Etienne Stalmans's guest appearances

Etienne Stalmans

All Things Git

DEF CON 23 [Audio] Speeches from the Hacker Convention

Robert Lee

Cory Doctorow

Eric Cheng

Mark Ryan

Chris Domas

Bruce Schneier

Rich Kelley

Tom Cross

Joshua Smith

Michael Robinson

Ryan Allen

Ryan O'Neill

Patrick Wardle

Joe FitzPatrick

Ryan Mitchell

OwlTail

Edward and Martin discuss the recent security vulnerability in Git -CVE 2018-11235.  They talk toEtienne Stalmans,the security researcher who discovered it, and discuss what happens in theGit security community after a vulnerability is reported. Etienne is a Platform Security Engineer &amp; Researcher in the PublicCloud Security Group at Salesforce. He has a keen interest in protocolreversing and finding ways to abuse functionality in everyday products. Show Notes Etienne Stalmans Twitter: @_staaldraad Git's announcement for CVE 2018-11235 An explanation of the May 2018 Git Security Vulnerability How to tell if you're patched

Edward and Martin discuss the recent security vulnerability in Git - CVE 2018-11235. They talk to <a href="https://staaldraad.github.io" rel="nofollow" target="_blank">Etienne Stalmans</a>, the security researcher who discovered it, and discuss what happens in the Git security community after a vulnerability is reported.<blockquote> Etienne is a Platform Security Engineer &amp; Researcher in the Public Cloud Security Group at Salesforce. He has a keen interest in protocol reversing and finding ways to abuse functionality in everyday products. </blockquote><h3>Show Notes</h3><ul> <li><a href="https://staaldraad.github.io" rel="nofollow" target="_blank">Etienne Stalmans</a></li> <li>Twitter: <a href="https://twitter.com/_staaldraad" rel="nofollow" target="_blank">@_staaldraad</a></li> <li><a href="https://marc.info/?l=git&amp;m=152761328506724&amp;w=2" rel="nofollow" target="_blank">Git's announcement for CVE 2018-11235</a></li> <li><a href="https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/" rel="nofollow" target="_blank">An explanation of the May 2018 Git Security Vulnerability</a></li> <li><a href="https://www.edwardthomson.com/blog/upgrading_git_for_cve2018_11235.html" rel="nofollow" target="_blank">How to tell if you're patched</a></li></ul>

Git Security with Etienne Stalmans

Materials Available here: https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Saif-El-Sherei-Etienne-Stalmans-SensePost-Introducing-Wadi-Fuzzer.pdf Extending Fuzzing Grammars to Exploit Unexplored Code Paths in Modern Web Browsers Saif El-Sherei Analyst, SensePost Etienne Stalmans Analyst, SensePost Fuzzing is a well-established technique for finding bugs, hopefully exploitable ones, by brute forcing inputs to explore code paths in an application. In recent years, fuzzing has become a near mandatory part of any major application's security team efforts. Our work focused on fuzzing web browsers, a particularly difficult challenge given the size and quality of some of their security teams, the existing high-quality fuzzers available for this, and, of late, bug bounty programs. Despite this, our improved fuzzing approach was able to find four confirmed bugs within Google Chrome and two within Microsoft Internet Explorer 11. The bugs had varying potential exploitability. Interestingly, some had been independently discovered indicating others are active in this field. The work is on going, and we hope to have more before the presentation. As browsers continue to grow as the new universal interface for devices and applications, they have become high value targets for exploitation. Additionally, with the growth of browser fuzzing since 2004, this is a complex field to get started in. Something we hope to help address. Our research and presentation will consist of two parts: The first part is an introduction to fuzzing for the security practitioner. Here we combine the approaches, tool sets and integrations between tools we found to be most effective into a recipe for fuzzing various browsers and various platforms. The second part is a description of our work and approach used to create, and extend, browser fuzzing grammars based on w3c specifications to discover new and unexplored code paths, and find new browser security bugs. In particular, example of real bugs found in the Chrome and IE browser will be demonstrated. Saif is the body double for Borat, but couldn't pull off a mankini and ended up in information security. His focus is on fuzzing and vulnerability research. Etienne hopes he will outlive his beard, but in the meantime, this hacking schtick pays for beard oil. His other interests lie in mobile applications and no-sql databases. Both are analysts within SensePost's London office.

Materials Available here: <a href="https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Saif-El-Sherei-Etienne-Stalmans-SensePost-Introducing-Wadi-Fuzzer.pdf" rel="nofollow" target="_blank">https://media.defcon.org/DEF%20CON%2023/DEF%20CON%2023%20presentations/DEFCON-23-Saif-El-Sherei-Etienne-Stalmans-SensePost-Introducing-Wadi-Fuzzer.pdf</a> Extending Fuzzing Grammars to Exploit Unexplored Code Paths in Modern Web Browsers Saif El-Sherei Analyst, SensePost Etienne Stalmans Analyst, SensePost Fuzzing is a well-established technique for finding bugs, hopefully exploitable ones, by brute forcing inputs to explore code paths in an application. In recent years, fuzzing has become a near mandatory part of any major application's security team efforts. Our work focused on fuzzing web browsers, a particularly difficult challenge given the size and quality of some of their security teams, the existing high-quality fuzzers available for this, and, of late, bug bounty programs. Despite this, our improved fuzzing approach was able to find four confirmed bugs within Google Chrome and two within Microsoft Internet Explorer 11. The bugs had varying potential exploitability. Interestingly, some had been independently discovered indicating others are active in this field. The work is on going, and we hope to have more before the presentation. As browsers continue to grow as the new universal interface for devices and applications, they have become high value targets for exploitation. Additionally, with the growth of browser fuzzing since 2004, this is a complex field to get started in. Something we hope to help address. Our research and presentation will consist of two parts: The first part is an introduction to fuzzing for the security practitioner. Here we combine the approaches, tool sets and integrations between tools we found to be most effective into a recipe for fuzzing various browsers and various platforms. The second part is a description of our work and approach used to create, and extend, browser fuzzing grammars based on w3c specifications to discover new and unexplored code paths, and find new browser security bugs. In particular, example of real bugs found in the Chrome and IE browser will be demonstrated. Saif is the body double for Borat, but couldn't pull off a mankini and ended up in information security. His focus is on fuzzing and vulnerability research. Etienne hopes he will outlive his beard, but in the meantime, this hacking schtick pays for beard oil. His other interests lie in mobile applications and no-sql databases. Both are analysts within SensePost's London office.

Saif El-Sherei & Etienne Stalmans - Extending Fuzzing Grammars to Exploit Unexplored Code Paths in Modern Web Browsers - 101 Track