Saif ElSherei Security Engineer, Microsoft Security Response Center (MSRC)

Saif is a security engineer in the Microsoft Security Response Center’s Vulnerability & Mitigations team. He has a keen interest in exploit development and sharing everything he learns. He spends his time doing vulnerability research against Microsoft products and understanding new exploitation techniques and their real world applications.

Previous Talks and Publications:

• Defcon 25 Demystifying Windows kernel Exploitation By Abusing GDI objects (https://www.defcon.org/html/defcon-25/dc-25-speakers.html#El-Sherei)
• Macro-less Code Exec in MSWord: https://sensepost.com/blog/2017/macro-less-code-exec-in-msword/
• Defcon 23 Extending Fuzzing Grammars to Exploit Unexplored Code Paths in Modern Web Browsers: (https://www.defcon.org/html/defcon-23/dc-23-speakers.html#El-Sherei)
• Exploiting MS16-098 RGNOBJ Integer Overflow on Windows 8.1 x64 bit by abusing GDI objects (https://sensepost.com/blog/2017/exploiting-ms16-098-rgnobj-integer-overflow-on-windows-8.1-x64-bit-by-abusing-gdi-objects/)
• BlackHat USA 2016 Arsenal presenting DET (https://www.blackhat.com/us-16/presenters/Saif-El-Sherei.html)
• PowerShell, C-Sharp, DDE and MS16-032 The Power Within (https://sensepost.com/blog/2016/powershell-c-sharp-and-dde-the-power-within/)
• Exploits, tutorials and vulnerabilities: Exploit-db (https://www.exploit-db.com/author/?a=3087), packetstorm (https://packetstormsecurity.com/files/author/8677/) and my own site containing Linux Exploitation tutorials (http://www.elsherei.com/).

---

View full schedule

Related Sessions

View full schedule