RomHack Camp 2022

CAMP Agenda

[ Communities & People ]

Look at Camp github repo to find slides

Fri, Sept 23rd
Sat, Sept 24th
Sun, Sept 25th

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Communities
10:30		Camp Opening 10:30 - 11:00 Cyber Saiyan Welcome by Cyber Saiyan staff We will provide information about Camp organization, activities, Code of Conduct etc
10:45
11:00	The Badge 11:00 - 13:00 Cyber Saiyan The Badge Team will present the Camp Badge and how to hack it	Into the dragon's lair: unleash your own beacon 11:00 - 12:00 Berghem-in-the-Middle by Alessio Dalla Piazza Cobalt Strike is a widely known commercial product to manage C2 communications that have drastically risen amongst criminal groups and threat actors. One of its core features allows its agents' quick creation and deployment. These modules include a wealth of essential functionalities for the attacker, such as command execution, defense evasion, and persistence. However, agents have clear and well-defined memory structure patterns that can be easily detected in different ways by defensive solutions: due to the closed source nature of the whole project, reducing the number of detections is a complex and demanding task. For this reason, we decided to reverse the Cobalt Strike to create a new multi-platform agent capable of reducing the overall number of detections.	PhySec Lab Part 1: Lockpicking 101 11:00 - 13:00 Luca Bongiorni This 2 hours workshop (max 20 people) wants to be an introductory course to the marvelous world of picking locks. After an overview of the most common types of locks and how they operate, the instructor will show you which type of tools are needed to manipulate and open them. In the second part of this training, you will be provided with a lockpicking kit and some practice locks in order to try yourself.
11:15
11:30
11:45
12:00		Personalisation algorithms, their influence and how to analyse them from the outside 12:00 - 13:00 Tracking Exposed by Claudio vecna Agosti One of the most invisible powers of surveillance capitalism is the ability to study people's behaviour, detect weaknesses, and propose content to maximise attention capture. These mechanisms are personalisation algorithms; an Italian-born group, Tracking Exposed, has been developing tools and methodologies to study them for the past six years. Sometimes you have to do scraping in the browser and then on a dedicated server, sometimes you have to create botnets and train profiles. Depending on the AI you are analysing, you have to use different methods. The victory lies in bringing out the divergence between two profiles, quickly and reproducibly.
12:15
12:30
12:45
13:00	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...
13:15
13:30
13:45
14:00
14:15
14:30
14:45
15:00	One Small step for man, one giant step for researchers 15:00 - 18:00 Gabriel Cirlig This will be a simple and short (in the limit of the Camp splot) introduction into Android reverse engineering, taking the student from zero to hero. No previous reversing knowledge is required and all of the tools will be provided in the form of a VM packed with goodies. The course will cover the basics of Android, APK structure, DEX file internals and how this can be exploited in order to decompile and deobfuscate malware. In addition, hands-on exercises will be provided with fresh malware samples where the knowledge can be put to good use in extracting C2s and other interesting information.	Defense Lab 15:00 - 19:00 Rev3rse Security A defense lab (max 30 people) built on a real AWS environment where you will learn howto mitigate 2 real attacks (based on OWASP Automated Threats) to an e-commerce website based on WooCommerce. More information here (in Italian): https://blog.rev3rse.it/rev3rse-defense-lab-2022/	PhySec Lab Part 2: Hacking Physical Access Control Systems 15:00 - 17:00 Luca Bongiorni This 2 hours workshop (max 20 people) is designed to provide the attendees a good grasp on how Physical Access Control Systems work and how they can be defeated. During the course there will be multiple real examples and different offensive techniques will be explained. In the second part, it will be also possible to try exploiting them in live against real targets setup for the occasion.	Introduction and Web App Challenge 15:00 - 16:00 OWASP Italian Chapter * OWASP Italian Chapter presentation * Web App Challenge presentation
15:15
15:30
15:45
