Researchs:
Next 2026 Talks:
- Secure Our Streets 2026 – Germany, Online, September 17: Unlocking cars by reversing common Chinese rolling codes.
- DEFCON CHV 2026 – Las Vegas, USA. August 6-9: Unlocking Vehicles by Brute forcing Rolling code systems.
2026:
- Summercon 2026 – Brooklyn NY, US, July 11: Unlocking cars: Reversing a Rolling code like a boss
- Cybersen 2026, July 7 Peru, Online: How I found a vulnerability in the USB Stack Linux Kernel
- Ekoparty Miami 2026 – May 21, Miami, US: From Pentest to Hacktivism: A Journey into 6 Zero Days Hidden in widely used Routers
- CHV Ekoparty Miami 2026 – May 22, Miami, US: EV Chargers Hacking (Attack Vectors).
- Re//verse 2026 – March 12, Orlando Florida, US: KIA Head Unit Defacement: Reversing a propietary RTOS
- BSides Budapest 2026 – April 29, Budapest, Hungary: Lessons learned of the Automotive USB Linux Kernel Fuzzing
- HackTheBox MeetUp 2026 – Ecuador (Online): Hunting Bugs in the Kernel: Fuzzing Drivers en Linux
- Low Level Club 2026 Talks – Brazil (Online): Linux Kernel Fuzzing in Embedded Devices
2025:
- Secure Our Streets 2025 – Germany, Online: AutoRFKiller – The tool that unlock thousands of cars and earned me two CVEs
- DEFCON33 CHV 2025 – Las Vegas August 2025: Hacking a Head Unit with Malicious PNG, demo attack: DEFCON33 Demo attack, demo Phishing link: KIA Web page
- Recon 2025 – Montreal Canada. Talk: Overcoming Hardware Hacking issues + ARCompact arquitecture reversing
- Hardwear USA 2025 – San Francisco CA USA. Talk: Hardware Hacking a Car’s Head Unit & Uncovering a Vulnerable RTOS
- FLISol UIO 2025 – Quito Ecuador. Talk: Windows Binary Exploitation with ExpWin
- Re//verse 2025 – Orlando Florida USA. Lightning Talk – Revesing a Difficult Car Infotainment System
- OffensivEConf 2025 – Quito Ecuador. Resource: Car Hacking: Reversing the In-Vehicle Infotainment System
2024:
- DEFCON32 CHV 2024 – Las Vegas USA. Resource: Breaking Learning Codes: Unlocking thousands of cars by reversing learning codes
- Ekoparty 2024 – Buenos Aires Argentina. Resource: Unlocking Thousands of cars by Reversing Learning Codes
- H2HC 2024 – Sao Paolo. Resource: Data Exfiltration Bypassing USB Storage Restrictions with Serial Communication channel with Flipper Zero BadUsb
2023:
- Ekoparty 2023 – Buenos Aires Argentina & Fluid Attacks Jan 2024 – Online Colombia. Resource: Hardware Hacking: RCE on the HUAWEI router HG532c + Exploit
Workshops:
Hardware/Car Hacking, Binary Explotation
2023:
- FLISol 2023 Guayaquil (Hardware Hacking 101) – Guayaquil Ecuador. [ Video ]
- Ekoparty 2023 (How I Pwned an Ecuadorian Router) – Buenos Aires Argentina. [ Post ]
- Software Freedom Day 2023 (Exploiting binaries via memory corruption) – Cuenca Ecuador. [ Video ]
- Security Day Cuenca 2023 (Taking advantage of Format Strings with Python) – Cuenca Ecuador.
2024:
- ComSoc EPN – Vulnerability-es 2024 (Car Hacking 101) – Online Ecuador. [ Video ]
- Nerdearla 2024 (Car Hacking) – Santiago de Chile. [ Video ]
- Bsides Colombia 2024 (Car Hacking) – Medellín Colombia. [ Video ]
- Flisol Loja 2024 (Car Hacking 101) – Loja Ecuador. [ Post ]
- Flisol Quito 2024 (Hacking Mobile Networks 2G/3G/4G at Ecuador) – Quito Ecuador. [ Video ]
- Conferencias Internacionales IA y Ciberseguridad 2024 (Microcontroller Hacking) – Online Universidad Continental del Perú. [ Video ]
- Tech Talks 2024 (Exploring the DragonOS Linux power – SDR Applications and Radiorequency Hacking) – Online Ecuador. [ Video ]
- Software Freedom Day 2024 (Biometrics Hacking – ZKTeco pwned) – Universidad Católica de Quito, Ecuador. [ Video ]
- 8.8 Security Conference Ecuador 2024 (Exfiltration Data with Open Hardware) – UDLA Quito, Ecuador. [ Video ]
2025:
- 1er Entrenamiento Preselección 2025 LAC 20250525, May 2025 (Hardware Hacking from Zero), Online [Video]
- Congreso Internacional de Ciberseguridad 21 Julio 2025 (Fallas de seguridad en Sistemas Operativos RTOS) – Universidad Continental Peru – Online, Perú. [Video is coming]
- X-Sec Community Talk, Jul 2025 (The Art of Unlock Cars: My first Automotive CVEs) – Online, Argentina [Video]
- Club Robótica EPN Talk Aug 2025 (The Art of Fault Injection in Microcontrollers) – Escuela Politécnica Nacional, Ecuador [Video]
Web Pentesting, On-Premise Pentesting
2020:
- FLISoL 2020 (Exploitation of Web Vulnerabilities with Burp Suite) – Latam & Caribe. [ Video ]
- HackemCON 2020 (Password Theft Techniques and how to protect yourself) – Online Ecuador. [ Video ]
- HackemCON 2020 (Source Code Security Analysis) – Online Ecuador. [ Video ]
2021:
- IEEE AN EXPERT TELL YOU 2021 (Common attacks on Microsoft Windows servers) – Online Ecuador. [ Video ]
2022:
- FLISoL 2022 (Compromising Active Directory) – UTA Ecuador. [ Video ]
2025:
- Quito Lambda January 2025 (Analyzing the nominations for the Top 10 Web Hacking Techniques 2024) – StackBuilders Quito Ecuador. [ Video1 ] [ MyVideo ]
Networking
- HackemCON 2020 (Software Defined Networks with Python) – Online Ecuador. [ Video ]
Privacy & Anonimity
- HackemCON 2020 (DeepWeb Myths and Truths) – Online Ecuador. [ Video ]
- HackemCON 2020 (How to create your ONION site on the Dark Web) – Online Ecuador. [ Video ]
- Cryptoparty 2024 (Privacy and Anonimity with Secure VPNs) – Casa de la Cultura – Quito Ecuador. [ Video ]
Defense & SOC, Malware
- Hack y Comunidad III 2021 (Malware Analysis Techniques) – Online Chile. [ Video ]
- ICTALK 2022 (Log Management in Windows and GNU Linux) – Online Ecuador.
