Ne dites rien, les mots sont superflus...

I'll be giving dojo on Scapy. It will be a full day of packet crafting, fuzzing, and more. See full description here. Next scheduled sessions: CanSecWest in March 2008

Security Power Tools is out in August, with 848 pages. I wrote a complete chapter on Scapy.

Me

• Where I happen to write: MISC magazine
• PGP Key

Conferences

• OSDEM : Kernel security (Slides for OSDEM, Feb 2001)
• FOSDEM : Kernel security (Slides for FOSDEM, Feb 2002)
• OpenWeekend : Slides
• LSM (RMLL) : Kernel security (Slides for LSM, July 2002)
• DefCon X : Kernel security (Slides for DefCon 10, August 2002)
• FOSDEM 2003 : presentation of libqsearch (Slides for FOSDEM, Feb 2003)
• LSM 2003 : presentation of Scapy and presentation of shellforge
• 10th Linux Kongress : presentation of Kernel Level Security (again) (article for proceedings)
• CanSecWest/core04 : Shellforge G2: shellcodes for everybody and every platform
• SyScAN 04 : About UNIX Shellcodes
• CanSecWest/core05 : Packet generation and network based attacks with Scapy
• LSM (RMLL) 2005 : ShellForge
• T2'2005 : Scapy: explore the net with new eyes (printable version)
• Summerschool Applied IT Security 2005 : Network packet manipulation with Scapy
• Hack.lu 2005 conference and workshop : Network packet manipulation with Scapy (printable version)
• PacSec/core05 : Network packet forgery with Scapy (printable version)
• BlackHat Europe 06 : Silver Needle in the Skype (printable version)
• Hack In The Box 2006 : Scapy and IPv6 networking
• CanSecWest/core07 : Ipv6 Routing Headers Security (tools demonstrated: RT Graph 3D and IPv6World) (summary of issues and fixes triggered)

Projects/programs

• Scapy: a powerful network discovery tool. v1.1.2 is out!
• RTGraph3D: make 3D graphs in realtime
• IPv6 world: 3D IPv6 backbone explorer
• EtherPuppet : clone an Ethernet interface through TCP (even work on my Linksys WRT54G)
• net2pcap : auditable daemon (less than 300 lines) to dump traffic to a pcap file.
• PCAPdispatcher: small program to dispatch a big pcap file into many others by their type or connection.
• ShellForge: write your shellcodes in C, ShellForge will convert them. (Inspired from Stealth's Hellkit).
• tunproxy : a demonstration tunneling program over UDP using tun/tap (and his C clone)
• eapy: a simplistic 802.1X EAP authentication client (MD5 challenges only, use PF_PACKET --> Linux only)
• bfy: a little BrainFuck interpreter (BrainFuck Hello world program included!)
• asm2graph and bin2graph : 2 small experiments to convert a binary program to a graph. (Use GraphViz).
  Technical solutions are very close to Silvio's flowgraph, which I did not know at this time.
• arpyspoof: a clone of arpspoof. See links on arp-sk page for more informations or tools about ARP cache poisonning.
• etherleak.py : a simple etherleak tester.
• All python scripts
• experiments

Linux Kernel Patches

• SYN/FIN swap patch : swap SYN and FIN flags in TCP headers to/from a given peer
• ICMP Leak patch for 2.0.39 to fix ICMP Leak bug
• LIDS homepage
• LIDS 0.0 specif. rev0.2 (lids_specif.ps.gz)
• all patches

Intrusion detection

• Rapport (et aussi en PDF)
• La biblio

Nmap

• Some nmap hacks

Quick search experiments

• A postscript
• Implementations in python
• libqsearch project

World domination

• Search bot, sketch 1

Sharp Zaurus

• Ethereal on a Sharp Zaurus
• Example for setting up a cross compilation tool chain

If you trust me, you can trust my website

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Subject: C=FR, ST=IdF, L=Paris, O=secdev.org, OU=secdev.org, CN=*.secdev.org
SHA1 Fingerprint=93:6D:04:BB:38:4F:72:8F:29:0F:7F:3F:4B:A9:D6:47:D7:78:D0:A1
MD5 Fingerprint=C1:4F:5A:0F:0F:F9:23:D3:5B:08:0B:70:A5:B6:FF:4F
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFGll9eXuj/Xz2aQ+IRAmGeAKCeeJCuM9MDSeshSUkLWrYm0xivRwCgklHt
vOZGAEOxbspmQ9QqD7fNEVM=
=nqz8
-----END PGP SIGNATURE-----

Except where explicitely said otherwise, work on this site is licensed under a
Creative Commons Attribution-NonCommercial-ShareAlike 2.5 License.