1.0.1 romhack-camp-2026 2026-10-02 2026-10-04 3 00:05 https://cfp.romhack.io Europe/Rome STAGE 1 (Section 9) Talk 2026-10-02T10:30:00+02:00 10:30 00:30 **Welcome to the second edition of RomHack Camp!** We are thrilled to gather the community back at the Flaminio Village in Rome for three intensive days of hacking, sharing, and networking. In this opening session, the Cyber Saiyan team will set the stage for the weekend ahead. We will walk you through the **camp layout**, introduce this year's **Community Villages**, and share **essential logistical details** to help you navigate the venue. We will also preview the upcoming highlights of the weekend. Grab a seat as we kick off RomHack Camp 2026, celebrate our community, and officially start an unforgettable weekend of collaborative learning. Let the hacking begin! romhack-camp-2026-177-romhack-camp-opening Orga Cyber Saiyan en false https://cfp.romhack.io/romhack-camp-2026/talk/7DJ87Y/ STAGE 1 (Section 9) Talk 2026-10-02T11:00:00+02:00 11:00 00:40 Standard OIDC bearer tokens are deceptively simple and highly attractive to developers, but they hide a structurally weak security posture: anyone who holds them can spend them. Following up on [our previous deep dive](https://www.youtube.com/watch?v=ehSkbR-YuZw) @MOCA24 into securing OIDC code exchanges, this presentation is a hands-on, exploit-driven exploration of token-usage security. We will begin by demonstrating how easily standard bearer tokens are stolen and replayed remotely from an attacker's terminal. We will then look "beyond the basics" to live-demo a hardened implementation of [RFC 9449](https://datatracker.ietf.org/doc/html/rfc9449) (DPoP) using a Keycloak identity provider and an Express.js resource server. romhack-camp-2026-218-stupid-sexy-bearer-tokens-a-deep-dive-into-exploding-oidc-sessions-and-hardening-with-dpop Cybersecurity and Hacking jirakyreymerkGiuseppetoctouStefano Maistri it false https://cfp.romhack.io/romhack-camp-2026/talk/RLARMV/ STAGE 1 (Section 9) Lightning Talk 2026-10-02T12:00:00+02:00 12:00 00:20 This talk introduces the audience to the realm of macOS malware development. As Macs are increasingly adopted by companies, they are being targeted more frequently in malware campaigns. Similarly, in red team engagements, operators are encountering Macs more often, making the development of malware and TTPs for this platform crucial. romhack-camp-2026-213-macos-malware-development-an-introduction Cybersecurity and Hacking [kuom] en false https://cfp.romhack.io/romhack-camp-2026/talk/EXYNT7/ STAGE 1 (Section 9) Talk 2026-10-02T14:30:00+02:00 14:30 00:40 As EDR products continue to improve their ability to detect malicious behavior, malware developers are increasingly adding layers of complexity in an attempt to evade detection. One of the most challenging operations to perform under the radar remains code injection. This seemingly unavoidable step is associated with numerous indicators of compromise, ranging from well-known Windows API calls to uncommon memory permissions or suspicious execution flows. To address this challenge, we revisit the decade-old technique of *code caves*: unused memory locations within legitimate binaries that can be repurposed to host and execute malicious code. By extending the concept to include *dead code* and embracing position-independent payload development we show that it is not only possible to go beyond classic code cave limitations, but also eliminate the need for code injection altogether. Through practical demonstrations, we will show how it is possible to automate the discovery and weaponization of dead code in legitimate binaries. This proof of concept advocates a renewed philosophy of malware development, emphasizing simplicity and minimalism rather than increasingly complex evasion chains. Finally, we discuss important defensive implications of this work : if attackers can increasingly avoid traditional injection artifacts, detection strategies should focus less on how code reached execution and more on what that code ultimately does. romhack-camp-2026-187-stop-injecting-start-blending-a-kiss-approach-to-malware-development Cybersecurity and Hacking Julien Bedel en false https://cfp.romhack.io/romhack-camp-2026/talk/AGFMRW/ STAGE 1 (Section 9) Talk 2026-10-02T15:20:00+02:00 15:20 00:40 i am working in software development in critical infrastructure. There are several different ways of vulnerability scanning and vulnerability management and i'd like to give an overview on that. This talks therefore covers the different opportunities of vulnerability scanning and their different anchor points. Furthermore i will talk on how to integrate that into a vulnerability management tool and how to build processes around it to achieve that vulns actually get fixed. romhack-camp-2026-239-automated-vulnerability-scanning-in-software-development Cybersecurity and Hacking mc.fly en false https://cfp.romhack.io/romhack-camp-2026/talk/SSVQRR/ STAGE 1 (Section 9) Talk 2026-10-02T16:10:00+02:00 16:10 00:40 Building private payments is a fascinating technical challenge. Somehow, we have to hide some combination of three things: who is paying, who is being paid, and how much. All without letting anyone print infinite money. This talk is about the cryptographic machinery and approaches people have come up with to make private payments possible and practical today. We focus on two projects, Monero and Zcash, which are among the most mature and influential systems. In the talk we will start from a few simple cryptographic primitives: additively homomorphic commitments, ring signatures, stealth addresses, and zero-knowledge proofs. Then we dissect how transactions work in both Monero and Zcash, highlighting differences and similarities. We close with a short, uncomfortable observation: when a system hides payments well, a forged proof is indistinguishable from an honest one, leaving us always just one proof away from trouble. romhack-camp-2026-182-just-one-proof-away-the-cryptography-behind-private-payments Cybersecurity and Hacking Giorgio Dell'Immagine en false https://cfp.romhack.io/romhack-camp-2026/talk/XJTACK/ STAGE 1 (Section 9) Talk 2026-10-02T16:50:00+02:00 16:50 00:40 In the run up to Google’s plans to dump 3rd party cookies, marketing firms (a $1.7 TRILLION dollar industry) were sent into a complete panic. These firms relied heavily on 3rd party cookies in order to better attribute CPM (cost per 1000 clicks) and how many of those clicks turned into sales. So advertisers could better study human behavior and trends in order to more effectively sell products. As a former Security Engineer at the Largest Independent Digital Marketing firm in the world, I had a unique view into the evils that these companies were developing in order to not only maintain a view into consumer trends but to increase these views, increase the invasiveness of these techniques, and increase the cooperation between all levels of the industry from display point (streaming service), device point (iPhone, TV), location points (via ISP), to sales point. This talk is a peek under the curtain for the server side data harvesting that agencies have developed, and how they’ve managed to twist this further invasion into so-called consumer protection and increased privacy. romhack-camp-2026-160-the-trojan-pop-up-modern-threat-actor-uses-of-advertising Journalism, society, hacker culture Sean Juroviesky en false https://cfp.romhack.io/romhack-camp-2026/talk/7RZJGK/ STAGE 1 (Section 9) Talk 2026-10-02T17:30:00+02:00 17:30 00:40 Viviamo nell'era della sorveglianza totale. I sistemi con cui le corporation controllano ogni angolo del mondo esistono già: intelligenze artificiali generative, droni, telecamere biometriche. La battaglia per la sovranità digitale è già cominciata e si combatte a colpi di fibra ottica e codice binario. La posta in gioco non è un territorio lontano, ma la libertà di miliardi di persone. Si combatte con algoritmi, satelliti e troll farm, e il fronte è dentro smartphone, social e dati consensualmente concessi. È una guerra ibrida fatta di episodi concreti: l'attacco alla rete satellitare Viasat che ha accecato le difese ucraine ore prima dell'invasione russa; i cavi sottomarini sabotati nel Mar Baltico, attraverso cui transita una parte delle comunicazioni mondiali; Elon Musk che decide della connettività di una nazione in guerra; Peter Thiel e Alexander Karp che vendono agli Stati la capacità di prevedere tutto, sottraendo loro la sovranità necessaria per difendersi. La disinformazione di massa è ormai industrializzata e democratizzata dall'intelligenza artificiale. Internet non è più uno spazio comune, ma un arcipelago di fortezze digitali dove ogni conflitto è permanente e silenzioso. L'Europa che regolamenta senza produrre tecnologia autonoma. Il rischio è la fine del vecchio ordine globale, delle sue leggi, delle sue istituzioni. In questo conflitto nessuno è civile: siamo tutti bersagli. romhack-camp-2026-203-guerra-profonda-hacker-bugie-e-l-architettura-segreta-dei-nuovi-conflitti Journalism, society, hacker culture Arturo Di Corinto it false https://cfp.romhack.io/romhack-camp-2026/talk/GPNXUR/ STAGE 1 (Section 9) Talk 2026-10-02T18:20:00+02:00 18:20 00:40 A Febbraio 2026 il progetto editoriale [Guerre di Rete](https://guerredirete.it) ha pubblicato il "Manualetto di sicurezza digitale per giornalisti e attivisti". Durante il Camp presenteremo il manualetto, in ricordo di Carola Frediani, fondatrice ed anima del progetto Guerre di Rete, venuta a mancare troppo presto, il 3 Giugno 2026. ll manualetto è rivolto a categorie essenziali per il funzionamento della democrazia e del dibattito pubblico, che troppe volte abbiamo visto essere target di attacchi informatici, sorveglianza, campagne d’odio e di molestie nel mondo, in Europa, in Italia. É scritto da giornalisti e attivisti in maniera semplice e discorsiva, ma fornisce anche indicazioni pratiche di base per iniziare a sistemare e a proteggere la propria vita digitale. romhack-camp-2026-184-presentazione-manualetto-di-sicurezza-digitale-per-giornalisti-e-attivisti Journalism, society, hacker culture Guerre di Rete it false https://cfp.romhack.io/romhack-camp-2026/talk/MKHXNV/ STAGE 1 (Section 9) Talk 2026-10-02T19:00:00+02:00 19:00 00:40 Supply chain attacks are increasingly focusing on developers and automation tools. In early 2025, someone infected a widely used security tool, then used the knowledge from that attack to subsequently infect npm- and python packages to steal developer credentials. The talk will show how these kinds of attacks worked and how developers can protect themselves (and their assets) against similar attacks and why ai might or might not be helpful in these scenarios. romhack-camp-2026-226-developers-under-attack-how-to-protect-yourself Cybersecurity and Hacking Christian <cy> Kühn en false https://cfp.romhack.io/romhack-camp-2026/talk/QECNXZ/ STAGE 1 (Section 9) Film 2026-10-02T20:30:00+02:00 20:30 02:00 The Camp goes dark and the screen lights up. On Friday night we open our two open-air screenings with a film that needs no introduction to this crowd: [Sneakers](https://www.imdb.com/title/tt0105435/) (1992). A team of security specialists, a black box that breaks any encryption, and a plot that put pentesting on the big screen decades before it was cool. "Setec Astronomy" — you'll get it. Grab a drink, find a spot under the sky, and watch with the people who get it. No slides, no keynotes — just a film, together. romhack-camp-2026-209-hacker-cinema-night-sneakers-1992 