orangecon

The Dutch Cybersecurity Conference

5 September 2025 @ Meervaart Amsterdam

Community Driven Cybersecurity Conference

Experience the Hackers Community in The Netherlands! OrangeCon is a community driven, non-profit Cybersecurity Conference in the heart of The Netherlands. Meet old and new friends, listen to talks of Dutch leading cybersecurity experts, and level up your knowledge in one of our trainings.

Join us in Amsterdam on the 5th of September!

  • Expand your knowledge in one of the trainings
  • Meet old and new friends at our vibrant community villages
  • Experience talks of the leading cybersecurity experts in The Netherlands

cfp
open

OrangeCon 2025 is now open for talk and workshop proposals!

We're looking for cybersecurity folks - researchers, tinkerers, professionals, and passionate amateurs - to share ideas, skills, and stories with our community. Whether it’s blue team, red team, policy, tech, or something unexpected, if it’s security-related, it belongs at OrangeCon.

  • Conference: 5th of September 2025 @ Amsterdam
  • Audience: Casual & tech-savvy
  • Submission deadline: 31 July 2025, 23:59 CEST

Join us in shaping a conference that’s by and for the Dutch community!


Submit now!

Call For Volunteers

We're looking for volunteers for OrangeCon 2025!

We're gearing up for another exciting edition this September in Amsterdam - and we need you to help make it happen! Our incredible volunteers were the heartbeat of last year’s success, and we're counting on you to help us make it another great event.

  • When: Sept 1–5 @ Meervaart Theater, Amsterdam
  • Sign-up Deadline: May 31 (but spots may fill up sooner!)

Whether you're looking to give back, meet amazing people, or just be part of something awesome in the cybersecurity space, join us at OrangeCon 2025!

Sign up now!

Conference

Community Villages

Dive into our community villages at OrangeCon – it's where old and new friends unite for a whirlwind of fun and innovation!

Talks on stage

Listen to our talks: quick, electrifying insights where the brightest minds in cybersecurity spark big ideas in just 30 minutes!

Workshops

Step into our workshops: hands-on, engaging sessions where you'll dive deep into cybersecurity's hottest topics with industry pros leading the way!

Venue

Welcome to Meervaart Theatre, the heart of the vibrant Nieuw-West district! We're thrilled to host OrangeCon in such a dynamic and welcoming space. At Meervaart, the performing arts are a cornerstone of community life, bringing people together and fostering a sense of shared experience and understanding. By embracing cultural participation and education, Meervaart plays a vital role in enhancing the cultural life of the community in Amsterdam Nieuw-West.

Address:

Meer en Vaart 300, 1068 LE Amsterdam

Training Lineup

2-DAY
Nikhil Joshi
3-4 September 2025

AI Security: Terminating The Terminator

In a world where AI is transforming industries, securing these intelligent systems is more crucial than ever. This training dives deep into the vulnerabilities of AI, from adversarial attacks and data poisoning to model inversion and algorithmic bias. With the rise of GenAI, new threats like Prompt Injection and jailbreak attacks add even more complexity. Through real-world case studies and hands-on exercises, participants will learn how to identify, exploit, and defend against these threats, ensuring AI systems remain secure and reliable. This course equips you with the skills to protect AI in an ever-evolving digital landscape.
3-DAY
Slawomir Jasek
2-4 September 2025

Bluetooth Low Energy and NFC/RFID Security

Master the art of BLE and NFC/RFID security in this hands-on course, where you'll hack, intercept, and exploit real-world wireless systems—just like the pros. Learn to compromise smart locks, access control badges, and even hotel key cards using dedicated hardware (yours to keep) or just a smartphone. From BLE sniffing and relay attacks to RFID cloning and brute-forcing, you’ll gain the skills to assess and secure modern wireless technologies. Leave not just trained, but fully equipped to put your knowledge into action!
2-DAY
Roman Stuehler
3-4 September 2025

Hardware Hacking

Take IoT hacking to the next level with this hands-on training, where you’ll learn to take devices apart, extract firmware, and uncover security flaws—all from scratch, no prior experience required. Over two intensive days, you'll analyze hardware interfaces, dump firmware, gain root access, and perform power glitching attacks to bypass chip protections. Built on seven years of real-world IoT hacking experience, this course equips you with all you need to know about the hardware perspective of IoT devices to gain root access. Whether you're just starting out or sharpening your expertise, this training will get you breaking—and securing—IoT devices with confidence.
1-DAY
Xavier Y. Zeilinga
3 September 2025

Cracking the Code: The Art & Science of Human Behaviour

Unlock the science behind human behaviour in this interactive training designed to enhance your ability to read, influence, and protect against manipulation. Blending psychology, neuroscience, and deception detection, you'll explore emotional intelligence, persuasion tactics, and the mechanics of social engineering. You'll master micro-expressions, verbal and non-verbal cues, and critical thinking strategies to assess credibility and disrupt deceptive tactics. Whether you're in cybersecurity, leadership, or risk management, this course equips you with the tools to navigate complex human interactions with precision and confidence. Decode behaviour, outthink manipulation, and elevate your strategic influence!
2-DAY
Marcel van der Velde
1-2 September 2025

