Work

Some of the things I’ve done.

Read more about my talks, publications, projects, and public vulnerability disclosures.

Talks

• Black Hat USA 2011 Exploiting USB Devices with Arduino

• Hacker Halted 2010 Web Application Scanners - Evaluating Past the Base Case

• Thotcon 0x1 Forensic Fail

• Hacker Halted 2009 So Long, and Thanks For All the Clock Cycles

Public Vulnerability Disclosures

• Jekyll Arbitrary file write

• GitHub Various

• PGP Universal Server Private key disclosure

• Google Vulnerability Reward Program Direct object reference

• Aruba WAP OS Command Injection

• Google Vulnerability Reward Program Stored XSS in Chrome Web Store

• phpMyAdmin Static Code Injection

Publications

• Dark Reading Scanning Reality - Limits of Automated Vulnerability Scanners

• CERIAS SALIVATE Project