::: left till the conference
Ru
En
  1. ZeroNights 2021
  2. Program

Program

Main Stage
8:30 1 h
Registration
9:30 20 min
Grand opening
9:50 30 min
Keynote — Taras Ivaschenko (Ozon)
10:30 45 min
Alexander Ermolov , Dmitry Frolov
Data-only attacks against UEFI BIOS
11:25 45 min
Alexander Tarasikov
Exploring the Galaxy. Building emulators to find vulnerabilities in modern phones
12:20 45 min
Alex Kovrizhnykh (@a1exdandy)
Exploiting checkm8 with unknown SecureROM for the T2 chip
13:15 45 min
Maxim Goryachy , Mark Ermolov , Dmitry Sklyarov
Chip Red Pill: How we achieved to execute arbitrary [micro]code inside Intel Atom CPUs
14:10 45 min
Dima Turchenkov
LPE in Ring -3 / Intel ME
15:00 1 h
Break
16:05 30 min
Aleksei “GreenDog” Tiurin (@antyurin)
Weird proxies/2 and a bit of magic
16:45 45 min
Alexander Popov
Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG
17:45 30 min
Ivan Agarkov
8 ways to spy on your consoles
18:30 30 min
Alex Rossovsky
Hacking KaiOS
19:10 15 min
Andrey Zhukov
Lateral movement automation
19:30 30 мин
Unnamed user , ValdikSS
Trojans and backdoors in feature phones sold in Russia
20:10 30 мин
Max Dmitriev
Apache 0day bug, which still nobody knows of, and which was fixed accidentally
20:50 15 мин
Aleksandr Kolchanov
Thank you for using URL shorteners: I know everything about your clients now
21:20 20 min
Closing ceremony
Web Village
10:15 20 min
Anton “Bo0oM” Lopanitsyn (@i_bo0om)
31337
10:45 30 min
Timur Abdullin
Sentry and (non)private view of exceptions
11:25 20 min
Pavel Sorokin
PD%00
11:55 40 min
Valeriy “krevetk0” Shevchenko (@Krevetk0Valeriy)
Fantastic bugs and where to find them
12:45 30 min
Emil Lerner (@emil_lerner)
HotPics 2021
13:25 40 min
Alexey “SooLFaa” Morozov (@xSooLFaa)
Hacker adventures on dating websites
14:15 40 min
Nikita Stupin (@nikitastupin), Sergey “BlackFan” Bobrov (@black2fan)
New ways to alert: Prototype Pollution
15:05 20 min
Paul Axe (@Paul_Axe)
JVMyachni Otake
15:35 20 min
Alex Savelyev (Digital Security Academy)
Server exploitation of Prototype Pollution vulnerability
Defensive Track
16:00 30 мин
Denis Rybin
Metrics in practice
16:40 45 min
Dmitriy Evdokimov (@evdokimovds)
Container escapes: Kubernetes edition
17:35 45 min
Aleksei Meshcheriakov , Alexander Kaleda , Evgenii Protsenko
Company wide SAST
18:30 15 min
Denis Efremov
CVEhound: check Linux sources for known CVEs
18:55 30 мин
Ilya Zuev
IPMI backdoor not with your own hands
19:35 30 min
Vatclav Dovnar
Open Source DevSecOps: Tempest in a teapot
20:15 30 min
Alexander Barabanov
Attacking the microservice applications: methods and practical tips
20:55 30 мин
Dmitriy Teryoshin
The invisible hand of AppSec in release builds
Hardware Zone
11:00 1 h
Zen
AVR reverse for beginners
12:00 2 h
Pavel Zhovner
How do we make Flipper Zero?
14:00 1 h
Yegor Litvinov
Zigbee wireless protocol
15:00 1 h
Valeria Gubareva
How to start soldering and not to burn the apartment
16:00 1 h
Evgeniy Rasskazov
Exploring the types of Flash memory
Workshops
10:30 3 h
Corporation 9
Red Team 101
13:40 2 h
Alex Savelyev (Digital Security Academy) , Vadim Shelest
Comprehensive training on attacks against applications
16:00 2 h
Joseph Mlodzianowski (WebSploit) , Omar Santos
Hands-on intensive web app hacking
18:30 2 h
Ivan Agarkov
SElinux workshop
There may be changes and updates to the program.
Up