Antony Garand's guest appearances

Antony Garand

Developer Side Quests: The Podcast

Sucuri Sit-Down

Darren Hoehna

Jamie Taylor

Jay Miller

Joe Zack

Heather Wilde

Lee Warrick

Vincent Tang

Ben Martin

Jared Porcenaluk

Jason Westbrook

Erik Onarheim

Spencer Oberstadt

Roberta Barbosa

OwlTail

October is National Cyber Security Awareness Month, and we’re back with analyst Antony Garand to take a deeper look into cross site scripting (XSS) attacks and WordPress plugin vulnerabilities. Plus, host Justin Channell will catch you up on the latest website security news from the Sucuri blog.For further reading about any of these topics, check out these blogs we reference in the episode:WordPress Malware Disables Security Plugins to Avoid DetectionCritical Vulnerability in File Manager Plugin Affecting 700k WordPress WebsitesReflected XSS in WordPress Plugin Admin PagesBackdoor Shell Dropper Deploys CMS-Specific MalwareMagento Multiversion (1.x/2.x) Backdoor

October is National Cyber Security Awareness Month, and we’re back with analyst Antony Garand to take a deeper look into cross site scripting (XSS) attacks and WordPress plugin vulnerabilities. Plus, host Justin Channell will catch you up on the latest website security news from the Sucuri blog. For further reading about any of these topics, check out these blogs we reference in the episode:<ul><li><a href="https://blog.sucuri.net/2020/09/wordpress-malware-disables-security-to-avoid-detection.html" rel="nofollow" target="_blank">WordPress Malware Disables Security Plugins to Avoid Detection</a></li><li><a href="https://blog.sucuri.net/2020/09/critical-vulnerability-file-manager-affecting-700k-wordpress-websites.html" rel="nofollow" target="_blank">Critical Vulnerability in File Manager Plugin Affecting 700k WordPress Websites</a></li><li><a href="https://blog.sucuri.net/2020/09/reflected-xss-in-wordpress-plugin-admin-pages.html" rel="nofollow" target="_blank">Reflected XSS in WordPress Plugin Admin Pages</a></li><li><a href="https://blog.sucuri.net/2020/10/backdoor-shell-dropper-deploys-cms-specific-malware.html" rel="nofollow" target="_blank">Backdoor Shell Dropper Deploys CMS-Specific Malware</a></li><li><a href="https://blog.sucuri.net/2020/08/magento-multiversion-1-x-2-x-backdoor.html" rel="nofollow" target="_blank">Magento Multiversion (1.x/2.x) Backdoor</a></li></ul>

WordPress Plugin Vulnerabilities with Antony Garand

Guest Bio Antony is a chaotic good thief trying to figure out the limit of today’s security in apps we all use. His day time role is to figure out security issues with popular CMSs and apps, while he gets out to write or solve security challenges during his free time, even though the authors of these apps might not expect them to be targeted. Security is a very vast domain, starting by lockpicking, passing through hacking websites and other applications and ending up with cryptography, the weird arcane magic of mathematics. Recently, he found himself writing about his findings, while hacking the platform he used to write his posts. You can find him on Twitter at AntoGarand, or read his posts on dev.to/antogarand What was the quest? Hacking companies I want to get into (Eg: disclose a vulnerability and send my resume). Making side money by hacking apps I was using. Generally testing the apps I am using for security flaws Links:  Twitter: https://twitter.com/AntoGarand Dev.to : https://dev.to/AntoGarand Burp Suite: https://portswigger.net/burp Ring 0 CTF: https://ringzer0ctf.com/ Special Guest: Antony Garand.

Guest Bio Antony is a chaotic good thief trying to figure out the limit of today’s security in apps we all use. His day time role is to figure out security issues with popular CMSs and apps, while he gets out to write or solve security challenges during his free time, even though the authors of these apps might not expect them to be targeted. Security is a very vast domain, starting by lockpicking, passing through hacking websites and other applications and ending up with cryptography, the weird arcane magic of mathematics. Recently, he found himself writing about his findings, while hacking the platform he used to write his posts. You can find him on Twitter at AntoGarand, or read his posts on <a href="http://dev.to/antogarand" rel="nofollow" target="_blank">dev.to/antogarand</a> What was the quest? Hacking companies I want to get into (Eg: disclose a vulnerability and send my resume). Making side money by hacking apps I was using. Generally testing the apps I am using for security flaws Links: <ul> <li>Twitter: <a href="https://twitter.com/AntoGarand" rel="nofollow" target="_blank">https://twitter.com/AntoGarand</a></li> <li><a href="http://Dev.to" rel="nofollow" target="_blank">Dev.to</a> : <a href="https://dev.to/AntoGarand" rel="nofollow" target="_blank">https://dev.to/AntoGarand</a></li> <li>Burp Suite: <a href="https://portswigger.net/burp" rel="nofollow" target="_blank">https://portswigger.net/burp</a></li> <li>Ring 0 CTF: <a href="https://ringzer0ctf.com/" rel="nofollow" target="_blank">https://ringzer0ctf.com/</a></li> </ul>Special Guest: Antony Garand.

Security Research with Antony Garand