Entertainment Cyber Saiyan en false https://cfp.romhack.io/romhack-camp-2026/talk/GY3RFX/ STAGE 1 (Section 9) Performance 2026-10-02T22:30:00+02:00 22:30 02:00 The screen goes dark, the speakers wake up. Right after the Friday film, the Camp turns up the volume. Two hours of music to keep the night going with the community. No agenda, no schedule to follow, just good sound, good people, and the woods around you. The DJ line-up will be announced closer to the Camp. romhack-camp-2026-211-after-dark-friday-music-session Entertainment Cyber Saiyan en false https://cfp.romhack.io/romhack-camp-2026/talk/E7ZT7B/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T11:00:00+02:00 11:00 00:40 Come un attacco informatico rovina la tua vita, quelle dei tuoi cari e dei tuoi dipendenti. Racconteremo di una risposta ad un incidente informatico particolare. La gang ransomware è passata dall'azienda I.T. che gestiva la struttura informatica dei sui clienti. La gang si è propagata prima sull'infrastruttura del system integrator, per poi infettare le aziende più grandi del loro parco clienti, infine ha fatto quello che sapeva fare meglio... Quando non ci sono più strade, si è ad un bivio ove bisogna scegliere per forza se chiudere l'attività o pagare il riscatto. Questa scelta ti toglie il sonno... Anche piegandosi ai ricatti del crimine, non sempre va tutto bene, perchè a volte i decryptor non funzionano.... Butteremo uno sguardo alla pseudo struttura di questa gang criminale, alla loro efficienza, nonché al loro modus operandi. In questo talk non vengono tralasciate le implicazioni legali, morali ed emotive che coinvolgono le persone interessate, le loro dinamiche famigliari ed i dipendenti. A questo talk non è stato dato un taglio tecnico come di consueto, ma si vuole raccontare una storia di vita reale, che può capitare a chiunque e che sempre più spesso sentiamo ai T.G., leggiamo sui giornali, ma non pensiamo possa toccare a noi. Vogliamo avvicinarci a quei C.E.O., C.T.O., A.D., consigli direttivi, ed imprenditori di qual si voglia natura e grandezza che a volte pensano, "figurati se succede a noi", "non abbiamo nulla di valore", "ma noi siamo protetti". romhack-camp-2026-202-incontro-con-la-gang-ransomware-schrodingercat Cybersecurity and Hacking Davide BaraldiChiara Ciccia Romito it false https://cfp.romhack.io/romhack-camp-2026/talk/CTWEV9/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T12:00:00+02:00 12:00 00:40 Modern red team operations rarely play out in friendly territory. The days of wide-open egress are fading, replaced by environments where defenders tighten every screw. Outbound traffic is inspected, filtered, and often blocked entirely. A shell on a public-facing server might feel like a win, but in many cases, it comes with no DNS, no HTTP, and no callbacks at all. In these conditions, the familiar C2 playbook runs out of pages, and operators are forced to adapt or stall. In this session, we will flip the C2 model on its head. You will see how to turn "dead-end" footholds into fully functional command channels without a single outbound packet, blending covert tasking into legitimate inbound web traffic. We will break down the design choices, the stealth advantages, and the pitfalls you will want to avoid, then share tooling to make it work with your own implants and frameworks. If you have ever been stuck behind a wall of egress controls, you will walk away with a new blueprint and a few tricks to make the unreachable reachable. Why This Matters This is original, never-before-published research that redefines how C2s can function under extreme network restrictions. The technique has been tested in real red teams, proving both its stealth and reliability in complex environments. We’re genuinely enthusiastic about sharing this research with the community. Not just as a technical talk and tooling, but as a fresh perspective on adversary resilience in a post-egress world. romhack-camp-2026-186-command-and-collusion-flipping-the-c2-model-for-no-egress-environments Cybersecurity and Hacking Hatem MohamedMoataz Moustafa en false https://cfp.romhack.io/romhack-camp-2026/talk/KLSNYA/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T14:30:00+02:00 14:30 00:40 The Year 2038 problem is often framed as a technical limitation of legacy systems, but its real impact extends far beyond code. At 03:14:07 UTC on January 19, 2038, systems relying on signed 32-bit Unix time will overflow, potentially misinterpreting dates and disrupting critical services. While some engineers have long been aware of this boundary, its broader societal implications remain largely overlooked. This talk explores Y2038 as a systemic risk embedded in the infrastructure of modern society. From healthcare devices and industrial control systems to financial records and identity management, many long-lived systems still depend—directly or indirectly—on fragile time representations. Unlike typical vulnerabilities, this issue is not confined to a single product or vendor: it is distributed, silent, and deeply woven into global digital ecosystems. What happens when time itself becomes unreliable in systems we depend on for safety, trust, and accountability? Rather than focusing on exploitation, this talk reframes Y2038 as a challenge of governance, resilience, and accountability. It highlights how technical debt, supply chain opacity, and the longevity of embedded systems turn a known limitation into a slow-moving, systemic risk—and why addressing it requires coordination beyond the security community. romhack-camp-2026-155-2038-the-next-epochalypse-breaking-time-before-it-breaks-us Journalism, society, hacker culture Lorenzo Dina (joecondo) en false https://cfp.romhack.io/romhack-camp-2026/talk/NNMA7U/ STAGE 2 (Ghost in the Shellcode) Lightning Talk 2026-10-02T15:10:00+02:00 15:10 00:20 MXMap Italia has been established as national observatory of the status of digital Sovereignty of italian public agencies, by analyzing DNS records on the basis of the MXMap software. The technical platform provides opendata, mapping and analytics of the 23k+ public agencies on https://mxmap.it . The alarming results, with more than 46% of italian government agencies accessible trough Cloud Act by USA Security Agencies, requires all the institutional, technical, activist world to act now! The political platform https://osservatorio.mxmap.it aim to provides awareness across all the stakeholders, with policy and technical papers, brief for decision makers, and periodic massive emailing campaign to inform the key persons at each agency (DPO, but also RTD, owner of digital transformation). This walk want to share the project results, methodology and a call to action to contribute to the project goals, improving the status of digital sovereignty with self-hosted infrastructure and free software. romhack-camp-2026-188-mxmap-italia-national-observatory-for-digital-sovereignty Journalism, society, hacker culture Fabio Pietrosanti (naif) en false https://cfp.romhack.io/romhack-camp-2026/talk/GHQJFC/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T15:30:00+02:00 15:30 00:40 As Joni Mitchell famously sang “Don't it always seem to go, that you don't know what you've got till it's gone.” Like how an envelope generator in electronic music shapes a sound's character over time, this talk is concerned with the shape and characteristics of cybersecurity and is all about what music teaches us about attacks, timing, and resilience. Music and cybersecurity share the same basic anatomy since they are about identity and community. Both require a trigger to set off a series of events and can be creative or destructive. Over the years, music has been used to spread misinformation. Music has also been a method to control and torture people. For example, the use of acoustic bombardment to bring down the Noriega regime in Panama. Music can be a destructive force. Janet Jackson’s Rhythm Nation video caused hard drives to crash and was classified with its own CVE. Conversely in times of oppression, music has been used as a form of communication to bypass censorship. In this talk, I will explore how ransomware and identity-driven attacks evade detection not by being invisible, but by being indistinguishable from normal operational noise. Modern attacks don’t break systems, they blend into them. Using the structure of music production (signal/noise, mixing and mastering) to explore real-world attack chains, the goal is to share practical insights into why detection fails. romhack-camp-2026-192-last-night-a-dj-erased-my-drive Cybersecurity and Hacking Mathew Caplan en false https://cfp.romhack.io/romhack-camp-2026/talk/BNCWHH/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T16:10:00+02:00 16:10 00:40 In this talk I'll share my experience over the last few years, since I decided to set up my own vegetable garden and start growing produce for my family. I'll walk you through the challenges I faced: no water source available for irrigation, and the need to make the garden as self-sufficient as possible (scheduled irrigation, weed control, keeping manual work to a minimum). There's still some "nerdy" stuff left to do: monitoring the pump, the water level and the power supply, so I get alerted when something goes wrong instead of finding out once the plants have already dried out :) I'll tell you about the mistakes and wrong choices I made out of sheer inexperience as a grower, but also about the satisfaction of harvesting what you've sown. This is the same talk I'm presenting at [ESC]([url](https://endsummer.camp/)) (End Summer Camp), enriched here with ideas and discussions that came out of ESC. romhack-camp-2026-208-growing-a-nearly-self-sufficient-vegetable-garden Other merlos en false https://cfp.romhack.io/romhack-camp-2026/talk/8EHEDT/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T17:00:00+02:00 17:00 00:40 La generazione degli SBOM è ormai sempre più diffusa, ma in molti contesti rimane un’attività isolata: i file vengono prodotti durante la CI/CD e poi archiviati senza diventare parte di un processo di gestione del rischio. In questo talk presenterò Argus SBOM Guard, un progetto open source e 'self-hostabile' nato per sperimentare un approccio leggero alla raccolta degli SBOM, alla correlazione delle vulnerabilità e al tracciamento delle attività di remediation. L’obiettivo non è introdurre l’ennesimo scanner, ma mostrare un flusso pratico che collega SBOM, inventory, vulnerability intelligence, prioritizzazione e verifica delle correzioni, con uno sguardo anche alle esigenze emergenti legate alla software supply chain security e a normative come NIS2 e DORA. Un racconto tecnico, pragmatico e basato sull’esperienza di costruzione di un side project open source. romhack-camp-2026-206-argus-sbom-guard-gestione-delle-vulnerabilita-a-partire-dagli-sbom Scripting, Coding, Development Matteo Vitali (trotto) it false https://cfp.romhack.io/romhack-camp-2026/talk/3L33X7/ STAGE 2 (Ghost in the Shellcode) Lightning Talk 2026-10-02T17:40:00+02:00 17:40 00:20 Sometimes, the perfectly engineered solution isn’t what you need. We discuss how, at the beginning of 2026, we moved quickly to build a review bot that helped stem the flow of vulnerabilities entering the codebase in the era of vibe coding. We’ll cover the ROI, costs, and practical challenges involved, along with lessons learned about model choice and how reusing existing harnesses helped us move faster. Presented at AI for Security event @ DEFCON34. romhack-camp-2026-235-a-review-bot-that-just-works Cybersecurity and Hacking Andrea Cappa en false https://cfp.romhack.io/romhack-camp-2026/talk/NFK7KE/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T18:20:00+02:00 18:20 00:40 "You need local admin for that." It's one of the most repeated assumptions in offensive Windows tradecraft, and it's mostly wrong. Most of these techniques are gated by a specific set of access-mask and DACL permissions, not by group membership, so the real question isn't "am I admin?" but "what do I actually need?" This talk answers that systematically: what each lateral-movement technique truly requires, instead of what folklore and our tooling assume. We'll walk through the true minimum rights behind service creation and reconfiguration, DCOM, WinRM, WMI (over both DCOM and WSMAN), Remote Registry, Remote GhostTask, Remote Network Provider hijack, RDP and RDP Shadowing, SSH, and User Right Assignments. Along the way we'll hit the under-documented Microsoft policy that silently breaks "non-admin service creation," the granular access masks that make these paths work (0x0003 on the SCM, 0x00011 for shadowing, and friends), and why those same minimal rights double as quiet persistence. The uncomfortable part cuts both ways. BloodHound edges, NetExec's "Pwned!", and group-membership checks systematically miss these configurations, so attackers slip through and defenders never see it. I'll cover MovementHound, a PowerShell minimal-rights enumerator that surfaces these overlooked paths and feeds the missing edges straight into BloodHound, with a recorded demo of it in action. Expect granular access-mask details and honest caveats. romhack-camp-2026-189-movementhound-you-might-be-missing-something-move-it Cybersecurity and Hacking Umberto Micillo (polair) en false https://cfp.romhack.io/romhack-camp-2026/talk/8QEJPW/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-02T19:10:00+02:00 19:10 00:40 Cryptography is a magic ring of darkness and mistiness, but seems that every time a new attack comes in town, while cryptographers get excited, technicians start suffering to re-configure everything trying to survive following signals coming from misterious regulations and crypto public challenges. And in the Quantum era everything is exploding: QKD, PQC, Hybrid Crypto, key exchange latency problems. We'll try to give a little survival guide for this (apparently new) world, which can make us more aware and confident on the future, or at least better prepare for the next fashionable attacks. Maybe.. romhack-camp-2026-172-why-i-ve-to-waste-my-precious-time-on-cryptography Cybersecurity and Hacking Andrea Pompili it false https://cfp.romhack.io/romhack-camp-2026/talk/AS8AWJ/ WORKSHOP 1 (Neon Genesis Exploitation) Workshop 2026-10-02T11:00:00+02:00 11:00 02:00 Self-Sovereign Identity promises a different way of proving who we are online: instead of relying on a central identity provider, users can hold verifiable credentials and decide what information to disclose. But how much information do we really need to reveal to prove something about ourselves? In many digital interactions, a verifier does not need to know our full identity. It may only need to know whether we are over 18, authorised to access a service, hold a valid qualification, or possess a non-revoked credential. This talk explores how selective disclosure, Zero-Knowledge Proofs and cryptographic accumulators can support a shift from identity disclosure to proof-based verification. Instead of transferring personal data and protecting it afterwards, users can prove that a requirement is satisfied without revealing the underlying information. Using scenarios inspired by the TRUSTED project, we discuss data minimisation, unlinkability, credential validity and revocation. We also look beyond cryptography itself: even privacy-preserving credentials can still enable correlation, metadata leakage or unnecessary identification if the wider identity flow is poorly designed. The key question is therefore not only “Can I prove who I am?”, but “Can I prove what you need to know without telling you who I am?” romhack-camp-2026-225-prove-it-without-telling-me-who-you-are Cybersecurity and Hacking Carmela Occhipinti e Marco PratesiMarco Pratesi en false https://cfp.romhack.io/romhack-camp-2026/talk/KEJWJK/ WORKSHOP 1 (Neon Genesis Exploitation) Workshop 2026-10-02T15:00:00+02:00 15:00 02:00 Modern software delivery runs on CI/CD pipelines and attackers know it. From the SolarWinds Orion backdoor to the Codecov Bash Uploader compromise and the countless exposed Jenkins instances found on Shodan, build systems have become one of the most valuable and least monitored targets in the software supply chain. A single misconfigured runner, an overprivileged token, or a poisoned dependency can silently compromise everything downstream; and the rise of AI-based attacking agents, capable of autonomously discovering and chaining misconfigurations at scale, is only raising the stakes. This workshop is a practical introduction to CI/CD security through the lens of the OWASP Top 10 CI/CD Security Risks. We'll walk through each risk category (insufficient flow control, poisoned pipeline execution, dependency chain abuse, exposed secrets, insecure system configuration, and more) grounding each one in real-world incidents that made these risks tangible rather than theoretical. After the theory, attendees get their hands dirty with a set of self-contained challenges built on the CICD Goat vulnerable-by-design environment, hunting for and exploiting common pipeline misconfigurations and attack chains, followed by a guided walkthrough of each solution. Prerequisites: basic web/Linux exploitation knowledge, familiarity with git, and a laptop with Docker and a git client installed. romhack-camp-2026-221-pwn-the-pipeline-a-hands-on-tour-of-ci-cd-security-risks Cybersecurity and Hacking m3ssap0Mattia BrolloFleeenzIadRabbit en false https://cfp.romhack.io/romhack-camp-2026/talk/L9ZERS/ WORKSHOP 1 (Neon Genesis Exploitation) Talk 2026-10-02T17:00:00+02:00 17:00 15:00 Cyber Saiyan is proud to join forces with [fibonhack]([url](https://fibonhack.it/)) to present “**From Dusk Till Dawn**”, an on-site hacking marathon taking place during RomHack Camp. This isn’t your average competition. While the rest of the camp sleeps, 5 elite teams will battle through the night. 12 hours. Pure adrenaline. 🚩 Meet the Finalists 🥇 1st - FR13NDS TEAM - Kazakhstan 🇰🇿 🥈 2nd - TPC - Japan 🇯🇵 🥉 3rd - thePizzaIncident - Italy 🇮🇹 🏅 4th - SaturnX - South Korea 🇰🇷 🏅 5th - Mntcrl - UniBa, Italy 🇮🇹 romhack-camp-2026-193-community-ctf-by-fibonhack Cybersecurity and Hacking fibonhack en false https://cfp.romhack.io/romhack-camp-2026/talk/EMS9ZU/ WORKSHOP 2 (GetRoot no Jutsu) Workshop 2026-10-02T11:00:00+02:00 11:00 02:00 **Bullismo No Grazie** è un'associazione no profit nata nel 2021 che ha incontrato oltre 200.000 ragazzi e 90.000 adulti in più di 100 città italiane, percorrendo oltre 150.000 km di scuole, palestre e villaggi turistici. In questo workshop portiamo la realtà che vediamo ogni giorno: le challenge pericolose che circolano tra bambini di IV e V elementare, i social network che i ragazzi usano e che i genitori non conoscono, le responsabilità civili e penali che ricadono sulle famiglie quando un minore commette atti di cyberbullismo. Niente teoria. Solo casi reali, domande vere, strumenti pratici per riconoscere i segnali e sapere cosa fare. romhack-camp-2026-220-0-il-bullismo-non-va-in-vacanza Kids Bullismo No Grazie it false https://cfp.romhack.io/romhack-camp-2026/talk/TGTBKG/ WORKSHOP 2 (GetRoot no Jutsu) Light Workshop 2026-10-02T14:00:00+02:00 14:00 01:00 Durante questo workshop imparerete a costruire braccialetti con perline e charms vari. Tutto l'occorrente sarà fornito dal trainer, l'unica cosa da portare è forza di volontà e un bel sorriso! Nota: il workshop è aperto anche ai più grandi e non ci sono barriere linguistiche. **English speakers are welcome!** romhack-camp-2026-214-braccialetti-diy Kids Lucrezia it false https://cfp.romhack.io/romhack-camp-2026/talk/KSYBBR/ WORKSHOP 2 (GetRoot no Jutsu) Workshop 2026-10-02T15:00:00+02:00 15:00 03:00 Brain Arena – Allenare la mente attraverso sfide, robotica e problem solving Brain Arena è un laboratorio esperienziale in cui bambini e ragazzi entrano in una vera arena delle competenze: non una lezione tradizionale di coding, ma una sequenza di missioni da affrontare attraverso logica, strategia, creatività e collaborazione. Durante le due ore i partecipanti, organizzati in piccoli team, dovranno osservare un problema, immaginare una soluzione, programmarla e metterla subito alla prova utilizzando robot educativi e speciali tappeti di gioco. Ogni sfida richiede di prendere decisioni, correggere gli errori, migliorare la propria strategia e confrontarsi con gli altri. L’obiettivo non è semplicemente “far muovere un robot”, ma allenare competenze fondamentali come problem solving, pensiero computazionale, capacità di analisi, collaborazione e gestione dell’errore. Rome Hack sarà la prima presentazione pubblica di Brain Arena, un nuovo format educativo Italmaker che trasforma l’apprendimento STEM in un’esperienza dinamica, coinvolgente e competitiva, dove imparare significa soprattutto mettersi alla prova. romhack-camp-2026-228-brain-arena Kids Italmaker it false https://cfp.romhack.io/romhack-camp-2026/talk/9VWFFW/ WORKSHOP 2 (GetRoot no Jutsu) Workshop 2026-10-02T18:00:00+02:00 18:00 02:00 Everyone talks about SOAR; few have wired one up end to end. In this hands-on lab you'll build the "respond" half of a real detection-and-response pipeline — no slideware, no vendor console. We hand you a live AWS environment: an API gateway and WAF fronting a target app, with all traffic and attack detections already flowing into Splunk. Your job is to build the automation that fires when Splunk raises an alert, using n8n (open-source, low-code) as the orchestrator. You'll answer one question — "should I block this IP?" — with steadily rising intelligence. First, block on any alert (and watch the false positives roll in). Then block only when threat intel says the IP is malicious. Then hand the decision to an AI agent that investigates for itself: it queries multiple intel sources and runs its own Splunk searches, then returns a verdict with its reasoning. Finally, put a human in the loop to approve or overrule the agent — because trusting an autonomous blocker is the real 2026 question — and, time permitting, make the block self-reverse with a TTL and an audit trail back to Splunk. You'll leave with a working, governed, AI-triaged auto-response pipeline and the patterns to rebuild it at home. Bring a laptop; we bring the infrastructure (AI model included). romhack-camp-2026-200-keep-callm-and-let-it-block-agentic-soar-with-n8n-splunk Other DocaserpiRicFrancesco Viscardi en false https://cfp.romhack.io/romhack-camp-2026/talk/AHQ3ZZ/ WORKSHOP 2 (GetRoot no Jutsu) Light Workshop 2026-10-02T21:00:00+02:00 21:00 01:00 Before Slack, before Discord, before Telegram, there was IRC. A protocol so simple you could read it with netcat, so resilient it survived 35 years of "IRC is dead" articles, and so transparent that what you typed was exactly what the server saw — no algorithms, no tracking, no engagement metrics. This late-night session is part storytelling, part live hacking. We will walk through the history of IRC from the Italian underground scene of the late '90s — irc.tin.it, war scripts, channel