Portfolio

The GNUCITIZEN outfit is driven by a passion for innovation and information security. Our portfolio acts as a reference of our current and future work and it illustrates our unique culture and style.

GNUCITIZEN Products

The GNUCITIZEN work goes beyond our public research projects and speaking engagements. The following section contains some of our in-house developed products.

» Blogsecurify

The Blogsecurify initiative was established to provide social media security services through our free automated testing engine. The Blogsecurify team is also engaged to deliver quality content on issues concerning social media technologies.

» Netsecurify

The Netsecurify initiative was established to provide network security services through our free automated testing engine. The service is still in private-beta. We are working very hard to make it a reality.

» Websecurify

The Websecurify initiative was established to provide a free web application security framework for automated and manual penetration testing. The service is still in private-beta and the testing engine will be avalable for download soon.

» Secapps

Secapps serves as an application directory of all online tools which the GNUCITIZEN team has built over the years.

» Securls

Securls serves as an information security intelligence gathering tool, combining news and articles from the best information security resources on-line.

The GNUCITIZEN team has authored several industry-recognized information security papers and presentations.

» Client-side Security

This paper was presented in Black Hat Europe 2008, Hack in the Box Dubai 2008, Black Hat USA 2008 and Hack in the Box KL 2008. This paper describes numerous techniques for attacking Clients-side technologies. The content of the paper is based on the research that has been conducted over the past year, before publication, by the GNUCITIZEN team.

» Cracking into Embedded Devices

The presentation covers cracking into embedded devices by exploiting vulnerabilities present on default software running on the target device. The presentation is focused on vulnerabilities that can be exploited remotely.

» For my next trick... hacking Web2.0

This paper outlines some of the dangers of Web2.0 by combining fictional stories with real technology. Each story begins with a prologue, which introduces the problem, and finishes with a conclusion, which summarizes the attack techniques that are described within the story's context.

» Exegesis of Virtual Hosts Hacking

This is the first paper written on the topic of virtual hosts hacking. It covers basic skills such as passive discovery techniques and (almost) stealth active discovery techniques. It also presents possible scenarios of exploitation.

Our blog is one of the leading information security resources on the Web today. There we have published a large chunk of our public research.

» more

Printed Publications

The GNUCITIZEN group has been involved in the publication of several industry-recognized information security books.

» Google Hacking for Penetration Testers Second Edition

Google Hacking for Penetration Testers, Volume 2 shows the art of torquing Google used by security professionals and system administrators to find sensitive information and self-police their own organizations.

 

» Cross Site Scripting Attacks: XSS Exploits and Defense

The book provides examples of XSS malware and demonstrates real cases where XSS is a dangerous risk that exposes internet users to remote access, sensitive data theft, and monetary losses.

 

Conferences and Public Speaking Engagements

GNUCITIZEN members are frequent speakers at some of the world's largest information security events, including Black Hat, Hack in The Box, OWASP, CONFidence and others.

Media Coverage

GNUCITIZEN's work has been featured in many popular electronic and printed media outlets.

For more information regarding our constantly expanding portfolio you can visit our blog.