Research worth sharing.
PERÚHACK invites offensive security researchers, professionals, students and enthusiasts to present their research, discoveries and technical experience.
All talks are strictly about offensive security.
We are looking for proposals that bring original knowledge, verifiable evidence and perspectives that help understand and push the limits of technological security.
Technical merit is our main selection criterion.
Areas of interest
01Vulnerability Research & Exploitation
Vulnerability research, exploit development, fuzzing, memory exploitation and advanced attack techniques.
02Reverse Engineering & Malware Research
Reverse engineering, malware analysis, unpacking, evasion techniques and analysis of malicious code.
03Operating Systems & Low-Level Security
Security of kernels, drivers and isolation mechanisms, privilege escalation and exploitation of low-level components.
04Web, Cloud & Infrastructure Security
Offensive research on applications, services, protocols, cloud environments, containers and infrastructure.
05Hardware, Firmware & Embedded Security
Security of firmware, embedded devices, IoT, hardware and specialized systems.
06Adversarial Research & Emerging Technologies
Offensive research on artificial intelligence, applied cryptography, protocols and new attack surfaces.
07Offensive Tooling & Original Research
Tool development, experimental techniques, original methodologies and applied research results.
Evaluation criteria
Proposals will be evaluated on:
- Technical rigor: depth, accuracy and soundness of the research.
- Originality: a novel contribution or a technically distinct approach.
- Evidence: verifiable results, demonstrations or documented experimentation.
- Relevance: contribution to the knowledge of the offensive security community.
- Clarity: structure, scope and feasibility of the presentation.
- Independence: no commercial or promotional goals.
Ineligible proposals
The following will not be considered:
- Talks that are not about offensive security: talks with a defensive, product or management focus are not part of the agenda.
- Commercial or promotional presentations.
- Talks that are mainly about administration, management or compliance.
- Theoretical content without sufficient technical development.
- Presentations whose main purpose is to promote proprietary tools or upcoming products.
- Research that involves unauthorized disclosure of sensitive information.
- Content that violates Peru's Computer Crimes Law (Ley N.° 30096) or that incites crimes against third-party systems or data.
- Content that reproduces other people's work without attribution or significant technical contribution.
Submission requirements
Proposals are submitted through the official form (in Spanish): https://forms.gle/2yeaG1MriKa9AAoS6.
Each proposal must include:
- Title of the research.
- Technical abstract.
- Problem investigated and objectives.
- Methodology and experimental environment.
- Findings, results or available evidence.
- Originality and contribution compared to existing work.
- Planned structure of the presentation.
- Technical requirements for the demo, if applicable.
- References to related prior publications and responsible disclosure status, where applicable.
- Legal disclaimer for the talk (see Legal framework and disclaimer).
Legal framework and disclaimer
Every talk must include a disclaimer, shown at the start of the talk. In it, the speaker declares that:
- The content is exclusively for educational and research purposes.
- The content complies with Peru's Computer Crimes Law (Ley N.° 30096) and applicable legislation.
- The techniques shown must not be used against systems, networks or data without the express authorization of their owner.
- Demonstrations are carried out in the speaker's own environments, in a lab or with permission, and findings about third parties are presented after a responsible disclosure process.
The technical committee may request changes to the content or the disclaimer before confirming acceptance.
Selection
The technical committee will evaluate proposals according to the published criteria.
The organizers may request clarifications, additional information or technical adjustments before confirming an acceptance.
Acceptance does not authorize adding advertising, substantially altering the approved content or breaching the Participation Code.
Key dates
- CFP opening: open.
- Submission deadline: 10.11.26, 23:59 (Lima time, UTC−5).
- Notification of results: to be announced.
- Conference: Saturday 21.11.26, UPC Monterrico, Lima.
An invitation to research and share
Since 2013, PERÚHACK has brought together people who believe offensive security moves forward through research, experimentation and the free exchange of knowledge.
You don't need to represent a well-known company or have a public track record to present valuable research.
If you have technical knowledge to contribute, PERÚHACK is a place to share it.
PERÚHACK 2026
Technical knowledge takes center stage.
Submitting a proposal implies accepting the Participation Code and respecting the principles set out in the PERÚHACK Manifesto.