Meet the Author
Dan Petro Lead Researcher at Bishop Fox
Dan Petro is a Lead Researcher at Bishop Fox and focuses on application penetration testing (static and dynamic), product security reviews, network penetration testing (external and internal), and cryptographic analysis. Dan has presented at several Black Hats and DEF CONs on topics such as hacking smart safes, hijacking Google Chromecasts, and weaponizing AI. He has developed several open-source tools including Untwister, which breaks pseudorandom number generators. Additionally, Dan has been quoted in Wired, The Guardian, Business Insider, and Mashable. Dan holds both a Bachelor of Science and a Master of Science in Computer Science from Arizona State University.
Past Speaking Engagements:
- 2017 DEF CON 25 - “Weaponizing Machine Learning: Humanity Was Overrated, Anyway.”
- 2015 DEF CON 23 - Hacking Smart Safes: On the "Brink" of a Robbery - link to video
- 2014 - BSides Las Vegas - “Untwisting the Mersenne Twister: How I Killed the PRNG"
Subject Matter Expertise:
- Network security
- IoT and product security
- AI/machine learning
- CFAA
- DNS exploits
- DDoS attacks
- Malware
Posts from Dan Petro
Jan 25, 2023
EzAdsPro BlackBox Advisory
Aug 24, 2022
You're (Still) Doing IoT RNG
Feb 15, 2022
Never, Ever, Ever Use Pixelation for Redacting Text
Dec 27, 2021
How Bishop Fox Has Been Identifying and Exploiting Log4shell
Nov 15, 2021
Eyeballer 2.0 Web Interface and Other New Features
Aug 05, 2021
You're Doing IoT RNG
Jun 04, 2021
SCOTUS CFAA Ruling: What does it mean for pen testers and security?
Mar 09, 2021
Understanding the Driving Factors of a Pen Test
Dec 15, 2020
What We Know (And Don’t) About The SolarWinds Orion Hack So Far
Nov 10, 2020
Cheating at Online Video Games and What It Can Teach Us About AppSec (Part 3)
Nov 02, 2020
Cheating at Online Video Games and What It Can Teach Us About AppSec (Part 2)
Oct 29, 2020
Cheating at Online Video Games and What It Can Teach Us About AppSec (Part 1)
Oct 20, 2020
Accidentally Secure Is Not Secure: A Case of Three Stooges Syndrome
Jun 25, 2020
Stop Treating Breaches Like Natural Disasters: A New Mindset for Application Security
Feb 03, 2020
Dufflebag: Uncovering Secrets in Exposed EBS Volumes
Sep 02, 2019
Cybersecurity Fatalism - How It Poisons Your Decision Making
Aug 08, 2019
Meet Eyeballer: An AI-powered, Open Source Tool for Assessing External Perimeters
Jun 30, 2018
WPA3 Is a Major Missed Opportunity: Here's Why
Mar 08, 2017
The CIA Leak: A Look On the Bright Side...
Aug 10, 2016
Game Over, Man! Reversing Video Games to Create an Unbeatable AI Player
Jul 28, 2015
On the "Brink" of a Robbery
Aug 05, 2014
Untwisting the Mersenne Twister: How I Killed the PRNG
Jul 16, 2014
The Rickmote Controller: Hacking One Chromecast at a Time
Resources from Dan Petro
Fortifying Your Applications: A Guide to Penetration Testing
Unredacter Challenge: Shawn A.'s Solution
Unredacter Challenge: John L.'s Solution
Tool Talk: Unredacter
Unredacter Challenge: Alejandro's Solution
Tool Talk: Eyeballer
Eyeballer: Automating Security Triage with Machine Learning
Dufflebag: Uncovering Secrets in Exposed EBS Volumes