Meet the Author
Dan Petro Lead Researcher at Bishop Fox
Dan Petro is a Lead Researcher at Bishop Fox and focuses on application penetration testing (static and dynamic), product security reviews, network penetration testing (external and internal), and cryptographic analysis. Dan has presented at several Black Hats and DEF CONs on topics such as hacking smart safes, hijacking Google Chromecasts, and weaponizing AI. He has developed several open-source tools including Untwister, which breaks pseudorandom number generators. Additionally, Dan has been quoted in Wired, The Guardian, Business Insider, and Mashable. Dan holds both a Bachelor of Science and a Master of Science in Computer Science from Arizona State University.
Past Speaking Engagements:
- 2017 DEF CON 25 - “Weaponizing Machine Learning: Humanity Was Overrated, Anyway.”
- 2015 DEF CON 23 - Hacking Smart Safes: On the "Brink" of a Robbery - link to video
- 2014 - BSides Las Vegas - “Untwisting the Mersenne Twister: How I Killed the PRNG"
Subject Matter Expertise:
- Network security
- IoT and product security
- AI/machine learning
- CFAA
- DNS exploits
- DDoS attacks
- Malware
Posts from Dan Petro
Jan 25, 2023
EzAdsPro BlackBox Advisory
Aug 24, 2022
You're (Still) Doing IoT RNG
Feb 15, 2022
Never, Ever, Ever Use Pixelation for Redacting Text
Dec 27, 2021
How Bishop Fox Has Been Identifying and Exploiting Log4shell
Nov 15, 2021
Eyeballer 2.0 Web Interface and Other New Features
Aug 05, 2021
You're Doing IoT RNG
Jun 04, 2021
SCOTUS CFAA Ruling: What does it mean for pen testers and security?
Mar 09, 2021
Understanding the Driving Factors of a Pen Test
Dec 15, 2020
What We Know (And Don’t) About The SolarWinds Orion Hack So Far
Nov 10, 2020
Cheating at Online Video Games and What It Can Teach Us About AppSec (Part 3)
Nov 02, 2020
Cheating at Online Video Games and What It Can Teach Us About AppSec (Part 2)
Oct 29, 2020
Cheating at Online Video Games and What It Can Teach Us About AppSec (Part 1)
Oct 20, 2020
Accidentally Secure Is Not Secure: A Case of Three Stooges Syndrome
Jun 25, 2020
Stop Treating Breaches Like Natural Disasters: A New Mindset for Application Security
Feb 03, 2020
Dufflebag: Uncovering Secrets in Exposed EBS Volumes
Sep 02, 2019
Cybersecurity Fatalism - How It Poisons Your Decision Making
Aug 08, 2019
Meet Eyeballer: An AI-powered, Open Source Tool for Assessing External Perimeters
Jun 30, 2018
WPA3 Is a Major Missed Opportunity: Here's Why
Mar 08, 2017
The CIA Leak: A Look On the Bright Side...
Aug 10, 2016
Game Over, Man! Reversing Video Games to Create an Unbeatable AI Player
Jul 28, 2015
On the "Brink" of a Robbery
Aug 05, 2014
Untwisting the Mersenne Twister: How I Killed the PRNG
Jul 16, 2014
The Rickmote Controller: Hacking One Chromecast at a Time
Resources from Dan Petro
Fortifying Your Applications: A Guide to Penetration Testing
Download this eBook to explore key aspects of application penetration testing, questions to ask along the way, how to evaluate vendors, and our top recommendations to make the most of your pen test based on almost two decades of experience and thousands of engagements.
What the Vuln: Zimbra
Watch the inaugural episode of our What the Vuln livestream series as we examine Zimbra Zip Path Traversal vulnerabilities, CVE-2022-27925 and CVE-2022-37042.
Tool Talk: Unredacter
In our fourth edition of the Tool Talk series, we dive into Unredacter, a tool created by Dan Petro, Lead Researcher at Bishop Fox, that takes redacted pixelized text and reverses it back to its original text.
Tool Talk: Eyeballer
In Episode 1 of our Tool Talk series we explore Eyeballer, an AI-powered, open-source tool designed to help penetration testers assess large-scale external perimeters.
Unredacter Challenge: John L.'s Solution
Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as John L. showcases his solution.
Unredacter Challenge: Shawn A.'s Solution
Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Shawn A. showcases his solution.
Unredacter Challenge: Alejandro's Solution
Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Alejandro showcases his solution.
Eyeballer: Automating Security Triage with Machine Learning
This easy-to-follow guide explores the capabilities of Eyeballer, a first-of-its-kind AI-powered pen testing tool.
Dufflebag: Uncovering Secrets in Exposed EBS Volumes
In this video, Dan Petro demonstrates how the Bishop Fox open source tool Dufflebag works.