Ne dites rien, les mots sont superflus...

Me

• mail: phil@secdev.org
• Where I happen to write: MISC magazine
• PGP Key
•  Security Power Tools was out in August 2007. I wrote a complete chapter on Scapy and one on shellcodes.
If you like what I do, you can

Trainings

•  Scapy trainings at CanSecWest, EuSecWest, PacSec. NEXT SESSION: CanSecWest march 7th and 8th, 2011
• I can give trainings on many subjects (Scapy, networks, shellcoding, exploit writing, etc.). Contact me directly: phil@secdev.org

Conferences

• OSDEM : Kernel security (Slides for OSDEM, Feb 2001)
• FOSDEM : Kernel security (Slides for FOSDEM, Feb 2002)
• OpenWeekend : Slides
• LSM (RMLL) : Kernel security (Slides for LSM, July 2002)
• DefCon X : Kernel security (Slides for DefCon 10, August 2002)
• FOSDEM 2003 : presentation of libqsearch (Slides for FOSDEM, Feb 2003)
• LSM 2003 : presentation of Scapy and presentation of shellforge
• 10th Linux Kongress : presentation of Kernel Level Security (again) (article for proceedings)
• CanSecWest/core04 : Shellforge G2: shellcodes for everybody and every platform
• SyScAN 04 : About UNIX Shellcodes
• CanSecWest/core05 : Packet generation and network based attacks with Scapy
• LSM (RMLL) 2005 : ShellForge
• T2'2005 : Scapy: explore the net with new eyes (printable version)
• Summerschool Applied IT Security 2005 : Network packet manipulation with Scapy
• Hack.lu 2005 conference and workshop : Network packet manipulation with Scapy (printable version)
• PacSec/core05 : Network packet forgery with Scapy (printable version)
• BlackHat Europe 06 : Silver Needle in the Skype (printable version)
• Hack In The Box 2006 : Scapy and IPv6 networking
• CanSecWest/core07 : Ipv6 Routing Headers Security (tools demonstrated: RT Graph 3D and IPv6World) (summary of issues and fixes triggered)

Projects/programs

• Scapy: a powerful network discovery tool. v2.0.1 is out!
• RTGraph3D: make 3D graphs in realtime
• IPv6 world: 3D IPv6 backbone explorer
• EtherPuppet : clone an Ethernet interface through TCP (even work on my Linksys WRT54G)
• net2pcap : auditable daemon (less than 300 lines) to dump traffic to a pcap file.
• PCAPdispatcher: small program to dispatch a big pcap file into many others by their type or connection.
• ShellForge: write your shellcodes in C, ShellForge will convert them. (Inspired from Stealth's Hellkit).
• tunproxy : a demonstration tunneling program over UDP using tun/tap (and his C clone)
• eapy: a simplistic 802.1X EAP authentication client (MD5 challenges only, use PF_PACKET --> Linux only)
• bfy: a little BrainFuck interpreter (BrainFuck Hello world program included!)
• asm2graph and bin2graph : 2 small experiments to convert a binary program to a graph. (Use GraphViz).
  Technical solutions are very close to Silvio's flowgraph, which I did not know at this time.
• arpyspoof: a clone of arpspoof. See links on arp-sk page for more informations or tools about ARP cache poisonning.
• etherleak.py : a simple etherleak tester.
• All python scripts
• experiments

Linux Kernel Patches

• SYN/FIN swap patch : swap SYN and FIN flags in TCP headers to/from a given peer
• ICMP Leak patch for 2.0.39 to fix ICMP Leak bug
• LIDS homepage
• LIDS 0.0 specif. rev0.2 (lids_specif.ps.gz)
• all patches

Intrusion detection

• Rapport (et aussi en PDF)
• La biblio

Nmap

• Some nmap hacks

Quick search experiments

• A postscript
• Implementations in python
• libqsearch project

World domination

• Search bot, sketch 1

Sharp Zaurus

• Ethereal on a Sharp Zaurus
• Example for setting up a cross compilation tool chain

If you trust me, you can trust my website

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Issuer: C=FR, ST=IdF, L=Paris, O=secdev.org, OU=secdev.org, CN=*.secdev.org
SHA1 Fingerprint=EA:EE:C0:3F:53:B8:C8:AD:6A:05:24:32:85:F4:54:8D:87:21:34:7D
MD5 Fingerprint=0D:07:6B:00:E7:86:C6:3C:B8:55:EB:02:6A:FC:E0:9C
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIMfI3Xuj/Xz2aQ+IRAmKbAKC25LEoT753HUqMfqNLyh0/LikftwCfbDlv
Ju6Rwb59JxlZIR+J6TKwE78=
=wexP
-----END PGP SIGNATURE-----

Except where explicitely said otherwise, work on this site is licensed under GPLv2 for code and under a
Creative Commons Attribution-NonCommercial-ShareAlike 2.5 License for the remaining.