Oh My H@ck 2020
as the organisers put it
Oh My Hack to największa polska konferencja cybersecurity. Ósma edycja: 2 grudnia 2026, PGE Narodowy w Warszawie.
| title | author | length |
|---|---|---|
| Hacking Applications on Paper | Artur Balsam | 47m |
Demonstrates concrete security bugs found by early threat modeling for applications: a cow-monitoring API that allows users to submit oversized JSON payloads… | ||
| Abandoned Laptop, or How Banks Are Hacked in Africa | Bartek Jerzman | 52m |
The talk explains how East African criminal groups compromise banks using methods like bribing insiders, planting laptops in server rooms, and deploying… | ||
| Data Loss Prevention and Azure Information Protection... | dr Mike Jankowski-Lorek | 48m |
A technical deep dive into Azure Information Protection (AIP) and Office 365 Data Loss Prevention (DLP) showing practical bypasses. The talk demonstrates that… | ||
| Digital Signatures of Files in Windows | Grzegorz Tworek | 47m |
Digital file signatures on Windows: how to implement and use them in practice. Covers signing different file types (EXE, PS1, etc.), the practical issues that… | ||
| Raiden - open source pulse generator on the battlefield | Grzegorz Wypych | 46m |
An open-source Verilog-based software generator called Raiden produces voltage and electromagnetic fault-injection pulses using an FPGA (tested on a Xilinx… | ||
| Etherify, sonify: soft tempest at home and on the farm | Jacek Lipkowski | 55m |
Demonstrates two covert exfiltration channels: a radio-channel called soft tempest that toggles a Raspberry Pi 4 Ethernet link speed (10/100/1000 Mbps) to… | ||
| Secure, Free VPN — Are You Sure? | Adam Lange | 43m |
The talk analyzes fraudulent and malicious VPN offerings, demonstrating phishing pages impersonating NordVPN and ProtonVPN, about 50 malicious domains that… | ||
| Old but not obsolete - pentest using a C64 | Konrad Jędrzejczyk | 43m |
A presentation about using a Commodore 64 for penetration testing, showing how a 38-year-old platform can still be useful through community-driven tools and… | ||
| Exploitation in G minor, or How to Compose an RCE | Maciej Miszczyk | 39m |
A security research talk demonstrates achieving remote code execution in the MediaWiki Score extension by abusing its music-notation pipeline: the extension… | ||
| Deploying to Production on Friday | Marcin Marciniak | 43m |
The talk addresses the recurring belief that deployments should not happen on Fridays and argues for disciplined change management for large-scale releases. It… | ||
| What Is a Sociologist Doing Among Hackers? | Marcin Zaród | 39m |
A sociologist presents practical methods for assessing and defending groups and institutions against social-engineering attacks, describing specific interview… | ||
| An Interesting Copy-Paste Case - on the Risks of Pasting... | Michał Bentkowski | 46m |
The talk demonstrates that copying formatted content from untrusted web pages and pasting it into sensitive sites can lead to stored or reflected XSS, because… | ||
| I Had WordPress, but It Got Hacked | Michał Leszczyński | 43m |
Mass compromises exploited a vulnerable WP File Manager plugin that exposed a connector for remote file upload; automated curl requests uploaded an x.php… | ||
| From u0 to Millionaire - Attacking Interprocess Communication... | Wojciech Reguła | 43m |
The talk explains how macOS interprocess communication using XPC/NSXPC works and demonstrates widespread vulnerabilities in third-party macOS apps (antivirus… | ||
| Deserialization in Java - is there still anything to fear? | Łukasz Mikuła | 37m |
The talk examines Java deserialization vulnerabilities: which unsafe deserialization patterns still pose risks in 2020, which attack vectors have been… | ||
| One File, Many Meanings - Experiments with Polyglots | Tomasz Zieliński | 50m |
The talk examines files whose byte sequences satisfy multiple file-format specifications at once (polyglots). It explains what a file and a file format are… | ||
| LoRaPWNing - how to attack and secure the LoRaWAN protocol | Sébastien Dudek | 44m |
The talk explains how the LoRa physical layer and the LoRaWAN network protocol work, then details practical attacks against LoRa and LoRaWAN and prior security… | ||
| How to Begin a “Collaboration” with a Foreign Intelligence Service and Not Get... | Sebastian Burgemejster | 31m |
A factual spy-story presentation describing how certain businesspeople were recruited by foreign intelligence services, covering recruitment techniques… | ||
| V2X. V2H? H2V? WTF? | Rafał Jaczyński | 43m |
The talk examines connected-vehicle ecosystems (vehicle-to-everything: V2X, V2H, H2V) showing cellular V2X on LTE with ~14 ms latency and edge computing… | ||
| A Short Introduction to Hacking Artificial Intelligence | Prof. Jerzy Surma | 46m |
Describes practical adversarial attacks on machine learning: small physical stickers can fool autonomous vehicle sign classifiers, poisoning training data with… | ||
| DNS ATT&CK 2020 - review of the most interesting techniques | Piotr Głaska | 48m |
A review of notable offensive techniques from 2020 that used DNS, covering multi-stage malware delivery via DNS, DNS-enabled remote code execution… | ||
| How to Handle an Auditor? | Piotr Filip Sawicki | 50m |
A seasoned IT professional explains what IT system auditors look for during audits and how to cooperate with them without harming yourself or your company. The… | ||
| Serverless Security: Attack and Defense | Pawel Rzepa | 57m |
Compares serverless security across AWS, Azure and GCP, showing concrete attacks: an NPM supply-chain backdoor that exfiltrates environment keys (seen in 500+… | ||
| Adventures in Underland: Hacker Tricks to Stay Under the... | Paula Januszkiewicz | 52m |
Provides step‑by‑step post‑compromise forensic workflows: capture memory first then disk, scan for RWX memory regions and hidden processes via… | ||
| Padding Oracle Attacks on Smart Cards | Michał Trojnara | 45m |
The talk explains padding-oracle attacks against electronic smart cards, showing how an attacker can decrypt card communication without knowing the encryption… | ||
| Kontenery, blue-teaming, hardening i inne #buzzwordy, czyli... | Kamil Zabielski | 41m |
Oh My H@ck 2020 - Kamil Zabielski - Kontenery, blue-teaming, hardening i inne #buzzwordy, czyli jak bronić, by obronić
Techniczna prelekcja, w której obronimy… | ||
| Machine‑assisted AppSec — or how to fire people.. | Kamil Frankowicz | 58m |
The talk examines how machine learning could automate many AppSec tasks and potentially displace IT security roles. It discusses existing ML-based solutions… | ||
| What You Don't Know About Malware? | Kacper Szurek | 37m |
Overview of lesser-known malware techniques that attackers use to trick users and infect computers, with concrete examples of those evasion and… | ||
| nothing matches | ||