spl0it.org

OWASP BASC 2010 / Hacking SAP BusinessObjects

OWASP AppSec DC 2010 / Hacking SAP BusinessObjects

Rochester Security Summit / Security Immaturity

Source Barcelona 2010 / Hacking SAP BusinessObjects

SANS Pentest Summit 2010 / Goal Oriented Pentesting

OWASP AppSec DC 2009 / Synergy! A World where the tools Communite!

BlackHat 2009 and Defcon 17 / Unmasking You!

Abstract:

Many people and organizations depend upon proxies and numerous other privacy techniques to mask their true identity. The problem is there are often flaws within these technologies.

This talk will demonstrate several of these flaws and as well as weaknesses in well known implementations. There will be several new anti-privacy 0days released.

InfoSec World 2009 / Breaking Browsers

Abstract:
  • Understanding what is unsafe with browsers
  • End-user attacks and what to look for
  • How history files/cache/other files can be plucked even if you have security
  • What to do about cookie files
  • New threats, including picture-in-picture attacks

ShmooCon 2008 / Next Generation Wireless Recon, Visualizing the Airwaves

Abstract:

Harnessing the power of both current solutions and some fancy work in Perl VS. Python, we have created two new methods that allow you to visualize the information from wireless networks and their relationships. This enables us to map wireless APs and represent the data in flexible and unique ways, full of informational goodness. The next generation of wireless recon looks pretty sweet!

LinuxWorld 2006 / Change Management: Dynamic Network Mapping

Abstract:

This presentation will first cover existing network mapping tools along with their limitations. Then I describe our proposed new technique for handling the information from network mapping scans. This information is first stored in a database. Using this technique one is able to extract the information that is most useful about the machines that have been scanned through standard database queries. For example, monitoring services availability and temporal changes becomes straightforward. We come to the conclusion that using such a technique leads to a more effective method of network scanning.