SlideShare a Scribd company logo

How to Fuzz like a Hacker

•
•
DefCamp
DefCamp

Marek Zmysłowski in Bucharest, Romania on November 8-9th 2018 at DefCamp #9. The videos and other presentations can be found on https://def.camp/archive

Technology
1 of 42
Download to read offline
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.

Recommended

Guión de Cata Deductiva - Vinos
Guión de Cata Deductiva - VinosGuión de Cata Deductiva - Vinos
Guión de Cata Deductiva - VinosMiguel A. Sainz Gongora
 
Prezi conteúdo programático
Prezi conteúdo programáticoPrezi conteúdo programático
Prezi conteúdo programáticoCláudio Stucchi
 
LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]
LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]
LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]getadministrate
 
PWAs in real life
PWAs in real lifePWAs in real life
PWAs in real lifeJanet Maldonado
 
LDA Class of 2020-21 Team Mission Possible presentation
LDA Class of 2020-21 Team Mission Possible presentationLDA Class of 2020-21 Team Mission Possible presentation
LDA Class of 2020-21 Team Mission Possible presentationLeadership Development Academy of Rock County, Wisconsin
 
รายชื่อนักแสดง คือหัตถาครองพิภพ 2013
รายชื่อนักแสดง คือหัตถาครองพิภพ 2013รายชื่อนักแสดง คือหัตถาครองพิภพ 2013
รายชื่อนักแสดง คือหัตถาครองพิภพ 2013MrAudomsak
 
รายชื่อนักแสดง คือหัตถาครองพิภพ
รายชื่อนักแสดง คือหัตถาครองพิภพรายชื่อนักแสดง คือหัตถาครองพิภพ
รายชื่อนักแสดง คือหัตถาครองพิภพMrAudomsak
 
8etapas80entrevistas
8etapas80entrevistas8etapas80entrevistas
8etapas80entrevistasRicardo Luz
 

Recommended

Guión de Cata Deductiva - Vinos
Guión de Cata Deductiva - VinosGuión de Cata Deductiva - Vinos
Guión de Cata Deductiva - VinosMiguel A. Sainz Gongora
 
Prezi conteúdo programático
Prezi conteúdo programáticoPrezi conteúdo programático
Prezi conteúdo programáticoCláudio Stucchi
 
LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]
LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]
LITE 2017 – An Intro to Our Reporting System [Rico Page & Vanessa Zoghbi]getadministrate
 
PWAs in real life
PWAs in real lifePWAs in real life
PWAs in real lifeJanet Maldonado
 
LDA Class of 2020-21 Team Mission Possible presentation
LDA Class of 2020-21 Team Mission Possible presentationLDA Class of 2020-21 Team Mission Possible presentation
LDA Class of 2020-21 Team Mission Possible presentationLeadership Development Academy of Rock County, Wisconsin
 
รายชื่อนักแสดง คือหัตถาครองพิภพ 2013
รายชื่อนักแสดง คือหัตถาครองพิภพ 2013รายชื่อนักแสดง คือหัตถาครองพิภพ 2013
รายชื่อนักแสดง คือหัตถาครองพิภพ 2013MrAudomsak
 
รายชื่อนักแสดง คือหัตถาครองพิภพ
รายชื่อนักแสดง คือหัตถาครองพิภพรายชื่อนักแสดง คือหัตถาครองพิภพ
รายชื่อนักแสดง คือหัตถาครองพิภพMrAudomsak
 
8etapas80entrevistas
8etapas80entrevistas8etapas80entrevistas
8etapas80entrevistasRicardo Luz
 
Research
ResearchResearch
ResearchSamFrullo
 
Ojwpjzgamnurprezi
OjwpjzgamnurpreziOjwpjzgamnurprezi
OjwpjzgamnurpreziAlexis Alvarez
 
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?Monika Czaplicka
 
Atención al Trauma Grave
Atención al Trauma GraveAtención al Trauma Grave
Atención al Trauma Grave061 Sevilla
 
Das Web im Geschwindigkeitsrausch
Das Web im GeschwindigkeitsrauschDas Web im Geschwindigkeitsrausch
Das Web im Geschwindigkeitsrauschnine
 
How I Built a 10,000-Person Community with Only $2,000
How I Built a 10,000-Person Community with Only $2,000How I Built a 10,000-Person Community with Only $2,000
How I Built a 10,000-Person Community with Only $2,000Traction Conf
 
