Advanced .NET Exploitation Workshop (BSides Tirana 2025)

organiser@bsidestirana.al

A training course on teaching you how to exploit advanced .NET enterprise targets, bypass mitigations, chain bugs and pop shellz.

Pyramid of Tirana

<h3>About the workshop</h3>Join us for a special 1-day hands-on workshop with the Summoning Team, based on their acclaimed Advanced .NET Exploitation Training (normally €4K). You'll dive into real-world .NET exploitation techniques, learn to chain bugs, bypass mitigations, and pop shells — all in a friendly and practical environment.Taught by Sina Kheirkhah (@SinSinology), Pwn2Own "Master of Pwn"Learn from one of the best in the game!Spots are limited. Don’t miss it! Coffee, food &amp; snacks included <h3>Who is the Instructor ?</h3>Sina Kheirkhah (@SinSinology)Sina is a full-time vulnerability researcher with a passion for popping shells across all kinds of targets, server-side enterprise solutions, hardware devices and he also does reverse engineering, low-level exploitation, attacking .NET/Java stacks, bypassing mitigations, chaining bugs, and all the good stuff. To highlight some of his work, he has been a Pwn2Own contestant multiple times 20{22,23,24,24.5,25,25.5} and has won the "Master of Pwn" title at the 2025 Pwn2Own competition in Tokyo. Here’s a video from the competition as a proof that not only he looks cool but also does cool things.<a href="https://www.youtube.com/shorts/cbh7dUmgHJw" title="https://www.youtube.com/shorts/cbh7dUmgHJw" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://www.youtube.com/shorts/cbh7dUmgHJw</a>If this video and his public Advisories/Exploits/Blog didn't convince you already :D <a href="https://summoning.team/exploits/" title="https://summoning.team/exploits/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://summoning.team/exploits/</a> <a href="https://summoning.team/blog/" title="https://summoning.team/blog/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://summoning.team/blog/</a> <a href="https://summoning.team/advisories/" title="https://summoning.team/advisories/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://summoning.team/advisories/</a><h3> Agenda</h3><ul><li>.NET Basic Reverse Engineering and Debugging</li><li>Introduction to .NET vulnerabilities</li><li>Basics of deserialization exploits in .NET</li><li>Exploiting 2 remote code executions</li><li>Hands-on exercises</li></ul><h3> </h3><h3>Prerequisites</h3><ul><li>Basic familiarity with a scripting language like Python, Bash, etc.</li><li>Medium familiary with any language that is .NET based, (C#, F#, etc)</li><li>Basic Knowledge of “any” reverse engineering is required (x86, etc)</li><li>Do not use an ARM-based machine</li><li>a x64 windows host operating system</li><li>16GB of ram or more</li><li>50GB free disk space</li><li>VMWare as your virtualization software or virtualbox or fusion</li><li>A good attitude towards learning</li></ul> <h3>Can't afford it ?</h3>Are you a student or someone just starting in the industry and would love to attend this workshop ?We have reserved 5 tickets that we are going to give up for free.Send us an e-mail to: organiser[@]bsidestirana.al with the title: .NET Exploitation Workshop and tell us why you want to take part and why it is important to you.We will select 5 people and provide tickets for free.