Piotr Bania
Windows / Mac password problems, looking for KON-BOOT? click here
Twitter: https://twitter.com/PiotrBania/
Github: https://github.com/piotrbania/
Linkedin: https://www.linkedin.com/in/piotrbania
Email: bania.piotr
Cell: terminated by Gohan
This website is mostly for corporate purposes, job offers and google bot for indexing my stuff correctly.
- BIO
- Passionate about programming and computer system security. First Polish recipient of the prestigious Pwnie Award in the category of "Most Innovative Research" in cybersecurity. Completed projects for the U.S. Department of Defense's DARPA under the Cyber Fast Track program, with the opportunity to present work at the Pentagon. Published research in renowned magazines such as Phrack, SecurityFocus and others. Developed several exploits and security tools, including Kon-Boot, a program widely used by law enforcement, intelligence agencies, digital forensics experts, and major tech companies around the world. Currently working at Cisco as a Research Engineering Technical Leader in the Talos Security Intelligence and Research Group. (past work for KryptosLogic, COSEINC)
- Articles
-
My computer security ramblings
- 01/11/2016 - Praktyczna inzynieria wsteczna (Book/Co-author - PWN PL)
- 07/04/2016 - Exploiting the Apple Graphics Driver and Bypassing KASLR (CISCO TALOS)
- 31/01/2014 - Hacking and patching TP-LINK TD-W8901G router
- 01/03/2012 - Securing The Kernel Via Static Binary Rewriting, Program Shepherding and Partial Control Flow Integrity
- 01/01/2012 - Mitigating ReturnOriented Programming Attacks and Other Exploitation Attempts via Secure API Execution
- 01/09/2011 - Fast, Reliable and Runtime Protection Method Against Table Index Overflows
- 10/05/2011 - Securing The Kernel via Static Binary Rewriting and Program Shepherding
- 06/09/2010 - JIT spraying and mitigations
- 23/08/2010 - Security Mitigations for Return Oriented Programming Attacks
- 08/11/2009 - Using MATLAB and Mathcad for solving (mesh current) equations
- 05/10/2009 - SMB2: 351 Packets from the Trampoline
- 10/06/2009 - Evading network level emulation
- 25/05/2009 - Generic Unpacking of Selfmodifying, Aggressive, Packed Binary Programs
- 18/05/2009 - Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case) + SpiderPig Project Page
- 01/06/2007 - Aslan Metamorphic Engine Corner plus some demos.
- 01/06/2007 - TI89 Titanium calculator corner plus a plenty of not really useful things.
- 06/02/2007 - Bypassing the breakpoints with file "streams"
- 16/10/2005 - Exploiting Windows Device Drivers Whitepaper
- 15/08/2005 - Playing with RDTSC
- 04/08/2005 - Windows Syscall Shellcode exclusive for SecurityFocus
- 02/08/2005 - NT shellcodes prevention demystified published in PHRACK#63
- 29/06/2005 - Fighting EPO Viruses exclusive for SecurityFocus
- 25/02/2005 - Antidebugging for (m)asses protecting the env.
- Codes and advisories
-
some old things
- 22/03/2016 - Exploit for CVE-2016-1743 (Apple Intel HD 3000 Graphics driver OSX 10.11)
- 01/04/2014 - Zynos ROM-0 config password retriever
- 01/03/2014 - BYPASSING EMET Export Address Table Access Filtering feature
- 01/09/2013 - Rootkit Detection Framework for UEFI (parts DARPA CFT project)
- 16/08/2010 - SMB2 remote exploit for Vista SP1/SP2 + HACKTRO
- 16/09/2009 - VMware CloudBurst VMware Guest to Host Escape Exploit + HACKTRO
- 15/07/2008 - KonBoot ultimate password utility *Windows and Mac*
- 20/03/2008 - Nid4Spid GAME for ST7 Microcontrollers
- 25/10/2007 - Aslan Metamorphic Engine Corner
- 31/01/2006 - DISIT OPEN SOURCE DISASSEMBLER ENGINE released.
- 11/11/2005 - Utility: KiServiceTable address finder by xrefs scanning.
- 22/09/2005 - Protty v.01A (beta) shellcode execution protection library for Windows NT based systems
- 03/09/2005 - Debugger "OnAttach" detection method TWO
- 01/09/2005 - TAPION Polymorphic Decryptor Generator
- 24/08/2005 - Debugger "OnAttach" detection method
- 16/08/2005 - Simple RDA (RANDOM DECRYPTION ALGORITHM) example
- 14/08/2005 - Efilter automatic exception reporting utility
- 14/08/2005 - Antid Anti IsDebuggerPresent debugger detection library
- 08/08/2005 - Badf00d Polymorphic Engine
- 04/08/2005 - Windows XP SP1 syscall shellcode (POC) full sources of shellcode described on SecurityFocus.
- 02/08/2005 - Protty library Windows NT buffer overflow protection library (proof of concept / prototype)
- 29/06/2005 - EPOS heuristic virus scanner
- 25/02/2005 - Finddll.c searches are running processes for module occurrency.
- References
- Available on request