Blockchain
- HackemCON 2022 (Being part of the Blockchain – Bitcoincore) – Online Ecuador. [ Video ]
- Privacy and the new digital age 2023 (Explotación de binarios con Python en Hardware Wallets) – EPN, Quito Ecuador [ Video ]
Social Engineering
- U.E. Hermano Miguel La Salle Quito 2024 (Cyber attacks through social networks: Phishing, Cybergrooming, Extorsion) – Online Private [ Post ]
My CVEs/Advisories:
-> 2026 CVEs:
CVE-2026-49319: https://www.cve.org/CVERecord?id=CVE-2026-49319
CVE-2026-43432: https://www.cve.org/CVERecord?id=CVE-2026-43432
CVE-2026-2541: https://www.cve.org/CVERecord?id=CVE-2026-2541
CVE-2026-2540: https://www.cve.org/CVERecord?id=CVE-2026-2540
CVE-2026-2539: https://www.cve.org/CVERecord?id=CVE-2026-2539
-> 2025 CVEs:
CVE-2025-6030: https://www.cve.org/cverecord?id=CVE-2025-6030
CVE-2025-6029: https://www.cve.org/cverecord?id=CVE-2025-6029
CVE-2025-7635: https://www.cve.org/cverecord?id=CVE-2025-7635
CVE-2025-54084: https://www.cve.org/cverecord?id=CVE-2025-54084
CVE-2025-53914: https://www.cve.org/cverecord?id=CVE-2025-53914
CVE-2025-53913: https://www.cve.org/cverecord?id=CVE-2025-53913
CVE-2025-54083: https://www.cve.org/cverecord?id=CVE-2025-54083
-> 2025 Advisories:
- ASRG Advisory 2025 – Insecure Bootloader in the KIA Head Units with iRTOS (Zero Day not patched)
- Realtek Advisory 2025: Remote Command Execution (RCE) in the Realtek RTL8672 SDK
My Interviews:
Interview: CyberSecurity Bank & Government Ecuador 2025 – Hackers disruptivos en Ciberseguridad, July, Quito – Ecuador [Video]
Podcast: Hablemos de privacidad por Centro de Autonomía Digital, Episodio: T2 – Cap#7 Seguridad digital y sus implicaciones legales, Aug 2025, Quito – Ecuador [Video]
Interview: Chip & Chat by Hardwear USA 2025, May 2025, San Francisco – USA [Video]
Interview: 0DIN interview by Andre Hall, October 2025, Buenos Aires – Argentina [Video]
Podcast: La Jaula del N00b, November 2025, Online – Mexico [Video]
Interview: 30000 Hackers in one place (DEFCON) by NetworkChuck, August 2025, Las Vegas – USA [Video]
Interview: Podcast with Bysepa, June 2026, Online, “Ciberseguridad para Mortales – Con Danilo Erazo sobre Car Hacking y mucho más” [Video]
News:
New: Ecuador In Tech Newslatter by Andreina González, CO founder y COO de Ecuador Tech Week, https://www.startupgrind.com/newsletter/read/8da850e8-c850-44bf-8a2c-b10296ac3058/
New: Interview with “El Clarin” Argentine newspaper, May 2026, Miami – USA, “Hackear un Audi en Miami: Ekoparty mostró en sus “villages” el espíritu de la comunidad hacker”, https://www.clarin.com/tecnologia/hackear-audi-miami-ekoparty-mostro-villages-espiritu-comunidad-hacker_0_yZqR8aUOsM.html
New: Interview with “Automotive News” US newspaper by Molly Boigon, November 2025, Online – USA [News]
New: Interview with “El Clarin” Argentine newspaper, November 2025, Buenos Aires – Argentina, “Ekoparty 2025: descubren una falla en alarmas genéricas de autos que permite abrir miles de vehículos”, https://www.clarin.com/tecnologia/ekoparty-2025-descubren-falla-alarmas-genericas-autos-permite-abrir-miles-vehiculos_0_53GFvnqfwm.html
