SANS Holiday Hack Challenge 2018: Writeup
Like the previous past years, SANS organized their Holiday Hack Challenge. It’s a great entry level CTF which introduces the players to a wide range of interesting problems. As always, it’s packaged as a nice game with a cute story and I try to play through it every year. This post contains the write-up I submitted as part of the challenge.
PasswordsCon 2018: Passwordless authentication
On November 19-20 this fall, I presented at PasswordsCon 2018 which was co-hosted at Internetdagarna in Stockholm. My talk was titled “Protecting medical data with passwordless authentication” and I talked a little bit about how we work with authentication and identification at my work, KRY/LIVI. The recorded talk is available on YouTube and you can download the slides here.
SEC-T 2018: Fun with Symbolic Execution
In September this fall, I gave a lightning talk at SEC-T 2018. My talk was titled “Fun with Symbolic Execution” where I described the basics of symbolic execution and gave examples on how it can be used in exploitation and reverse engineering. The recorded talk is available on YouTube and you can download the slides here. In the talk I show some code examples which you also can download as a zip.
Talk at Google: From Overflow to Shell
In December, I gave a presentation at the Google Stockholm office. It was a presentation for developers working there about the basics of binary exploitation. There was no publicly available recording of the talk but you can download the slides here.
Detectify Hacker School: From Zero to Zero Day
In December, I gave a presentation at a Detectify customer event called “Hacker School”. My talk was titled “From Zero to Zero Day” where I talked about my background and journey into security and a cool remote code execution bug we found in GitHub enterprise. There was no publicly available recording of the talk but you can download the slides here.
subscribe via RSS