takeovers, netsplits, and the culture that shaped an entire generation of Italian hackers — to deploying a modern IRC server in 2026 on a self-hosted LXC container with TLS, persistent history, and integrated services, no third-party dependencies. Bring your laptop. We will spin up a live server at the camp and open a channel for attendees to join in real time via browser or terminal client. You will register a nick, join a channel, and experience what real-time communication looked like before corporations decided your attention was a product. No slides. No frameworks. Just a terminal, a protocol from 1988, and a conversation about what we lost when we handed our communication to platforms we don't control. Suitable for all skill levels. Nostalgia-prone attendees may experience involuntary emotions. romhack-camp-2026-199-irc-is-not-dead-self-hosting-real-time-chat-like-it-s-1996-but-with-tls Journalism, society, hacker culture Myfox it false https://cfp.romhack.io/romhack-camp-2026/talk/RBQXR3/ COMMUNITY AREA Workshop 2026-10-02T20:00:00+02:00 20:00 03:00 Take a break from hacking: it’s time for the ultimate caloric overflow! Masterfully cooked and proudly served by Berghem-in-the-Middle (the crew behind [No Hat conference](https://www.nohat.it), our traditional Polenta Taragna is made to perfection with cornmeal, buckwheat, the finest alpine cheese and a terabit-scale DoS of butter. A tradition we deeply cherish, sparked during the first RomHack Camp edition, when [a dear friend forever in our hearts wrote: “after that night, the world will be divided into those who have tasted polenta taragna and those who haven't.”](https://romhack.io/un-hacker-camp-da-ricordare/) Bring some appetite, and good luck staying awake at your terminal once that inevitable post-taragna sleep mode kicks in! romhack-camp-2026-234-tradizionale-polenta-taragna-di-berghem-in-the-middle Food Berghem-in-the-Middle en false https://cfp.romhack.io/romhack-camp-2026/talk/MMBQHU/ FOOD AREA Workshop 2026-10-02T19:00:00+02:00 19:00 04:00 Hungry after a day of hacking? A wood-fired Pizza Truck parks on site both evenings, serving fresh pizza straight from a real wood oven. No need to leave the woods for dinner — grab a slice, grab a seat, and refuel before or after the Hacker Cinema Night and the After Dark music session. Available Friday and Saturday evening. romhack-camp-2026-246-0-pizza-truck-wood-fired-dinner Food Pizza Truck en false https://cfp.romhack.io/romhack-camp-2026/talk/3FTTEN/ STAGE 1 (Section 9) Talk 2026-10-03T10:00:00+02:00 10:00 00:40 Unlike mobile environments, The Linux desktop paradigm wasn’t really designed with app-level security, permissions and sandboxing in mind. Despite this, modern desktop environments try to shoehorn this in with systems such as Flatpak and desktop portals. We went digging into GNOME ecosystem security, investigating its core libraries (glib, libsoup, and gvfs) and sandboxing mechanisms (Flatpak, bubblewrap, dbus-proxy, and desktop portals). During this journey into the GNOME world we uncovered numerous security issues, resulting in more than 14 CVEs, including a full, zero-precondition Flatpak sandbox escape. We’ll take you along our very same journey where you’ll discover how permissions and security boundaries are enforced and rely on a web of libraries and tools, some of which seemingly unaware of their importance in the overall chain. This way you’ll be able to see with your own eyes what issues arise in such a complex environment where a couple of small mistakes, or colliding opinions, can lead to impactful vulnerabilities. We’ll also take a few detours to show critical issues that we found in widely used open source productivity software, and how those vulnerabilities can have a severe impact also outside of the desktop paradigm. romhack-camp-2026-175-gnome-and-beyond-dream-tour-discover-linux-desktop-sandboxing-and-more-through-its-vulnerabilities Cybersecurity and Hacking b0n0b0 en false https://cfp.romhack.io/romhack-camp-2026/talk/F9WCBL/ STAGE 1 (Section 9) Talk 2026-10-03T10:40:00+02:00 10:40 00:40 Dopo aver sfidato i limiti del **Commodore 64** con **Catalypse**, perché non ripetersi su **Amiga**? Perchè non spingere l'hardware a livelli mai visti, ricreando la magia dei coin-op che ci facevano sognare alla fine degli anni '90? Questa è la storia di **Fatalnoise**, un picchiaduro ambizioso che non ha mai visto la luce. Un progetto folle, nato e sviluppato tra sfide tecniche insormontabili, problemi con l'università, accese divergenze creative e quella immancabile, totale incoscienza di chi non aveva la minima idea di cosa stesse realmente combinando... fino ad oggi... romhack-camp-2026-170-from-hero-to-zero-the-fatalnoise-neverending-story Gaming and game development Andrea Pompili it false https://cfp.romhack.io/romhack-camp-2026/talk/8AZUTX/ STAGE 1 (Section 9) Talk 2026-10-03T11:30:00+02:00 11:30 00:40 Insieme alla famiglia di Carola, a amici e amiche e alla redazione di Guerre di Rete presenteremo il suo ultimo libro "L'inganno dell'Automa" _«È un big game, my friend. Chi si oppone non finisce bene.» Italia contemporanea. Andrea, un giovane ricercatore di cybersicurezza che vive tra Milano e la Liguria, viene interrotto nella sua edonistica quotidianità dalla notizia dell’arresto a Dubai di un vecchio amico. L’uomo, che commerciava vulnerabilità informatiche e si dedicava a vari traffici in giro per il mondo, è accusato di spionaggio. Mentre Andrea cerca di capire come aiutare l’amico e cosa si nasconda dietro l’arresto, incrocia sulla sua strada una giornalista investigativa, Agnese, autrice di un blog molto seguito, dal quale si scaglia contro la corruzione del governo; ma anche Caterina, brillante e frustrata social media manager di una politica nazionale. Travolta da rivelazioni, inquietanti trafficanti d’armi, e oscuri intrecci di politici corrotti e società di intelligenza artificiale, la vita dei tre viene cambiata, obbligandoli a cercare giustizia più che una facile via d’uscita. E non tutto è ciò che sembra._ https://www.ibs.it/inganno-dell-automa-libro-carola-frediani romhack-camp-2026-185-presentazione-libro-l-inganno-dell-automa-di-carola-frediani Journalism, society, hacker culture Guerre di Rete it false https://cfp.romhack.io/romhack-camp-2026/talk/GHGK7L/ STAGE 1 (Section 9) Talk 2026-10-03T12:30:00+02:00 12:30 00:40 Talk summary: Electric vehicle charging infrastructure is rapidly expanding, becoming a critical component of modern transportation. Despite the increased attention on its security, our research shows that even devices previously examined in competitions such as Pwn2Own can still hide impactful vulnerabilities. We picked up this device right after Pwn2Own results were announced and the competition was over - and quickly found that the story was far from finished. Our security analysis of this commercially available Phoenix Contact CHARX SEC-3000 EV charging station controller uncovered serious, previously unknown issues that had gone unnoticed during the event. By combining firmware analysis with emulation techniques, we identified several critical vulnerabilities (including OS Injection) affecting the device. We will walk through the approaches, challenges, and what we have learned. Longer talk description: This session provides a technical analysis into our ongoing research on an EV charging station controller. The device we investigated had already been part of a Pwn2Own competition, yet our analysis revealed multiple security vulnerabilities. We will cover our approach to analyzing the charger, including firmware extraction and emulation to understand internal components and logic of the device ecosystem. romhack-camp-2026-216-breaking-the-charge-security-analysis-of-the-phoenix-contact-charx-sec-3000-ev-charging-controller Cybersecurity and Hacking Piotr PtaszekMatthew en false https://cfp.romhack.io/romhack-camp-2026/talk/TT8EEA/ STAGE 1 (Section 9) Lightning Talk 2026-10-03T14:00:00+02:00 14:00 00:20 This presentation explores the history, technology, and legacy of the Commodore 65, one of the most fascinating unreleased machines in Commodore’s history. Conceived at the end of the 1980s as the possible successor to the legendary Commodore 64, the C65 represented an ambitious attempt to extend the life of the 8-bit platform while integrating features inspired by the emerging 16-bit generation. Through historical context, technical analysis, and direct experience with original prototypes, the talk examines the C65’s architecture, including the 4510 CPU, VIC-III graphics chip, enhanced BASIC 10, integrated 3.5-inch disk drive, and advanced graphic and sound capabilities. Particular attention is given to the machine’s difficult development, its uncertain position between the C64 and the Amiga, and the reasons why it never reached the commercial market. The Commodore 65 is presented not only as a rare collector’s item, but as a symbol of Commodore’s creativity, contradictions, and missed opportunities. Its story reveals a crucial transitional moment in home computing: the end of the classic 8-bit age and the beginning of a new technological era romhack-camp-2026-190-the-commodore-65-the-dream-that-never-arrived Hardware, Makers and IoT Dr. Commodore 65 en false https://cfp.romhack.io/romhack-camp-2026/talk/XYPNLH/ STAGE 1 (Section 9) Talk 2026-10-03T14:30:00+02:00 14:30 00:40 Your smartphone is not just a phone. It is your microphone, camera, archive, diary, GPS tracker, wallet, authenticator, and memory. In this talk, we will explore what happens when that device is turned into an informant during a legitimate criminal investigation through the use of lawful investigative malware, commonly known in Italy as a "captatore informatico". We will start from the civic and legal tension: the need for effective investigations versus the privacy impact of compromising the most intimate device we own. Then we will move into the technical side, dissecting a real-world mobile implant to understand how it likely infected the device, what data it was able to collect, how it communicated, and what traces it left behind. This is not an anti-law-enforcement talk. It is a hard look at the technical power of these tools, the risks created by their use, the vendors and supply chains behind them, and the practical signals defenders can monitor. romhack-camp-2026-173-state-trojan-the-malware-with-a-warrant Cybersecurity and Hacking Pietro BoccalettoFrancesco Infantini en false https://cfp.romhack.io/romhack-camp-2026/talk/DTBUCX/ STAGE 1 (Section 9) Talk 2026-10-03T15:10:00+02:00 15:10 00:40 AI is changing both the scale and speed of cyber offense and defense. In response, more than 100 organizations across technology, cybersecurity, industry, and government have called for a global surge in cyber defense: better tools for defenders, stronger protection for critical infrastructure, more useful intelligence sharing, and faster remediation of vulnerabilities. The harder question is what happens next. What should organizations actually commit to, and how should progress be measured? Who gets access to advanced defensive AI, and who decides what qualifies as a “trusted defender”? How can vendors share intelligence and fixes that defenders can use in practice? And who pays to bring these capabilities to smaller hospitals, utilities, municipalities, and other resource-constrained organizations? The panel will also tackle a fundamental technical challenge: securing software and infrastructure at scale. More models, agents, or