NDGISUC2017 - Full GISTC Meeting
NDGISUC2017 - Full GISTC MeetingNDGISUC2017 - Full GISTC Meeting
NDGISUC2017 - Full GISTC MeetingNorth Dakota GIS Hub
 
Caveon webinar series - smart items- using innovative item design to make you...
Caveon webinar series - smart items- using innovative item design to make you...Caveon webinar series - smart items- using innovative item design to make you...
Caveon webinar series - smart items- using innovative item design to make you...Caveon Test Security
 
flowcytometry and sexed semen
flowcytometry and sexed semenflowcytometry and sexed semen
flowcytometry and sexed semenAmit Gnawali
 
Physiological changes in Pregnancy
Physiological changes in PregnancyPhysiological changes in Pregnancy
Physiological changes in PregnancyPrasant N
 
20 Jahre GBI
20 Jahre GBI 20 Jahre GBI
20 Jahre GBI Christian Kauper
 
Слайдология: Необычный скелет презентации от Дэна Роэма
Слайдология: Необычный скелет презентации от Дэна РоэмаСлайдология: Необычный скелет презентации от Дэна Роэма
Слайдология: Необычный скелет презентации от Дэна РоэмаCЛАЙДОЛОГИЯ от В.Н.Бабанова
 
NDGeospatialSummit2019 - State GIS Program Update
NDGeospatialSummit2019 - State GIS Program UpdateNDGeospatialSummit2019 - State GIS Program Update
NDGeospatialSummit2019 - State GIS Program UpdateNorth Dakota GIS Hub
 
Synopsys
SynopsysSynopsys
SynopsysLancaster University Investment and Finance Society
 
Games Developers Play Stretch Conference 2017
Games Developers Play Stretch Conference 2017Games Developers Play Stretch Conference 2017
Games Developers Play Stretch Conference 2017Łukasz Aziukiewicz
 
Слайдология: 5 проверенных элементов заголовка, которые привлекут внимание
Слайдология: 5 проверенных элементов заголовка, которые привлекут вниманиеСлайдология: 5 проверенных элементов заголовка, которые привлекут внимание
Слайдология: 5 проверенных элементов заголовка, которые привлекут вниманиеCЛАЙДОЛОГИЯ от В.Н.Бабанова
 
Слайдология: Визуальная сигнализация на слайде
Слайдология: Визуальная сигнализация на слайдеСлайдология: Визуальная сигнализация на слайде
Слайдология: Визуальная сигнализация на слайдеCЛАЙДОЛОГИЯ от В.Н.Бабанова
 
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...getadministrate
 
Слайдология: Цифрографика и фотография в презентации
Слайдология: Цифрографика и фотография в презентацииСлайдология: Цифрографика и фотография в презентации
Слайдология: Цифрографика и фотография в презентацииCЛАЙДОЛОГИЯ от В.Н.Бабанова
 
Gad.U Product Opportunity
Gad.U Product OpportunityGad.U Product Opportunity
Gad.U Product OpportunityGrad.U
 
Remote Yacht Hacking
Remote Yacht HackingRemote Yacht Hacking
Remote Yacht HackingDefCamp
 
Mobile, IoT, Clouds… It’s time to hire your own risk manager!
Mobile, IoT, Clouds… It’s time to hire your own risk manager!Mobile, IoT, Clouds… It’s time to hire your own risk manager!
Mobile, IoT, Clouds… It’s time to hire your own risk manager!DefCamp
 

More Related Content

What's hot

Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?Monika Czaplicka
 
Atención al Trauma Grave
Atención al Trauma GraveAtención al Trauma Grave
Atención al Trauma Grave061 Sevilla
 
Das Web im Geschwindigkeitsrausch
Das Web im GeschwindigkeitsrauschDas Web im Geschwindigkeitsrausch
Das Web im Geschwindigkeitsrauschnine
 
How I Built a 10,000-Person Community with Only $2,000
How I Built a 10,000-Person Community with Only $2,000How I Built a 10,000-Person Community with Only $2,000
How I Built a 10,000-Person Community with Only $2,000Traction Conf
 
Caveon webinar series - smart items- using innovative item design to make you...
Caveon webinar series - smart items- using innovative item design to make you...Caveon webinar series - smart items- using innovative item design to make you...
Caveon webinar series - smart items- using innovative item design to make you...Caveon Test Security
 
flowcytometry and sexed semen
flowcytometry and sexed semenflowcytometry and sexed semen
flowcytometry and sexed semenAmit Gnawali
 
