Conference
----------
Welcome to **x33fcon**, a new gathering for IT security professionals and enthusiasts. It's a new event where blue and red teams meet to exchange views and ideas, share experiences, and discuss the latest security challenges in the industry. More information about the conference can be found [here](#!about.md) .
- - - -
When
----
**June 11-12, 2026**
- - - -
Where
----
We plan to organize the conference in **hybrid mode** - **on-site in Gdynia, Poland**, and **online with live streaming**.
- - - -
Venue
-----
| | |
|--|--|
| [](http://www.openstreetmap.org/#map=16/54.4949/18.5380) | Our conference is held in **[Pomeranian Science and Technology Park](http://ppnt.pl/en)** (pol. Pomorski Park Naukowo-Technologiczny - **PPNT**) in Gdynia, Poland. PSTP was established in 2001 from initiative of Pomeranian Technology Centre and Gdynia City Hall. PSTP is the perfect habitat for businesses and institutions of the global knowledge economy.
Conference takes place in PPNT building no 3.
**Address**
Pomorski Park Naukowo-Technologiczny
Aleja Zwycięstwa 96/98
81-451 Gdynia
Poland |
For more information about **Gdynia** please visit its [website](https://www.gdynia.pl/turystyczna-en).
###Getting there
You can get to Gdynia by plane (GDN airport), train (Gdynia Glowna station), car or ferry (from Karlskrona, Sweden to Gdynia or from Nynäshamn, Sweden to Gdansk).
#### By local train (SKM / PKM)
The nearest SKM train station is **Gdynia Redłowo**. Check the timetable.
If you are traveling from GDN airport, you can take PKM train and get out at Gdynia Stadion station which is a few minutes walking distance from PPNT.
#### By public transport
The nearest bus and trolley-bus stop is **Centrum Nauki EXPERYMENT**. Lines operating to this stop: 21, 23, 24, 26, 29, 33, R, S, Z, 105, 119, 125, 133, 134, 180, 192, 700, 710, 740, 760, N10, N30. Check the timetable (click "pl" on the top right to change language to English) or use jakdojade.pl to plan your travel (includes local trains).
#### Taxi or Uber
Taxi and Uber work here too.
- - - -
Agenda
------
Room C - ground floor
| **Time** | **Day 1 - June 11** | |
| ---- | ---------------- | -- |
| 9:00 - 9:10 | Opening | |
| 9:10 - 9:55 | **Craig Balding**, **Marc Smeets** and **Visi Stark** | Panel |
| 10:00 - 10:45 | **Fabian Mosch** | [The Art of Evasion](s/FabianMosch.md) |
| | | Coffee Break |
| 11:00 - 11:45 | **Yuya Chudo** and **Ryunosuke Tsuruda** | [Signed, Trusted, Abused: Advanced BYOSI Malware Loader Techniques](s/YuyaChudoRyunosukeTsuruda.md) |
| | | Lunch + [Lightning Talks](lightningtalks.md) | |
| 12:45 - 13:30 | **Sebastian Feldmann** and **Dominik Phillips** | [Fingerprinting Modern C2 Implants Through Runtime Telemetry](s/SebastianFeldmannDominikPhillips.md) |
| 13:35 - 14:20 | **Michał Ciesiński** | [Bring Your Own Everything - the final approach](s/MichalCiesinski.md) |
| | | Coffee Break |
| 14:35 - 15:20 | **Ignacio Navarro** | [Every ride you take - Hacking a City’s Public Transportation](s/IgnacioNavarro.md) |
| 15:25 - 16:10 | **Kévin Tellier** and **Hugo Vincent** | [DDD: DCOM, DotNet, Deserialization](s/KevinTellierHugoVincent.md) |
| | | Coffee Break |
| 16:25 - 17:10 | **Brandon McGrath** | [Using EMBER2024 to evaluate red team implants](s/BrandonMcGrath.md) |
| 17:15 - 18:00 | **Cas van Cooten** | [The Best Defense Is A Good Offense: A Pragmatic Path to Continuous Purple Teaming](s/CasvanCooten.md) |
| | |
| **Time**
| **Day 2 - June 12**
|
|
| 9:10 - 9:55 | **Dobin Rutishauser** | [Detonator - Repeatable Malware Techniques Testing](s/DobinRutishauser.md) |
| 10:00 - 10:45 | **Levi Cailleret** | [EDR Introspection](s/LeviCailleret.md) |
| | | Coffee Break |
| 11:00 - 11:45 | **Arshia Reisi** | [Tunnel Vision: What Microsoft's Secure Edge Can't See](s/ArshiaReisi.md) | |
| | | Lunch + [Lightning Talks](lightningtalks.md) |
| 12:45 - 13:30 | **Guillaume Couchard** and **Erwan Chevalier** | [Leveraging Landlock telemetry for Linux detection engineering](s/GuillaumeCouchardErwanChevalier.md) |
| 13:35 - 14:20 | **Erkan Ekici** and **Shanti Lindström** | [Offensive SIEM: When the Blue Team Switches Perspective](s/ErkanEkiciShantiLindstrom.md) |
| | | Coffee Break |
| 14:35 - 15:20 | **James Williams** | [Towards Continuous Social Engineering](s/JamesWilliams.md)|
| 15:25 - 16:10 | **Tomer Peled** | [From misimplementation to full compromise: Exploring a dangerous attack surface in MCP](s/TomerPeled.md) |
| | | Coffee Break |
| 16:25 - 17:10 | **Kuba Gretzky** | [Downgrading FIDO MFA With AI Slop](s/KubaGretzky.md) |
