Ringzer0 - Ringzer0 (Page 4)

Workshop: Introduction to Automotive Firmware Reverse Engineering // Willem Melching

In this workshop we will cover the basics of reverse engineering automotive firmware. An ECU firmware can consist of millions of lines of code which would take a long time to fully reverse engineer. Tips and tricks will be taught to quickly identify parts of the firmware that are of interest.

BOOTSTRAP25 Workshop

Workshop: Offensive Security Tool Development with Ghidra // John McIntosh

Automate reverse engineering with Ghidra’s CLI tools in this hands-on workshop. Set up a productive environment using the Ghidra Python VSCode Devcontainer Skeleton, automate tasks, script analyses, and integrate Ghidra’s powerful decompilation and disassembly features into your CLI workflow

BOOTSTRAP25 Workshop

Workshop: Hands-on binary (de)obfuscation // Arnau Gàmez i Montolio

This workshop introduces modern binary (de)obfuscation. After a brief lecture on key concepts, we’ll walk through practical examples, using symbolic execution to extract and simplify obfuscated expressions. Finally, we’ll apply program synthesis to recover the semantics of obfuscated code.

BLACKHOODIE MARCH21

FREE Blackhoodie 1 Day Training // Compiler Internals for Security Engineers

Blackhoodie is a free, women only reverse engineering workshop and community. This FREE 1 day class introduces students to security relevant aspects of compiler internals, and with guided examples enables students to perform their own code modifications through a compiler.

BOOTSTRAP25 Keynote

KEYNOTE: Security products don’t have to suck // Haroon Meer

It has been 15 years since FX famously quipped that by quality level, we are better off defending our networks with Microsoft Word than a Checkpoint firewall. Security products are still pretty terrible - but why? This keynote examines why this keeps happening and plots a path to a different world.

BOOTSTRAP25 Talk

TALK: Musing from Decades of Linux Kernel Security Research // Joshua J. Drake

The Linux Kernel powers billions of devices across industries, making it critical infrastructure. But is it secure? Josh explores this by comparing its security investments to a typical SDLC, sharing a case study of an unresolved security issue, and offering recommendations to reduce risk.

BOOTLOADER Mixer'25

TALK: From 0 to millions: Protecting against AitM phishing at scale // Jacob Torrey

Phishing has evolved to bypass MFA using reverse proxies, while traditional defenses like blocklists are aging and evaded. This talk introduces Cloned Site Canarytoken, which alerts you to phishing attempts before credentials are entered, with real-world attack insights and response strategies.

BOOTLOADER Mixer'25

TALK: Design To Exploit: A Dive Into EV Charger Security // Jonathan Andersson, Connor Ford

This talk examines EVSE security through an analysis of 8 EV chargers and findings from Pwn2Own Automotive 2024 and 2025. It covers typical charger design, common attack surfaces, and the process of researching an EV charger from scratch, including a successfully exploited vulnerability.

BOOTSTRAP25 In-person Training

Practical Car Hacking - A Hands-On Approach

This course covers a wide variety of topics - from automotive networks, diagnostic protocols, firmware extraction and wireless attack surfaces. The course is very hands-on, with many real ECUs to practice on.

BOOTSTRAP25 Virtual Training

Exploiting the Linux Kernel

This training guides through the field of Linux kernel exploitation. In a series of practical labs, the training explores the process of exploiting kernel bugs in a modern Linux distribution on the x86-64 architecture.

theme-b25

Welcome To BOOTSTRAP25!

Welcome To BOOTSTRAP25 Thompson Conference Center, Austin TX // March 18-21 BOOK NOW Keep Austin reverse-engineering and learn with Ringzer0 this…

BOOTSTRAP25 In-person Training

Patch Diffing In The Dark: Reverse Engineering Modern CVEs

This course teaches patch diffing to analyze real-world Windows and Android vulnerabilities. Students use open-source tools like Ghidra to reverse engineer recent CVEs, gaining the skills and confidence to discover complex vulnerabilities with tools they already have.