Physiological changes in Pregnancy
Physiological changes in PregnancyPhysiological changes in Pregnancy
Physiological changes in PregnancyPrasant N
 
Слайдология: Необычный скелет презентации от Дэна Роэма
Слайдология: Необычный скелет презентации от Дэна РоэмаСлайдология: Необычный скелет презентации от Дэна Роэма
Слайдология: Необычный скелет презентации от Дэна РоэмаCЛАЙДОЛОГИЯ от В.Н.Бабанова
 
NDGeospatialSummit2019 - State GIS Program Update
NDGeospatialSummit2019 - State GIS Program UpdateNDGeospatialSummit2019 - State GIS Program Update
NDGeospatialSummit2019 - State GIS Program UpdateNorth Dakota GIS Hub
 
Games Developers Play Stretch Conference 2017
Games Developers Play Stretch Conference 2017Games Developers Play Stretch Conference 2017
Games Developers Play Stretch Conference 2017Łukasz Aziukiewicz
 
Слайдология: 5 проверенных элементов заголовка, которые привлекут внимание
Слайдология: 5 проверенных элементов заголовка, которые привлекут вниманиеСлайдология: 5 проверенных элементов заголовка, которые привлекут внимание
Слайдология: 5 проверенных элементов заголовка, которые привлекут вниманиеCЛАЙДОЛОГИЯ от В.Н.Бабанова
 
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...getadministrate
 
Слайдология: Цифрографика и фотография в презентации
Слайдология: Цифрографика и фотография в презентацииСлайдология: Цифрографика и фотография в презентации
Слайдология: Цифрографика и фотография в презентацииCЛАЙДОЛОГИЯ от В.Н.Бабанова
 
Gad.U Product Opportunity
Gad.U Product OpportunityGad.U Product Opportunity
Gad.U Product OpportunityGrad.U
 

What's hot (20)

Research
ResearchResearch
Research
 
Ojwpjzgamnurprezi
OjwpjzgamnurpreziOjwpjzgamnurprezi
Ojwpjzgamnurprezi
 
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?
Jak negatywne rekomendacje wpływają na sprzedaż w hotelach?
 
Atención al Trauma Grave
Atención al Trauma GraveAtención al Trauma Grave
Atención al Trauma Grave
 
Das Web im Geschwindigkeitsrausch
Das Web im GeschwindigkeitsrauschDas Web im Geschwindigkeitsrausch
Das Web im Geschwindigkeitsrausch
 
How I Built a 10,000-Person Community with Only $2,000
How I Built a 10,000-Person Community with Only $2,000How I Built a 10,000-Person Community with Only $2,000
How I Built a 10,000-Person Community with Only $2,000
 
NDGISUC2017 - Full GISTC Meeting
NDGISUC2017 - Full GISTC MeetingNDGISUC2017 - Full GISTC Meeting
NDGISUC2017 - Full GISTC Meeting
 
Caveon webinar series - smart items- using innovative item design to make you...
Caveon webinar series - smart items- using innovative item design to make you...Caveon webinar series - smart items- using innovative item design to make you...
Caveon webinar series - smart items- using innovative item design to make you...
 
flowcytometry and sexed semen
flowcytometry and sexed semenflowcytometry and sexed semen
flowcytometry and sexed semen
 
Physiological changes in Pregnancy
Physiological changes in PregnancyPhysiological changes in Pregnancy
Physiological changes in Pregnancy
 
20 Jahre GBI
20 Jahre GBI 20 Jahre GBI
20 Jahre GBI
 
Слайдология: Необычный скелет презентации от Дэна Роэма
Слайдология: Необычный скелет презентации от Дэна РоэмаСлайдология: Необычный скелет презентации от Дэна Роэма
Слайдология: Необычный скелет презентации от Дэна Роэма
 
NDGeospatialSummit2019 - State GIS Program Update
NDGeospatialSummit2019 - State GIS Program UpdateNDGeospatialSummit2019 - State GIS Program Update
NDGeospatialSummit2019 - State GIS Program Update
 
Synopsys
SynopsysSynopsys
Synopsys
 
Games Developers Play Stretch Conference 2017
Games Developers Play Stretch Conference 2017Games Developers Play Stretch Conference 2017
Games Developers Play Stretch Conference 2017
 
Слайдология: 5 проверенных элементов заголовка, которые привлекут внимание
Слайдология: 5 проверенных элементов заголовка, которые привлекут вниманиеСлайдология: 5 проверенных элементов заголовка, которые привлекут внимание
Слайдология: 5 проверенных элементов заголовка, которые привлекут внимание
 
Слайдология: Визуальная сигнализация на слайде
Слайдология: Визуальная сигнализация на слайдеСлайдология: Визуальная сигнализация на слайде
Слайдология: Визуальная сигнализация на слайде
 
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...
LITE 2017 – Marketing Fundamentals for Training Companies [Petra Hajal & Laya...
 
