ROOTCON

New RC20 Talks Video AI Assisted C2 Development by Gabriel Cruz (meaty) www.youtube.com/watch?v=_PC4... Go check them out! #ROOTCON20 #Archives #AIAssistedC2

RC20 Archives New Uploads are now available on our YouTube channel! Car Hacking Village: Cartint 2.0: An Open-Source Ai-Native Automotive Threat Intelligence And Compliance Dashboard and more.... Go check them out: www.youtube.com/playlist?lis...

RC20 Archives are starting to come online. Check out media.rootcon.org More will be added soon. #ROOTCON #RC20 #Archives

This year, we wanted to do something special for our ROOTCON 20 CTF Champions. We're giving the winning team Lifetime Access to ROOTCON. Congratulations, Team Pulang Araw, on taking the CTF crown this year! Keep an eye on your inbox. Guidelines are coming your way. #ROOTCON #RC20 #Archives

ROOTCON 20 Opening Remarks is now available on YouTube. Twenty years. One hell of a journey. Watch it now. www.youtube.com/watch?v=3q6V... #ROOTCON20 #Archives

Hacker Jeopardy is about to begin. Find a seat, pick a side, and see who really knows their stuff. See you at Tracks 1 & 2. Sponsored by NCCGroup and Eclypsium #ROOTCON20 #HackerJeopardy

Live band. DJ. Good people. One last night to celebrate ROOTCON 20. Track 1 & 2 #ROOTCON20 #ZeroHour

Hacker Karaoke returns to ROOTCON 20. Grab the mic, sing your heart out, and enjoy the night with the community. Beer and cocktails are available until supplies last. Thanks to our sponsors, NinjaOne & Nullforge. #ROOTCON20 #HackerKaraoke

ROOTCON 20 limited-edition magazine celebrating this year's con. Grab your copy while it's still available. Visit the Merch Area before they're gone. #ROOTCON20 #Memorabilia

Codebreakers player, proceed to Track 4 to receive your intel packets. Read carefully. Trust nothing. Good luck. #ROOTCON20 #Codebreakers

Discover exclusive swags, hacker gear, collectibles, and creations from our community vendors.

Welcome to ROOTCON 20. Let's kick things off with a movie night. Join us for a screening of Russian Reverse. See you later, hacker fam! Popcorn and Beer on us! while supply lasts. #ROOTCON20 #MovieNight

Remember Kids! #ROOTCON20 #stickerlife #stickerinthewild

Download the Meshtastic app, pair your ROOTCON 20 badge, and start talking to the mesh. #ROOTCON20 #Meshtastic

Don't just wear your badge. Bring it to life. Instruction how to tinker your badage badge.rootcon.io We'll see you on the mesh. #ROOTCON20 #RC20Badge #Badgelife

REMINDER: Human+ attendees, check-in opens tomorrow at 7:00 AM. Please bring your laptop, required cables/adapters, and anything else you'll need for your training session. We'll see you bright and early! #ROOTCON #RC20 #HUMANPLUS #TRAININGS

Heading out to RC20? Quick reminder! #RoadTo #RC20

How's your ROOTCON EDC prep coming along? We're almost there. #ROOTCON20 #EDC

Good luck to all teams competing in the ROOTCON 20 CTF Qualifiers! The scoreboard is here! quals.rootcon.org/scoreboard #ROOTCON20 #CTF

Behind every challenge is a team that made it possible. Meet ANM—the hands and brains behind this year's ROOTCON 20 CTF. They've built the battlefield. Now it's your turn to conquer it. #ROOTCON20 #CTF

Welcome De La Salle-College of Saint Benilde (Benilde, DLS-CSB) as Silver Sponsor Recognized for academic excellence and global innovation, the College continues to blaze new paths in education, empowering students to create, serve, and make a difference. #ROOTCON20 #SilverSponsor #DLS-CSB

Aden Yap Chuen Zhen takes a closer look at the supply chain—where 0-days, N-days, and everything in between can quietly become someone else’s problem. 0-Day and N-Days in AI/ML Supply Chain Frameworks by Aden Yap Chuen Zhen #ROOTCON20 #AI #MLSecurity #SupplyChainSecurity #CyberSecurity

Omkar Mali explores the offensive side of industrial couplers—finding the paths that can turn a trusted connection into a route to root. Bridging Trust to Root: Offensive Research into Industrial Couplers by Omkar Mali #ROOTCON20 #ICS #OTSecurity #CyberSecurity

Jun Miura and Takao Homma break down the red team engagement from the inside out—reconstructing the process and exploring what it takes to develop your own agent. Reconstructing Red Team Engagements: Developing Your Own Red Agent by Jun Miura and Takao Homma #ROOTCON20 #RedTeam #CyberSecurity

Smriti Gaba takes a closer look at Zigbee, where one security feature opens the door to an unexpected way in. Counter Strike: When Zigbee’s Anti-replay becomes the attack by Smriti Gaba #ROOTCON20 #Zigbee #IoTSecurity #CyberSecurity

Operation Dragon Weave follows a China-linked, multi-stage campaign abusing Azure cloud infrastructure as command and control. Operation Dragon Weave: Uncovering a China-Linked Multi-Stage Campaign Abusing Azure Cloud Infrastructure as Command and Control by Priya Patel #ROOTCON20 #ThreatIntel

Not everything needs a password. Sometimes, it’s just a lock. The Lockpick Village is where curiosity meets the physical side of security—learning how locks work, where they fail, and what it takes to get past them.

