Deadline August 28| XCon2026 x HackingGroup Security Technology Summit: AI Empowerment of Offensive and Defense Evolution and Paradigm Change



[ OK ] loading kernel modules ... ai_agent.o, vehicle_net.o, hw_pentest.o

[ OK ] mounting /dev/six_topics ... 6 talks detected

[>] SUMMIT BEGINS_

┌──────────────────────────┐

XCon2026 x HackingGroup

The evolution of attack and defense and paradigm change empowered by AI
└──────────────────────────┘
// 08.28.2026 · OFFLINE

When the AI model deeply penetrates the offensive and defensive links, when agents become new attack battlefields, and when the underlying security boundaries of hardware continue to be reshaped-the next step of network security is being redefined.

on August 28, HG Security Technology Summit 2026 will kick off with a big kick. This summit consists of XCon、HackingGroup Co-sponsored, bringing together top experts and frontline practical elites in the field of network security at home and abroad to focus on AI security、Internet of Vehicles Attack and Defense、Hardware cracking、Vulnerability automation At other cutting-edge tracks, the technology sharing of pure dry goods presents a feast of safety technology with both depth and temperature.

Follow the changes in technology and see the future of security. We invite you to this annual appointment to unlock a new paradigm of attack and defense in the collision of ideas.

── SUMMIT_INFO ──

• 丨 Time: August 28, 2026 14:00 - 18:30

• 丨 Hosting XCon, HackingGroup

• 丨 Formal offline technology sharing

• 丨 6 Top Hardcore Talks on topics· 7 Top Guests

• 丨 Location Beijing·Civil Aviation International Conference Center

Six hard core issues

All-cutting-edge offensive and defensive track·Pure front-line actual combat tempering

0x01 Uncovers Agent's trump card

[ TALK_01 ] · LLM Fingerprint Identification & AI Target Reconnaissance

Ma Yinjie

• China Unicom Yunjian Laboratory· AISH Community initiator

• Founder of N0wayBack Cybersecurity Team

• Deeply cultivate AI security/Red team offensive and defensive confrontation

• Participated in dozens of national-level events such as the G Red and Blue Team, Wangding Cup/Longjian Cup for many times

"Uncovering the Agent's trump card: LLM Fingerprint Identification and AI Target Reconnaissance System"

At a time when AI applications and agents are being implemented on a large scale, traditional red team methods are completely ineffective: faced with a single chat box entry, conventional techniques such as port scanning, directory blasting, and interface Fuzz have hit a wall. From model bases, reasoning services, orchestration frameworks, to RAG knowledge bases, and MCP tool chains, the entire AI link hides a large number of undefined risk blind spots.

This sharing will build a complete set of AI target reconnaissance system, disassemble the six-layer attack surface of AI applications from top to bottom, output a realizable AI asset map, and clearly answer "How to tear down AI applications, what information can be enumerated, and what method should be used to detect them"Three core issues, while explaining in detail the fingerprint identification skills of the layout framework and reasoning services.

Hardcore highlights: Special Token's underlying fingerprint penetrates the model shell to camouflage

0x02 AI-enabled Internet of Vehicles to dig holes

[ TALK_02 ] ·Intelligent Internet-connected Vehicle Vulnerability Mining

Wang Quanzhou

• Head of Qiche Safety Team

• 30+ car brands·Hundreds of security vulnerabilities

• First prize in the 2025 NVDB-CAVD Challenge First Prize in CCF Vehicle Safety Offensive and Defense

• Celis asked to win the first car safety competition

"How to use AI to empower IoT vulnerability mining"

With the rapid development of the intelligent connected automobile industry, full-link attack surfaces such as TSP cloud platform, IVI vehicle and T-Box continue to be exposed, and traditional testing faces Large amount of code analysis, high protocol reversal threshold, and limited coverage Wait for bottlenecks.

This sharing combination 300+ IoT vulnerabilities With actual combat accumulation, we can dismantle how the AI hole-digging tool chain can improve testing efficiency several times or even tens of times, and deeply analyze the implementation path of AI technology in the Internet of Vehicles vulnerability mining.

Hardcore highlights: Core ideas for full-link attacks and high-risk vulnerability mining in the Internet of Vehicles

0x03 HackingGroup 2026

[ TALK_03 ] · Just Do It ·Annual Theme & Honor Award

T N T

• Founder of HackingGroup

• Founder of WhiteHat Cybersecurity

《HackingGroup 2026 Just Do It》

HackingGroup Deeply cultivate the field of cybersecurity attack and defense and community ecological construction, manage the most active private cybersecurity technology community, focus on the accumulation of practical technology and the connection of industry talents, and continue to promote offensive and defense technology exchanges and the ecological development of the security industry.

This session will bring HackingGroup's annual heavyweight technology sharing to "Just Do It"As the core concept, it disassembles the underlying logic and cutting-edge gameplay of actual combat attack and defense, and presents the technical accumulation and in-depth thinking of the front-line security community.

HackingGroup's annual theme sharing. On-site issuance Certificate of the Expert Committee on Personpost Asynchronous Network Security Books、HT Community Certification、Member of the Outstanding Development Committee Certificate of honor, witness ecological growth and start a new journey together.

────────
[ COFFEE_BREAK ]
$ sudo ./ reboot --mode=energetic
────────

0x04 satellite receiver hardware crack

[ TALK_04 ] · Hardware Pentesting & 0-Day Discovery

Salman Abulatif

• Offensive Security Specialist

• Red Teaming · Advanced Threat Simulation

• Bridging enterprise security with UAS / FPV / radar / interferometric sensing

《Satellite Receivers Hardware Pentesting and Zero-Day Discovery》

Millions of units in the Middle East and North Africa DVB-S2 set-top box Share the same firmware stack, hard-coded credentials, and unprotected debugging interfaces, but are never publicly disclosed.

from 3-pin UART with SPI flash clipping Start, extract and reverse ALi S1506F Complete firmware of satellite receiver, parse custom flash memory layout, decrypt OTA cache file system, crack encryption main firmware, and extract hard-coded API keys and authentication credentials.