compute do not automatically translate into fewer critical vulnerabilities. We will discuss what AI labs, governments, security vendors, software producers, and infrastructure operators each need to do to turn a broad call for action into concrete, accountable improvements in cyber defense. romhack-camp-2026-237-a-call-for-collective-action-on-cyber-defense Cybersecurity and Hacking Andrea Cappa en false https://cfp.romhack.io/romhack-camp-2026/talk/WVKS3F/ STAGE 1 (Section 9) Talk 2026-10-03T16:00:00+02:00 16:00 00:40 Fiscal cash registers are everywhere in Italy, yet they receive surprisingly little attention as embedded systems. They are regulated appliances with tamper-evident seals, periodic inspections, controlled service procedures, and hardware mechanisms intended to make fiscal data difficult to manipulate. We bought one of the most common models on the second-hand market and started taking it apart. Inside, we found an unusual design: an FPGA driving the user interface, an internal battery supporting a peculiar power lifecycle, a resin-encapsulated memory module, and physical switches hidden on the main board. The software architecture is much more familiar: the device runs an old Linux-based OS with a writable root filesystem, essentially no privilege separation, extensive debug functionality, and a broad network attack surface. Whether you prefer hardware or software, we found ways in from both sides. Rather than presenting a vulnerability catalogue, this talk examines the security model of a regulated embedded system and the mismatch between elaborate physical protections and weak software trust boundaries. What does “tamper resistant” mean when the protected component is connected to a general-purpose computer with weak security assumptions? By the end of the talk, we’ll have answered that question and one more: does it run Doom? romhack-camp-2026-223-cash-card-or-root-security-archaeology-of-a-fiscal-cash-register Cybersecurity and Hacking Jacopo JannoneJacopo Moioli en false https://cfp.romhack.io/romhack-camp-2026/talk/PTNMVU/ STAGE 1 (Section 9) Lightning Talk 2026-10-03T17:00:00+02:00 17:00 00:20 Systemd units have many built-in configuration options that can be used to restrict access of a unit to the rest of the system, with the goal of containing a compromised system service. Marco will review the state of systemd security sandboxing in Debian packages, what we need to fix to have more and what will break by enabling too much of it. romhack-camp-2026-236-the-state-of-systemd-security-sandboxing-in-debian Cybersecurity and Hacking Marco d'Itri en false https://cfp.romhack.io/romhack-camp-2026/talk/9V9HDD/ STAGE 1 (Section 9) Lightning Talk 2026-10-03T17:30:00+02:00 17:30 00:20 The talk focuses on the hardcore usage from treat actor of ai to develop malware in large scale. In order to overcome the disastrous events shortcoming, we implement via LangGraph, Capev2 and Local Ai a way to find the most sketchy ones. romhack-camp-2026-217-from-discovery-to-automated-windows-malware-analysis Cybersecurity and Hacking Pizzamarinarasadd en false https://cfp.romhack.io/romhack-camp-2026/talk/VPLU83/ STAGE 1 (Section 9) Lightning Talk 2026-10-03T18:00:00+02:00 18:00 00:30 The long night is finally over! After an intense 12-hour on-site hacking marathon, it is time to wrap up the From Dusk Till Dawn CTF. Organized by the brilliant community-driven group **fibonhack**, this competition tested the limits of our finalists across Web Security, Binary Exploitation, Cryptography, and Reverse Engineering. While the rest of the camp slept, five elite teams—FR13NDS TEAM, TPC, thePizzaIncident, SaturnX, and Mntcrl—battled it out from Friday at 19:00 straight through to Saturday morning at 07:00. In this 20-minute award ceremony, the **fibonhack** and **Cyber Saiyan** teams will take the stage to review the final scoreboard and officially crown the **RomHack Camp 2026 Community CTF Champions**. Join us to celebrate the incredible skills of our players, discover who takes home the prizes, and give a massive round of applause to everyone who survived until dawn! romhack-camp-2026-179-community-ctf-by-fibonhack-award-ceremony Cybersecurity and Hacking fibonhack en false https://cfp.romhack.io/romhack-camp-2026/talk/9ZK9QM/ STAGE 1 (Section 9) Talk 2026-10-03T18:30:00+02:00 18:30 00:40 Modern Digital Forensics and Incident Response (DFIR) investigations require analysts to process large volumes of heterogeneous data, correlate evidence from multiple sources, and quickly reconstruct attack timelines without losing context. Gulp (Graphical Universal Log Processor) is designed to address these challenges by providing a flexible, visual platform for exploring, correlating, and analyzing logs and digital artifacts, complementing existing forensic workflows rather than replacing them. This session introduces the GULP project, its architecture, and the challenges it is designed to address. The core of the presentation is a hands-on investigation that walks attendees through the different stages of a real-world attack. It also demonstrates how GULP can be used to analyze data collected from third-party forensic tools and log sources, leveraging graphical visualizations and contextual correlations to accelerate investigations and improve the understanding of complex attack scenarios. romhack-camp-2026-194-gulp-see-the-attack-understand-the-story-prove-the-facts Cybersecurity and Hacking Davide Inzerillo en false https://cfp.romhack.io/romhack-camp-2026/talk/JZSCRH/ STAGE 1 (Section 9) Talk 2026-10-03T19:10:00+02:00 19:10 00:40 Supply chain security conversation is booming these days after attacks like log4j came to the scene. In this in-house research, we have conducted research on publicly available open-source assets like NPM (JS packages) and WordPress Plugins find out the presence of mistakenly or deliberately publicly exposed secrets (including private API keys and so on) i.e. AWS, Google, etc. (33 different categories of secrets!) This could pose a risk to anyone using those packages as dependencies or plugins so that this chain of not re-inventing the wheel could become a disaster that stops the wheel once and for all. We would be presenting our research done on a large scale after in-house scanning on: - Scanning of around 2 Million+ NPM Packages. (almost all publicly available at the time of research) - Scanning of about 60,000 WordPress Plugins. (almost all publicly available at the time of research) romhack-camp-2026-196-secret-scanning-in-open-source-at-scale-in-depth Cybersecurity and Hacking Hassan Khan Yusufzai en false https://cfp.romhack.io/romhack-camp-2026/talk/QCMYJN/ STAGE 1 (Section 9) Film 2026-10-03T20:30:00+02:00 20:30 02:00 One more night, one more film. After a full day of hacking and the CTF award ceremony, we close Saturday under the open sky with [The Hitchhiker's Guide to the Galaxy](https://www.imdb.com/title/tt0371724/) (2005). Douglas Adams' tale of Earth's demolition, improbable escapes, and one very useful towel — a reminder that the answer might be 42, but the fun is in the questions. Same spot, same spirit as Friday. Bring your towel and Don't Panic. romhack-camp-2026-210-hacker-cinema-night-the-hitchhiker-s-guide-to-the-galaxy-2005 Entertainment Cyber Saiyan en false https://cfp.romhack.io/romhack-camp-2026/talk/PUJVLA/ STAGE 1 (Section 9) Performance 2026-10-03T22:30:00+02:00 22:30 02:00 One more night, one more set. After the Saturday film, we close the Camp's last full night the right way. Two hours of open-air music with the community. Same spirit as Friday, one more chance to hang out under the sky before the Camp winds down. The DJ line-up will be announced closer to the Camp. romhack-camp-2026-212-after-dark-saturday-music-session Entertainment Cyber Saiyan en false https://cfp.romhack.io/romhack-camp-2026/talk/HEPMEH/ STAGE 2 (Ghost in the Shellcode) Lightning Talk 2026-10-03T10:00:00+02:00 10:00 00:20 Aumentare la criptazione, rende il sistema più sicuro? Tra la versione A e la versione B di un'app di edicola digitale: il sistema di protezione è diventato più sofisticato ma nello stesso tempo, più fragile. La versione A proteggeva l'accesso tramite regolare autenticazione e autorizzazione, lato server. Con la versione B, indici e metadati cifrati sono diventati pubblicamente raggiungibili, mentre la protezione è stata affidata a uno schema crittografico proprietario, costruito sopra Crypto++ e distribuito all'interno dell'app. Ricostruiremo il percorso che ci ha permesso di comprenderne il funzionamento: MITM, decompilazione dell'APK, analisi del bridge JNI e reverse engineering di una libreria nativa ARM64. romhack-camp-2026-242-anatomia-di-un-drm-editoriale Other Fabio Fabrizi it false https://cfp.romhack.io/romhack-camp-2026/talk/SVZ8AS/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T10:20:00+02:00 10:20 00:40 Nobody runs a bare AI agent. Everyone extends it: skills, MCP servers, plugins, hooks, subagents. Every one of those is, underneath, a folder of text that gets loaded into the model's context and read as instruction. Which makes them a supply chain. One that gets reviewed exactly once, at install, and executed every session afterwards. This talk poisons one, step by step. We write a skill that does what it advertises and one extra thing, and we look at where you put the payload so that the person installing it does not see it, not in the file they skim, but in the reference file that skill loads on demand. Then we do the version that actually matters: a clean skill, installed and approved three weeks ago, updated today. Four lines different. Nobody diffs an update. Same trick without installing anything: MCP tool descriptions are context, so changing one after approval changes what the agent does with no code the user ever reviews. And repository content is read as task context by an agent that cannot tell instruction from data. The point is what none of it requires: no exploit, no privilege escalation, no CVE. Every step uses capability that was granted on purpose. Second half is defensive: which controls change the outcome, which ones only feel like they do, and what you can still reconstruct afterwards. romhack-camp-2026-222-how-to-poison-a-skill-and-why-nobody-reviews-it-twice Cybersecurity and Hacking Pietro Virgillito it false https://cfp.romhack.io/romhack-camp-2026/talk/U8LFED/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T11:00:00+02:00 11:00 00:40 Il talk vuole presentare questa distro linux IpFire per uso firewall in casa e piccole ditte con molti plug-in in particolare quello per tor che permette il firewall non solo di proteggere le connessioni tramite IPS ma anche per l'anonimato come nodo entrante al circuito tor e volendo come bridge per contribuire alla complessita del deepweb. Il talk quindi fa una panoramica dei punti di forza del progetto opensource non avendo una versione commerciale, vuole sensibilizzare all'uso di strumenti opensource per la privacy come VPN e protezione DNS. romhack-camp-2026-162-linux-ipfire-hardening-lan-with-suricata-ips Cybersecurity and Hacking fabio carletti aka Ryuw it false https://cfp.romhack.io/romhack-camp-2026/talk/J7BBDG/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T12:00:00+02:00 12:00 00:40 Nel mondo attuale dello sviluppo software, la sicurezza non può più essere un ripensamento. Con l'approccio DevSecOps e il principio "shift left", gli sviluppatori svolgono un ruolo proattivo nell'integrare la sicurezza fin dalle prime fasi dello