16:00				Evaluating CNC Controllers in Modern Industry 4.0 16:00 - 17:00 Berghem-in-the-Middle by Marco embyte Balduzzi Computer numerical control machines represent critical assets for organizations. At the same time, the strong push dictated by the Industry 4.0 led to the introduction of technologies that could be abused by attackers. In this talk, we discuss the risks associated with this development, and present some of the attacks that we conducted on real-world machines. We want to raise awareness in a domain in which security doesn't seem to be an important driver yet.
16:15
16:30
16:45
17:00				Open Source Digital Forensics 17:00 - 18:00 Alessandro Farina Very often digital forensics we see in companies or in the courtrooms is of the “black box” type: hardware or software tools of renowned producers are used without awareness. This subverts the principle of scientific investigation, where every instrument and every move that is performed must be well known, fully managed and controlled by the researcher and his peers. The talk will present some of the main Linux Live distributions for Digital Forensics, based almost entirely on free software, as well as practical examples of acquiring digital memories with the Guymager software.
17:15
17:30			Community networks & Battlemesh 17:30 - 19:00 Wireless BattleMesh Community talk
17:45
18:00
18:15
18:30				Federazione Hacker. Prossima frontiera? 18:30 - 19:30 Giornale di bordo, data stellare 2200271: durante i viaggi dell’astronave Hackerprise, nella missione diretta all’esplorazione di strani mondi, alla scoperta di nuove forme di vita e di civiltà, continuiamo a cercare poliedriche forme di vita con cui stabilire saldi legami diplomatici. Più lontano andiamo più dobbiamo tendere ad arrivare là dove nessun hacker è mai giunto prima. Dibattito aperto a tutte le community e proposto da Lucia Kundera Zappacosta (Metro Olografix,) Andrea Ubi Urbani (IHF), Mario Anglani (HackInBo) e Cyber Saiyan
18:45
19:00	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:15
19:30				Free time 19:30 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:45
20:00
20:15
20:30
20:45
21:00		Smart Contracts and Security Pitfalls 21:00 - 22:00 Reando “H4t4way” Veshi This talk aims at explaining some of the most common vulnerabilities that are specific to the application level of Blockchain technology by analyzing concrete exploitation case scenarios of these security vulnerabilities. We will also review some of the available tools and applications that detect these vulnerabilities in terms of their approach and effectiveness.
21:15			Metro Olografix BBS 21:15 - 22:00 Metro Olografix by Stefano "neuro" Chiccarelli Riviviamo insiemee l'atmosfera di una vera bbs degli anni '90. Ci collegheremo a metro Olografix BBS, una vera BBS attiva e online dal 1997. Navigheremo insieme l'ambiente, raccontando cosa accadeva in queglli anni, cercando di trasmettere lo stupore dei primi collegamenti.
21:30
21:45
22:00					Music Party 22:00 - 0:00 Cyber Saiyan Just enjoy the music 🎶 🎶 and relax 🍻 🍻
22:15
22:30
22:45
23:00
23:15
23:30
23:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Communities
11:00	The Badge 11:00 - 13:00 Cyber Saiyan The Badge Team will present the Camp Badge and how to hack it
11:15
11:30
11:45
12:00
12:15
12:30
12:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Communities
13:00	Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...
13:15
13:30
13:45
14:00
14:15
14:30
14:45
19:00	Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:15
19:30
19:45
20:00
20:15
20:30
20:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Communities
15:00	One Small step for man, one giant step for researchers 15:00 - 18:00 Gabriel Cirlig This will be a simple and short (in the limit of the Camp splot) introduction into Android reverse engineering, taking the student from zero to hero. No previous reversing knowledge is required and all of the tools will be provided in the form of a VM packed with goodies. The course will cover the basics of Android, APK structure, DEX file internals and how this can be exploited in order to decompile and deobfuscate malware. In addition, hands-on exercises will be provided with fresh malware samples where the knowledge can be put to good use in extracting C2s and other interesting information.
15:15
15:30
15:45
16:00
16:15
16:30
16:45
17:00
17:15
17:30
17:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Communities
10:30		Camp Opening 10:30 - 11:00 Cyber Saiyan Welcome by Cyber Saiyan staff We will provide information about Camp organization, activities, Code of Conduct etc
10:45

