BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.securityfest.com//2026//speaker//RYTGCV
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-2026-HSRHP9@cfp.securityfest.com
DTSTART;TZID=CET:20260528T140000
DTEND;TZID=CET:20260528T144000
DESCRIPTION:Practical Exploitation – No CVE Required\nA live hacking sess
 ion\n\nWhat actually happens between “no known vulnerability” and full
  compromise?\nIn this session\, we move beyond slides and theory and explo
 it real systems on stage. You will see how small implementation details\, 
 unsafe assumptions\, and overlooked behaviors turn into working attack pat
 hs.\n\nNo pre-recorded demos. Just live analysis. Live mistakes. Live expl
 oitation.\nWe start with exposed functionality and pull at the threads.\n\
 nWe read the code.\nWe question the assumptions.\nWe look for the place wh
 ere “this should be safe” quietly becomes “this is game over”.\n\n
 Sometimes there is no CVE\, no advisory\, no warning — just logic\, trus
 t\, and attack surface waiting to be understood. This session is for devel
 opers\, defenders\, and security engineers who want to understand not just
  that something is vulnerable — but why it is exploitable\, and how atta
 ckers convert technical nuance into control.\n\nIf you build systems\, you
  should know how they break.\nIf you defend systems\, you should know how 
 they fall.\nBecause exploitation is not magic. It is method.\n\nAnd method
  scales.
DTSTAMP:20260625T172743Z
LOCATION:Main Stage
SUMMARY:Practical Exploitation – No CVE Required - Emil Trägårdh
URL:https://cfp.securityfest.com/2026/talk/HSRHP9/
END:VEVENT
END:VCALENDAR