| 17:15 - 18:00 | **Marcin Ochab** | [A Raspberry Pi-based Ethernet implant that bypasses 802.1X and allows the same IP address to be used in parallel](s/MarcinOchab.md) |
| 18:00 - 18:15 | Closing remarks | |
### Workshops
Room E - 1st floor
| **Time** | **Day 1 - June 11** | |
| ---- | ---------------- |--|
| 9:00-12:00 | **Silvio La Porta** and **Davide Fontana** | [Ghost in the Machine: Live Fire Threat Actor Dissection... the long way](w/SilvioLaPortaDavideFontana.md) |
| | Lunch + [Lightning Talks](lightningtalks.md) |
| 12:45-15:45 | **Wojciech Lesicki** and **Marcin Grzesiak** | [Entra ID Takeover: Advanced Techniques for Tenant Compromise and Defense](w/WojciechLesickiMarcinGrzesiak.md) |
| 16:00-18:00 | | Networking + [Lightning Talks](lightningtalks.md) |
| | |
| | |
| **Time**
| **Day 2 - June 12**
|
|
| 9:00-12:00 | **Bleon Proko** | [One more name: Finding obnoxiously unorthodox ways to get that one resource's name](w/BleonProko.md) |
| | Lunch + [Lightning Talks](lightningtalks.md) |
| 12:45-15:45 | **Mickey De Baets** and **Joris Ignoul** | [Lost in Thoughts: A Reflection About Reflection](w/MickeyDeBaetsJorisIgnoul.md) |
| 16:00-18:00 | **Jiří Vanek** and **Chris Cowling** | [Breaching The Perimeter: The Forgotten Attack Vector That Always Works](w/JiriVanekChrisCowling.md) |
Break schedules for workshops are at the instructor's discretion.
Note: **Workshops are not available online and won't be recorded.**
No sign-up required.
### Afterparty
Afterparty (June 11, evening) will be held in two places:
- [Pirate Ship](https://maps.app.goo.gl/48EvAmCPKmkxhSjM7) :) - **limited capacity** - book your seat with the conference ticket (first come first served). After the cruise, we invite you to join the afterparty at the restaurant.
- [Kapitan Cook restaurant](https://maps.app.goo.gl/uc1Pw77dabvtAb1b7) - the same as last year
- - - -
Prices
------
All ticket prices are in **PLN** (Polish zloty) and **do not include 23% VAT** (the price will be subject to VAT if applicable).
Prices in EUR and USD are only an **approximation** (exchange rates as of December 10, 2025) and depend on current market rates.
| Ticket Type | Online `**` | Personal`***` (```20 tickets```) | Business |
| ----------------------------------- | ------- | -------- |
| Early Bird (utill Jan 31, 2026) ```up to 70 seats``` | **400 PLN ** *(~94 EUR/ ~110 USD)* | ~~**1000 PLN** *(~236 EUR / ~276 USD)*~~ **SOLD OUT** | ~~**1400 PLN** *(~331 EUR / ~387 USD)*~~ **SOLD OUT** |
| Regular (until April 30, 2026) | **500 PLN ** *(~118 EUR/ ~138 USD)* | ~~**1400 PLN** *(~331 EUR / ~387 USD)*~~ **SOLD OUT** | ~~**2000 PLN** *(~473 EUR / 553 USD)*~~ **SOLD OUT** |
| Last Minute `*` (until May 23, 2026) | **600 PLN ** *(~142 EUR/ ~146 USD)* | ~~**2000 PLN** *(~473 EUR / 553 USD)*~~ **SOLD OUT** | ~~**2800 PLN** *(~662 EUR / ~775 USD)*~~ **SOLD OUT** |
**For all registrations payment has to be made in full before the ticket type deadline is reached. After the deadline discounted fees will not be honored as fully paid.**
If the **Early Bird** tickets sell out before the sales period ends, we will start selling **Regular** tickets. Similarly, **Last Minute** tickets will become available once Regular tickets are sold out.
**Availability is limited. We encourage you to purchase your ticket in advance.**
`*` *In some cases we might prolong ticket sales.*
`**` *Online ticket will let you participate online in the live event (just talks, workshops won't be streamed). This ticket doesn't contain gift pack. 100 Early Bird tickets are available.*
`***` *For individuals only. Personal tickets are offered at a reduced price, below the actual cost of the ticket for the organizer, to support individuals who choose to pay themselves to attend the conference. Functionally, personal and business tickets are identical. If personal tickets sell out, any private person may purchase a business ticket to attend.*
- - - -
Vouchers
-------
The Organizer offers the possibility to purchase event vouchers, providing a flexible way to secure your participation or manage your training budget. Whether you want to lock in current rates for future editions or need a single-use pass for x33fcon 2026, we have you covered:
* **Multi-purpose Vouchers (MPV):** Long-term flexibility for events held between 2026 and 2031.
* **Single-purpose Vouchers (SPV):** Dedicated passes for the x33fcon 2026 conference and training sessions.
[Click here for the full Voucher Sales Regulations and purchase details](/vouchers.md)
- - - -
Conference Registration
---------------------
Registration is closed. Event is at full capacity.
- - - -