We’re thrilled to announce that Blackhoodie is coming to Paris for Hexacon this fall!

The event will take place over four days, right before the conference.

TL;DR:

What: Class on low-level security topics, introductory and intermediate

When: October 12th to October 15th 2026

Where: Paris, France

Who: Women

Registration link: fill form here

Fees: The training and food are free; travel and accommodation is responsibility of attendees.

We are thrilled to announce that thanks to Hexacon awesome team, we’ll be hosting 3 workshops in Paris. The event will take place over four days, right before the conference. And for the icing on the cake, some badass trainers answered our call to share their knowledge and their skills:

• Ambre will teach us hardware hacking, heat up your soldering irons !
• Laurel invites us to dig into the mysterious world of the Windows Kernel during 2 days,
• Jiska has prepared an awesome hardware challenge herself where you’ll discover the secrets of dumping and reverse engineering firmwares

Introduction to hardware CTF - Ambre - Monday, October 12th

Trainer

Ambre is a security auditor at Synacktiv. She codesigned hackropole.fr CTF platform that promotes CTF without competition. As of today Hackropole proposes more than 600 challenges with write-ups for self-learners.

Training description

During this workshop, students will be given one hardware badge to assemble with some surface-mounted components to solder. Then the class will solve some challenges contained within this badge. The challenges topics will include analysis of a data buses using logic analyzers, and firmware extraction using opened debugger ports. This workshop is based on hackropole.fr hardware challenges, but modified to run on real hardware. The difficulty level of the challenges ranges from beginner-friendly to expert, so everyone is welcome!

Recommended Prerequisites

Basic knowledge of Python 3

What to Bring

• A laptop with a working Python 3 environment (Linux preferred), and at least one USB-A port.
• One USB-C to USB-A cable to connect the badge to your laptop.

Intro to Windows Kernel Exploitation - Laurel - Tuesday and Wednesday, October 13th and 14th

Trainer

Laurel is a software developer with an interest in exploitation and reverse engineering.

Training description

An intermediate level 2 day training covering Windows kernel concepts, kernel debugging using WinDbg, and an introduction to kernel exploitation techniques.
Day 1 covers background Windows internals concepts, using WinDbg and finishes with setting up kernel debugging. Topics include Windows OS architecture, memory management, kernel vs user mode execution, kernel data structures and practical kernel debugging setup.
Day 2 introduces kernel exploitation concepts such as overflows, use-after-frees, null-pointer de-references, and Bring Your Own Vulnerable Driver (BYOVD) techniques. The training concludes with a guided exercise using a vulnerable driver and discussion of modern Windows kernel protections and mitigations.

Recommended prerequisites

some knowledge of user-mode exploitation, debugging experience and comfort with running Windows Virtual Machines.

What to Bring

a laptop able to run multiple virtual machines using VirtualBox (recommend minimum 40GB free disk space / 16GB RAM). No prior kernel development experience required!

IoT Firmware Reverse Engineering - Jiska - Thursday, October 15st

Trainer

Jiska Classen is a wireless and mobile security researcher, leading a research group at Hasso Plattner Institute. The intersection of her research topics means that she digs into iOS internals, reverse engineers wireless firmware, and analyzes proprietary protocols. Her research includes the security analysis of widely deployed IoT devices such as Fitbit fitness trackers, Apple AirTags, and Neato vacuum cleaning robots.

She has previously spoken at Black Hat USA, DEF CON, RECon, Hardwear.io, Chaos Communication Congress, Chaos Communication Camp, Gulasch Programmer Nacht, MRMCDs, Easterhegg, Troopers, Pass the Salt, NotPinkCon, gave various lectures and training, and published at prestigious academic venues. Jiska Classen gave iOS and Android security trainings at TROOPERS, Nullcon, RE//verse, Countermeasure, and Objective by the Sea, and has teaching experience from creating own lectures and labs in academic settings.

Training description

In this beginner-friendly training, you’ll look into the firmware of an IoT device and take it apart! The training introduces the fundamentals of analyzing embedded firmware using the Raspberry Pi Pico 2 W as a target platform. You will explore how compiled firmware looks compared to source code, and how to extract meaningful information from it.

Through a series of hands-on exercises, you will analyze, flash, debug, and emulate firmware. Along the way, you will uncover hidden functionality and flags, gaining practical insight into both static and dynamic analysis techniques for IoT devices.

This training teaches the essential methods and tools required to analyze embedded firmware, providing a foundation for IoT security research and hardware-oriented reverse engineering.

Topic Overview

• Introduction to embedded firmware and the Raspberry Pi Pico 2 W platform.
• Static analysis of Pico firmware using tools such as Ghidra and IDA.
• Flashing custom firmware onto a Raspberry Pi Pico 2 W.
• Debugging firmware using a second Pico for dynamic analysis.
• Manipulating control flow during debugging to trigger hidden functionality.
• Introduction to firmware emulation using Unicorn/QEMU.
• Partial emulation of firmware without any hardware.

Training Prerequisites

• Basic programming knowledge, ideally C/C++, but other languages will work as a base as well.
• Basic familiarity with command line tools.
• No prior embedded or hardware experience required.

What to Bring

• Laptop (Windows/Linux/macOS) with at least 8GB of RAM that can run Visual Studio Code with the Raspberry Pi Pico extension.
• Internet connection and permissions to install additional software.
• We will provide you with a Pico 2 W throughout the training, so no other hardware to bring from your side :)