, September 24th @ 17:00 (Aspira Malware)
  This 2 hours workshop (max 20 people) is designed to provide the attendees a good grasp on how Physical Access Control Systems work and how they can be defeated. During the course there will be multiple real examples and different offensive techniques will be explained. In the second part, it will be also possible to try exploiting them in live against real targets setup for the occasion.

Rev3rse Security is an online italian community devoted to ICT Security: offensive, hardening, red team, blue team and more – https://www.rev3rse.it/

During the Camp

• on Friday, September 23rd @ 15:00 (Cyber Pompieri) a defense lab (max 30 people) built on a real AWS envoronment where you will learn howto mitigate 2 real attacks (based on OWASP Automated Threats) to an e-commerse website based on WooCommerce. More information here (in italian)

[ Twitter | LinkedIN | Telegram | YouTube ]