conf-presentations

목차

• 학회 및 세미나에서의 Quarkslab 강연
• 저널 또는 학회 논문집 및 프리프린트에 게재된 Quarkslab 논문
• 전문 잡지에 게재된 Quarkslab 논문
• Quarkslab 하드웨어 CTF

학회 및 세미나에서의 Quarkslab 강연

2026

• 2026-08: Glitch me et glitch moi sont dans une auto 🖥️ at Barbhack 2026
• 2026-06: SightHouse 🖥️ at PTS26
• 2026-06: SightHouse Workshop 🖥️ workshop at PTS26
• 2026-06: Pwning bluetooth devices in unexpected ways 🖥️ at leHack26
• 2026-06: LeHack 117 : Permis d’illuminer toute la ville 🖥️ at leHack26
• 2026-06: Hacking Bluetooth Low Energy Devices with WHAD 🖥️ workshop at leHack26
• 2026-06: Introduction à l’instrumentation dynamique binaire avec QBDI 🖥️ workshop at leHack26
• 2026-06: Apkpatcher: Reverse Engineering and Modifying Android Applications Without Rooting 🖥️ workshop at leHack26
• 2026-05: Spyware à louer 🖥️ at RESSI 2026
• 2026-05: Chain of Thought F's everybody 🖥️ at THCon 2026
• 2026-04: Breaking the Backbone of Global ISP Networks 🖥️ at DefCon 2026
• 2026-04: Breaking the Backbone of Global ISP Networks 🖥️ at Zer0con 2026
• 2026-03: Hash All The Things / Get All the Sig(s) - Introducing Sighthouse for Seamless Function Detection 🖥️ at RE//verse 2026

2025

• 2025-10: T'as vu mes docs ? Je les fais avec typst ! 🖥️📽️ at Volcamp
• 2025-09: Bypassing ASLR on MIPS32 using simple mathematics 🖥️ at Wine Rump
• 2025-09: Bluetooth Low Energy hacking with WHAD 🖥️ workshop at BruCon
• 2025-07: Experimental Study of Binary Diffing Resilience on Obfuscated Programs 🖥️📜 at 22nd Conference on Detection of Intrusions and Malware & Vulnerability Assessment, DIMVA 2025
• 2025-07: The Last Resort: Debugging Embedded Systems with Unconventional Methods 🖥️📽️ at Pass the SALT 2025
• 2025-07: Bluetooth Low Energy hacking with WHAD 🖥️ workshop at Pass the SALT 2025
• 2025-07: Wirego, a Wireshark plugin development framework 🖥️📽️ at Pass the SALT 2025

2024

• 2024-12: Identifying Obfuscated Code through Graph-Based Semantic Analysis of Binary Code 🖥️📜 at Complex Networks 2024
• 2024-12: Invited talk: MIFARE Classic: exposing the static encrypted nonce variant... and a few hardware backdoors 📽️ at COSIC Seminar, KUL
• 2024-12: Faster Signatures from MPC-in-the-Head 📜 at Asiacrypt 2024
• 2024-11: Invited talk: MIFARE Classic: exposing the static encrypted nonce variant... and a few hardware backdoors 🖥️📜📽️ at C&ESAR 2024 by DGA
• 2024-11: Improving binary diffing through similarity and matching intricacies 🖥️📜 at CAID: Conference on Artificial Intelligence for Defense
• 2024-11: Invited talk: MIFARE Classic: exposing the static encrypted nonce variant 🖥️📽️ at Grehack 2024
• 2024-10: at

2023- 2023-11: Google Apps Script - 이 강연은 귀하의 이메일에 대한 접근 권한이 필요합니다 🖥️📽️ at GreHack 2023

• 2023-11: Silicon Labs Gecko 플랫폼에서 Secure Boot 깨기 🖥️📽️ at Ekoparty 2023
• 2023-11: Silicon Labs Gecko 플랫폼에서 Secure Boot 깨기 🖥️📽️ at Hardwear.io NL 2023
• 2023-11: 현대 안드로이드 데이터 암호화 체계 해부 🖥️📽️ at Hardwear.io NL 2023
• 2023-11: On the All UR are to be considered harmful for fun and profit is the new cool trick, hackers hate it. Redux. 🖥️📽️ at Ekoparty 2023
• 2023-10: Intel SGX 평가 방법론 🖥️ at Azure Confidential Computing 2023
• 2023-10: Pyrrha: 시스템 바이너리를 쉽게 탐색하기 🖥️📽️ at Hack.lu 2023
• 2023-09: ntop 퍼징 🖥️ at

