Schedule | Nullcon Goa 2022

OUR TIMETABLE

NULLCON GOA SEP 2022

*All timings mentioned are in IST

Date & Time	Hotel Name	Training Name
3 Day Training ( 6th - 8th Sept 2022 ) 9:00am to 5:00pm	Grand Hyatt, Goa	Breaking and Pwning Apps and Servers on AWS and Google Cloud – Post Pandemic Edition by Riyaz Walikar & Rohit Jadav
		DevSecOps – Automating Security in DevOps by Jovin Lobo
		Advanced Infrastructure Security Assessment by Omair & Prashant Mahajan
		StealthOps : Red Team Tradecraft Targeting Enterprise Security Controls by Manish Gupta & Yash Bharadwaj
		Hacking and Securing Kubernetes Clusters by Madhu Akula
		HackFi - hacking smart contracts by Chaitanya RK
		ML for Security and Security for ML by Nikhil Joshi
		Securing Android Applications by Ankur Bhargava
		Efficient malware analysis: comprehensive approach by Alexey Kleymenov
	Vivanta By Taj, Panjim	Rapid Threat Model Prototyping (RTMP)... threat modeling optimized for Agile (finally)! by Geoffrey Hill
		Beyond the Web Application Hacker's Handbook by Marcus Pinto
		Web- & Browser-Security Roundhouse-Kick by Dr.-Ing. Mario Heiderich
	Chances Resort and Casino	Practical IoT Hacking by Hariprasad K V, Kartheek Lade, Shakir Zari & Appar Thusoo
		Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors by Abraham Aranguren & Anirudh Anand
		Windows Kernel Exploitation Foundation & Advanced by Ashfaq Ansari

As we are having 3 venues for the Nullcon Training, We will be providing a free shuttle service on training days for training attendees, whoever needs it. Details are below.

Training Dates: 6 - 8 Sep 2022
Morning 8.00 am from Grand Hyatt > Chances Resort > Vivanta By Taj.
Evening 6.00 pm from Vivanta By Taj > Chances Resort > Grand Hyatt

*All timings mentioned are in IST

Start	End	Ballroom 1	Ballroom 2 + 3	Salao 1	Salao 2	Salao 3	Salao 4+5
08:00	09:15	Registration
09:15	09:30	Opening Note
09:30	10:15	[KEYNOTE] Do we get stuff done? We don’t get stuff done? Or do we? Or will we, maybe? Soon? by Dr.-Ing. Mario Heiderich
10:15	11:00		A Kernel Hacker Meets Fuchsia OS by Alexander Popov
11:00	11:15	Coffee Break
11:15	12:00		Hack The Bridge by Anto Joseph	A UEFI firmware bootkt in the wild by Ivan Kwiatkowski	WINJA CTF	Hardwear CTF	[WOKRSHOP] One SMALI Step For Man, One Giant Step For Researchers by Gabriel Cirlig
12:00	12:45	[PANEL] Secure Service Edge (SSE): Challenges and Upsides of Adoption	ElectroVolt: Pwning Popular Desktop Apps While Uncovering New Attack Surface On Electron by Mohan Sri Rama Krishna Pedhapati & Maxwell Garrett	Hack the Source: Securing Open Source Software – One bug at a time by HackerOne	WINJA CTF	Hardwear CTF
12:45	14:00	Lunch Break
14:00	14:45	[PANEL] Impact of disruptive technologies on CISO's career & progression	Service workers VS corporate firewalls by Aleksandr Kolchanov	[PANEL] Consumer Tech Bug Bounty Panel: Hear from the Program Managers	WINJA CTF	Hardwear CTF	[WORKSHOP] Peeling Back The Onion: Taking Security Onion Into Battle by Dr. James Stanger
14:45	15:30	[PANEL] Cloud Services for Financial Inclusion: Possibilities & Challenges	Scale hacking to secure your cloud and beyond by Anand Prakash	Handling a Bug Bounty program from a Blue team perspective by Ashwath K & Ankit Anurag	WINJA CTF	Hardwear CTF
15:30	15:45	Coffee Break
15:45	16:30	[PANEL] PAM Maturity : From Zero Trust to Least Privilege	Mind The Gap - The Linux Ecosystem Kernel Patch Gap by Jakob Lell & Regina Bíró	Raining CVEs On WordPress Plugins With Semgrep by Shreya Pohekar & Syed Sheeraz Ali	WINJA CTF	Hardwear CTF
16:30	17:15	[PANEL] Unlocking Security Collaboration with Cyber Threat Intelligence	Do PDF Tools Conform To The Specification? by Dr. Prashant Anantharaman	Software-Defined Snort With Barnyard & Pulled Pork For NIDPS by Arun Samuel Baskaran	WINJA CTF	Hardwear CTF
19:30	22:00	[Invite Only] Networking Dinner Party

*All timings mentioned are in IST

Start	End	Ballroom 1	Ballroom 2	Ballroom 3	Salao 1	Salao 2	Salao 3	Salao 4+5
09:15	09:30
09:30	10:15		[KEYNOTE]
10:15	11:00		Elevating The TrustZone To Achieve A Powerful Android Kernel Exploit by Tamir Zahavi-Brunner
11:00	11:15	Coffee Break
11:15	12:00		A new secret stash for fileless malware by Denis Legezo	c0ntextomy - Let's Debug Together by Nikias Bassen	Web3.0 - Smart Contracts Could Be Leaky by Riddhi Shree	Hacking Your Career In Cybersecurity with Indrajeet Bhuyan Resume & Career Clinic	Hardwear CTF	[WORKSHOP] Deep Dive: Red Team Test Operations by Elena Feldman, Vsevolod Kalshikov, Vadim Pleshkov & Veronika Matveeva
12:00	12:45	[PANEL] Securing India the CERT-In Way	Hacking 5G is no rocket science by Altaf Shaik & Matteo Strada	0-Day Up Your Sleeve - Attacking macOS Environments by Wojciech Reguła	Automate Your Whatsapp Chats by Aditi Bhatnagar		Hardwear CTF
12:45	14:00	Lunch Break
14:00	14:45	[Panel] Does your SOC sucks	Hacking Android Foreground Services Escalation Of Privileges by Rony Das	The Different Faces Of macOS Malware: Detecting Anomalies In A Poisoned Apple by Amit Malik & Pratik Jeware	[PANEL] Securing the software	AMMO Talks		[WORKSHOP] Building Security Applications On Smart Cards by Dr. Rajesh Kumar Pal
14:45	15:30	[Panel] IoT Supply Chain Blues and the way forward	Honey, I Just Put The Hospital On A Ventilator! - DICOM And Its Pitfalls by Shyam Sundar Ramaswami & Rakesh Mahanthi	Jailbreaking iOS in the post-apocalyptic era by CoolStar & Tihmstar	[WORKSHOP] Ticketing 101: Making Sure Your Documentation Is As Good As Your Findings by Paula Pustulka
15:30	15:45	Coffee Break
15:45	16:30	Hacking Fintech Crime: Realities and Possibilities in India by Anand Venkatanaryanan & Mr Chander Mohan (IPS)	Into the Dark - switching of renewable power from everywhere by Stephan Gerling	Pushing Security Left By Mutating Byte Code by Gaurav Gogia	[WORKSHOP] Ticketing 101: Making Sure Your Documentation Is As Good As Your Findings by Paula Pustulka
16:30	17:15		Unearthing Malicious And Other “Risky” Open-Source Packages Using Packj by Ashish Bijlani & Devdutt Patnaik
17:15	17:30		Closing & Prize