GoSecure’s Presentation Material

SQL Injection Is Still Alive - From a Mall’s Interactive Terminal to AWS WAF Bypass by Marc Olivier Bergeron

Request Smuggling 101 by Philippe Arteau

Unicode vulnerabilities that could byͥte you (New version) [video] by Philippe Arteau

Advanced XXE Workshop by Philippe Arteau

Template Injection in Action [video] by Philippe Arteau

Advanced Binary Analysis Workshop by Alexandre Beaulieu

Unicode vulnerabilities that could byͥte you by Philippe Arteau

GoSecure’s Open Source Contributions to Malware Analysis, Code Hardening and RDP Snooping by Olivier Bilodeau [ PDF ]

Behind The Scenes: The Industry Of Social Media Manipulation Driven By Malware by Olivier Bilodeau & Masarah Paquet-Clouston

Dark What? Démystifier le buzz via la présentation d’un outil open-source et l’analyse des données trouvées by Félix Lehoux

Behind The Scenes: The Industry Of Social Media Manipulation Driven By Malware [ video ] by Olivier Bilodeau & Masarah Paquet-Clouston

OWASP Find Security Bugs: The community static code analyzer [ video ] by Philippe Arteau

OWASP Find Security Bugs: The community static code analyzer by Philippe Arteau

Welcome to the Jumble: Improving RDP Tooling for Malware Analysis and Pentesting [ PDF ] by Francis Labelle and Émilio Gonzalez

Arsenal Presentation: PyRDP - Python 3 Remote Desktop Protocol Man-in-the-Middle (MITM) and Library [ PDF ] by Francis Labelle and Émilio Gonzalez

Advanced XXE Exploitation Workshop Exercises : [1], [2], [3], [4], [5] by Philippe Arteau

Welcome to the Jumble: Improving RDP Tooling for Malware Analysis and Pentesting [ Video demo 1, Video demo 2, PDF] by Francis Labelle and Émilio Gonzalez

History of Deserialization by Philippe Arteau

Cache Me If You Can: Exposing your application using caching features by Philippe Arteau

Malboxes: Make Malware Analysis More Accessible [ PDF, Video Recording ] by Olivier Bilodeau

Machine Learning to the rescue of code review by Philippe Arteau

Machine Learning Workshop: Orange is the new Hack by Philippe Arteau

Security boot camp for .NET developers by Philippe Arteau

Modern XSS: The modern protections (and bypasses) v.2.0 by Philippe Arteau

Lessons Learned Hunting Internet of Things Malware by Olivier Bilodeau

Beating the Disinformation Drift Facts about the AlphaBay Market by Masarah Paquet-Clouston

Static-Analysis: Now you’re playing with power by Philippe Arteau

La sécurité Java en 2017 by Philippe Arteau

Attacking Linux/Moose 2.0 Unraveled an EGO MARKET by Masarah Paquet-Clouston and Olivier Bilodeau [ video ]

Lightning Talk: Malboxes by Olivier Bilodeau

Abusing PHP 7’s OPcache to Spawn Webshells by Ian Bouchard [ video ]

EGO MARKET: When Greed For Fame Benefits Large-Scale Botnets by Masarah Paquet-Clouston and Olivier Bilodeau [ video, blog post, paper ]

Workshop: Hunting Linux Malware for Fun and $flags by Marc-Etienne M.Léveillé and Olivier Bilodeau [ recent video, original video now offline ]

Workshop: Advanced Java Application Code Review by Philippe Arteau [ sources, slides, original video now offline ]

Malboxes Lightning Talk (22 minutes) by Olivier Bilodeau [ video ]

Applying DevOps Principles for Better Malware Analysis by Olivier Bilodeau and Hugo Genesse [ video, PDF ]

Enumerating PE File Structure Security Protections and Custom Base 64 Steganography by Lilly Chalupowski [ PDF, Badger project, Chameleon project ]

Internet of {Things,Threats} by Olivier Bilodeau and ESET’s Thomas Dupuy [ PDF ]

The new wave of Deserialization Bugs by Philippe Arteau

Modern XSS: Protections (and bypasses) by Philippe Arteau [ Demos ]

Internet of {Things,Threats} by Olivier Bilodeau and ESET’s Thomas Dupuy [ PDF ]