Eslam Salem

🔬 ابحاث الثغرات

• EJS, Server side template injection RCE [CVE-2022-29078]
• SSRF vulnerability in Uppy [CVE-2020-8135]

👨🏻‍💻 ادوات مفتوحة المصدر

• HASH (HTTP Agnostic Software Honeypot)
• API Security Checklist
• Proof of concept code for Datadog Security Labs referenced exploits

🗣 المؤتمرات

• Discover and Exploit Hidden Vulnerabilities with Out-Of-Band Attacks (BlackHat MEA 2023) - Slides
• Introduce HASH (HTTP Agnostic Software Honeypot) Framework (BlackHat MEA 2023) - Slides
• Introduce HASH (HTTP Agnostic Software Honeypot) Framework (BlackHat USA 2023) - Slides - Video
• Stealing the keys to the castle (BlackHat MEA 2022) - Slides
• Dive into the serverless security (Bsides Cairo 2020) - Slides
• Writing secure NodeJS code (EgyptJS 2019) - Video
• Inside the web evil codes (Cairo Security Camp 2016) - Video
• WAF exploitation & Bypass (Cairo Security Camp 2015) Video

✍️ اخر التدوينات

✍️ التدوينات الخارجيه

• October 13, 2023 - The Confluence CVE-2023-22515 vulnerability: Overview, detection, and remediation
• May 2, 2023 - Introducing HASH: The HTTP Agnostic Software Honeypot framework
• November 1, 2022 - The OpenSSL punycode vulnerability (CVE-2022-3602): Overview, detection, exploitation, and remediation
• June 7, 2022 - The Confluence RCE vulnerability (CVE-2022-26134): Overview, detection, and remediation
• April 1, 2022 - The Spring4Shell vulnerability: Overview, detection, and remediation