Salimah Liyakkathali brings the story to ROOTCON 20. Qillin be Killing it by Salimah Liyakkathali #ROOTCON20 #CyberSecurity #ThreatResearch #Hacking

The tools changed. The attack surface did too. LOTIDE Unleashed: Weaponizing the Full Attack Lifecycle Against AI-Assisted IDEs by Edo Maland and Arv Arvandy #ROOTCON20 #AI #CyberSecurity #RedTeam

Rick Wesson takes a practical look at getting from “what the hell is this?” to a useful YARA signature—fast. Less waiting. More hunting. And hopefully, fewer things slipping through the cracks. Instant YARA Signatures by Rick Wesson #ROOTCON20 #YARA #ThreatHunting #MalwareAnalysis #CyberSecurity

Subhajeet Singha brings the investigation to ROOTCON—because sometimes the most interesting part of a threat is figuring out who was really being watched. Khmer Shadow: Uncovering a Targeted Cyber Espionage Campaign Against Cambodian Military Intelligence by Subhajeet Singha #ROOTCON20

OSINT has always been about connecting the dots. Now AI is changing how fast we can find them. The Recon Village takes a look at what OSINT operations look like in a world where AI can search, analyze, connect, and sometimes even surprise you.

Some attacks get old. They don’t necessarily get useless. The Cellular Assault Village looks back at mobile communication attacks from decades ago—and the surprising ones that still work today.

Every bug starts with a question: what happens if I try this? The Bug Bounty Village brings two beginner-friendly talks to get you hunting—from finding the edges of an application to using AI as part of your workflow.

Curious about what’s hiding inside that little board? Start small. Get your hands dirty. Then start breaking things. Hardware Hacking Village: Microcontrollers 101 – Your Gateway to Hardware Hacking

AI can help build the C2. Malware can make itself harder to understand. Two sides of the same game at the Red Teaming Village. AI-Assisted C2 Development and Analyze Me If You Can: An Introduction to Malware Anti-Analysis Techniques Build smarter. Hide better. Break deeper. #ROOTCON20 #RedTeam

Cars. Scooters. Connected everything. The Car Hacking Village is bringing two talks that look at the ride from very different angles—from understanding automotive threats to putting offensive hardware where it shouldn’t be.

Then, there’s AI. It can solve CTFs. It can write code. It can spot patterns we might miss. So what happens when the challenge itself is designed to fight back?

It starts packed. Something buried, something meant to slow you down. Then you start peeling it back—layer by layer—until the shell gives way to something much more interesting. Because sometimes, you don’t know where the shell ends until you follow it.

When everything goes down, the first 48 hours matter. No internet. No systems. No assumptions that tomorrow will look like today. Doomsday Village Talk: The First 48 Hours: A Hacker’s Guide To Surviving When Everything Fails

We put a lot of trust in the cloud. The agents running quietly in the background? Even more. Yeonwoo Park and Sunggwan Choi take a closer look at what happens when those trusted Cloud Service Provider (CSP) agents are modified for C2.

Then, IPAHound. Walking along the edges of FreeIPA, Mikhail (@Im10n) takes us into the places where identity, trust, and access start to get interesting. No shortcuts. Just digging into the assumptions, finding the cracks, and seeing what happens when you push them. #ROOTCON20 #IPAHound #FreeIPA

Heading out this Friday Night? You might want to start warming up those vocal cords. Hacker Karaoke is back at ROOTCON 20. Check out rootcon.org/html/rc20/co... Whether you’re pitch-perfect or gloriously off-key, grab the mic and make it a night to remember. #ROOTCON20 #HackerKaraoke

TALKS ANNOUNCEMENT: The Ghost in the Rack by Alex Bazhaniuk #ROOTCON20 #GhostInTheRack

Some familiar faces are back—and we’re glad to have them with us once again. ROOTCON 20 proudly welcomes eScan, through Netplay Inc., back as a Gold Sponsor. Their continued support reflects a shared commitment to strengthening cybersecurity and supporting the local hacker community.

We’re excited to welcome YesWeHack as a Gold Sponsor of ROOTCON 20! As one of the world’s leading Bug Bounty and Vulnerability Disclosure platforms, YesWeHack brings together organizations and ethical hackers.

TALKS ANNOUNCEMENT: Ctrl + Flow + Esc: Escaping Red Team Chaos by Yi Ting Shen & Ariz Soriano #ROOTCON20 #RedTeaming

ROOTCON 20 is proud to welcome Sophos, through Netplay Inc., as a Silver Sponsor! Trusted by organizations around the world, Sophos delivers industry-leading cybersecurity solutions that help defend against today’s ever-evolving threats. Together with Netplay Inc.

ROOTCON 20 is proud to welcome OffSec as a Gold Sponsor! Known for setting the standard in offensive security training, certifications, and hands-on learning, OffSec continues to empower security professionals worldwide with practical, real-world skills.

TALKS ANNOUNCEMENT: Beyond the Checkbox: How to Engineer Emulations That Actually Matter by Pengfei Yu #ROOTCON20 #AdversaryEmulation