Hi there 👋

My name is Ivan, or Steph. I do security trainings, researches, and, occasionally, some bug-hunting, pentests, and other security stuff.

Projects

• For any kind of bruteforce find wordlists ... https://weakpass.com

• Open-source elearning management system for information security https://appsec.study

• Bughunting and workflow automation https://shrewdeye.app

• Distributed password brute-force system Kraker - Kraker

Talks, presentations, conferences, etc.

Did talks at the next conferences: One-Conference, BlackHat, HackingConf, Grehack, Hacktivity, RIT++, Confidence, S4 Europe, TBA.

• One-conference, How to automate vulnerabilities searching process for fun and profit

• BlackHat Europe, AppsecStudy - open-source elearning management system for information security

• BlackHat Europe 2022, shrewdeye - low hanging OSINT and reconnaissance

• Hacktivity, Appsec404 workshop

• GreHack, Java in AppSec404

• BlackHat US, Kraker

• Hacktivity, Web Security for Interns Workshop

• RitFest

• SCADA and mobile in the IoT times

• CONFidence, Mobile antivirus security assessment

• Hacktivity, Wordlists from statistics to genetic

• https://www.blackhat.com/ldn-15/schedule/summit-17.html

CVE's (sic!)

• CVE-2018-4847
• CVE-2018-4844
• CVE-2017-9969
• CVE-2017-9969