SecTools Podcast Series

SecTools #09

Conversations with Tanya Janca about her works in DevSecOps including DevSlop project.

Tanya Janca Sanoop Thomas 26 Oct, 2018

Tanya Janca, also known as SheHacksPurple, is the author of ‘Alice and Bob Learn Application Security’. She is also the founder of We Hack Purple, an online learning academy, community and podcast that revolves around teaching everyone to create secure software. Tanya has been coding and working in IT for over twenty years, won numerous awards, and has been everywhere from startups to public …

SecTools #08

Conversations with Mike Hodges about his project - hideNsneak.

Mike Hodges Sanoop Thomas 10 Oct, 2018

Mike Hodges is a Senior Security Engineer at Red Ventures leading Red Team Operations and Incident Response. He comes from a background of application development and penetration testing consulting. Currently, his focus is on developing evasive offensive capabilities and fighting off the ever-present imposter syndrome brought on by working in InfoSec.

  • hideNsneak project - …

SecTools #07

Conversations with Anant Shrivastava about some of his works including Android Tamer, CodeVigilant and more.

Anant Shrivastava Sanoop Thomas 09 Oct, 2018

Anant Shrivastava started with computer and open source software since 2000. He moderated linux user group of bhopal and was active across other major linux user groups across India. Anant now working as Regional Director Asia Pacific for NotSoSecure Global Service. He has been Speaker/Trainer at various conferences including BlackHat, RuxCon, Nullcon, C0c0n, Rootconf, Clubhack, G0s, etc. He is …

SecTools #06

Conversations with Fotis Chantzis about Ncrack and also his research in medical device and IoT security.

Fotis Chantzis Sanoop Thomas 19 Jul, 2018

Fotis Chantzis has been a member of the core Nmap development team since 2009, when he wrote Ncrack under the mentorship of Fyodor, the original author of Nmap, during Google Summer of Code 2009 and 2010. He then worked as a mentor for the Nmap project during Google Summer of Code 2016 and 2017. He has also authored and published a video course on “Mastering Nmap”. His past research on network …

SecTools #05

Conversations with OJ Reeves about Metasploit framework and Meterpreter

OJ Reeves Sanoop Thomas 29 Jun, 2018

OJ Reeves is an Australian security professional who specializes in attack simulation. When not breaking networks and software, he is actively contributing to the Metasploit framework on Meterpreter for years. He is also a member of the Corelan team. Today OJ runs a specialist security consultancy called Beyond Binary based in Australia.

SecTools #04

Conversations with Ryan Dewhurst about DVWA, WPScan and more.

Ryan Dewhurst Sanoop Thomas 19 May, 2018

Ryan Dewhurst has been testing web applications professionally for security issues since 2009. He has a BSc (hons) Ethical Hacking for Computer Security that he completed with a First. Ryan is very active in the information security community, contributing to various OWASP projects and releasing his own popular tools such as Damn Vulnerable Web App (DVWA) and WPScan.

In 2013 Ryan was recognised by …

SecTools #03

Conversations with Simon Bennetts about his works with OWASP Zed Attack Proxy (ZAP).

Simon Bennetts Sanoop Thomas 17 May, 2018

Simon is the project leader for the OWASP Zed Attack Proxy (ZAP), one of the world’s most popular free security tools, which he first released in 2010. Previously a Java web application developer he now works in the Mozilla Firefox Operations Security team helping to protect the core services that Mozilla relies on to build, ship and run Firefox.

SecTools #02

Conversations with Didier Stevens about a collection of works in the area of malicious office document analysis.

Didier Stevens Sanoop Thomas 29 Apr, 2018

Didier Stevens (Microsoft MVP, SANS ISC Handler, GSSP-C, GCIA, GCIH, GREM, Wireshark Certified Network Analyst, CISSP , MCSD .NET, MCSE/Security, MCITP Windows Server 2008, RHCT, CCNP Security, OSWP) is a Senior Analyst (NVISO Didier is a pioneer in malicious PDF document research and malicious MS Office documents analysis and has developed several tools to help with the …