First schedule is online!(Still subject to changes — keep an eye on it) Workshops & workshop tickets are live now! Start planning

Speaker slides are going online! Most already available, more coming soon. Check them at bsidesfrankfurt.org #BSidesFrankfurt

Defending Microsoft Entra ID 4-hour hands-on workshop covering common attacks, tokens, Conditional Access, and real KQL hunting. Device code phishing • AiTM • refresh token replay — and how to detect them. With Ethan Bowen. #EntraID #CloudIdentity #SOC

A Phishing Trip with Fancy Bear Hands-on analysis of a real APT28 attack chain — phishing email → payload → persistence → C2. Interactive platform, real artefacts, free tools only. Beginner-friendly. #FancyBear #APT28 #MalwareAnalysis

Cryptography: An Evolutionary Tale From Caesar cipher → Enigma → RSA → Quantum cryptography — in 4 hands-on hours. Encrypt, break, and experiment your way through the history of secret communication. Interactive. Practical. No pure theory.

Hunting Supply Chain Attacks Hands-on analysis of real malware targeting npm, PyPI, GitHub & VS Code extensions. Work with samples from Contagious Interview, Glassworm & TeamPCP — then hunt live and produce actionable intel with Paul McCarty, OpenSourceMalware

Desktop Application Pentesting 101 Java fat clients still matter — and they’re tested very differently from web apps. Reverse engineer the client, analyze proprietary protocols, build a custom pentest client, and exploit the backend. Hands-on workshop with Jakob Steeg & Tim Kranz

Introduction to Physical Security Testing Lock picking • Door bypasses • Access card cloning Hands-on workshop with Nico Leidecker & Harris Nuhanović (@NVISOsecurity ). Test your skills on the Covert Access Vault (CAV). Time to go physical.

Rustacean Introduction to Shellcoding Write your first position-independent implant in Rust — from scratch. PE parsing, loader design, PIC, and real working code to take home. Bring a Windows VM + x64dbg. Baseline code & Docker container provided.

Keyless Entry: Hacking SwitchBot Smartlocks AES-CTR with no integrity checks → universal software-only unlock of a popular smart lock. Live exploit + the vendor’s broken patch + a legendary 100€ bounty. Kolja Grassmann shows how easy it can get when crypto is done wrong.

Welcome to Hybrid Hell Enterprise identity is no longer just Active Directory. AD + Entra ID + Azure + M365 + SaaS + multi-tenant trusts = a massive, poorly understood attack surface. Georg Heise shows how attackers follow the trust relationships — not the technology boundaries.

Lessons Learned While Building an Agentic SOC The good (L1 triage & timelines), the bad (mediocre results & wasted tokens), and the scary (when agents cause incidents). Aaron Jewitt shares @Elastic’s real journey — no hype, just hard-won lessons.

Deconstructing Modern macOS Initial Access Vectors The “macOS is safe” myth is over. Stephan Berger shows how attackers are landing on Apple devices today: Google Ads → ClickFix → AppleScript/JXA → DMGs, PKGs & Electron apps. Real tradecraft. Real defense insights.

Hacking Consumer Drones: From Flash Dumping to Root Exploits Full chain on the Potensic Atom 2: Flash dumping → corrupted firmware recovery → RF protocol RE → remote root. Tim Schmidt shows the real hardware + software exploit process, end to end. #HardwareHacking #IoT

Only 20 days left — grab your ticket now before it’s gone. Don’t miss out! 👉 tickets.bsidesfrankfurt.org/… #BSidesFrankfurt #Tickets #CyberSecurity

What Windows 11 Remembers (And Most Investigators Miss) Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore. Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases. #DFIR #Windows11

Can AI do the job of a senior pentester for a few hundred euros? This talk shows real-world results of AI in SAST, DAST, source code analysis & even Active Directory exploitation — the good, the bad, and the confidently wrong. No hype. Just practical insights.

Want to splice fiber optics yourself? @Schutzwerk is bringing their gear — cut & “glue” real fiber on conference day! Hands-on session you don’t want to miss 🔥 #FiberSplicing #HandsOn