About the workshop
Join us for a special 1-day hands-on workshop with the Summoning Team, based on their acclaimed Advanced .NET Exploitation Training (normally €4K). You'll dive into real-world .NET exploitation techniques, learn to chain bugs, bypass mitigations, and pop shells — all in a friendly and practical environment.
Taught by Sina Kheirkhah (@SinSinology), Pwn2Own "Master of Pwn"
Learn from one of the best in the game!
Spots are limited. Don’t miss it!
Coffee, food & snacks included
Who is the Instructor ?
Sina Kheirkhah (@SinSinology)
Sina is a full-time vulnerability researcher with a passion for popping shells across all kinds of targets, server-side enterprise solutions, hardware devices and he also does reverse engineering, low-level exploitation, attacking .NET/Java stacks, bypassing mitigations, chaining bugs, and all the good stuff. To highlight some of his work, he has been a Pwn2Own contestant multiple times 20{22,23,24,24.5,25,25.5} and has won the "Master of Pwn" title at the 2025 Pwn2Own competition in Tokyo. Here’s a video from the competition as a proof that not only he looks cool but also does cool things.
https://www.youtube.com/shorts/cbh7dUmgHJw
If this video and his public Advisories/Exploits/Blog didn't convince you already :D
https://summoning.team/exploits/
https://summoning.team/blog/
https://summoning.team/advisories/
Agenda
- .NET Basic Reverse Engineering and Debugging
- Introduction to .NET vulnerabilities
- Basics of deserialization exploits in .NET
- Exploiting 2 remote code executions
- Hands-on exercises
Prerequisites
- Basic familiarity with a scripting language like Python, Bash, etc.
- Medium familiary with any language that is .NET based, (C#, F#, etc)
- Basic Knowledge of “any” reverse engineering is required (x86, etc)
- Do not use an ARM-based machine
- a x64 windows host operating system
- 16GB of ram or more
- 50GB free disk space
- VMWare as your virtualization software or virtualbox or fusion
- A good attitude towards learning
Can't afford it ?
Are you a student or someone just starting in the industry and would love to attend this workshop ?
We have reserved 5 tickets that we are going to give up for free.
Send us an e-mail to: organiser[@]bsidestirana.al with the title: .NET Exploitation Workshop and tell us why you want to take part and why it is important to you.
We will select 5 people and provide tickets for free.
