WOOT '26: 20th USENIX WOOT Conference on Offensive...

WOOT '26: 20th USENIX WOOT Conference on Offensive Technologies

9:00am EDT

Opening Remarks and Awards Harborside Ballroom B

9:15am EDT

Keynote: Click Here to Hack Your Target: A Perspective on the Past, Present, and Future of Mercenary Spyware Harborside Ballroom B

10:30am EDT

HotWire: Real-World Impersonation and Discharge Attacks on Electric Vehicle Charging Systems Harborside Ballroom B

10:50am EDT

Real-Time Compromise: Investigating RTC Security in Consumer IoT Harborside Ballroom B

11:10am EDT

DisARMed: Attacking ARM TrustZone from Userspace with Memory Aliasing Harborside Ballroom B

11:30am EDT

Security Analysis of LTE Connectivity in Connected Cars: A Case Study of Tesla Harborside Ballroom B

11:50am EDT

SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode Harborside Ballroom B

1:40pm EDT

SEMSAN: a Configurable Sanitizer for Detecting System-Level Semantic Bugs Harborside Ballroom B

2:00pm EDT

FuzzBT: Holistic-State-Guided Fuzzing for Bluetooth Host Stack in Kernels Harborside Ballroom B

2:20pm EDT

Squeezing Juicy Variant Bugs Out of Modern Browsers Harborside Ballroom B

2:40pm EDT

SoK: Multi-Layer Indirect Call Analysis in the Real World Harborside Ballroom B

3:30pm EDT

Swarm in EM Hay: Particle Swarm-Guided Probe Placement for EM SCA Harborside Ballroom B

3:50pm EDT

Breaking Infrared Recapture Detection: Optical-Synthesis Attacks and Depth-Aware In-Sensor Countermeasures Harborside Ballroom B

4:10pm EDT

PowerHooK: Enabling Software-Based Power Side Channels against AMD SEV Technologies via Transient-Execution Replay Harborside Ballroom B

4:30pm EDT

Flash [Re]Loaded: Body Bias Injection on Flash Memory Harborside Ballroom B

9:00am EDT

You Have Been LaTeXpOsEd: A Large-Scale Systematic Analysis of Information Leakage in Preprint Archives Using Large Language Models Harborside Ballroom B

9:20am EDT

Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership Inference Privacy Leakage? Harborside Ballroom B

9:40am EDT

LIMA: Defining, Benchmarking and Detecting Cross-Layer Vulnerabilities in LLM Inference Frameworks Harborside Ballroom B

10:00am EDT

OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security Harborside Ballroom B

10:50am EDT

Defective by Design: Universal Recovery of All Widevine-Protected Content on Desktop Environments Harborside Ballroom B

11:10am EDT

Evading and Crashing Anti-Malware Solutions via Data Collection Overloading During Analysis Serialization Harborside Ballroom B

11:30am EDT

Onelogon: Taking Over Active Directory Accounts via Netlogon Harborside Ballroom B

11:50am EDT

SoK: The Constant Time Model Harborside Ballroom B

1:40pm EDT

Invited Talk: A Dummy's Guide to Agentic Exploit Generation Harborside Ballroom B

2:40pm EDT

Protocol Prying: Systematic Vulnerability Research in the AirDrop and Android Quick Share Proximity Transfer Protocols Harborside Ballroom B

3:00pm EDT

Exploiting Android Apps with Counterfeit Art Harborside Ballroom B

3:20pm EDT

Practical Attacks on a Decentralized Secure Messenger Session Harborside Ballroom B

3:40pm EDT

CATana: On the Dangers of SIM-Originating AT Commands Harborside Ballroom B

4:00pm EDT

SoK: Insecurity of Cellular Basebands Harborside Ballroom B

4:20pm EDT

Closing Remarks Harborside Ballroom B