WOOT aims to present a broad picture of offense and its contributions, bringing together researchers and practitioners in all areas of computer security
SynthIR tricks deepfake image detectors using a simple optical filter and cardboard. To defend from their attack Ishizue, Rampazzi, & Sugawara propose a detection method based on dual-pixel sensors. tetsuishizue.github.io/Break…
see the full WOOT'26 lineup: usenix.org/conference/woot26…
Constant time programming is the primary defense against timing attacks, but the meaning of the term actually varies. On a key loading case study, Brumley finds BoringSSL's leak orders of magnitude stronger than OpenSSL's, despite, surprisingly, a stricter threat model.@riteslgci
USENIX WOOT Conference 2026: two submission deadlines this year!
- Cycle 1: December 12, 2025 *only one month away* !
- Cycle 2: March 3, 2026
WOOT still has a SoK track and an "Up-and-coming track" (~Industry), CFP for details : usenix.org/conference/woot26…
Last papers session "Exploit All the Things" (Chair: Cristine Hoepers)
- Soufian El Yadmani: SecurePoC—detecting malicious GitHub exploits
- Andrea Mambretti: SoK on kernel vuln discovery & auto exploit generation
- Junho Lee: BOOTKITTY—stealth bootkit-rootkit for modern OSes
WOOT 2025 late morning session: Application Security (Chair: Yves Younan)
- Gabriel Karl Gegenhuber: Prekey Pogo—WhatsApp handshake weaknesses
- Manuel Karl: Formula injection in real-world spreadsheets
- Jannik Hartung: PHP foot-gun case study (Best paper award !)
WOOT 2025 Day 2 starts with another Physical Attacks session (Chair: A. Zonenberg)
- Valentin Huber: Deep dive into FRAM fault injection effects
- Boyapally Harishma: Side-channel reality check on ARM Cortex-A72
- Wooyeon Jo: PLC memory exploitation in industrial systems
WOOT 2025 1st session of the afternoon, "Hacking at a Distance" with:
- Tommaso Sacchetti on large scale Bluetooth Security Testing
- Chengsong Diao: Vulnerabilities in Master Lock Smart Locks
- Seyyed Ali Ayati @itayaila Acoustic Side-Channel on keyboards
First session, on hardware security:
Two talks on attacking the @Raspberry_Pi RP2350 by @nSinusR and @azonenberg
One talk on exploiting software using hardware fault injections by Zhenyuan Liu
WOOT 2025 Conference starting in Seattle.
The program prepared by @noopwafel and @naehrdine includes sessions on hardware security, wireless attacks, network security.
And tomorrow physical attacks, application security.
And Keynote by @FalconDarkstar
Our Bootkitty team will announcing "A Stealthy Bootkit-Rootkit Against Modern Operating Systems" soon at USENIX WOOT25.
Stay tuned for upcoming presentation.
Credit:
@B1ack3at, @jihoonab151, HyunA Seo, @Iranu96, @wh1te4ever, Jinho Jung, Hyungjoon Koo.
usenix.org/conference/woot25…
Discounted early bird registration for WOOT '25 is open until Monday - usenix.org/conference/woot25… - join us in Seattle on Aug 11/12 (right before USENIX Security) for talks and discussions on all kinds of cutting-edge offensive security research (program at usenix.org/conference/woot25…).
Reviewer 2 just rejected your latest offensive security paper? Or didn't submit it anywhere yet? There's still more than a day left to (re)submit to USENIX WOOT '25 and get reviews from a community who love clever hacks, weird bugs 👾 and fun exploits! woot25.usenix.hotcrp.com
Only a week and a half left for USENIX WOOT '25 conference submissions - deadline March 11 AoE. We’re looking forward to seeing even more of your amazing offensive security papers this year! And still a few days for up-and-coming track (March 4). CfP at usenix.org/conference/woot25…
USENIX WOOT '25 submissions are due March 11. One month to go - still plenty of time to write a paper about your latest fun offensive security research! Or if you want more guidance to get a paper into shape, up-and-coming track deadline is March 4. CfP at usenix.org/conference/woot25…