nullcon Goa 2017 - Nearly Generic Fuzzing Of XML Based Formats by Nicholas Gregoire
About this talk
This talk presents a research project focused on fuzzing XSLT targets using an updated toolbox from the 2012 study, while also generalizing the bug-finding processes and tools to other XML-based formats. The speaker discusses the development of a new tool specifically designed to mutate XML documents for enhanced security testing. Nicolas Gregoire, with over 15 years of experience in penetration testing and security auditing, shares insights from his work at Agarri, a company dedicated to discovering security vulnerabilities. His extensive experience includes participation in bug bounties and presenting research at global conferences.
More from this event
See all 33 talks →
nullcon Goa 2017 - Antivirus Evasion Reconstructed Veil 3 0 by Chris Truncer
59:38
nullcon Goa 2017 - Barbarians At The Gateway by Dave Lewis
42:56
nullcon Goa 2017 - Drone Hijacking And Other IoT Hacking With GNU Radio And SDR by Arthur Garipov
46:02
nullcon 2017 - Invoke Obfuscation: Powershell Obfuscation Techniques n How To Try To Detect Them
55:26