They who can give up essential liberty
to obtain a little temporary safety,
deserve neither liberty nor safety.

Benjamin Franklin, 1775

news

november 2018

I am now tisax level 3 security certified for handling prototypes and information with high protection requirements.

happy holidays!

august 2018

new things:

afl-dynamorio enables blackbox binary fuzzing with alf-fuzz through dynamorio

afl patches is a collection of patches for afl that improve performance, coverage, features - or fixes bugs.

additionally I improved the performance of afl-dyninst which is now by far the fastest guided fuzzer solution for blackbox binaries.

afl with dynamorio afl patches afl-dyninst

march 2018

happy eastern! and I brought gifts:

afl-pin enables blackbox binary fuzzing with alf-fuzz through pintool

afl-simulate simulates afl-fuzz to benchmark performance of e.g. afl-pin, afl-dynamorio and afl-dyninst

additionally I am now the co-author of afl-dyninst :)

afl with pintool afl-fuzz simulator afl-dyninst

january 2018

i just released version 3.4 of my ipv6 pentest toolkit.

happy new year!

december 2017

about 20 years ago I coded the proof-of-concept tool rwwwshell. today it can be seen used in the tv series mr.robot in season 2 episode 12 and season 3 episode 1 :)

i wish everyone happy holidays and a great new year!

august 2017

at the (german) heise conference for secure software development (24-26 october 2017) I will do a talk about the (in-)security impact of processors and compilers on the machine code created.

my talk at heise secdev 2017 (german)

july 2017

attention: by availability for the rest of 2017 is already getting low!
and i just released version 8.6 of hydra

hydra at github

may 2017

i just released version 8.5 of hydra

hydra at github

april 2017

the new design of the web page is there :)
happy eastern!

december 2016

the year worked out perfectly well with interesting projects and a lot of work. thank you for your trust in me! i wish everyone a happy xmas and a wonderful new year!
my ipv6 pentest & security training will be held for a last time for north america at the cansecwest security conference in vancouver from the 12-13th march 2017.
inhouse training are possible though, just contact me.

IPv6 Pentest & Security Training, CanSecWest conference, 12-13 March 2017, Vancouver, Canada

october 2015

presentations, keynotes & trainings in singapore, spain, netherlands, austria, ... and i'm booked out until beginning of next year :)

march 2015

many presentations and keynotes at international conferences, booked out with projects - thank you for a great 2014!

what makes my work & results special

  • it-security competence since 1994
  • clarity on vulnerabilities in your critical infrastructures
  • practical and down-to-earth recommendations which respect the organisation and processes
  • know-how transfer with the results and better awareness among your team
download my cv