NULL HAT is more than just a cybersecurity event, it’s a mindset. In the world of hacking, people are often labeled as white hats, black hats, or gray hats. But at NULL HAT, we believe hacking is not about the color of your hat, it’s about intent, creativity, and exploration.
it’s a place with No labels, No ego, and No assumptions just an opportunity to learn, experiment, and grow. NULL HAT is an open space where university students come together to discover cybersecurity, share ideas, and build the skills that will shape the future of digital security in Morocco.
NULLHAT Morocco is a national cybersecurity event that brings together university students and security researchers for collaboration, learning, competition, and live hacking. Over two days, participants will dive into expert talks, a high-stakes CTF, and hands-on hacking experiences alongside professionals, making it a unique space where knowledge meets practice.
NULLHAT Morocco 2025 is designed to create a lasting impact on Morocco's cybersecurity landscape, bringing together university students nationwide for an intensive learning experience. Our strategic objectives include:
Hands-on learning through challenging CTF competitions and expert guidance
Connect with like-minded cybersecurity enthusiasts from across Morocco
Foster creativity and exploration in ethical hacking and security research
Learn from industry professionals and HackerOne partnership experiences
Test your skills across 8 challenging cybersecurity domains in our flagship Capture The Flag competition
Break ciphers, analyze encryption algorithms, and uncover hidden messages through mathematical cryptanalysis.
Exploit memory corruption vulnerabilities, buffer overflows, and system-level security flaws.
Disassemble binaries, analyze malware, and understand program logic through reverse engineering techniques and tools.
Solve creative puzzles, logic challenges, and unconventional problems that test lateral thinking.
Test and challenge the security of web applications through practical, hands-on scenarios.
Analyze digital evidence, recover hidden data, and investigate security incidents like a digital detective.
Attack machine learning models, manipulate AI systems, and explore adversarial artificial intelligence.
Gather intelligence from open sources, trace digital footprints, and uncover hidden information.
Witness professional security research in action
Experience the thrill of live ethical hacking during a comprehensive 7-day program: 5 days online followed by 2 days onsite at UM6P. Morocco's bug hunters demonstrate real-world vulnerability discovery and exploitation, while participants get an exceptional opportunity to meet with HackerOne ambassadors who will review their reports and provide expert guidance before submission. This groundbreaking session showcases professional penetration testing methodologies in action.
Watch experts identify and exploit real security flaws in real-time
Learn industry-standard methodologies used by top security researchers
Powered by global leaders in ethical hacking and security research
Top Moroccan cybersecurity researchers and bug bounty hunters share their expertise, real-world experiences, and insights into ethical hacking at NULLHAT Morocco 2025.
Full Time Bug Bounty at HackerOne
AWS Expert.
HackerOne Ambassador
Ayoub is a self-taught web application penetration tester driven by the mission to make the internet safer and more secure. Active as a full-time bug bounty hunter since 2019, he has built deep expertise in identifying and reporting vulnerabilities on global platforms. Recognized for his skills, Ayoub is ranked among the Top 5 on Morocco’s Bug Bounty Leaderboard and is also an AWS expert, combining cloud security knowledge with hands-on offensive security experience.
Application security consultant.
Pentester at HackerOne.
HackerOne Ambassador
Yassine is a lead penetration tester at hackerOne and a seasoned bug bounty hunter, active since 2014, and ranked among the Top 20 hackers worldwide on HackerOne. He has won prestigious competitions, including H1-303 Most Valuable Hacker and securing 1st place. Between 2017 and 2019, he also served as a HackerOne Triage team member, helping to secure global platforms. Yassine embraces a digital nomad lifestyle, having spent over five years traveling across more than 40 countries.
1337 school
Agora, 1337 school
CCI Restaurant
Agora, 1337 school
Starts at 07:00 AM · Ends at 09:00 AM (CCI Restaurant)
Check-in at 1337 school
kick off the live hacking, Agora 1337
CCI Restaurant
AUDITURIUM IBN ROCHD
AUDITURIUM IBN ROCHD
AUDITURIUM IBN ROCHD
Connect with fellow participants and industry professionals
CCI Restaurant
An open conversation between students and experienced bug bounty hunters. A chance to ask questions, gain insights, and learn from real-world stories in ethical hacking.
Discover how to turn old devices into something new. This demo repurposes a TL-MR3020 router, Arduino Nano, and ESP32 VGA display to build a compact terminal that reads input, runs commands, and displays output showcasing the power of creative hardware reuse.
Enjoy games, test your cybersecurity skills, and win exclusive HackerOne swag at our interactive booth!
CCI Restaurant
1337 school
1337 Agora
CCI Restaurant
1337 school
CCI Restaurant
A special session where security researchers share their most impactful vulnerability discoveries. Learn how they found them, what made them critical, and the lessons every hacker and student can take away from real-world exploits
Final remarks, Results Announcement & Awards Ceremony
Live musical experience featuring beloved Nostalgic songs and iconic classics from our childhood. A celebration of community, creativity, and shared memories.
NULLHAT MOROCCO will be hosted at the Mohammed VI Polytechnic University (UM6P) Benguerir, offering world-class facilities for our national cybersecurity event.
Address:
UM6P, Lot 660, Hay Moulay Rachid
Ben Guerir, 43150, Morocco
Getting There:
Everything you need to know about NULLHAT Morocco 2025