Recently published vulnerabilities [+]

• Adobe Reader: Multiple memory corruptions during XSLT processing (APSB 17-11)
• Firefox: Multiple UAF during XSLT processing (MFSA 2017-10)
• Revive Adserver: Arbitrary PHP deserialization (REVIVE-SA-2017-001)
• Adobe Reader: Multiple memory corruptions during XSLT processing (APSB 17-01)
• Firefox: UAF during XSLT processing (MFSA 2017-01)

Upcoming "Burp Suite Pro" trainings [+]

• Sept 2022 - English - UTC+2 (Sept 13th, 2022 - Sept 16th, 2022)
• Oct 2022 - French - UTC+2 (October 4th, 2022 - October 7th, 2022)
• Oct 2022 - English - UTC-4 (October 18th, 2022 - October 21st, 2022)

Recent talks [+]

• Nearly generic fuzzing of XML-based formats
  1. Nullcon (March 2017 - Goa - IN - slides - video)
• Server-side browsing considered harmful
  1. Hackfest (November 2015 - CA - video (FR))
  2. Hack in Paris (June 2015 - FR)
  3. HackPra Allstars - OWASP AppSec EU (May 2015 - NL - slides - video)
• Hunting for top bounties
  1. OWASP CZ (December 2014 - CZ)
  2. ZeroNights (November 2014 - RU - slides)
  3. Hacktivity (October 2014 - HU - video)