Apr
2024 Eurosatory Events Exhibitions Press release
Eurosatory 2024 Technology Clusters: Innovation 2024 DataShielder Defence
2023 Events FIC 2023
Serverless Cryptography Solution – FIC 2023
2022 Confex Events
CONFEX 4.0 Cybersecurity Transalley
Eurosatory Events Exhibitions
Exhibitors list Eurosatory 2022 and Freemindtronic Story
2022 CyberStealth Eurosatory Press release
EviStealth Technology at Eurosatory 2022
2022 Cyber Computer Eurosatory Press release
Cyber Computer at Eurosatory 2022
2022 Contactless Dual Strongbox Eurosatory Press release
The Contactless Dual Strongbox for sensitive data at Eurosatory 2022
THcon 2023: Highlights of the Cybersecurity Event
Do you want to know more about THcon 2023, a cybersecurity conference and CTF that took place in Toulouse, France? In this article, you will learn about the highlights of the event, the speakers, the partners and the prizes. You will also find out how to register for the next edition in 2024. Read on to discover why THcon is a must-attend event for cybersecurity enthusiasts!
Are you a cybersecurity enthusiast who missed THcon 2023 and its CTF? Or are you curious about what happened at this amazing event that took place in Toulouse, France from April 20 to 22, 2023? If so, you are in the right place. In this article, I will give you a recap of the highlights of THcon 2023 and its CTF. I will also show you why you should attend the next edition in 2024.
What is THcon and its CTF?
THcon is a cybersecurity event organized by the Toulouse Informatique Sécurité et Associatif (TISA) association. It aims to bring together hackers, researchers, students, professionals and enthusiasts from all over the world to share their passion and knowledge on cybersecurity.
The event features two days of talks, a social event and a CTF (Capture The Flag) in person. The talks cover various and current topics, such as hardware hacking, firmware analysis, secret extraction in CI/CD systems, attacks against online games, Android security model or the challenges of connected vehicle security. The speakers are recognized experts in their fields, such as Travis Goodspeed, Axelle Apvrille or Damien Cauquil.
The social event is an opportunity for the participants to network and have fun in a friendly and festive atmosphere. It is also the occasion to award the prizes for the challenge that takes place during the talks.
The CTF is a hacking competition that consists of solving cybersecurity challenges. For example, exploiting a vulnerability in an electronic device, extracting hidden data in a memory image, finding weaknesses in an encryption protocol and much more. The CTF takes place at ENSEEIHT on the third day of the event and is open to all levels. The winning teams win prizes such as hacking equipment, t-shirts and other surprises.
Highlights of THcon 2023 and its CTF THcon 2023 and its CTF were full of memorable moments that made this edition a success. Here are some of them:
- The opening keynote by Travis Goodspeed. He shared his experience and insights on hacking hardware devices, such as radios, microcontrollers or smart cards.
- The talk by Axelle Apvrille. She showed how to analyze firmware images using static and dynamic techniques. For instance, reverse engineering, emulation or fuzzing.
- The talk by Damien Cauquil. He demonstrated how to attack online games using various tools and methods. For example, packet sniffing, proxying or cheating.
- The social event on Thursday evening. Participants enjoyed music, drinks and food while chatting with each other and with the speakers.
- The award ceremony for the challenge that took place during the talks. The challenge was to find hidden flags in different web pages related to THcon. The first three teams who found all the flags won prizes such as books or vouchers.
- The CTF on Saturday at ENSEEIHT. More than 600 participants from 12 countries faced various and stimulating challenges in the field of cybersecurity.
- Congratulation to the Synacktiv team, ENSEEIHT team and GCC–ENSIBS team for the podium and also to every team that participated ! 👏 You can learn more about GCC-ENSIBS on their LinkedIn page: https://www.linkedin.com/company/gcc-ensibs
Partners and sponsors of THcon 2023 THcon is supported by several partners and sponsors who contribute to make this event possible. Among them are:
- Freemindtronic: an Andorran company specialized in cybersecurity and safety of computer systems. Freemindtronic actively participates in the hardware CTF of THcon. You can discover the backstage of the hardware CTF of THcon 2022 in this video made by Jacques Gascuel, the CEO of Freemindtronic: https://www.youtube.com/watch?v=P-Es2RJUQBo
- Synacktiv: a French company that provides offensive security services and solutions. Synacktiv also organizes trainings on various topics related to cybersecurity.
ENSEEIHT: a French engineering school that offers courses on computer science, electronics, telecommunications and applied mathematics. ENSEEIHT hosts the CTF of THcon on its premises.
Among the prizes offered by Freemindtronic, silver sponsor of THcon since 2022, there are four NFC HSM DataShielder Lite collector devices, a unique version made for THcon CTF 2023. These devices are password and bank card managers that work without a battery and offer secure, decentralized and individualized management of sensitive data.
Why should you attend THcon 2024?