sviluppo, contribuendo a rendere le applicazioni più sicure e resilienti. In questo talk esploreremo best practices per scrivere codice sicuro e presenteremo alcuni strumenti che aiutano ad automatizzare la rilevazione di vulnerabilità nel nostro codice Python e nelle dipendenze. romhack-camp-2026-205-codice-python-sicuro-buone-pratiche-e-strumenti-di-analisi Scripting, Coding, Development Matteo Vitali (trotto) it false https://cfp.romhack.io/romhack-camp-2026/talk/KKWVTD/ STAGE 2 (Ghost in the Shellcode) Lightning Talk 2026-10-03T12:40:00+02:00 12:40 00:20 Over the years as a cybersecurity pre-sales engineer, I've had the privilege of seeing organizations prepare to defend themselves against sophisticated attackers, ransomware gangs, zero-days, and nation-state threats. Sometimes, however, the biggest security problem was much closer to home. A company wants NAC, but there's no IdP. Another wants PAM while every workstation shares the same local administrator password. Someone wants an anti-spam solution while SPF, DKIM and DMARC are not configured properly. I've encountered passwords stored in passwords.txt, environments where every machine is administered individually. These aren't just funny war stories. They reveal a recurring problem: security products have prerequisites. NAC and EDR assume you can manage your endpoints. Vulnerability management assumes you know what assets you have. SIEM assumes you have useful logs and someone who can act on them. Zero Trust assumes you have some idea who your users, devices and applications actually are. This talk is a collection of strange, surprising and sometimes painful lessons from the security pre-sales trenches, and an argument for asking an uncomfortable question before buying the next security product: “What should we fix first?” Because sometimes the most useful thing a security vendor can tell you is: “You don't need our product yet.” romhack-camp-2026-219-you-don-t-need-a-security-solution Cybersecurity and Hacking Max Derkach en false https://cfp.romhack.io/romhack-camp-2026/talk/HETQC3/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T14:00:00+02:00 14:00 00:40 Modern software is assembled, not just written: nearly 90% of a typical application consists of third-party libraries. If a critical vulnerability like Log4Shell were disclosed tomorrow, how long would it take your team to identify every affected microservice? While large enterprises rely on expensive "Ultimate" licenses, SMEs and independent teams often face a dangerous security gap. In this session, we will explore how to democratize Software Supply Chain Security (SSCS) by building an automated defense perimeter at zero licensing cost. Through a Live Demo featuring a Docker-based prototype, we will walk through a real-world architecture integrating: • GitLab Community Edition for pipeline orchestration. • Trivy and cdxgen for automated SBOM (Software Bill of Materials) generation in CycloneDX format. • OWASP Dependency-Track for continuous, proactive vulnerability monitoring. We will go beyond basic scanning by demonstrating how to leverage Artificial Intelligence for code reachability analysis, generating VEX (Vulnerability Exploitability eXchange) files to silence false positives and focus only on actionable risks. We will also discuss how this stack prepares organizations for the upcoming EU Cyber Resilience Act (CRA) requirements. romhack-camp-2026-164-sbom-sbam-who-put-this-in-my-code-enterprise-grade-supply-chain-security-on-a-zero-budget Scripting, Coding, Development Maurizio Argoneto it false https://cfp.romhack.io/romhack-camp-2026/talk/3MJRSS/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T14:40:00+02:00 14:40 00:40 Initial access isn’t just about phishing anymore. Modern breaches are increasingly rooted in the application layer, where logic flaws, design weaknesses, and overlooked attack surfaces can open paths to compromise. In this talk, we’ll dissect how AppSec-driven tactics can redefine red team operations. We’ll share our methodology for embedding vulnerability research into live engagements, blending code-level analysis, target hunting, and exploit chaining with traditional adversary tradecraft. This isn’t about dropping a pre-packaged exploit - it’s about building one mid-operation. Through case studies against high-profile global targets, we’ll show how this approach surfaced and chained zero-day vulnerabilities to breach external perimeters and operate effectively in mature environments. Whether you’re looking to sharpen your offensive capabilities or expand your initial access playbook, this session delivers hard-earned insights straight from the field romhack-camp-2026-181-shells-without-phish Cybersecurity and Hacking Mohamed ElsayedAbdulrahman Nour en false https://cfp.romhack.io/romhack-camp-2026/talk/ACVWSL/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T15:20:00+02:00 15:20 00:40 Phishing defenses assume the attack comes from outside the trusted set: a lookalike domain, a domain registered last week, a sender with no history. Your cloud Provider's own infrastructure breaks that assumption, and this talk covers how far that goes. B2B guest invitations produce real, Signed mail carrying a redirection target the attacker influences. Open redirects across Trusted Cloud Provider-owned domains supply the pivot, and chaining them keeps the trusted origin intact through to the payload. I'll demo forced POST parameter injection, image and context injection that pulls the target's own tenant branding into the lure, and end-to-end credential and MFA capture. The address bar stays your favorite Provider's the whole way. romhack-camp-2026-227-living-off-trusted-cloud-provider-infrastructure-as-phishing-delivery-channel Cybersecurity and Hacking Rahul Vashisht en false https://cfp.romhack.io/romhack-camp-2026/talk/V9FE9N/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T16:00:00+02:00 16:00 00:40 In questa presentazione verrà illustrato il principio di funzionamento delle Tesla coil musicali, dispositivi elettromeccanici capaci di generare scariche elettriche controllate e visibili, sincronizzate con segnali audio. Partendo da un inquadramento storico e scientifico, verrà spiegato cosa sono le Tesla coil e come, attraverso l’elettronica di potenza e il controllo digitale, sia possibile modulare le scariche per produrre suoni e melodie. L’incontro approfondirà i concetti di risonanza, alta tensione e ionizzazione dell’aria, evidenziando il legame tra fisica, ingegneria e musica. La presentazione farà da introduzione allo spettacolo serale, in cui le Tesla coil musicali saranno protagoniste di una performance dal vivo: un’esperienza immersiva che unisce divulgazione scientifica e intrattenimento, trasformando l’elettricità in luce, suono ed emozione. romhack-camp-2026-156-tesla-coil-by-voltagepyromania Hardware, Makers and IoT michele pietravalle aka PHCV it false https://cfp.romhack.io/romhack-camp-2026/talk/UCVJX3/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T16:40:00+02:00 16:40 00:40 Deepfake detection using 3D CNNs traditionally focuses on identifying synthetic facial manipulations in video. This work inverts that lens. I leverage temporal‑spatial 3D CNN features originally designed to spot fake videos and apply them to a completely different domain: OSINT‑based profiling. By treating metadata as a volumetric signal across related individuals, the same convolutional filters that detect frame‑to‑frame anomalies can reconstruct familial linkages from public or leaked databases. This methodology enhances traditional OSINT by adding a predictive layer. Instead of manually building family trees, the 3D CNN model learns kinship patterns and flags potential person matches with high confidence. The result is a hybrid attack that combines AI forensics and open source intelligence to identify a target individual from a distant relative’s spit sample. I demonstrate a proof of concept using synthetic profiles and real OSINT sources. The talk shows how a deepfake detection technique becomes a privacy‑breaking weapon for person traceability at scale. romhack-camp-2026-163-using-temporal-spatial-3d-cnn-features-to-enhance-osint-based-profiling-and-individual-traceability Cybersecurity and Hacking Reza en false https://cfp.romhack.io/romhack-camp-2026/talk/HBCFWE/ STAGE 2 (Ghost in the Shellcode) Lightning Talk 2026-10-03T17:30:00+02:00 17:30 00:20 Cellular baseband processors run highly privileged, proprietary software beneath the main OS, making them a critical yet hard-to-analyze attack surface. Focusing on the Google Pixel 9 modem, this talk demonstrates how adapting open-source emulation software allowed us to build a baseband fuzzing pipeline, surfacing three new vulnerabilities and several rediscoveries, including an Out-of-Bounds (OOB) read in 5G message parsing. After validating the flaw with Software Defined Radios (SDRs), we address the challenge of turning local memory leaks into full remote attacks. We show how SIM Toolkit (STK) applets, legitimate applications running on SIMs/eSIMs that can be provisioned over-the-air, can be repurposed as a delivery and execution primitive operating entirely outside main OS visibility. Finally, we detail how pairing remote STK provisioning with the 5G baseband vulnerability creates a silent, zero-click exfiltration chain that leaks sensitive memory over SMS. romhack-camp-2026-231-ghost-in-the-sim-silent-zero-click-over-the-air-exploitation-of-a-pixel-9-baseband-oob-read Cybersecurity and Hacking Lorenzo ValerianiPasquale Caporaso en false https://cfp.romhack.io/romhack-camp-2026/talk/CATUNP/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T18:00:00+02:00 18:00 00:40 Bash isn't just an interface to your daily laptop - it's a weapon. This 45 minute talk shows how to push bash beyond its typical use-cases, leveraging it for hacking, data processing, automation, and real-world security applications. Whether you're crafting exploits, analyzing massive datasets, or automating reconnaissance, this talk will equip you with the skills to turn bash into your ultimate hacking tool. romhack-camp-2026-168-command-line-alchemy-turning-scripts-into-superpower Scripting, Coding, Development Kirils Solovjovs en false https://cfp.romhack.io/romhack-camp-2026/talk/3LJDWR/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T18:40:00+02:00 18:40 00:40 Forget prompt injection. While the industry obsesses over manipulating model inputs to bypass guardrails, it is overlooking a far more dangerous threat requiring no user interaction beyond opening the application embedded beneath the AI itself: the underlying platform architecture. To deliver on the promise of full autonomy, AI-powered coding environments wire Large Language Models directly into the developer workflow—handing them local filesystem access, shell execution, and cloud credentials. Developers accept this tradeoff for the massive productivity gains, but the security cost is severe. In these environments, privileged OS access is not a misconfiguration but a product requirement. For a chat interface to truly become an autonomous "agent," it must be equipped with tools. Equipping the AI with these tools creates a structural conflict with traditional application isolation, like Electron's security model. To make the AI function, developers are forced to break the sandbox and expose highly permissive IPC (Inter-Process Communication) bridges between the web renderer and the local operating system. This presentation provides a