Hasyim Asyari
Application Security Engineer
Stockbit
M. Hasyim Asyari is an Application Security Engineer and Offensive Security Researcher specializing in application security, penetration testing, and vulnerability research. His work focuses on identifying high-impact security issues across modern web and mobile applications while developing practical security tools and automation to support offensive security assessments. He actively contributes to responsible disclosure programs, open-source security projects, and cybersecurity research, with a strong interest in advancing secure software development and practical application security.Profile LinkedIn : https://www.linkedin.com/in/mhasyim/
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
Pretexta: An Open-Source Framework for Social Engineering Assessments
Social engineering remains one of the most effective attack techniques because it targets human decision-making rather than technical vulnerabilities. Despite advances in security awareness programs, most organizations still rely on static phishing simulations that measure outcomes instead of understanding why people comply with attacker requests.
Pretexta is an open-source laboratory designed to help security professionals build, execute, and analyze realistic social engineering simulations in a controlled environment. The platform enables researchers, penetration testers, red teams, and security awareness practitioners to create interactive scenarios that emulate modern social engineering techniques without targeting real individuals or organizations.
During this Arsenal session, attendees will explore how Pretexta simplifies the entire assessment lifecycle from scenario creation and campaign management to participant interaction, behavioral analysis, and post-engagement reporting. The demonstration will showcase how adaptive conversations, reusable scenarios, and structured analytics can help organizations evaluate their resilience against human-centric attacks while maintaining strict ethical boundaries.
Since its debut at DEF CON Singapore 2026, Pretexta has evolved into a modular platform featuring visual scenario management, campaign orchestration, extensible integrations, and collaborative workflows for security teams. Released under the MIT License, the project encourages community contributions and aims to establish a practical, open-source framework for advancing social engineering assessments.
- 13:00
- Tue
- 01 Dec
Stage:
Arsenal 4
Sessions Type:
Keynote