Bishop Fox named “Leader” in 2024 GigaOm Radar for Attack Surface Management. Read the Report ›

"Mastering Your Tools Session" - DEF CON 31

In this session, learn from Bishop Fox experts who are at the cutting-edge of developing tools, technologies, and methodologies which they use to uncover vulnerabilities and offer guidance to some of the most elite organizations worldwide.

Dan Petro Headshot

About the author, Dan Petro

Senior Security Engineer

As a senior security engineer for the Bishop Fox Capability Development team, Dan builds hacker tools, focusing on attack surface discovery. Dan has extensive experience with application penetration testing (static and dynamic), product security reviews, network penetration testing (external and internal), and cryptographic analysis. He has presented at several Black Hats and DEF CONs on topics such as hacking smart safes, hijacking Google Chromecasts, and weaponizing AI. Dan holds both a Bachelor of Science and a Master of Science in Computer Science from Arizona State University.

More by Dan
David Vargas

About the author, David Vargas

Senior Security Consultant I

David Vargas is a Senior Security Consultant I on Bishop Fox's Red Team, with extensive experience in social engineering and physical penetration testing. David is an active security researcher with multiple CVEs in publicly accessible web applications.

More by David
Leron Gray Headshot BF

About the author, Leron Gray

Senior Security Consultant

Leron Gray is a senior security consultant on Bishop Fox's Red Team. With nine years of offensive security experience, he previously served on the Azure Red Team at Microsoft, as a penetration tester, and as a Cryptologic Technician (Networks) for the U.S. Navy.

Leron holds a Masters in Cyber Defense from Dakota State University and is a PhD candidate for Cyber Operations. He has a graduate certification in penetration testing and ethical hacking from SANS Technology Institute.

More by Leron
Josh Shomo

About the author, Josh Shomo

Staff Security Engineer

Josh leads vulnerability research within the Bishop Fox Capability Development team. His passion lies at the intersection of vulnerability research and vulnerability intelligence. Josh leverages vulnerability intelligence to prioritize his research efforts and conducts in-depth technical investigations to identify vulnerable technologies more effectively. Prior to joining Bishop Fox, Josh experienced rapid growth in the NSA’s CNODP program, where he gained invaluable training and expertise. In addition to his work, Josh actively volunteers at security conferences in the Washington D.C. area, including BSides Washington D.C., BSides Charm, and MACCDC. Josh has also volunteered at Bsides London.

More by Josh

Extend Your Knowledge

Check out these related resources.

The Art of Hacking neon logo on dark background.
Livestream

The Art of Hacking: Livestream from DEF CON 31

Join us Friday, August 11, 2023 for a livestream from DEF CON 31 to hear seasoned hackers and cybersecurity experts uncover the intricacies of ethical hacking and how the hacker spirit can be harnessed to push the boundaries of technology.

Learn More
Headshot of Tom Hudson, Senior Security Engineer at Bishop Fox, Bishop Fox logo, and the tilte: "The Art of Hacking".
Livestream

An Interview with Tom Hudson, Senior Security Engineer at Bishop Fox - DEF CON 31

In this session, we talk with Tom Hudson who is a Senior Security Engineer at Bishop Fox, where he is part of the Capability Development team for Cosmos.

Learn More
Dark purple background with photo of Chloe Messdaghi in the center.
Livestream

An Interview with Chloe Messdaghi, Head of Threat Research at Protect AI - DEF CON 31

In this session, hear from Chloé Messdaghi, an accomplished security executive with a proven track record of advising and developing solutions.

Learn More

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.