technical deep dive into how chained IDOR vulnerabilities can be escalated into zero-click RCE via persistent LLM conversation injection and unsafe Electron IPC designs. To prove the real-world impact, we will debut novel research into Orchids, a leading local, Electron-based AI coding IDE with over a million users, reported to be used by teams romhack-camp-2026-157-vibeshell-how-trusting-your-ai-ide-costs-you-your-machine Cybersecurity and Hacking Etizaz Mohsin en false https://cfp.romhack.io/romhack-camp-2026/talk/VZ7VY3/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-03T19:20:00+02:00 19:20 00:40 How it was possible to have more that one independent scrolling plane in a C64 videogame? How it was possible to have more than the 8 declared sprites in a 50 frames per second game? We will explore the tricks and the strategies applied by most of the games of the C64 era, including my shoot-em-up game Catalypse. We will discuss about charset maps, double buffering, shifting chars but also about the software interrupts, the synchronized drawing opportunities given by the VIC II graphic chipset and the real-life sorting algorithm choices, everything constrained inside a complete screen raster time romhack-camp-2026-171-the-miracle-of-plane-and-sprite-multiplication Gaming and game development Andrea Pompili en false https://cfp.romhack.io/romhack-camp-2026/talk/XQUFNN/ WORKSHOP 1 (Neon Genesis Exploitation) Workshop 2026-10-03T09:30:00+02:00 09:30 02:00 Delivered through Fortra's Zero-Point Security training platform, this hands-on workshop provides an introduction to Cobalt Strike, its core components, and the product philosophy behind modern adversary simulation and red team operations. Attendees will begin by exploring the Cobalt Strike ecosystem, including key concepts such as Team Servers, Beacons, listeners, and communication channels. Through interactive labs, participants will learn how to deploy and manage Beacons, work with HTTP, SMB, and TCP listeners, and understand how Beacon communication topologies can be modified in real time. The workshop also covers code execution fundamentals using Cobalt Strike's Resource Kit, where attendees will customize payload resources, generate and host payloads, and execute them within a controlled lab environment. By the end of the session, participants will have a foundational understanding of Cobalt Strike's architecture, Beacon communications, listener types, payload delivery, and customization techniques commonly used in adversary emulation and red team engagements. **Workshop Requirements** * Max capacity of 30 attendees * Attendees must bring their own laptop to access the training. * Attendee email addresses must be provided to Fortra in order to provide access to the platform: * At least 3 days prior to the event * Attendees must be able to access the email address which they provide, or they will not receive their login credentials romhack-camp-2026-243-sponsor-workshop-introduction-to-cobalt-strike-command-control-and-code-execution-fundamentals Sponsor Fortra en false https://cfp.romhack.io/romhack-camp-2026/talk/HLLYEW/ WORKSHOP 1 (Neon Genesis Exploitation) Workshop 2026-10-03T11:30:00+02:00 11:30 02:00 This 2 hours workshop (max 20 people) wants to be an introductory course to the marvelous world of picking locks. After an overview of the most common types of locks and how they operate, the instructor will show you which type of tools are needed to manipulate and open them. In the second part of this training, you will be provided with a lockpicking kit and some practice locks in order to try yourself. romhack-camp-2026-166-physec-lab-part-1-lockpicking-101 Cybersecurity and Hacking CYBERANTANI en false https://cfp.romhack.io/romhack-camp-2026/talk/JCWFDW/ WORKSHOP 1 (Neon Genesis Exploitation) Workshop 2026-10-03T14:00:00+02:00 14:00 02:00 You've always wanted to start with binary exploitation challenges, but fear the horrors of weird machines? This will be a workshop for you! After a theoretical introduction on binary exploitation basics all the way to x86_64 Return Oriented Programming you will get your hands dirty with the "Don't crash" challenges with the help of the author. Bring your Linux laptop (or VM) with Ghidra, pwntools and pwndbg romhack-camp-2026-229-don-t-crash-challenges-walkthrough Cybersecurity and Hacking Max 'Sparrrgh' Bellia en false https://cfp.romhack.io/romhack-camp-2026/talk/MXTLKL/ WORKSHOP 1 (Neon Genesis Exploitation) Light Workshop 2026-10-03T16:00:00+02:00 16:00 01:00 Threat intelligence teams collect indicators, follow threat actors and produce reports. SOC teams build detections and investigate alerts. Too often, the connection between the two ends with a list of IP addresses, domains and hashes added to a SIEM. This talk looks at how to move beyond that model. Using practical attack examples, I'll walk through how intelligence can be transformed from an IOC or threat report into an investigative hypothesis, observable attacker behaviour and ultimately a detection. We will look at what information gets lost when intelligence is reduced to indicators, how to identify the behaviour behind those indicators, and how to decide which telemetry can actually expose it. The session follows a simple workflow: Threat Intelligence → Adversary Behaviour → Detection Hypothesis → Telemetry → Detection → Hunt → Validation I'll also cover what happens after a detection fires: how investigation results can feed back into threat intelligence, improve context and help identify what should be hunted for next. The goal is not to collect more intelligence or generate more alerts. It is to make threat intelligence operational enough to change what your SOC can detect. An IOC may tell you what the attacker used. A good detection should help you find what the attacker did. romhack-camp-2026-241-from-ioc-to-detection-turning-threat-intelligence-into-something-your-soc-can-actually-use Cybersecurity and Hacking Sanjay Kumar en false https://cfp.romhack.io/romhack-camp-2026/talk/ALJJBE/ WORKSHOP 1 (Neon Genesis Exploitation) Workshop 2026-10-03T17:00:00+02:00 17:00 02:00 The growing reliance on heterogeneous computing environments in both personal and enterprise contexts has made cross-platform forensic acquisition a critical competency for digital investigators. Yet the adoption of rigorous forensic workflows remains uneven, particularly in resource-constrained settings where commercial tools may be inaccessible. This workshop addresses that gap by offering a structured, hands-on introduction to forensic data extraction from Windows and macOS systems using exclusively free tools. The session opens with a foundational module covering the core principles of digital forensics as they apply to forensic imaging: bit-by-bit acquisition, cryptographic hash verification (MD5, SHA-256), write-blocking procedures, chain of custody documentation, and legal admissibility requirements. The practical component introduces a curated toolkit of free acquisition and analysis solutions. Guymager is presented as a reliable, GUI-based imaging platform offering multi-format output (DD, EWF/E01, AFF), real-time hash calculation, and parallel acquisition support. Fuji is introduced as a modern imager optimized for macOS environments, particularly suited for APFS volumes and Apple Silicon hardware, featuring automated image verification workflows. For analysis, FTK Imager is demonstrated for forensic extraction from Windows hosts, while Autopsy provides participants with an open-source platform for analysis, data recovery and case management. romhack-camp-2026-158-hands-on-forensic-imaging-and-data-extraction-from-windows-and-macos-using-free-and-open-source-tools Other Alessandro Farina en false https://cfp.romhack.io/romhack-camp-2026/talk/GHQT3K/ WORKSHOP 1 (Neon Genesis Exploitation) Light Workshop 2026-10-03T19:00:00+02:00 19:00 01:00 Why is security operations know-how trapped inside proprietary vendor platforms and siloed team wikis? Traditional SOCs operate at human speed against machine-speed adversaries, while commercial "AI SOC" tools hide behind opaque black boxes and prohibitive costs. Meanwhile, attempting to automate without common operational grammar leads to alert chaos, hallucinations, and inconsistent response actions that either disrupt business operations or leave incidents partially unresolved. The ZeroSOC initiative (zerosoc.org) is an early-stage open project (Apache-2.0, v0.1 working draft) democratizing autonomous cyberdefense. Centered on the ZeroSOC Framework, it explores Executor Neutrality — the principle that the same human-readable playbook can be executed interchangeably by a human analyst, deterministic automation, or an AI agent —, OCSF-aligned taxonomy, and verifiable measurement gates. This 1-hour interactive working session aims to bring together SOC analysts, detection engineers, incident responders, and researchers at RomHack Camp to co-design and shape this emerging standard. Following a 15-minute introduction to the architecture (no prerequisites required), we will open the floor for a working group focused on the framework's foundational building blocks: Definitions & Taxonomy, 4-Phase Processes, Operational Metrics, Agentic Guardrails, and Playbooks. Come ready to challenge assumptions, debate edge cases, and help architect the open foundation for modern SecOps! romhack-camp-2026-238-zerosoc-framework-working-session-building-the-open-standard-for-human-agentic-secops Cybersecurity and Hacking Berghem-in-the-Middle en false https://cfp.romhack.io/romhack-camp-2026/talk/DZPHFB/ WORKSHOP 2 (GetRoot no Jutsu) Workshop 2026-10-03T10:00:00+02:00 10:00 03:00 Un laboratorio pratico dove i ragazzi useranno modelli di Machine Learning e la funzione di riconoscimento dei gesti delle mani per decodificare la Lingua Italiana dei Segni (LIS). Tutte le fasi di raccolta dati, addestramento, validazione e test saranno gestite in ambiente Pictoblox. Un'esperienza interattiva per scoprire come l'intelligenza artificiale possa abbattere le barriere della comunicazione e favorire l'inclusione. romhack-camp-2026-233-ai4kids-laboratorio-di-introduzione-all-intelligenza-artificiale Kids Agnese it false https://cfp.romhack.io/romhack-camp-2026/talk/S8XTE9/ WORKSHOP 2 (GetRoot no Jutsu) Light Workshop 2026-10-03T14:00:00+02:00 14:00 01:00 Ready to build? Move beyond theory and construct a full functional AI-powered podcast in this hands-on "Build with AI" workshop. We'll guide you through an end-to-end workflow, leveraging specific Google AI and Cloud tools to transform an idea into publishable audio content. -Dive into practical prompt engineering with Google Gemini. You'll actively brainstorm niche topics, outline a compelling episode structure, and generate a working script for a short podcast segment. -Take your Gemini-generated script and bring it to life. We'll use the Google Cloud Text-to-Speech API to synthesize natural-sounding voice audio, experimenting with different voice profiles. You'll see how to generate audio files directly from text. -We'll then explore how Google Cloud Run can serve as the backbone for automating this workflow – designing a simple service architecture capable of potentially taking script inputs and orchestrating the TTS generation and audio file delivery. Who is this for? Developers, creators, and tech enthusiasts that want to apply latest Google's AI and Cloud tools to the content creation challenges. romhack-camp-2026-232-0-zero-to-podcaster-start-today-your-show-with-ai