0x05 makes LLM stop talking nonsense

[ TALK_05 ] · CVE Analysis Automation & Anti-Illusion Engine

hongzh0

• Sponsored by Hacking Group 0434

• Member of the Timeline Sec Vulnerability Research Group

"When LLM learns not to talk nonsense: CVE analyzes full-link automation and anti-illusion engines"

The capabilities of large models are generalized but frequently "fabricated". The bottleneck of using LLM for security analysis is not the model size, but the inference constraint。

This topic proposes to use dynamic runtime data as the language anchor and LLM as the general semantic reasoning layer Cross-language vulnerability detection architecture, feed structured behaviors into LLM to complete vulnerability determination and PoC derivation, and share a complete anti-illusion constraint system.

0x06 Reverse attack and defense·Counter-agent

[ TALK_06 ] ·Proactive countermeasures against automated infiltration agents

ez-lbz ·Li Bingzhuo

• Member of Tianshu CTF Team of Beijing University of Posts and Telecommunications

• Qiangwang Cup/Mimicry Defense/ XCTF /Tencent Intelligent Infiltration Challenge won the award

• Mining and assisting in repairing vulnerabilities· CVE 100+

micr0soft ·Chen Zefeng

• Member of Tianshu CTF Team of Beijing University of Posts and Telecommunications

• Won awards in XCTF, College Student Cybersecurity Classic Competition, Antian Cup and other competitions

"Reversing Attack and Defense: Proactive Countermeasures and High-Risk Defects Analysis for Automated Infiltration Agents"
Automated penetration testing agents have become a hot spot for attack and defense, but their Autonomous decision-making and high-authority tool invocationThe architecture exposes a serious reverse attack surface.
This research starts from the perspective of honeypots and active defense, analyzes the security blind spots of infiltration agents in context resolution and sandbox management, and realizes protection against multiple mainstream open source agents by constructing malicious web responses. remote code execution, and can also use Docker socket vulnerability to enable container escape and directly control the host machine.

━━━━━━━━━━━━

Complete the agenda

$ cat /var/log/summit_2026.agenda
━━━━━━━━━━━━

14:00|opening Host bounty_hunter
14:05|speech Dumb God·Founder of XCon/Future Security CEO
14:10|topic a
Uncover the Agent's trump card: LLM fingerprint recognition and AI target reconnaissance system
14:50|topic B AI-enabled IoT vulnerability mining
15:30|topic III HackingGroup 2026 Just Do It
16:00|free exchange Group photo·Draw
16:15|topic IV Satellite Receivers Hardware Pentesting
16:55|Topic 5
When LLM learns not to talk nonsense: CVE analysis automation and anti-illusion engine
17:35|topic vi
Reversing offense and defense: Proactive countermeasures and high-risk flaws analysis for automated infiltration agents
18:30|closing The annual event concluded successfully

━━━━━━━━━━━━

Why is the XCon x Hacking Group Technical Forum worth participating?

$ cat /var/log/summit_2026.agenda

━━━━━━━━━━━━

In 4,XCon cooperates with HackingGroup for the first timeWith the theme of "Future Edge·Intelligent Miracles", front-line issues such as cross-platform C2 system development, memory confrontation, and near-source penetration ignited the audience.
In 5,XCon once again joins hands with HackingGroup to createcutting-edge topics such as ideological collision, terminal confrontation actual combat, satellite signal deception, and car USB vulnerabilities in the era of AI models presented participants with the keen observation and solid practice of private technological forces under the AI wave.
three consecutive years, HackingGroup always adheres to a pure technical spirit and builds a stage where the voices of the community can be heard. This year, I look forward to your joining.

━━━━━━━━━━━━

Participation and registration

$ ssh -p828 hackinggroup.org

━━━━━━━━━━━━

1. The "Evolution of Offensive and Defense and Paradigm Change Empowered by AI" HackingGroup Security Technology Summit is a branch venue of XCon. Free registration has been launched. There are limited seats on a first-come-first-served basis. Please scan the QR code below to select an experience ticket and register for 0 yuan.

   

   

2. If you forward and collect likes, you will receive a full pass with a unit price of 2790 per ticket (including main venue + branch venue + exhibitor interactive area). From now on, as long as you share this tweet and keep it in your circle of friends for 3 days and the number of actual likes reaches 66, the screenshots will be sent to the backstage of this public account, and the top 20 people will receive a full pass. Reminder that to receive an all-venue pass, you need to participate in your real name and cannot be resold.

── ABOUT HACKINGGROUP ──

Hacking Group is organized byRegional Security Teams、Co-sponsored by the laboratoryThe non-profit private cybersecurity technology community, founder of TNT,Officially established in 2023It has been implemented and in operation so far75 districts, coverKuala Lumpur, Malaysia、the mainland of China and Hong Kong, cumulative organizational lineMore than 260 online and offline activitiesWe always uphold "Positive, open, professional, and co-construction"The security ideology promotes the growth and connection of private technology forces, guides and assists emerging forces, relays the inheritance with security veterans, advocates a positive hacker culture, allows technology and beliefs to flourish, and promotes positive localized exchanges.
This summit will continue to continue the gene of pure technology sharing, fully mobilize non-governmental ecological power, and create an open, free and professional technology exchange platform.

on August 28, make an appointment with you to attend a technical appointment. Lock in on this summit and jointly gain insight into the future of security through the evolution of offense and defense.