THcon is a must-attend event in Occitania for learning, having fun and meeting other cybersecurity enthusiasts. You can find all the information on the official website of the event: https://thcon.party/. You can also consult the list of challenges of the CTF on the site https://ctf.thcon.party/challenges.
If you want to experience this unique and enriching event, don’t hesitate to register for the next edition of THcon in 2024! You will find all the necessary information on the website https://thcon.party. Don’t miss this opportunity to discover the latest trends in cybersecurity, face exciting challenges and meet people who share your interests!
THCon Conference 2023
THURSDAY 20TH 2023
9h15 – 9h30 OPENING SPEECH
Mohamed Kâaniche (Director at LAAS-CNRS),
Marc Sztulman (Conseiller Régional d’Occitanie)
9h30 – 10h15 [K] MASK ROMS AND MASKS OF ABSTRACTION
Travis GoodSpeed
More info →
10h15 – 10h55 [LP] AUTOMATING THE EXTRACTION OF SECRETS STORED INSIDE CI/CD SYSTEMS
Théo Louis-Tisserand and Hugo Vincent
Synacktiv (Toulouse & Paris, France)
More info →
11h15 – 11h35 [SP] HASH CRACKING : AUTOMATION DRIVEN BY LAZINESS, 10 YEARS AFTER
David Soria
Astar (Toulouse, France)
More info →
11h35 – 12h15 [LP] WEAPONIZING ESP32 RF STACKS
Romain Cayre and Damien Cauquil
Institut Eurecom (Sophia-Antipolis, France),
Quarkslab (Paris, France)
More info →
14h00 – 14h45 [K] HAMMERSCOPE: OBSERVING DRAM POWER CONSUMPTION USING ROWHAMMER
Yaakov Cohen and Arie Haenel
Intel
More info →
14h45 – 15h25 [LP] REFLECTIONS ON TRUSTING DOCKER: INVISIBLE MALWARE IN CONTINUOUS INTEGRATION SYSTEMS
Florent Moriconi, Axel Neergaard, Lucas Georget, Samuel Aubertin and Aurélien Francillon
Institut Eurecom (Sophia-Antipolis, France)
More info →
15h25 – 15h45 [SP] DYNAMIC BINARY FIRMWARE ANALYSIS WITH AVATAR²
Paul Olivier
Institut Eurecom (Sophia-Antipolis, France) / LAAS-CNRS (Toulouse, France)
More info →
FRIDAY 21TH 2023
9h30 – 10h15 [K] HACKING FOR IDEAS
Axelle Apvrille
Fortinet
More info →
10h15 – 10h55 [LP] AN EXPLAINABLE-BY-DESIGN ENSEMBLE LEARNING SYSTEM TO DETECT UNKNOWN NETWORK ATTACKS
Céline Minh, Kevin Vermeulen, Cédric Lefebvre, Philippe Owezarski and William Ritchie
Custocy (Toulouse, France),
LAAS-CNRS, Universite de Toulouse, CNRS, INSA (Toulouse, France)
More info →
10h55 – 11h15 [SP] AN EXPLORATION OF FUTURE CHALLENGES FOR CROWD SOURCED VULNERABILITY DETECTION
Olivier de Casanove and Florence Sèdes
IRIT, Universite Toulouse III – Paul Sabatier (Toulouse, France)
More info →
11h35 – 12h15 [LP] THE ANDROID SECURITY MODEL
Jean-Baptiste Cayrou
Synacktiv (Toulouse, France)
More info →
12h15 – 12h35 [SP] SOFTWARE DEFINED VEHICULE SECURITY – CHALLENGES, RISKS AND REWARDS
Redouane Soum
Renault
More info →
14h00 – 14h40 [LP] A STUDY ON WINDOWS AUTHENTICATION & PROX-EZ
Geoffrey Bertoli and Pierre Milioni
Synacktiv (Paris, France)
More info →
14h40 – 15h20 [LP] WHY THERE IS MORE TO TODAY’S ATTACKS AGAINST ONLINE GAMES THAN MEETS THE EYE
Ilies Benhabbour, Marc Dacier, David Bromberg, Sven Dietrich, Rodrigo Rodrigues and Paulo Estes-Verissimo
King Abdullah University of Science and Technology (KAUST), (Thuwal, Kingdom of Saudi Arabia),
Univ Rennes, CNRS, IRISA, INRIA Rennes (France),
City University of New York (New York, NY, USA),
Instituto Superior Tecnico and INESC-ID (Lisboa, Portugal)
More info →
15h50 – 16h30 [LP] FIGHTING AGAINST DLL SEARCH ORDER HIJACKING, ONE SLAHP AT A TIME
Antonin Verdier, Romain Laborde and Abdelmalek Benzekri
IRIT, Universite Toulouse III – Paul Sabatier (Toulouse, France)
More info →
16h30 – 16h50 CONCLUSION
