Advanced .NET Exploitation Workshop (BSides Tirana 2025)

Join us for a special 1-day hands-on workshop with the Summoning Team, based on their acclaimed Advanced .NET Exploitation Training (normally €4K). You'll dive into real-world .NET exploitation techniques, learn to chain bugs, bypass mitigations, and pop shells — all in a friendly and practical environment.

Taught by Sina Kheirkhah (@SinSinology), Pwn2Own "Master of Pwn"

Learn from one of the best in the game!

Spots are limited. Don’t miss it!

Coffee, food & snacks included

Sina Kheirkhah (@SinSinology)

Sina is a full-time vulnerability researcher with a passion for popping shells across all kinds of targets, server-side enterprise solutions, hardware devices and he also does reverse engineering, low-level exploitation, attacking .NET/Java stacks, bypassing mitigations, chaining bugs, and all the good stuff. To highlight some of his work, he has been a Pwn2Own contestant multiple times 20{22,23,24,24.5,25,25.5} and has won the "Master of Pwn" title at the 2025 Pwn2Own competition in Tokyo. Here’s a video from the competition as a proof that not only he looks cool but also does cool things.

If this video and his public Advisories/Exploits/Blog didn't convince you already :D
https://summoning.team/exploits/
https://summoning.team/blog/
https://summoning.team/advisories/

• .NET Basic Reverse Engineering and Debugging
• Introduction to .NET vulnerabilities
• Basics of deserialization exploits in .NET
• Exploiting 2 remote code executions
• Hands-on exercises

• Basic familiarity with a scripting language like Python, Bash, etc.
• Medium familiary with any language that is .NET based, (C#, F#, etc)
• Basic Knowledge of “any” reverse engineering is required (x86, etc)
• Do not use an ARM-based machine
• a x64 windows host operating system
• 16GB of ram or more
• 50GB free disk space
• VMWare as your virtualization software or virtualbox or fusion
• A good attitude towards learning

Are you a student or someone just starting in the industry and would love to attend this workshop ?

We have reserved 5 tickets that we are going to give up for free.

Send us an e-mail to: organiser[@]bsidestirana.al with the title: .NET Exploitation Workshop and tell us why you want to take part and why it is important to you.

We will select 5 people and provide tickets for free.

Also check out other Workshops in Tirane.