Positive Hack Talks São Paulo

Event Date:December 10, 2025
Format:In-person only
Location:Espaço Fit Eventos - Nações UnidasSão Paulo, Brazil

A free, community-driven cybersecurity conference where real hackers share what they've built, broken, and learned. No marketing, no nonsense. Brutally honest — just the way it should be.

Event Date:December 10, 2025
Format:In-person only
Location:Espaço Fit Eventos - Nações UnidasSão Paulo, Brazil

A free, community-driven cybersecurity conference where real hackers share what they've built, broken, and learned. No marketing, no nonsense. Brutally honest — just the way it should be.

This stop took place on December 10, 2025.

Next stop: Goa, December 10, 2026 →

Why show up

Hands-on talks

Bug bounty, pentest, red team, OSINT. Real techniques, not theory.

Fresh research

Real cases — and how the vulns were actually found.

Live Q&A

Grill the speakers. Answers you won't get from a blog.

Networking

Meet people who actually break things. No badge-scanning.

See how it went

All photos
Group photo of attendees and speakers in front of the Positive Hack Talks São Paulo stageAttendees talking in the hall between talksThe hall during a talk, with code on the big screenAttendees in the audience listening to a talkAttendees talking in a group by the stageFour people seated on stage under the Positive Hack Talks São Paulo screenA speaker's bio slide on the big screen in front of a full hallA speaker at the lectern, with "Hackers first. Why are you here?" on the screen

#PHTalks

Alex Moshkov
@amoshkov

Another legendary shot from #PHTalks Jakarta — keeping this as a tradition for every next con! Unbelievable — 370+ attendees, a record for all past talks. And this photo shows just a part of them.

Standoff Bug Bounty
@StandoffBB

#PHTalks landed in Cairo, Egypt On February 26, the event brought together 200+ hackers for an intense exchange of ideas. An in-person meetup for cybersecurity specialists ready to absorb the latest knowledge on offensive and defensive security and bug hunting.

Positive Technologies Global
@PTsecurity_EN

Thanks, Hanoi! Over 200 cybersecurity pros joined Positive Hack Talks for expert insights, hot topics, and great networking. From bug hunting to tackling top threats, it was a day to remember. Shoutout to our speakers! See you next time! #Cybersecurity #PHTalks

Ronaldo Russel
@RonaldoRussel

PHTalks Sao Paulo was a huge success! Results-driven cybersecurity solutions! #PHTalks My thanks to @amoshkov, the speakers, and the staff!

Kseniia
@naumovax

Finally have a time for tweet. This wednesday I spoke at #PHTalks in Cairo about "Effective new threat detection through generic rules in the network". I want to thank everyone who came, I'm very glad of your active participation and questions. It was a really nice trip :)

Pak Haji
@kusumaa_hadi

Huge thanks to the amazing team behind this incredible event! I'm truly grateful for the opportunity to learn so many new things and connect with such a vibrant, inspiring community. Can't wait for the next one! #CommunityVibes #LifelongLearning #PHTalks

Speakers

That was the line-up. Slides and recordings are on the cards below — for the speakers who agreed to publish theirs; the rest stayed in the room.

Daher Mohamed, aka m0m0x01d

Daher Mohamed, aka m0m0x01d

Bug Hunter / Web Immunify

The Art Of Chaining Low-Hanging Vulnerabilities into a Critical Exploit

Zhassulan Zhussupov, aka cocomelonc

Zhassulan Zhussupov, aka cocomelonc

Malware Researcher

Malware and Hunting for Persistence 2025: how adversaries hacking your PC?

Fabiano Amorim

Fabiano Amorim

Principal Consultant at Pythian

Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba

Penegui

Penegui

CEO da Penegui LTDA

NFC Card Password Bypass

Jayson E. Street

Jayson E. Street

Chief Adversarial Officer at Secure Yeti. Hacker, Author, Speaker, Scientific Hooligan

Creating Positive Learning Opportunities via Bank Robberies

Zhiniang Peng

Zhiniang Peng

Associate Professor, Huazhong University of Science and Technology

Token Injection: Attacking LLM infrastructure With Special Tokens

Positive Hack Talks Host

Alex Moshkov

Community Bro at Positive Technologies

Thank you, São Paulo! Real work on stage, hard questions from the room — that is what these stops are for. See you at the next one.

Alex Moshkov

Program

  1. 09:30 to 10:30, 1 hour

    Check-in

    Welcome coffee break

  2. 10:30 to 11:00, 30 minutes

    Why We’re Here: The Real Essence of PHTalks

    Alex Moshkov

    Community Bro at Positive Technologies

  3. 11:00 to 11:40, 40 minutes

    Creating Positive Learning Opportunities via Bank Robberies

    Jayson E. Street

    Chief Adversarial Officer at Secure Yeti. Hacker, Author, Speaker, Scientific Hooligan

  4. 11:40 to 12:20, 40 minutes

    Token Injection: Attacking LLM infrastructure With Special Tokens

    Zhiniang Peng

    Associate Professor, Huazhong University of Science and Technology

  5. 12:20 to 13:00, 40 minutes

    Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba

    Fabiano Amorim

    Principal Consultant at Pythian

  6. 13:00 to 14:00, 1 hour

    Lunch

    No one stays hungry

  7. 14:00 to 14:40, 40 minutes

    Bypassing CSP for a Bounty, from Informative to High

    Santos Gallegos

    Software & Application Security Engineer

  8. 14:40 to 15:20, 40 minutes

    Old but Gold Cryptography Pitfalls

    Vsevolod Dergunov

    Web Application Hacker at PTSWARM

  9. 15:20 to 16:00, 40 minutes

    Malware and Hunting for Persistence 2025: how adversaries hacking your PC?

    Zhassulan Zhussupov, aka cocomelonc

    Malware Researcher

  10. 16:00 to 16:20, 20 minutes

    Break

  11. 16:20 to 17:00, 40 minutes

    NFC Card Password Bypass

    Penegui

    CEO da Penegui LTDA

  12. 17:00 to 17:40, 40 minutes

    The Art Of Chaining Low-Hanging Vulnerabilities into a Critical Exploit

    Daher Mohamed, aka m0m0x01d

    Bug Hunter / Web Immunify

  13. 17:40 to 17:50, 10 minutes

    Closing speech

  14. 17:50 to 19:00, 1 hour 10 minutes

    Coffee and networking

Community friends

Shoutout to our friends from grassroots communities who help us spread the word.

  • Bug Bounty Hunters Brazil
    Bug Bounty Hunters Brazil
  • OFJAAAH
    OFJAAAH
  • PIRATE SHIP
    PIRATE SHIP
  • APT Zé da Manga
    APT Zé da Manga
  • Chapéu de Palha Hacker's Club
    Chapéu de Palha Hacker's Club
  • Hacking na Web
    Hacking na Web
  • zero2flag
    zero2flag
  • Garoa Hacker Clube
    Garoa Hacker Clube