GoSecure’s Presentation Material

OWASP Find Security Bugs: The community static code analyzer by Philippe Arteau

Advanced XXE Exploitation Workshop Exercises : [1], [2], [3], [4], [5] by Philippe Arteau

Cache Me If You Can: Exposing your application using caching features by Philippe Arteau

Machine Learning to the rescue of code review by Philippe Arteau

Machine Learning Workshop: Orange is the new Hack by Philippe Arteau

Security boot camp for .NET developers by Philippe Arteau

Modern XSS: The modern protections (and bypasses) v.2.0 by Philippe Arteau

Lessons Learned Hunting Internet of Things Malware by Olivier Bilodeau

Beating the Disinformation Drift Facts about the AlphaBay Market by Masarah Paquet-Clouston

Static-Analysis: Now you’re playing with power by Philippe Arteau

La sécurité Java en 2017 by Philippe Arteau

Attacking Linux/Moose 2.0 Unraveled an EGO MARKET by Masarah Paquet-Clouston and Olivier Bilodeau [ video ]

Lightning Talk: Malboxes by Olivier Bilodeau

Abusing PHP 7’s OPcache to Spawn Webshells by Ian Bouchard [ video ]

EGO MARKET: When Greed For Fame Benefits Large-Scale Botnets by Masarah Paquet-Clouston and Olivier Bilodeau [ video, blog post, paper ]

Workshop: Hunting Linux Malware for Fun and $flags by Marc-Etienne M.Léveillé and Olivier Bilodeau [ video ]

Workshop: Advanced Java Application Code Review by Philippe Arteau [ video ]

Malboxes Lightning Talk (22 minutes) by Olivier Bilodeau [ video ]

Applying DevOps Principles for Better Malware Analysis by Olivier Bilodeau and Hugo Genesse [ video, PDF ]

Enumerating PE File Structure Security Protections and Custom Base 64 Steganography by Lilly Chalupowski [ PDF, Badger project, Chameleon project ]

Internet of {Things,Threats} by Olivier Bilodeau and ESET’s Thomas Dupuy [ PDF ]

The new wave of Deserialization Bugs by Philippe Arteau

Modern XSS: Protections (and bypasses) by Philippe Arteau [ Demos ]

Internet of {Things,Threats} by Olivier Bilodeau and ESET’s Thomas Dupuy [ PDF ]