2022

• 2022-11: Attack on Titan M, Reloaded: 현대 보안 칩에 대한 취약점 연구 🖥️📽️ at Ekoparty 2022
• 2022-11: kdigger 📽️ at DefCon Paris meetup
• 2022-11: Quokka - 빠르고 정확한 바이너리 익스포터 🖥️📽️ at Grehack 2022
• 2022-10: 공격에서 방어 보안으로 🖥️ at Les Assises 2022
• 2022-10: Nvidia 그래픽 드라이버 퍼징에서 LPE 익스플로잇까지의 여정 🖥️📽️ at Hexacon 2022
• 2022-09: 기호 실행: 리버스 엔지니어링 도구 상자의 스위스 군용 칼 🖥️📽️ at KLEE Workshop 2022
• 2022-08: Attack on Titan M, Reloaded 🖥️📽️ at Black Hat USA 2022

2021

• 2021-11: Wookey: Episode VII - The Force Awakens 🖥️📽️ at GreHack 2021
• 2021-11: Windows 커널 스냅샷 기반 퍼징: 좋은 점, 나쁜 점, 추한 점 📽️ at GreHack 2021
• 2021-11: Google Titan M 칩 리버싱 및 퍼징 🖥️📜 at ROOTS 2021
• 2021-11: 소스 코드에서 소프트웨어 테스팅 자동화를 통한 크래시 테스트 케이스까지 🖥️📜 at C&ESAR 2021
• 2021-11: 2021: Titan M 오디세이 🖥️📜📽️ at Black Hat Europe 2021
• 2021-10: EEPROM - 모든 것이 눈물로 끝날 것이다 (EN) 🖥️📽️ at Hardwear.io NL 2021
• 2021-08: at

2020- 2020-11: 비대칭 화이트박스 제안을 향하여 📜 at Journées Codage & Cryptographie 2020

• 2020-11: “RFID Hacking” 패널 참여 📽️ at PACSEC 2020
• 2020-10: 네이티브 코드 난독화를 해결하기 위한 동적 바이너리 계측 기법 🖥️📜📽️ at Black Hat Asia 2020
• 2020-09: 1 CSPN inter-CESTI에 부수적인 JCard EAL6+의 보안 이상 📽️ at webinaire de l'OSSIR
• 2020-08: QBDI를 사용한 화이트박스에 대한 충돌 기반 공격 🖥️ at Barbhack 2020
• 2020-07: 화이트박스 구축: 공격과 방어 🖥️📽️ at Hardwear.io webinar
• 2020-06: Frida와 QBDI가 Android에서 훌륭한 조합인 이유는? 🖥️📽️ at Pass the SALT 2020
• 2020-06: 원시 펌웨어 리버스 엔지니어링: 시작할 수 있게 해주는 도구 📽️ at Hardwear.io webinar
• 2020-06: at

2019

• 2019-11: 암호학과 하드웨어 공격: 화이트박스 암호학에의 응용 🖥️ at GeeksAnonymes, ULiège
• 2019-11: Epona와 난독화의 역설: 사용자와 개발자에게는 투명하고, 리버서에게는 고통 🖥️📜 at SPRO 2019
• 2019-09: C++ 제로 코스트 추상화가 실패할 때: 컴파일러를 고치는 방법 📽️ at CppCon 2019
• 2019-08: 삼성의 ARM TrustZone 깨기 🖥️📽️ at Black Hat USA 2019
• 2019-06: IDArling, 리버서들 간의 첫 만남 플랫폼 🖥️📽️ at SSTIC 2019
• 2019-05: 그레이박스 공격, 4년 후 🖥️ at WhibOx 2019
• 2019-05: DKOM 3.0: Windows Extension Hosts를 이용한 은닉과 후킹 🖥️📽️ at Infiltrate 2019

