For any public speaking that I might do
The OWASP Top Ten is a widely recognized document that highlights the most critical security risks in web applications. It serves as a guide for developers, security professionals, and organizations to prioritize and address common vulnerabilities. Designed by the Open Web Application Security Project (OWASP), the Top Ten provides a consolidated and accessible list of […]
Fallacy of the OWASP Top 10 Read More »
The blog post accompanies my public conference talks on this topic. Slides are available at the bottom. One thing I learned from doing this talk is that a surprisingly high number of InfoSec professionals believe that bypassing EDR is not possible or is an exception. It should be more common knowledge that security tools can
Evading EDR by DLL Sideloading in C# Read More »
Spiceworks Annual IT Conference ” https://www.spiceworks.com/spiceworld/ “ For the past few years, I’ve been going to SpiceWorld and took the opportunity this year to present. My session was focused around “practical hacking”, as in, the simple flaws that I’m going to search for in your network and how I would take advantage of them to
Spiceworld Virtual 2020 Practical Hacking Read More »
