Navigation

Home | Profile/Research | Advisories | Flickr | Contact | RSS | E-mail alert

Profile

Who am I ?
Name: Thierry Zoller
Location: Luxembourg
Age: 30
Social Networks:· Linked-in · Twitter

I have been into IT Security research, made publications and participated in security grass root movements since over 13 years. I led a security software company, worked as a Senior Security Consultant/Engineer and directed the product security group at a well known international security company.

I have over 13 years of hands-on security background, am a lecturer at international security conferences, and member of the European ISC2 CSSLP advisory board.


Talks / Lectures
Vulnerabilities

2009
2008
2007

2006
2005


Anti-virus bypasses/evasions

Past security projects
  • TLSecurity
  • GRCs***s

Research and Development :
[ BTcrack 1.11 (Win32) ]
BTCrack is the worlds first Bluetooth Pass phrase (PIN) bruteforce tool, BTCrack will bruteforce the Passkey and the Link key from captured Pairing* exchanges. To capture the pairing data it is necessary to have a Professional Bluetooth Analyzer : FTE (BPA 100, BPA 105, others), Merlin OR to know how to flash a CSR based consumer USB dongle with special firmware. As of version 1.1, BTcrack started to include FPGA support through picocomputing.
[ BTCrack GPL ]
This is a straight forward linux port of BTCrack. Should work with most other unixes too, code is nearly ansi clean, except for strdup(), but I guess every OS should have this by now.
[ Secure-IT ]
Secure-It ™ is a local Windows security hardening tool, pro actively secure your PC by either disabling the intrusion and propagation vectors pro actively or simply reduce the attack surface by disabling unimportant functions.
It secures Windows desktop PCs aswell as Internet servers against new dangers by blocking the root cause of the vulnerabilities exploited by malware, worms and spy ware. Secure-it had a track record of preventing several 0-day exploits pro actively

History of real-life proactive protection :
- 2004 Protected against the Help Active X control exploit in advance.
- 2004 Protected against the second Help Active X control exploit not correctly patched in advance.
- 2004 Protected against the DHTML Active-x Control exploit in advance.
- 2005 Protected against the Microsoft MSHTA Script Execution Vulnerability in advance.

Note: Secure-it last update was in 2005 and some settings, like the active-x blacklist are outdated and should no longer be used.
[ Harden-it ]
Harden-It™ is a Network and System hardening tool for Windows, by hardening the IP stack your Network can sustain or completely thwart various sophisticated network attacks
- Harden your server's TCP and IP stack (Netbios, ICMP, SYN, SYN-ACK..)
- Reduces or mitigates effects from DoS and other network based attacks
- Enable SYN flood protection when an attack is detected
- Set the threshold values that are used to determine what constitutes an attack
- Various other protections.
History of real-life proactive protection :
- 2006 Protected against the Windows IGMP Denial of service attack in advance.

[ Remote Administration Tool ]
Remote Administration Tool is a small free remote control software package derived from the popular TightVNC software. With "Remote Administration Tool", you can see the desktop of a remote machine and control it with your local mouse and keyboard, just like you would do it sitting in the front of that computer. Small, easy, no installation required.
[ CSS-DIE ]
CSSDIE is a community-developed utility for verifying browser integrity, written by H D Moore, Matt Murphy, Aviv Raff, and Thierry Zoller. CSSDIE will look for common CSS1/CSS2/CSS3 implementation flaws by specifying common bad values for style values. This utility may cause the browser to "freeze" for a long period of time, this is OK, and interrupting the process will prevent all the tests from completing. Some browsers will raise a warning if a script is taking too long to execute - you will need to click "No, do not abort" or the equivalent to allow all tests to complete.
[ Omron Communicator ]
This software is based on my efforts to reverse engineer Hitachi Omrons Hybrid Card readers. Omron Card readers are used in various commercial setups. Identity management, payement systems, parking systems are a few of these. The effort displayed on this blog is purely done out of research and awareness purposes.

Papers - Please get the Sarcasm
[ The Influence of Bayesian Methodologies on Algorithms ]
Consistent hashing must work. Given the current status of random configurations, bi- ologists famously desire the deployment of PKI, which embodies the intuitive principles of cryptoanalysis.
[ Signed, Large-Scale Methodologies for Public-Private Key Pairs ]
The implications of certifiable configurations have been far-reaching and pervasive. After years of confirmed research into flip-flop gates, we disprove the analysis of robots that would make simulating context free grammar a real possibility, which embodies the confusing principles of stenography.

Our focus in this work is not on whether multi-processors can be made authenticated, random, and empathic, but rather on presenting new semantic communication (Moo).
The study of the location-identity split has evaluated linked lists, and current trends suggest that the analysis of evolutionary programming will soon emerge.

Uniļ¬ed optimal symmetries have led to many extensive advances, including SCSI disks and agents [10]. After years of appropriate researchinto cache coherence, we prove the improvement of digital-to-analog converters, which embodies the robust principles of cryptoanalysis. Valence, our new heuristic for the construction f rasterization, is the solution to all of these problems.

The emulation of erasure coding is an essential challenge. ApodAni, our new framework for pseudo random theory, is the solution to all of these grand challenges.
Hardware Hacking
This is my version of the the Bluetooth Sniper weapon, it features a medium sized YAGI antenna combined with a 10* magnification scope and a metallised parabolic which may bundle the Bluetooth signal, thus further enhancing the range.
A long term project with reards to USB devices and security.


Digg Technorati Delicious StumbleUpon Reddit Facebook Google Bookmark
at Wednesday, March 15, 2000

0 comments:

Post a Comment