2.0 -//Pentabarf//Schedule//EN PUBLISH 3D797U@@cfp.bsidesfrankfurt.org -3D797U Cryptography: An Evolutionary Tale en en 20260911T090000 20260911T130000 040000

Cryptography: An Evolutionary Tale

This workshop is a deep dive into the art and science of cryptography, charting its evolution from antiquity to the cutting edge of modern research. The session is structured as a chronological and interactive exploration, tailored for the hands-on and intellectually curious audience. The four hours are segmented to cover distinct eras of cryptographic development, each combining a theoretical overview with practical application. Part 1: The Age of Classical Ciphers (Hands-On) We begin our journey in the ancient world, with some of the earliest recorded uses of cryptography. Participants will get their hands dirty with classical "pen-and-paper" ciphers, starting with the famed Caesar cipher, a simple substitution method used by Julius Caesar for his private correspondence. We'll discuss the vulnerabilities of these early systems, such as their susceptibility to frequency analysis (a groundbreaking cryptanalytic technique developed by Arab scholar Al-Kindi around the 9th century). This section will involve hands-on exercises where attendees will encrypt and decrypt messages using these classical methods and even attempt to break them. Part 2: The Mechanical and Early Digital Revolution (Demonstration and Puzzles) This segment explores the leap to more complex cryptographic machinery. We will discuss the pivotal role of devices like the Enigma machine during World War II and the monumental efforts to crack its codes, which laid some of the foundational theory for modern computing. The workshop will then transition to the dawn of the digital age with the introduction of the Data Encryption Standard (DES), the first cryptosystem certified for use by the US Government. To make this era tangible, we will engage with interactive puzzles that simulate the logic of these more complex systems. Part 3: The Dawn of Public-Key Cryptography (Conceptual and Practical) A revolutionary shift in cryptography came with the concept of asymmetric keys. We will demystify public-key cryptography, explaining how the use of a public and private key pair solved the age-old problem of secure key exchange. The principles behind RSA and Diffie-Hellman will be explained in an accessible manner, focusing on the one-way mathematical functions that make them secure. Participants will engage in a practical exercise to understand how public and private keys are used to encrypt and decrypt information, providing a foundational understanding of the technology that underpins much of modern secure communication, including TLS/SSL. Part 4: The Quantum Frontier (Discursive and Forward-Looking) The final hour will be a discursive exploration of the future of cryptography in the face of quantum computing. We will discuss why current cryptographic standards like RSA and AES are vulnerable to the power of quantum computers. The session will introduce the fundamental concepts of quantum cryptography and Quantum Key Distribution (QKD), explaining how they leverage the principles of quantum mechanics to offer a new paradigm of secure communication. The aim is to provide an intuitive, high-level understanding of this next evolution in cryptography, sparking a conversation about the challenges and opportunities that lie ahead. Throughout the workshop, the emphasis will be on interaction, discussion, and hands-on learning. Participants will leave not only with a historical perspective but also with a practical feel for the cryptographic concepts that have shaped and will continue to shape our world. PUBLIC CONFIRMED Workshop (4 hours) https://cfp.bsidesfrankfurt.org/call-for-paper-workshops-2026/talk/3D797U/ Uni Campus Seminarhaus 1 Alessio Di Santo Gabriella Lanziani Dajana Cassioli PUBLISH QPQTVJ@@cfp.bsidesfrankfurt.org -QPQTVJ A phishing trip with Fancy Bear - Let's analyze APT malware together! en en 20260911T140000 20260911T180000 040000

A phishing trip with Fancy Bear - Let's analyze APT malware together!

This workshop does not depend on domain-specific knowledge, we will try to break the steps down as far as possible. Attendees will follow along through small exercises, with the opportunity to compare their solution through a validation system. Important for message for attendees: If you would like to follow along, please bring laptop with a charged battery. You will be handling real-world malware (you act at your own risk; No backup, no pity). I recommend to use a virtual machine (e.g. FLARE-VM, Remnux). No special tooling is required, make sure to have the basics (Text and Hex Editor, Browser, ZIP utility) installed. No photos during the workshop please, you will receive a copy of the slides. PUBLIC CONFIRMED Workshop (4 hours) https://cfp.bsidesfrankfurt.org/call-for-paper-workshops-2026/talk/QPQTVJ/ Uni Campus Seminarhaus 1 Marius Genheimer PUBLISH PZBMJX@@cfp.bsidesfrankfurt.org -PZBMJX Introduction to Physical Security Testing en en 20260911T090000 20260911T130000 040000