Слайдология: Цифрографика и фотография в презентации
Слайдология: Цифрографика и фотография в презентацииСлайдология: Цифрографика и фотография в презентации
Слайдология: Цифрографика и фотография в презентации
 
Gad.U Product Opportunity
Gad.U Product OpportunityGad.U Product Opportunity
Gad.U Product Opportunity
 

More from DefCamp

Remote Yacht Hacking
Remote Yacht HackingRemote Yacht Hacking
Remote Yacht HackingDefCamp
 
Mobile, IoT, Clouds… It’s time to hire your own risk manager!
Mobile, IoT, Clouds… It’s time to hire your own risk manager!Mobile, IoT, Clouds… It’s time to hire your own risk manager!
Mobile, IoT, Clouds… It’s time to hire your own risk manager!DefCamp
 
The Charter of Trust
The Charter of TrustThe Charter of Trust
The Charter of TrustDefCamp
 
Internet Balkanization: Why Are We Raising Borders Online?
Internet Balkanization: Why Are We Raising Borders Online?Internet Balkanization: Why Are We Raising Borders Online?
Internet Balkanization: Why Are We Raising Borders Online?DefCamp
 
Bridging the gap between CyberSecurity R&D and UX
Bridging the gap between CyberSecurity R&D and UXBridging the gap between CyberSecurity R&D and UX
Bridging the gap between CyberSecurity R&D and UXDefCamp
 
Secure and privacy-preserving data transmission and processing using homomorp...
Secure and privacy-preserving data transmission and processing using homomorp...Secure and privacy-preserving data transmission and processing using homomorp...
Secure and privacy-preserving data transmission and processing using homomorp...DefCamp
 
Drupalgeddon 2 – Yet Another Weapon for the Attacker
Drupalgeddon 2 – Yet Another Weapon for the AttackerDrupalgeddon 2 – Yet Another Weapon for the Attacker
Drupalgeddon 2 – Yet Another Weapon for the AttackerDefCamp
 
Economical Denial of Sustainability in the Cloud (EDOS)
Economical Denial of Sustainability in the Cloud (EDOS)Economical Denial of Sustainability in the Cloud (EDOS)
Economical Denial of Sustainability in the Cloud (EDOS)DefCamp
 
Trust, but verify – Bypassing MFA
Trust, but verify – Bypassing MFATrust, but verify – Bypassing MFA
Trust, but verify – Bypassing MFADefCamp
 
Threat Hunting: From Platitudes to Practical Application
Threat Hunting: From Platitudes to Practical ApplicationThreat Hunting: From Platitudes to Practical Application
Threat Hunting: From Platitudes to Practical ApplicationDefCamp
 
Building application security with 0 money down
Building application security with 0 money downBuilding application security with 0 money down
Building application security with 0 money downDefCamp
 
Implementation of information security techniques on modern android based Kio...
Implementation of information security techniques on modern android based Kio...Implementation of information security techniques on modern android based Kio...
Implementation of information security techniques on modern android based Kio...DefCamp
 
Lattice based Merkle for post-quantum epoch
Lattice based Merkle for post-quantum epochLattice based Merkle for post-quantum epoch
Lattice based Merkle for post-quantum epochDefCamp
 
The challenge of building a secure and safe digital environment in healthcare
The challenge of building a secure and safe digital environment in healthcareThe challenge of building a secure and safe digital environment in healthcare
The challenge of building a secure and safe digital environment in healthcareDefCamp
 
Timing attacks against web applications: Are they still practical?
Timing attacks against web applications: Are they still practical?Timing attacks against web applications: Are they still practical?
Timing attacks against web applications: Are they still practical?DefCamp
 
Tor .onions: The Good, The Rotten and The Misconfigured
Tor .onions: The Good, The Rotten and The Misconfigured Tor .onions: The Good, The Rotten and The Misconfigured
Tor .onions: The Good, The Rotten and The Misconfigured DefCamp
 
Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...
Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...
Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...DefCamp
 
We will charge you. How to [b]reach vendor’s network using EV charging station.
We will charge you. How to [b]reach vendor’s network using EV charging station.We will charge you. How to [b]reach vendor’s network using EV charging station.
We will charge you. How to [b]reach vendor’s network using EV charging station.DefCamp
 
