HackInBo® - Talks and Slides Archive

Welcome to the official archive of HackInBo®, one of the largest cybersecurity conferences in Italy. Here you can find talks and slides from all past editions, covering topics like offensive/defensive security, malware, AI, and threat intelligence.

25th Edition - 15-11-2025

• Adventures of Wallet Hacking (Joe Grand) Slides
• VoIP Security: vulnerabilità e hardening (Davide Rasòli) Slides
• Reverse engineering of the TriCore Aurix debug protocol (Enrico Pozzobon) Slides Lab
• Hack and Defend (your) Open Source: Real Attacks, Real Tools, Real Insights (Roman Zhukov) Slides
• Fuji: la soluzione open source per la copia forense dei Mac con processori Intel e Apple Silicon (Andrea Lazzarotto) Slides
• Legitimate Until Proven Otherwise: Emerging Initial Access Techniques (Ettore Bordoni)

24th Edition - 07-06-2025

• Forensic WACE: strumento multi thread per l'Analisi Forense delle CHAT di WhatsApp. (Ugo Lopez, Alessio Palmieri, Daniele Monte) Slides
• Il gap di sicurezza dell'IA: le vulnerabilità specifiche delle APP GenAI. (Gabriele Zanoni) Slides
• I miei primi 25 anni (di Offensive Security) (Igor "KOBA" Falcomatà) Slides
• Now I See You: Pwning the Synology BC500 Camera (Emanuele Barbeno) Slides
• The Proxy Warfare: Unmasking Russian and Chinese Externalized Cyber Capabilities (Alixia Rutayisire) Slides

23rd Edition - 16-11-2024

• Keeping the pace with attackers: storie di attacchi e tendenze di phishing emergenti (Davide Canali) Slides
• Stealth Domain Generation Algorithm (SDGA): Elevating Malware Stealth and Resilience Beyond Traditional DGA Methods (Rafael Salema Marques) Slides
• Applicazioni mobile: [in]sicurezza e supply chain (Denise Nanni e Gabriele D'Angelo) Slides
• Offensive Operations as Code: Personal Journey in Innovating and Automating Cloud Infrastructure (Vito De Laurentis) Slides
• Skynet: Come l'AI (forse) conquisterà il mondo! (Marco Valleri) Slides

22nd Edition - 08-06-2024

• SCADAsploit: a command and control for OT. How to break an ICS system (Omar Morando) Slides
• Dobbiamo parlare di ETW (Giulia Q.) Slides
• Kitsune: One C2 to control them all (Joel Gámez Molina) Slides
• When dependabot is not enough: protecting our software supply chain (Edoardo Dusi) Slides
• Defeating modern Android Security measures (Aman Sachdev e Mudit Jaiswal) Slides

21st Edition - 18-11-2023

• DLL Sideloading: Aspetti Pratici e Threat Landscape (Gaetano (Nino) Pellegrino) Slides
• From Infection to Exfiltration: A Deep Dive into ToddyCat's Intrusion Techniques (Giampaolo Dedola) Slides
• Alchimia delle Cyberwarfare: (D)DoS e Botnet nell’odierno panorama dei conflitti digitali (Emanuele De Lucia) Slides
• Non-Traditional Attack Techniques (Rocco Sicilia) Slides
• ScaiRansomware EDR BYPASS (Luca Antognarelli e Tommaso Olmastroni) Slides

20th Edition - 10-06-2023

• IIS Tilde Enumeration: an evergreen vulnerability (Michele Di Bonaventura) Slides
• FIT - Tool di acquisizione forense di contenuti WEB (Francesca Pollicelli e Fabio Zito) Slides
• Anomaly detection and IP insights (Alessandra Bilardi) Slides
• Intel Owl project: making the life of cyber security analysts easier (Matteo Lodi e Simone Berni) Slides
• Tampering the RAM: a new way to break into any VM (Francesco Marano) Slides
• Scalable malware attribution with Malstream (Matteo Corradini) Slides
• Acquisition in the billions. Breaking cryptographic keys with fast SCA (Cristofaro Mune) Slides

19th Edition - 03-12-2022

• Dentro l'alveare: alla ricerca del nettare perduto (Riccardo Di Pietro) Slides
• The firewall is dead, long live to the firewall! (Davide Annovazzi) Slides
• Could threat actors be downgrading their malware to evade detection? (Laura Varano) Slides
• Double your profit with these tools for active directory security (Andrea Pierini e Marco Magnaguagno) Slides
• How to break the Modbus protocol and do a PLC DoS (Omar Morando) Slides
• Antiphishing ed oltre: la protezione del brand e del dominio di posta (Raffaele Colavecchi) Slides

18th Edition - 28-05-2022

• A deep dive into advanced Android banking Trojan campaigns (Federico Valentini e Francesco Iubatti) Slides
• Smart Contract (In)Security - How to lose money without trading (Simone Bovi) Slides
• Once upon assign()... (Marco Ortisi) Slides
• Discovering C&C in Malicious PDF with obfuscation, encoding and other techniques (Filipi Pires) Slides
• The Hidden Threat. Breaking into Connected Devices for Infrastructure Compromise (Cristofaro Mune) Slides
• The CAN Link-Layer, or how we implemented a broken protocol and can we fix it (Stefano Longari) Slides

17th Edition - (Safe Edition #4) 06-11-2021

• Falco + Falcosidekick = Create your own Kubernetes security Response Engine (Stefano Chierici) Slides
• Bitlocker and Trusted Platform Module (Luigi Fragale) Slides
• Propaganda grew, and so did Twitter (Luigi Gubello) Slides
• Insicurezza della Rete: la scomoda eredità della filosofia hippie (Corrado Giustozzi) Slides
• Long-range disruption of industrial processes using Drones and LoRaWAN (Yiannis Stavrou) Slides
• Serverless Security Testing (Tal Melamed) Slides
• Guida galattica per nuovi operatori ransomware: Una vista dall'interno e spunti per le pratiche di detection (Emanuele De Lucia) [Slides](./slides/2021.11.06/07_Guida_galattica_per_nuovi_operatori_