Social Engineering

This training program equips pentesters and red-teamers with comprehensive knowledge and skills in the art and science of social engineering. You will gain a thorough understanding of all relevant definitions and terminology, and by the end of the course, you'll be capable of designing and executing your own social engineering tests. Over two intensive days, you will learn about the social engineering kill chain (yes, we have one too), develop effective pretexts, and understand how to map out all necessary elements for success. In addition to detailed theory, the course includes interactive and enjoyable practical exercises. These exercises, or games, will let you experience the roles of both attacker and victim.
3-DAY
Leszek Mis
1-3 September 2025

Practical Linux Attack Paths and DFIR

Master Linux security with this hands-on training, where offense meets defense in real-world attack paths and detection strategies. You’ll dive into Linux exploitation, rootkits, process injection, tunneling, and syscall hooking while analyzing APT campaigns and C2 frameworks like Sliver and Metasploit. Using cutting-edge DFIR and hunting tools—Velociraptor, Osquery, Suricata, and more—you’ll learn how to detect and counter modern Linux threats, including in Docker and Kubernetes environments. With a structured attack vs. detection approach, this course equips you with the skills to improve Linux telemetry, strengthen defenses, and build your own custom attack paths. Purple teaming for life!
1-DAY
Barry Wels
4 September 2025

Lock Forensics for Blue and Purple Teamers

Are you responsible for securing physical spaces and want to ensure your defenses haven’t been silently breached? This hands-on one-day class is designed specifically for blue and purple team professionals who need to detect and analyze unauthorized lock manipulation techniques.
3-DAY
Barry Wels
1-3 September 2025

Physical Entry Techniques for Red Teamers

Learn non-destructive entry, physical security, lockpicking, and bypass techniques in this hands-on training. You will master tricks to bypass locked doors, and make physical and digital key copiesz. The course includes exercises in bypassing pad-locks, desk drawers, mailboxes, and code locks, as well as recognizing lock types and performing proper reconnaissance.
2-DAY
Dirk van Veen
1-2 September 2025

Security in Microsoft 365 and Azure

Learn to identify and exploit vulnerabilities in Microsoft 365 and Azure environments caused by misconfigurations. This training covers the structure of these platforms, common vulnerabilities, and methods to find and exploit them. You will also practice hacking a fictitious company, gaining insight into implementation choices and their impact on security.
2-DAY
SensePost Training | Orange Cyberdefense
1-2 September 2025

A Journey into Mobile Application Hacking (iOS & Android)

Master mobile app hacking with this hands-on, hacker-led training, designed for those eager to break into the world of mobile security. Over two days, you'll dive into Android and iOS assessments from scratch, learning essential tools and techniques used by real penetration testers. With tons of practical content, you'll analyze apps, intercept traffic, bypass security measures, and explore data storage vulnerabilities—no physical devices required. Developed and delivered by the creators of Objection, this course provides a solid foundation in mobile application security. Hosted by SensePost, the ethical hacking team of Orange Cyberdefense, this training reflects real-world techniques used by professionals. Join us and hack hard!
1-DAY
Francisco Perdomo
4 September 2025

Mastering the Hunt: Modern Threat Hunting

Threat hunting has become an art that is created by the inspiration of the analyst. When you want to carry out a hunting mission, there are multiple ways to achieve the same result, all of which are valid forms of hunting. The ecosystem of tools that focus on threat hunting increasingly have more capabilities and offer new alternatives to proactively identify threats. This workshop offers hands-on learning with real-world examples. Whether you're a seasoned pro or just starting out in threat hunting, you'll gain practical skills to identify and track a wide range of current cyber threats.
1-DAY
Bas Cijsouw
1 September 2025

OSINT Cyberhunt

Join this OSINT training to learn how to gather and analyze information from public internet sources, such as social media and websites. Understand how attackers exploit personal and company information. This training raises awareness about the information available online and teaches valuable skills to identify potential threats and security risks. Ideal for anyone interested in effectively collecting and analyzing public information.
1-DAY
Marius Muench
4 September 2025

Reverse Engineering ARM Binaries with Ghidra

This training will get you bootstrapped for reverse engineering with Ghidra! We will look into ARM binaries as frequently found on Linux-based IoT devices and uncover their secrets, such as hidden interfaces or hardcoded passwords. For this, we will learn the basics of ARM assembly, discuss the inner workings of binary programs, and explore how to analyze them. The training will combine theoretical discussions with hands-on exercises, inspired by findings from real-world devices. After this training, you will have a profound starting point to dive into the world of reverse engineering and know your way around one of the most prominent reverse engineering frameworks. The learned concepts will easily transfer to other instruction set architectures and RE frameworks.

Interested in sponsoring OrangeCon?

OrangeCon is a non-profit conference that brings the Dutch cybersecurity community together. It’s all about education, connection, and sharing knowledge in an open, welcoming environment. By sponsoring, you’re helping us keep this event accessible and making a real difference in supporting a growing community of professionals, students, and enthusiasts.

This isn’t just about putting your logo on a banner — it’s about being part of something that matters. By supporting OrangeCon, you can help build a stronger, smarter, and more connected cybersecurity community in the Netherlands.

Interested? Get in touch with us by sending an email to [email protected]!


Silver Sponsors

Friends of OrangeCon

Contact Us

If you have questions or comments, please don't hesitate to get in touch by using the email address below. Our team is not just here to help; we genuinely care about your ideas, concerns, or experiences. Send us a note, and we will reply shortly!