2018

• 2018-11: ROPGenerator: 실용적인 자동화 ROP 체인 생성 📽️ at GreHack 2018
• 2018-11: 취약점 연구 - 계속 나아가기 위해 필요한 것 🖥️ at HITB 2018 Beijing
• 2018-09: AFL, QBDI 그리고 KSE가 한 배를 타다 📽️ at Ekoparty 2018
• 2018-09: 오래된 새로운 것들: Philips TriMedia 아키텍처에 대한 고찰 📽️ at Ekoparty 2018
• 2018-09: 엘프의 땅에서의 C++ 📽️ at CppCon 2018
• 2018-09: Easy::Jit : C++를 위한 Just-in-Time 컴파일 라이브러리 🖥️📽️ at CppCon 2018
• 2018-09: C++14의 Frozen 데이터 구조 📽️ at CppCon 2018
• 2018-09: 실제 세계에서 난독화와 최적화의 결합 📜 at SCAM 2018
• 2018-08: Windows Notification Facility: 가장 문서화되지 않은 커널 공격 표면의 양파 껍질 벗기기 📽️ at Black Hat USA 2018

2017

• 2017-12: LLVM 기반 동적 바이너리 계측 프레임워크 구현 🖥️📽️ at 34th Chaos Communication Congress
• 2017-12: 어떤 차로도 드리프트하는 방법 📽️ at 34th Chaos Communication Congress
• 2017-11: 플래시 덤핑 & 하드웨어 101 🖥️ at BlackHoodie 2017 #3
• 2017-11: 재미를 위한 Kernel Shim Engine 🖥️ at BlackHoodie 2017 #3
• 2017-10: LLVM 기반 난독화 도구 구축의 과제 🖥️📽️ at 2017 LLVM Developers' Meeting
• 2017-09: Python 인터프리터, 참 못된 녀석 🖥️📽️ at PyConFR 2017
• 2017-07: LIEF: 실행 파일 형식을 계측하기 위한 라이브러리 🖥️📽️ at RMLL 2017
• 2017-06: 바이너리 분석 가지고 놀기: VM 기반 소프트웨어 보호의 디오브푸스케이션 / 바이너리 디오브푸스케이션: 가상화된 함수의 재구성 🖥️ at

2016

• 2016-12: 화이트박스 암호 구현에 대한 실용적인 공격 🖥️ at Séminaire de Cryptographie, Université de Rennes 1
• 2016-11: Arybo : 혼합 불리언-산술 기호 표현식의 조작, 정규화 및 식별 📜📽️ at GreHack 2016
• 2016-11: Triton이 가상 머신 기반 소프트웨어 보호를 리버싱하는 데 어떻게 도움이 되는가 🖥️📽️ at CSAW 2016
• 2016-11: PLC 속의 유령: 핀 제어 공격을 통한 탐지 불가능한 프로그래머블 로직 컨트롤러 루트킷 설계 🖥️📜📽️ at Black Hat Europe 2016
• 2016-10: MBA 기반 난독화 무력화 🖥️📜 at SPRO 2016
• 2016-10: 이진 순열 다항식 역변환과 난독화 기법에의 응용 📜 at SPRO 2016
• 2016-10: GAST, Daou Naer - Python 2와 3를 위한 AST 📽️ at

2015- 2015-10: Building, Testing and Debugging a Simple out-of-tree LLVM Pass 🖥️📽️ at LLVM dev meeting

• 2015-09: Some technical & scientific challenges I'd like to have working solutions for 🖥️ at SAS 2015
• 2015-06: IRMA : Incident Response and Malware Analysis 🖥️📜📽️ at SSTIC 2015
• 2015-06: Analyse de sécurité de technologies propriétaires SCADA 🖥️📜📽️ at SSTIC 2015
• 2015-06: Quatre millions d'échanges de clés par seconde 🖥️📜📽️ at SSTIC 2015
• 2015-06: Triton: Concolic Execution Framework 🖥️📜📽️ at

2014

• 2014-10: USB Fuzzing : approaches and tools 🖥️ at Hack.lu 2014
• 2014-07: Software obfuscation: know your enemy 🖥️📽️ at RMLL 2014
• 2014-06: Désobfuscation de DRM par attaques auxiliaires 🖥️📜 at SSTIC 2014
• 2014-06: Obfuscation de code Python : amélioration des techniques existantes 🖥️📜 at SSTIC 2014
• 2014-06: Reconnaissance réseau à grande échelle : port scan is not dead 📜 at SSTIC 2014
• 2014-06: Recherche de vulnérabilités dans les piles USB : approches et outils 🖥️📜📽️ at