Entertainment Nicola Guglielmi it false https://cfp.romhack.io/romhack-camp-2026/talk/87DHLD/ WORKSHOP 2 (GetRoot no Jutsu) Workshop 2026-10-03T15:00:00+02:00 15:00 03:00 **Bullismo No Grazie** è un'associazione no profit nata nel 2021 che ha incontrato oltre 200.000 ragazzi e 90.000 adulti in più di 100 città italiane, percorrendo oltre 150.000 km di scuole, palestre e villaggi turistici. In questo workshop portiamo la realtà che vediamo ogni giorno: le challenge pericolose che circolano tra bambini di IV e V elementare, i social network che i ragazzi usano e che i genitori non conoscono, le responsabilità civili e penali che ricadono sulle famiglie quando un minore commette atti di cyberbullismo. Niente teoria. Solo casi reali, domande vere, strumenti pratici per riconoscere i segnali e sapere cosa fare. romhack-camp-2026-220-1-il-bullismo-non-va-in-vacanza Kids Bullismo No Grazie it false https://cfp.romhack.io/romhack-camp-2026/talk/TGTBKG/ WORKSHOP 2 (GetRoot no Jutsu) Workshop 2026-10-03T18:00:00+02:00 18:00 02:00 This 2 hours workshop (max 20 people) is designed to provide the attendees a good grasp on how Physical Access Control Systems work and how they can be defeated. During the course there will be multiple real examples and different offensive techniques will be explained. In the second part, it will be also possible to try exploiting them in live against real targets setup for the occasion. romhack-camp-2026-167-physec-lab-part-2-hacking-physical-access-control-systems Cybersecurity and Hacking CYBERANTANI en false https://cfp.romhack.io/romhack-camp-2026/talk/ZHYFFX/ WORKSHOP 2 (GetRoot no Jutsu) Light Workshop 2026-10-03T21:30:00+02:00 21:30 01:00 In 1984 Ken Thompson, during his Turing Award acceptance speech, introduced to the world a very interesting kind of backdoor, described by himself as "the cutest program I have ever wrote". The speech has later been written in an article called "Reflections on Trusting Trust". The idea is simple: modify a C compiler in order to insert a backdoor into the login binary whenever the login.c program is compiled. The backdoor allows a specific username to bypass authentication and obtain root privileges. This is the simple step. Then comes the hack: the logic to introduce the backdoor will replicate itself whenever the compromised compiler is used to compile a new compiler. This means that once your compiler has been compromised, it becomes very hard to get rid of it. Because how do you compile a compiler? With the compiler you already have! This workshop is all about compilers and backdoors. To make it practical we will apply it against a small but functional C compiler (TinyCC). We will show how to build a working Thompson backdoor step by step in a fun and reproducible way. We will talk about quines, about self-replication, and ultimately about why trust in software cannot be established by just reading the source code. The Thompson backdoor is now 40 years old, yet it is more relevant than ever, as modern supply-chain compromises e.g. SolarWinds can be reduced to similar trust-delegation problems in the supply chain of software as Thompson described. romhack-camp-2026-201-trusting-trust-hands-on-building-a-self-reproducing-compiler-backdoor Cybersecurity and Hacking Leonardo Tamiano en false https://cfp.romhack.io/romhack-camp-2026/talk/CUHGR3/ COMMUNITY AREA Workshop 2026-10-03T20:00:00+02:00 20:00 03:00 You've definitely seen that guy shouting about some focaccia saying "bada 'ome la fuma" That catchphrase somehow became part of Tuscany's identity, so why not embracing that? We'll serve you the classic fried snack from pisa, the _Sgabeo_, prepared by fibonhack with love romhack-camp-2026-244-bada-home-la-fuma-gnocco-fritto-by-fibonhack Food fibonhack en false https://cfp.romhack.io/romhack-camp-2026/talk/WCZZS9/ FOOD AREA Workshop 2026-10-03T19:00:00+02:00 19:00 04:00 Hungry after a day of hacking? A wood-fired Pizza Truck parks on site both evenings, serving fresh pizza straight from a real wood oven. No need to leave the woods for dinner — grab a slice, grab a seat, and refuel before or after the Hacker Cinema Night and the After Dark music session. Available Friday and Saturday evening. romhack-camp-2026-246-1-pizza-truck-wood-fired-dinner Food Pizza Truck en false https://cfp.romhack.io/romhack-camp-2026/talk/3FTTEN/ SHOW AREA Workshop 2026-10-03T21:00:00+02:00 21:00 02:00 When night falls, the musical Tesla coils take the stage. Following the afternoon talk, VoltagePyromania turns high voltage into a show: metre-long electric arcs, synced to the music, drawing lightning in the dark of the Camp. A concert played by electricity itself, where resonance, high voltage and ionised air become light, sound, and emotion. An immersive experience that blends science and entertainment. Come closer (safely), look up, and let it sweep you away. romhack-camp-2026-245-tesla-coil-live-show Entertainment michele pietravalle aka PHCV en false https://cfp.romhack.io/romhack-camp-2026/talk/3T7KHN/ STAGE 1 (Section 9) Talk 2026-10-04T10:00:00+02:00 10:00 00:40 Imagine pwning a game from your childhood! What could possibly go wrong with a cute Nintendo DS game? This talk will include a brief overview of the game, some useful details about Nintendo DS internals, the exploitation process, and a few other interesting observations I made while reversing it. romhack-camp-2026-180-imagine-pwning-your-favourite-nintendo-ds-game Cybersecurity and Hacking daisy en false https://cfp.romhack.io/romhack-camp-2026/talk/BLFNET/ STAGE 1 (Section 9) Talk 2026-10-04T11:00:00+02:00 11:00 00:40 This talk presents a real-world penetration test of a global platform with over 30 million users, where a series of seemingly isolated vulnerabilities were transformed into a complete attack chain that resulted in full system compromise. Attendees will follow the attacker's path as trust boundaries are systematically dismantled through exposed secrets in public JavaScript, session abuse, cross-application trust violations, and critical CORS and WAF misconfigurations. What begins as a handful of low-risk findings rapidly escalates into the exposure of production credentials, cryptographic keys, and complete control over the platform. This is a technical autopsy of how small cracks can align to create a catastrophic failure and a front-row seat to how attackers turn scattered weaknesses into total compromise! romhack-camp-2026-176-chain-reaction-from-isolated-vulnerabilities-to-full-system-compromise Cybersecurity and Hacking Rana en false https://cfp.romhack.io/romhack-camp-2026/talk/N93XCA/ STAGE 1 (Section 9) Talk 2026-10-04T12:00:00+02:00 12:00 00:30 As three incredible days of hacking, learning, and community life come to an end, it’s time to gather for the RomHack Camp 2026 closing remarks. In this final session, the Cyber Saiyan team will look back at the best highlights of this second edition, sharing key event insights, memorable milestones, and our collective achievements. Most importantly, we want to express our deepest gratitude to our brilliant speakers, the independent community groups who brought the villages to life, our supportive sponsors, and our tireless team of volunteers who made this event possible. Join us to wrap up the camp, celebrate the community, and get a quick sneak peek at what’s next on the roadmap for Cyber Saiyan. Safe travels home! romhack-camp-2026-178-romhack-camp-closing Orga Cyber Saiyan en false https://cfp.romhack.io/romhack-camp-2026/talk/UW8HAH/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-04T10:00:00+02:00 10:00 00:40 We used to treat every CVE as an alert. Each one meant dropping what we were building, classifying severity, chasing versions, lighting up the dashboard in red. Endless noise. That works when a serious vulnerability is a monthly event. It doesn't anymore. In 2025 the Linux kernel was the single most reported product on the planet, with thousands of CVEs, **roughly ten every day, from one project**. And its maintainers don't even rank them by severity, so you can't sit back and wait for the "important" ones. Then the AI era poured fuel on the fire: 2026 is on track for **66,000 CVEs**, and a single AI model (Claude Mythos) recently surfaced thousands of high severity flaws that remain **99% unpatched**. The flood is now machine speed. When a CVE lands every few minutes, you can't sound the alarm every time. So we stopped. Today patching is just part of the workflow, and we fight AI with AI: automation ingests and rolls out the patches, while AI triages the flood down to what is actually exploitable for each deployment. This talk shows how a small team keeps **hundreds of Keycloak clusters and thousands of vulnerabilities** under control, everywhere and anytime, without adding a single delay to the product roadmap. romhack-camp-2026-197-when-even-ai-writes-the-cve Cybersecurity and Hacking Luis Rubiera en false https://cfp.romhack.io/romhack-camp-2026/talk/QBPJBB/ STAGE 2 (Ghost in the Shellcode) Talk 2026-10-04T10:40:00+02:00 10:40 00:40 The infrastructure team built out an automated and orchestrated solution to simplify it all, access, scaling ect. Alas the team who built it has left or is allocated to another project; services and infrastructure are breaking. This session will examine the challenges of lifecycle management that IaC can create, and uncover a few strategies you can use to prevent it. romhack-camp-2026-159-when-iac-goes-wrong Cybersecurity and Hacking Sean Juroviesky en false https://cfp.romhack.io/romhack-camp-2026/talk/PRSQPQ/ WORKSHOP 1 (Neon Genesis Exploitation) Light Workshop 2026-10-04T10:00:00+02:00 10:00 01:00 Ready to build? Move beyond theory and construct a full functional AI-powered podcast in this hands-on "Build with AI" workshop. We'll guide you through an end-to-end workflow, leveraging specific Google AI and Cloud tools to transform an idea into publishable audio content. -Dive into practical prompt engineering with Google Gemini. You'll actively brainstorm niche topics, outline a compelling episode structure, and generate a working script for a short podcast segment. -Take your Gemini-generated script and bring it to life. We'll use the Google Cloud Text-to-Speech API to synthesize natural-sounding voice audio, experimenting with different voice profiles. You'll see how to generate audio files directly from text. -We'll then explore how Google Cloud Run can serve as the backbone for automating this workflow – designing a simple service architecture capable of potentially taking script inputs and orchestrating the TTS generation and audio file delivery. Who is this for? Developers, creators, and tech enthusiasts that want to apply latest Google's AI and Cloud tools to the content creation challenges. romhack-camp-2026-232-1-zero-to-podcaster-start-today-your-show-with-ai Entertainment Nicola Guglielmi it false https://cfp.romhack.io/romhack-camp-2026/talk/87DHLD/ WORKSHOP 2 (GetRoot no Jutsu) Workshop 2026-10-04T10:00:00+02:00 10:00 02:00 It is well known that humans are the weakest link in information security. Social engineering has emerged as a means to influence and manipulate individuals to achieve desired outcomes. In this presentation, we delve into the realm of social engineering, exploring the art of behavior alteration, manipulation and persuasive communication. romhack-camp-2026-169-so-you-re-interested-in-social-engineering-the-very-first-steps Other Kirils Solovjovs en false https://cfp.romhack.io/romhack-camp-2026/talk/ELJLML/