Saumil Shah

📹 Dynamic Video Playlist

51

Talks

1

Tool Demos

2

Keynotes

2

Books

Tools	ARM-X
Conferences	Hack in the Box Security (16) Blackhat (16) HackLu (9) 44Con (4) Can Sec West (3) Deepsec (3) Nullcon (2) Syscan (1)
Focus Areas	Penetration Testing 42 Application Security 31 DevSecOps 22 Security Operations & Defense 16 Security Architecture 14 Governance, Risk & Compliance 12 Web Application Security 9 Security Awareness 8 Data Privacy & Protection 7 Hardware Security 7 Reverse Engineering 6 Vulnerability Management 6 Incident Response 5 IoT Security 5 Network Security 5 Industrial Control Systems Security 4 Malware Analysis 4

Timeline^{(*Experimental)}

1997

1998

1999

2000

2001

2002

2003

2004

2005

2006

2007

2008

2009

2010

2011

2012

2013

2014

2015

2016

2017

2018

2019

2020

2021

2022

2023

Penetration Testing

Application Security

DevSecOps

Security Operations & Defense

Security Architecture

Governance, Risk & Compliance

Web Application Security

Security Awareness

Data Privacy & Protection

Hardware Security

Hacktivity

---- 2023 ----

2023/04/21

Talk Security Architecture Hitbsecconf : LOCKNOTE:THE HAND THAT STRIKES, ALSO BLOCKS

---- 2022 ----

2022/05/18

Talk Hardware Security Cansecwest : Launching EMUX - A framework for emulating ARM and MIPS IoT Devices

---- 2020 ----

2020/03/18

Talk Penetration Testing Cansecwest : The ARM-X Firmware Emulation Framework

---- 2019 ----

2019/10/16

Tool Demo Reverse Engineering Hitbsecconf : Introducing ARM-X - The ARM IoT Firmware Emulation Framework

2019/09/13

Talk Security Operations & Defense 44con : The CISO’s Dilemma

2019/08/29

Keynote Security Operations & Defense Hitbsecconf : The CISO’s Dilemma

2019/05/09

Talk Reverse Engineering Hitbsecconf : Make ARM Shellcode Great Again

---- 2018 ----

2018/11/02

Talk Security Operations & Defense Hitbsecconf : Defending The Enterprise in 2018

2018/10/15

Talk Reverse Engineering Hacklu : Make ARM Shellcode Great Again

2018/09/12

Talk Reverse Engineering 44con : Make ARM Shellcode Great Again

---- 2017 ----

2017/04/13

Keynote Security Operations & Defense Hitbsecconf : Redefining Defense

2017/03/31

Talk Security Operations & Defense Blackhat : The Seven Axioms of Security

2017/03/15

Talk Penetration Testing Cansecwest : Inside Stegosploit

---- 2016 ----

2016/10/19

Talk Security Awareness Hacklu : 2016: The Infosec Crossroads

2016/10/07

Talk Application Security Deepsec : Inside Stegosploit

2016/09/14

Talk Security Operations & Defense 44con : 2016: The Infosec Crossroads

---- 2015 ----

2015/11/12

Talk Penetration Testing Blackhat : Stegosploit - Exploit Delivery with Steganography and Polyglots

2015/10/21

Talk Penetration Testing Hacklu : Stegosploit - Delivering Drive-By Exploits With Only Images

2015/09/11

Talk Penetration Testing 44con : Stegosploit – Drive-by Browser Exploits using only Images

2015/05/28

Talk Penetration Testing Hitbsecconf : Stegosploit: Hacking With Pictures

2015/03/27

Talk Penetration Testing Syscan : Stegosploit - Hacking with Pictures

---- 2014 ----

2014/10/23

Talk Penetration Testing Hacklu : Hacking with Images - Evil Pictures

2014/02/14

Talk Security Awareness Nullcon : 12 YEARS AND A BAKER’S DOZEN

---- 2012 ----

2012/11/29

Talk Penetration Testing Deepsec : Bad Things in Good Packages - Creative Exploit Delivery

2012/10/10

Talk Penetration Testing Hitbsecconf : Innovative Approaches to Exploit Delivery

---- 2011 ----

2011/10/13

Talk Threat Intelligence Hitbsecconf : Web Wars 3

2011/09/19

Talk Penetration Testing Hacklu : The travelling hacksmith

2011/02/25

Talk Penetration Testing Nullcon : Lessons Learned From 2010

---- 2010 ----

2010/10/27

Talk Penetration Testing Hacklu : Exploit Delivery - Tricks and Techniques

2010/10/14

Talk Penetration Testing Hitbsecconf : Exploit Delivery

2010/07/01

Talk Penetration Testing Hitbsecconf : The Travelling Hacksmith 2009 – 2010

2010/04/21

Talk Penetration Testing Hitbsecconf : Web Security – Going Nowhere?

---- 2009 ----

2009/11/19

Talk Penetration Testing Deepsec : Ownage 2.0

2009/10/28

Talk Penetration Testing Hacklu : Ownage 2.0

2009/10/07

Talk Penetration Testing Hitbsecconf : How to Own the World – One Desktop at a Time

2009/04/22

Talk Hardware Security Hitbsecconf : Pwnage 2.0

---- 2008 ----

2008/10/29

Talk Penetration Testing Hitbsecconf : Browser Exploits - A New Model for Browser Security

2008/10/22

Talk Penetration Testing Hacklu : Browser Exploits - A new model for Browser security

---- 2006 ----

2006/10/19

Talk Penetration Testing Hacklu : Writing Metasploit plugins - from vulnerability to exploit

2006/08/01

Talk Penetration Testing Blackhat : Writing Metasploit Plugins - from Vulnerability to Exploit

2006/04/13

Talk Penetration Testing Hitbsecconf : Writing Metasploit Plugins - From Vulnerability to Exploit

---- 2005 ----

2005/10/18

Talk Security Operations & Defense Blackhat : Adware/Spyware - Saumil Shah, Dave Cole

2005/03/31

Talk Penetration Testing Blackhat : Defeating Automated Web Assessment Tools

---- 2004 ----

2004/07/28

Talk Penetration Testing Blackhat : Defeating Automated Web Assessment Tools

2004/05/19

Talk Data Privacy & Protection Blackhat : HTTP Fingerprinting and Advanced Assessment Techniques

2004/01/29

Talk Data Privacy & Protection Blackhat : HTTP Fingerprinting and Advanced Assessment Techniques

---- 2003 ----

2003/12/16

Talk Data Privacy & Protection Blackhat : HTTP Fingerprinting & Advanced Assessment Techniques

2003/10/01

Talk Data Privacy & Protection Blackhat : HTTP Fingerprinting & Advanced Assessment Techniques

2003/07/31

Talk Data Privacy & Protection Blackhat : HTTP Fingerprinting & Advanced Assessment Techniques

2003/02/26

Talk Data Privacy & Protection Blackhat : HTTP: Advanced Assessment Techniques

---- 2002 ----

2002/10/03

Talk Penetration Testing Blackhat : Top Ten Web Attacks

2002/08/18

Book Addison Wesley Professional : Web Hacking: Attacks and Defense - Saumil Shah, Shreeraj Shah, Stuart MC Clure

---- 2001 ----

2001/11/21

Talk Network Security Blackhat : One-Way SQL Hacking : Futility of Firewalls in Web Hacking

2001/04/26

Talk Penetration Testing Blackhat : Web Hacking

2001/02/14

Talk Penetration Testing Blackhat : Web Hacking

---- 1997 ----

1997/01/14

Book Tata MC Graw Hill : The Anti-virus Book