	Aspira Malware	Cyber Pompieri	Perimetro	Hyper SOC	Communities
10:00	Linux Kernel Exploitation 10:00 - 14:00 Hacktive Security [sponsor's content] L'obiettivo di questo workshop (massimo 30 persone) è di introdurre i partecipanti al mondo della Kernel Exploitation su Linux. Una conoscenza di C è altamente consigliata così come una conoscenza (anche generale e non approfondita) dei concetti di binary exploitation. La classe includerà un'introduzione teorica al Kernel Linux e ai suoi LKM (Linux Kernel Modules), assembly x86_64, le vulnerabilità più comuni ed i relativi concetti di exploitation (e differenze dall'exploitation userland), mitigazioni correnti e finalmente hands-on labs per spawnare il tanto desiderato "uid=0". Pre-requisiti Hardware: Una VM Linux (o Linux nativo) basato su architettura Intel (è possibile utilizzare M1 con alcune accortezze, ma il lavoro di "adattamento" è a carico del partecipante causa limitazioni di tempo) che supporti l'utilizzo di "qemu-system-x86_64". [sponsor's content]			Boss of the SOC 10:00 - 14:00 Splunk [sponsor's content] What is BOTS? Boss of the SOC (BOTS) is a capture the flag competition created by Splunk where attendees are able to practice their search and investigation skills, while working through provided scenarios. They are competing against each other and peers for prizes and bragging rights. We suggest you play in teams of up to 3 people to give the best chance of winning. Who should play? All skill levels are welcome, from learning, to advanced security skills that can try to dominate the competition. The Scenario You and your team will role play as the quirky Security Analyst “Alice Bluebird”, a security analyst at Frothly, a thriving home brewing supply company. Why? Just because it’s a pandemic doesn’t mean Frothly has stopped defending its network. Contestants will pivot through a brand new, realistic dataset using Splunk’s analytics-driven security platform and the wild, wild web. All the while racing the clock ( and the globe) to identify the who, how, and where through a series of full forensic investigations. [sponsor's content]
10:15
10:30		RomHack2022 Conference Live Streaming 10:30 - 17:30 Cyber Saiyan Live streaming of RomHack 2022 Conference inside Camp facilities 10:30-10:40 Conference opening 10:40-11:10 James Forshaw The Vendor / Researcher Relationship Needs Improvement 11:10-12:00 Dr Nestori Syynimaa Attacking Azure AD by abusing Synchronisation API: The story behind 40.000 USD in bug bounties 12:00-12:50 Davide TheZero Security in a Immutable web3 World: Breaching Smart Contracts 12:50-14:00 Conference Lunch 14:00-14:50 Markus Vervier and Yasar Klawohn DES-On-Fire: Breaking Physical Access Control 14:50-15:40 Cas van Cooten Nimbly Navigating a Nimiety of Nimplants: Writing Nim Malware Like The Cool Kids 15:40-16:30 Rohan Aggarwal Bypassing Anti-Cheats & Hacking Competitive Games 16:30-17:20 Edoardo Rosa You shall not PassRole! 17:20-17:30 Closing
10:45
11:00			Open Source Digital Forensics Lab 11:00 - 12:00 Alessandro Farina Follow-up of the "Open Source Digital Forensics" talk, hands-on Lab
11:15
11:30					Lab (for kids too) 11:30 - 12:30 Zanshin Tech * Introduzione allo Zanshin Tech * Le regole e i bracciali * I katà: OODA * Workshop pratico : Info class
11:45
12:00
12:15
12:30
12:45
13:00			Free time 13:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...
13:15
13:30
13:45
14:00	Free time 14:00 - 15:00 No activities Lunch time Beer time 🍻🍻 Hack time Fun time ...			Coding for kids 14:00 - 17:00 Donne 4.0 The event is for all kids from 8 to 15 year old, even without any previous coding experience. Kids and teens will be divided in groups according to their age and knowledge (if any) and will be guided in the development of a nice game in Scratch, a free visual coding language from MIT Media Lab.
14:15
14:30
14:45
15:00	PhySec Lab Part 1: Lockpicking 101 15:00 - 17:00 Luca Bongiorni This 2 hours workshop (max 20 people) wants to be an introductory course to the marvelous world of picking locks. After an overview of the most common types of locks and how they operate, the instructor will show you which type of tools are needed to manipulate and open them. In the second part of this training, you will be provided with a lockpicking kit and some practice locks in order to try yourself.		ZAP 15:00 - 16:30 OWASP Italian Chapter OWASP Zed Attack Proxy (ZAP) https://www.zaproxy.org/ is the world’s most widely used web app scanner, free and open source, actively maintained by a dedicated international team of volunteers. During this workshop you will learn more about ZAP proxy
15:15
15:30					Lab (for kids too) 15:30 - 16:30 Zanshin Tech * Introduzione allo Zanshin Tech * Le regole e i bracciali * I katà: COLOR CODE OF MENTAL AWARENESS * Workshop pratico : Le tecniche preliminari
15:45
16:00
16:15
