David García Email & Phone Number

In my 11 years of professional career and almost 16 years since I started learning computer security, I have participated and managed several projects, the most relevant being those related to the following activities: - Detection and exploitation of critical vulnerabilities in C&C of different types of malware. Automation of the full process.- Study of several languages and frameworks for the creation of mechanisms to detect vulnerabilities in the BugScout Static Analysis tool. - Several public vulnerabilities found:-- Trillian 3.1.9.0 DTD File Buffer Overflow-- PestPatrol "ppctl.dll" Activex Multiples Controls BoF-- Piczo Fast Picture Uploader Buffer Overflow-- Sony ImageStation 1.0.0.38 Buffer Overflow-- OpenSiteAdmin 0.9.1.1 Multiple File Inclusion Vulns-- All Club CMS 0.0.1f index.php Local File Inclusion-- Total Player 3.0 M3U Playlist Parsing Buffer Overflow- Writeups of articles of diverse nature like exploitation, reverse engineering in my spanish blog www.trancek.es-- Explotando Activex con Heap Spraying-- Explotar DAP con proteccion DEP-- Explotando VLC <=0.86.e desde Web Automaticamente-- Pwtent Pwnables 100 - Solución-- Análisis de Malware Básico-- Ataque Sencillo a Aplicación Flash- Winner of the Metasploit exploit creation contest (www.securinfos.info)

Listed skills include Fraud Detection, Security Research, Security Incident Response, Linux, and 24 others.