2013

• 2013-10: How Apple Can Read Your iMessages and How You Can Prevent It 🖥️📽️ at HITB 2013 Kuala Lumpur
• 2013-06: Sécurité des applications Android constructeurs et réalisation de backdoors sans permission 🖥️📜 at SSTIC 2013
• 2013-06: UEFI and Dreamboot 🖥️📜 at SSTIC 2013
• 2013-04: Dreamboot - A UEFI Bootkit 📽️ at HITB 2013 Amsterdam

2012

• 2012-10: Pwn@Home: An Attack Path to jailbreaking your home router 🖥️ at HITB 2012 Kuala Lumpur
• 2012-05: WinRT: The Metro-politan Museum of Security 📽️ at HITB 2012 Amsterdam
• 2012-06: WinRT 🖥️📜 at SSTIC 2012
• 2012-06: 10 ans de SSTIC 🖥️ at SSTIC 2012

학술지 또는 학회 논문집 및 프리프린트에 게재된 Quarkslab 발표물

2026

• 2026-04: Deobfuscation as a GNN-Based Graph-Edit Problem by Reinforcement Learning 📜

2025

• 2025-09: Identifying obfuscated code through graph-based semantic analysis of binary code 📜
• 2025-07: Experimental Study of Binary Diffing Resilience on Obfuscated Programs 📜

2024

• 2024-12: Identifying Obfuscated Code through Graph-Based Semantic Analysis of Binary Code 📜
• 2024-12: Faster Signatures from MPC-in-the-Head 📜
• 2024-11: Improving binary diffing through similarity and matching intricacies 📜
• 2024-08: MIFARE Classic: exposing the static encrypted nonce variant 📜
• 2024-02: Short Signatures from Regular Syndrome Decoding, Revisited 📜

2023

• 2023-06: Rétro-ingénierie et détournement de piles protocolaires embarquées, un cas d'étude sur le système ESP32 📜
• 2023-06: Exploring OpenSSL Engines to Smash Cryptography 📜
• 2023-05: ESPwn32: Hacking with ESP32 System-on-Chips 📜
• 2023-05: PASTIS - A Collaborative Approach to Combine Heterogeneous Software Testing Techniques 📜

2022

• 2022-06: TPM is not the holy way 📜
• 2022-04: Building a Commit-level Dataset of Real-world Vulnerabilities 📜(alt📜)

2021

• 2021-11: From Source Code to Crash Test-Case through Software Testing Automation 📜
• 2021-11: Reversing and Fuzzing the Google Titan M Chip 📜
• 2021-08: SSE and SSD : Page-Efficient Searchable Symmetric Encryption 📜(alt📜)
• 2021-06: Unlinkable and Invisible γ-Sanitizable Signatures 📜(alt📜)
• 2021-06: Exploitation du graphe de dépendance d'AOSP à des fins de sécurité 📜
• 2021-06: EEPROM : It Will All End in Tears 📜
• 2021-11: 2021 : A Titan M Odyssey 📜
• 2021-08: Greybox Program Synthesis : A New Approach to Attack Obfuscation 📜

2020

• 2020-07: Toward an Asymmetric White-Box Proposal 📜
• 2020-06: Fuzz and Profit with WHVP 📜
• 2020-06: Inter-CESTI : Methodological and Technical Feedbacks on Hardware Devices 📜
• 2020-02: QSynth - A Program Synthesis based approach for Binary Code Deobfuscation 📜

2019

• 2019-11: Epona and the Obfuscation Paradox : Transparent for Users and Developers, a Pain for Reversers 📜
• 2019-10: White-Box Cryptography : Don't Forget About Grey-Box Attacks 📜

2018

• 2018-09: Combining obfuscation and optimizations in the real world 📜
• 2018-07: Quadratic Time Algorithm for Inversion of Binary Permutation Polynomials 📜(alt📜)
• 2018-06: Attacking serial flash chip : case study of a black box device 📜
• 2018-06: Symbolic Deobfuscation : From Virtualized Code Back to the Original 📜(alt📜)
• 2018-04: Easy::Jit : compiler assisted library to enable just-in-time compilation in C++ codes 📜