Introduction to Physical Security Testing

PUBLIC CONFIRMED Workshop (4 hours) https://cfp.bsidesfrankfurt.org/call-for-paper-workshops-2026/talk/PZBMJX/ Uni Campus Seminarhaus 2 Nico Leidecker Harris Nuhanović PUBLISH 39S7AD@@cfp.bsidesfrankfurt.org -39S7AD Desktop Application Pentesting 101 for Security Professionals en en 20260911T140000 20260911T180000 040000

Desktop Application Pentesting 101 for Security Professionals

This workshop gives security professionals practical experience with desktop application penetration testing. After a short introduction and environment setup, participants learn how to fingerprint technologies, decompile a Java client, analyze client-server communication, and understand why backend systems often represent the real security boundary. The core hands-on part focuses on building a custom client that communicates directly with the backend, bypassing limitations of the original application. Participants then use this client and the knowledge gained from static and network-level analysis to hunt for vulnerabilities and exploit them in a realistic lab environment. PUBLIC CONFIRMED Workshop (4 hours) https://cfp.bsidesfrankfurt.org/call-for-paper-workshops-2026/talk/39S7AD/ Uni Campus Seminarhaus 2 Jakob Steeg Tim Kranz PUBLISH KPBKUP@@cfp.bsidesfrankfurt.org -KPBKUP Defending Microsoft Entra ID: Common Attacks, Tokens, and Response Planning en en 20260911T090000 20260911T130000 040000

Defending Microsoft Entra ID: Common Attacks, Tokens, and Response Planning

PUBLIC CONFIRMED Workshop (4 hours) https://cfp.bsidesfrankfurt.org/call-for-paper-workshops-2026/talk/KPBKUP/ Uni Campus Seminarhaus 3 Ethan Bowen PUBLISH AGWT9L@@cfp.bsidesfrankfurt.org -AGWT9L Hunting Supply Chain Attacks: Hands-on Anaysis of npm, PyPI, and VS Code Threats en en 20260911T090000 20260911T130000 040000

Hunting Supply Chain Attacks: Hands-on Anaysis of npm, PyPI, and VS Code Threats

Participants will work directly with sanitized samples from active campaigns including Contagious Interview (BeaverTail/InvisibleFerret), Glassworm, and TeamPCP/Miasma. The attendees will analyze malicious artifacts across four major attack surfaces: npm, PyPI, GitHub, and VS Code extensions. Beyond technical analysis, attendees will learn the trainers custom software supply chain CTI workflow: extracting IOCs, pivoting across infrastructure to identify campaign scope, attributing activity to threat actors, , producing actionable reports and alerting the community to the threats you expose. The training culminates with a live hunting session where participants apply their new skills to hunt for real threats and document findings using professional intelligence standards. PUBLIC CONFIRMED Workshop (4 hours) https://cfp.bsidesfrankfurt.org/call-for-paper-workshops-2026/talk/AGWT9L/ Uni Campus Seminarhaus 4 Paul McCarty PUBLISH DQTFAG@@cfp.bsidesfrankfurt.org -DQTFAG Rustacean Introduction to Shellcoding en en 20260911T140000 20260911T180000 040000

Rustacean Introduction to Shellcoding

How to implement your next shellcode or implant using the Rust programming language. The workshop will cover the following: - A brief introduction to Rust. - Key challenges during shellcode development and how to resolve them. - A brief introduction to Windows and parsing PE headers. - Short introduction on loader design. - Creation of fully position-independent code (PIC). **What do you need and what will be provided:** - Baseline library code will be provided. - Basic ability to write and read Rust code will be helpful but is not required. - You will need to bring a Windows VM to the workshop. - This VM should have X64dbg (64-bit) installed. - You will also need the ability to transfer files from and to it. - A development container (Docker) for cross-compiling Rust will be provided. PUBLIC CONFIRMED Workshop (4 hours) https://cfp.bsidesfrankfurt.org/call-for-paper-workshops-2026/talk/DQTFAG/ Uni Campus Seminarhaus 4 Ben