Agarri: Offensive information security

Welcome!
Agarri is small company dedicated to the offensive aspects of information security

Recently published vulnerabilities [+]

Adobe Reader: Multiple memory corruptions during XSLT processing (APSB 17-11)
Firefox: Multiple UAF during XSLT processing (MFSA 2017-10)
Revive Adserver: Arbitrary PHP deserialization (REVIVE-SA-2017-001)
Adobe Reader: Multiple memory corruptions during XSLT processing (APSB 17-01)
Firefox: UAF during XSLT processing (MFSA 2017-01)

Upcoming "Burp Suite Pro" trainings [+]

Ringzer0 Las Vegas, USA (August 1st, 2nd, 4th and 6th 2020) SOLD OUT
~~Ekoparty Buenos Aires, Argentina~~ CANCELLED
Center for Cyber Security Training San Francisco, CA (March 8th to 11th, 2021)
Center for Cyber Security Training Columbia, MD (July 19th to 22nd, 2021)

Latest tweets [+]

RT @Agarri_FR: @ngkogkos @MrR0Y4L3 @albinowax @Burp_Suite In front of a computer, true laziness implies automation
1. Tue Jul 07 12:37:40 2020
@ngkogkos @MrR0Y4L3 @albinowax @Burp_Suite In front of a computer, true laziness implies automation
1. Tue Jul 07 12:36:22 2020
@touisteur I hope so! 😉
1. Tue Jul 07 12:35:05 2020
@ngkogkos @MrR0Y4L3 @albinowax @Burp_Suite Why not sync your local copies using crontab?
1. Tue Jul 07 09:32:40 2020
@DrapGreg Absolutely!
1. Tue Jul 07 09:04:24 2020

Recent talks [+]

Nearly generic fuzzing of XML-based formats
1. Nullcon (March 2017 - Goa - IN - slides - video)
Server-side browsing considered harmful
1. Hackfest (November 2015 - CA - video (FR))
2. Hack in Paris (June 2015 - FR)
3. HackPra Allstars - OWASP AppSec EU (May 2015 - NL - slides - video)
Hunting for top bounties
1. OWASP CZ (December 2014 - CZ)
2. ZeroNights (November 2014 - RU - slides)
3. Hacktivity (October 2014 - HU - video)

Recent blog posts [+]

A recap of the Q&A session on Twitter
1. 19/06/2020 00h14
Intruder and CSRF-protected form, without macros
1. 13/01/2020 23h51
Back to blogging?
1. 24/01/2019 15h33
Exploiting a Blind XSS using Burp Suite
1. 04/04/2017 22h55
Deserialization in Perl v5.8
1. 06/02/2016 20h30

webmaster@agarri.fr
Copyright 2010-2020 Agarri