Hej! Guess what, we’re coming back to Sweden :) Sec-T, Stockholm’s premier IT Security Conference, agreed to host BlackHoodie for a day of joy and reverse engineering to women in the Nordics. Come join us on a journey from recognizing what this software does to implement a python script to revert it. This 1-day training is packed with practical information and a comprehensive hands-on exercise, and its gonna be fun, challenging, and prepare students to tackle RE problems on their own.

TL;DR:

What: class on cryptography reverse engineering, introductory

When: September 9th, 9am to 5pm

Where: Stockholm

Who: Women

Registration: fill form here (registration open until we reach capacity)

Fees: The training is free; food, travel and hotel is responsibility of attendees

Agenda

Cryptography Reverse engineering

Trainer: Caroline Leman (@Caro)

In this hands-on workshop, you will be facing a variety of encryption binary. Your mission, if you accept it, will be to code in Python a corresponding decryptor.

We are going to discover some cryptographic algorithm implementation (including RC4, AES, Salsa20 and Chacha20), some hashing function (including MD5, SHA-1 and SHA256). If we have time, we will dig into assymetric cryptography as well with RSA and Diffie-Hellman with ec25519. If you don’t know these algorithms, then this workshop is for you :)

The goal of this workshop is to give you some experience in:

• Recognizing the type of algorithm
• Extract the useful info like the key for example
• Implement using Python a “decryptor” with the info we extracted

What do you need to follow this workshop?

• Basics of x86 disassembly, you can follow this online training by Marion Part1 Part2 Part3 Part4
• A lot of curiosity !
• A laptop with a linux system or a windows machine with a linux virtualmachine kali virtual machines
• Mathematical background will not be useful here.
• Ghidra

What is BlackHoodie?

BlackHoodie is a free, women only reverse engineering workshop and community. More information can be found here: https://www.blackhoodie.re/about/

Why women-only?

One qualifies to attend an in-person bootcamp either if born and raised female, or if one identifies as a woman. This concept of women-only has no intention of putting up walls or feeling exclusive. Blackhoodie is about creating space in an industry that’s very competitive. It is a comfortable place, where attendees feel encouraged to grow skills without pressure. We do what we do, not to create women-only bubbles, as contradicting as it might sound, but to enable a minority to enter the security space, learn skills that are otherwise expensive to learn, find their interests and grow a professional network.

And, it works. BlackHoodie alumnae have gone far beyond being successful in the classroom since the workshop series started. They ventured out to start community projects and collaborations, got themselves new jobs in the security industry, went to speak at major security conferences, joined review boards and become influencers in our community. Many went on to mentor others after they had found their spot, came back to BlackHoodie to give trainings on their own or are now conference trainers and teach classes to the community.

Finally, why does the security industry need more women at all? The industry is growing and facing a talent shortage. More importantly, jobs are typically well paid, come with certain privileges, and are challenging and often fulfilling. And we do firmly believe our society as a whole can only benefit from having more women with money, independence and confidence. Likewise, the tech sector has grown in size and influence, and with great power comes great responsibility – responsibility best shared among a diverse body of decision makers.