2017

• 2017-06: Reconstruction de fonctions virtualisées 📜

2016

• 2016-11: Arybo : Manipulation, Canonicalization and Identification of Mixed Boolean-Arithmetic Symbolic Expressions 📜
• 2016-10: Binary Permutation Polynomial Inversion and Application to Obfuscation Techniques 📜(alt📜)
• 2016-10: Defeating MBA-based Obfuscation 📜(alt📜)
• 2016-11: Ghost in the PLC: Designing an Undetectable Programmable Logic Controller Rootkit via Pin Control Attack 📜
• 2016-08: Differential computation analysis: Hiding your white-box designs is not enough 📜
• 2016-08: Collecting relations for the Number Field Sieve in $GF(p^6)$ 📜
• 2016-06: Design de cryptographie white-box : et à la fin, c'est Kerckhoffs qui gagne 📜
• 2016-02: NFLlib: NTT-Based Fast Lattice Library 📜

2015

• 2015-06: IRMA : Incident Response and Malware Analysis 📜
• 2015-06: Analyse de sécurité de technologies propriétaires SCADA 📜
• 2015-06: Triton: Concolic Execution Framework 📜
• 2015-06: Quatre millions d'échanges de clés par seconde 📜

2014

• 2014-06: Désobfuscation de DRM par attaques auxiliaires 📜
• 2014-06: Obfuscation de code Python : amélioration des techniques existantes 📜
• 2014-06: Reconnaissance réseau à grande échelle : port scan is not dead 📜
• 2014-06: Recherche de vulnérabilités dans les piles USB : approches et outils 📜

2013

• 2013-06: Sécurité des applications Android constructeurs et réalisation de backdoors sans permission 📜
• 2013-06: UEFI and Dreamboot 📜

2012

• 2012-06: WinRT 📜

전문 잡지에 게재된 Quarkslab 발표물

• 2024-03: Comprendre et manipuler les mécanismes d’isolation des conteneurs 📜 In MISC Numéro 132
• 2023-05: Bug Bounty, Quand les hackers deviennent chasseurs de primes ! 📜 In MISC Numéro 127
• 2023-03: Comment attaquer un port USB ? 📜 In MISC Numéro 126 (freely accessible)
• 2023-01: Dossier: Web 2023, Les nouvelles surfaces d'attaques ! 📜 In MISC Numéro 125
• 2022-11: Découverte de Fuchsia et analyses préliminaires du Google Nest Hub 📜 In MISC Numéro 124
• 2022-10: Isoler ses ressources MS Azure 📜 In MISC Numéro HS 26
• 2022-10: Les nouveautés de sécurité de Kubernetes 📜 In MISC Numéro HS 26
• 2022-10: Bienvenue chez les cLoud 📜 In MISC Numéro HS 26
• 2022-03: La compilation statique démythifiée - Une plongée dans les entrailles de mon compilo 📜 In MISC Numéro 120 (freely accessible)
• 2021-09: Comment analyser un programme : du statique au dynamique jusqu'à l'instrumentation 📜 In MISC HS Numéro 24
• 2021-09: Introduction au reverse hardware 📜 In MISC HS Numéro 24 (freely accessible)
• 2021-09: De l'extraction de firmware à l'exécution de code sur la carte SD FlashAir 📜 In MISC HS Numéro 24

Quarkslab 하드웨어 CTF- 2025-05: *Hardwear.io USA 2025*에서의 Hardware CTF v7 🖥️. 결과는 CTFtime에서 확인하세요.

• 2024-10: *Hardwear.io NL 2024*에서의 Hardware CTF v7 🖥️. 결과는 CTFtime에서 확인하세요.
• 2024-05: *Hardwear.io USA 2024*에서의 Hardware CTF v6 🖥️. 결과는 CTFtime에서 확인하세요.
• 2023-11: *Hardwear.io NL 2023*에서의 Hardware CTF v6 🖥️. 결과는 CTFtime에서 확인하세요.
• 2023-06: *Hardwear.io USA 2023*에서의 Hardware CTF v5 🖥️. 결과는 CTFtime에서 확인하세요.
• 2022-10: *Hardwear.io NL 2022*에서의 Hardware CTF v5 🖥️. 결과는 CTFtime에서 확인하세요.
• 2022-09: Nullcon Goa 2022에서의 Hardware CTF v4 🖥️. 결과는 CTFtime에서 확인하세요.
• 2022-06: *Hardwear.io USA 2022*에서의 Hardware CTF v4 🖥️. 결과는 CTFtime에서 확인하세요.
• 2021-10: *Hardwear.io NL 2021*에서의 Hardware CTF v4 🖥️. 결과는 에서 확인하세요.