16:30					Mesh Workshop 16:30 - 17:30 Wireless BattleMesh We have WiFi routers for experimentation at our tent. We re-flash them to run a different operating system (OpenWrt), configure them, play with them to run services. Come and play, our tent is open!
16:45
17:00			OSINT for infrastructure and domain analysis 17:00 - 18:00 Berghem-in-the-Middle by Mattia Coffetti How to expose infrastructure data behind an IP address/domain name, for Blue teams, pentesting or corporate intelligence	CERN: a general overview 17:00 - 17:45 A talk about a general overview of CERN, its history and its experiments
17:15	PhySec Lab Part 2: Hacking Physical Access Control Systems 17:15 - 19:15 Luca Bongiorni This 2 hours workshop (max 20 people) is designed to provide the attendees a good grasp on how Physical Access Control Systems work and how they can be defeated. During the course there will be multiple real examples and different offensive techniques will be explained. In the second part, it will be also possible to try exploiting them in live against real targets setup for the occasion.
17:30					Lab (for kids too) 17:30 - 18:30 Zanshin Tech * Introduzione allo Zanshin Tech * Le regole e i bracciali * La protezione delle informazioni i metadati * Workshop pratico : tecniche generiche e analisi dei metadati nelle foto
17:45
18:00		Iot Security in LoraWan Environment 18:00 - 19:00 Unidata [sponsor's content] by David Rossi (Unidata), Pietro Spadaccino (CNIT) [sponsor's content]	Nova Voluptas 18:00 - 18:30 Metro Olografix La piattaforma virtuale di intrattenimento sessuale personalizzabile sui delicati temi della privacy, del furto di dati e della sessualità online.	(opensource == secure)? Yes, if you audit it! 18:00 - 19:00 openSUSE by Paolo Perego Tales in the life of a product security engineer making Open Source software more secure one bit at a time. In this session, I will talk about what it means to be a product security engineer and how SUSE security team audits can help the Open Source community in having a better security posture. During the talk, I will audit a small package I wrote with some vulnerabilities, create a small exploit and show how to report to the upstream maintainer in a responsible way.
18:15			Unveiling how porn platforms abuse personal data with Tracking Exposed and GDPR 18:15 - 19:15 Tracking Exposed by Giulia Corona and Alessandro Polidoro Online pornography represents, according to many, one of the most widespread phenomenon of the whole internet. This industry alone generates billions of dollars in annual revenue, involving an ever growing number of people and occupying a very significant portion of the overall available bandwidth of the web. Given these premises, it comes with no surprise that porn-platforms have found an extremely profitable business in processing personal data of their users, often in ways yet to be fully disclosed and shared with the general public.
18:30
18:45
19:00		Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...		Free time 19:00 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:15	Free time 19:15 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...		Free time 19:15 - 21:00 No activities Dinner time Beer time 🍻🍻 Hack time Fun time ...
19:30
19:45
20:00
20:15
20:30
20:45
21:00	How we made the Camp 21:00 - 22:00 Cyber Saiyan Cyber Saiyan team will explain how the Camp was built and the challenges they had	Jobs in Cyber Security 21:00 - 22:00 Guerre di Rete An open discussion modarated by Guerre di Rete on jobs in cyber with ROmHack conference spakers on stage		HTTP sinkholing in a service provider environment - With a short introduction to PHP malware obfuscation 21:00 - 22:00 IHE by Marco D'Itri
21:15
21:30
21:45
22:00				CyberBullismo non è roba da nerdCon gli abbracci e l'amore salveremo il mondo 22:00 - 22:30 IHE by MYFOX	Music Party 22:00 - 0:00 Cyber Saiyan Just enjoy the music 🎶 🎶 and relax 🍻 🍻
22:15
22:30				Telegram Osint 22:30 - 23:30 IHE by Giacomo Giallombardo
22:45
23:00
23:15
23:30				Unә, Nessunә, Centomilә әID Quante identità (elettroniche) ho addosso 23:30 - 23:59 IHE by Ghiro
23:45

	Aspira Malware	Cyber Pompieri	Hyper SOC
0:30			Giochiamo con Flipper zero Chiacchierata sul “giochino” condivisione con chi l’ha già ricevuto su tecniche di analisi, attacco difesa, scenari di utilizzo implementazioni, modding etc 0:30 - 1:00 IHE by Myfox
0:45
10:30		Roundtable 10:30 - 11:30 Guerre di Rete Roundtable with Guerre di Rete crew and journalists to discuss about www.guerredirete.it hot topics
10:45
11:00	Pietre e bastoni possono rompermi le ossa, ma le parole su di uno schermo possono colpirmi solo se e fino a che io glielo permetto 11:00 - 11:30 Zanshin Tech * Zanshin tech la prima ’arte marziale digitale - L’arte marziale come prevenzione e difesa attiva alle aggressioni digitali * Gli strumenti per difendersi: - il dojo e le regole - i kata - la consapevolezza - la fortezza * Dinamiche a scuola, i segnali per prevenire aggressioni e cyberbullismo.
11:15
11:30		Camp Closing 11:30 - 12:00 Cyber Saiyan Thank you and plans for the next years
11:45