Connect & Inspire Cyber Security
Connect & Inspire Cyber SecurityConnect & Inspire Cyber Security
Connect & Inspire Cyber SecurityDefCamp
 
The lions and the watering hole
The lions and the watering holeThe lions and the watering hole
The lions and the watering holeDefCamp
 

More from DefCamp (20)

Remote Yacht Hacking
Remote Yacht HackingRemote Yacht Hacking
Remote Yacht Hacking
 
Mobile, IoT, Clouds… It’s time to hire your own risk manager!
Mobile, IoT, Clouds… It’s time to hire your own risk manager!Mobile, IoT, Clouds… It’s time to hire your own risk manager!
Mobile, IoT, Clouds… It’s time to hire your own risk manager!
 
The Charter of Trust
The Charter of TrustThe Charter of Trust
The Charter of Trust
 
Internet Balkanization: Why Are We Raising Borders Online?
Internet Balkanization: Why Are We Raising Borders Online?Internet Balkanization: Why Are We Raising Borders Online?
Internet Balkanization: Why Are We Raising Borders Online?
 
Bridging the gap between CyberSecurity R&D and UX
Bridging the gap between CyberSecurity R&D and UXBridging the gap between CyberSecurity R&D and UX
Bridging the gap between CyberSecurity R&D and UX
 
Secure and privacy-preserving data transmission and processing using homomorp...
Secure and privacy-preserving data transmission and processing using homomorp...Secure and privacy-preserving data transmission and processing using homomorp...
Secure and privacy-preserving data transmission and processing using homomorp...
 
Drupalgeddon 2 – Yet Another Weapon for the Attacker
Drupalgeddon 2 – Yet Another Weapon for the AttackerDrupalgeddon 2 – Yet Another Weapon for the Attacker
Drupalgeddon 2 – Yet Another Weapon for the Attacker
 
Economical Denial of Sustainability in the Cloud (EDOS)
Economical Denial of Sustainability in the Cloud (EDOS)Economical Denial of Sustainability in the Cloud (EDOS)
Economical Denial of Sustainability in the Cloud (EDOS)
 
Trust, but verify – Bypassing MFA
Trust, but verify – Bypassing MFATrust, but verify – Bypassing MFA
Trust, but verify – Bypassing MFA
 
Threat Hunting: From Platitudes to Practical Application
Threat Hunting: From Platitudes to Practical ApplicationThreat Hunting: From Platitudes to Practical Application
Threat Hunting: From Platitudes to Practical Application
 
Building application security with 0 money down
Building application security with 0 money downBuilding application security with 0 money down
Building application security with 0 money down
 
Implementation of information security techniques on modern android based Kio...
Implementation of information security techniques on modern android based Kio...Implementation of information security techniques on modern android based Kio...
Implementation of information security techniques on modern android based Kio...
 
Lattice based Merkle for post-quantum epoch
Lattice based Merkle for post-quantum epochLattice based Merkle for post-quantum epoch
Lattice based Merkle for post-quantum epoch
 
The challenge of building a secure and safe digital environment in healthcare
The challenge of building a secure and safe digital environment in healthcareThe challenge of building a secure and safe digital environment in healthcare
The challenge of building a secure and safe digital environment in healthcare
 
Timing attacks against web applications: Are they still practical?
Timing attacks against web applications: Are they still practical?Timing attacks against web applications: Are they still practical?
Timing attacks against web applications: Are they still practical?
 
Tor .onions: The Good, The Rotten and The Misconfigured
Tor .onions: The Good, The Rotten and The Misconfigured Tor .onions: The Good, The Rotten and The Misconfigured
Tor .onions: The Good, The Rotten and The Misconfigured
 
Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...
Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...
Needles, Haystacks and Algorithms: Using Machine Learning to detect complex t...
 
We will charge you. How to [b]reach vendor’s network using EV charging station.
We will charge you. How to [b]reach vendor’s network using EV charging station.We will charge you. How to [b]reach vendor’s network using EV charging station.
We will charge you. How to [b]reach vendor’s network using EV charging station.
 
Connect & Inspire Cyber Security
Connect & Inspire Cyber SecurityConnect & Inspire Cyber Security
Connect & Inspire Cyber Security
 
The lions and the watering hole
The lions and the watering holeThe lions and the watering hole
The lions and the watering hole
 

How to Fuzz like a Hacker