This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Sriram"

From OWASP
Jump to: navigation, search
m (Talks)
m (New picture updated)
 
(8 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[[File:Sriram.jpeg|right| Sriram]]
+
[[File:Sriram wiki.jpg|right|200x200px|Sriram]]
[[File:LinkedIn.gif|right|link=https://www.linkedin.com/in/srihaxor]]
+
[[File:LinkedIn.gif|right|link=https://in.linkedin.com/in/sriramsec]]
  
 
==Biography==
 
==Biography==
Sriram [http://twitter.com/Sri_Hxor @Sri_Hxor] is an Independent Security Researcher!. Also, He is the Founder and CTO of [https://www.primefort.net/ Primefort] Pvt. Ltd. He has had experiences with several other companies working on application penetration testing. Sriram got listed in the hall of fame of Barracuda Labs, Apple, Blackberry, 500px, Freshbooks, Splash ID and many other companies for reporting severe vulnerabilities. He has also trained more than 12,000 students in the field of Information Security. In addition to these, Sriram has delivered talks at various conferences. He is a part of the Technical Team Committee of [http://ncdrc.res.in/ National Cyber Defence Research Centre]. He is leading the [http://www.entrepreneurscouncil.in/ Entrepreneurs Council of India Pondicherry Chapter] and [https://www.owasp.org/index.php/PONDICHERRY Open Web Application Security Project Pondicherry Chapter], Lead Steering Committee of [http://niss.ind.in/ National Information Security Council] and also the Core Member of [http://hackersday.org/ Hackersday.]
+
Sriram [http://twitter.com/Sri_Hxor @Sri_Hxor] is an Independent Security Researcher!. Also, He is the Founder and CTO of [https://www.primefort.net/ Primefort] Pvt. Ltd. He has had experiences with several other companies working on application penetration testing. Sriram got listed in the hall of fame of Barracuda Labs, Apple, Blackberry, 500px, Freshbooks, Splash ID and many other companies for reporting severe vulnerabilities. He has also trained more than 45,000 students in the field of Information Security. In addition to these, Sriram has delivered talks at various conferences. He is a part of the Technical Team Committee of [http://ncdrc.res.in/ National Cyber Defence Research Centre]. He is leading the [http://www.entrepreneurscouncil.in/ Entrepreneurs Council of India Pondicherry Chapter] and [https://www.owasp.org/index.php/PONDICHERRY Open Web Application Security Project Pondicherry Chapter], Lead Steering Committee of [http://niss.ind.in/ National Information Security Council] and also the Core Member of [http://hackersday.org/ Hackersday.] and Head of Tamilnadu Region of [http://www.cybershrishti.com Cybershrishti]
  
 
==Volunteer Experience==
 
==Volunteer Experience==
Line 11: Line 11:
 
* '''Head of The Security''' At MindFreakers Networking
 
* '''Head of The Security''' At MindFreakers Networking
 
* '''CTO''' at WittyIdiots
 
* '''CTO''' at WittyIdiots
 +
 +
== CVE (Common Vulnerabilities and Exposures) ==
 +
 +
=== '''Apple''' ===
 +
 +
=== CVE-2017-2351 (2017) ===
 +
* '''iOS 10.2.1''' [https://support.apple.com/en-in/HT207482 Link] | iOS 10.2.1 iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 23 Jan 2017
 +
'''Available for:''' iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
 +
 +
'''Impact:''' An activation-locked device can be manipulated to briefly present the home screen
 +
 +
'''Description:''' An issue existed with handling user input that caused a device to present the home screen even when activation locked. This was addressed through improved input validation.
 +
 +
=== CVE-2018-4240 (2018) ===
 +
* '''iOS 11.4''' [https://support.apple.com/en-in/HT208848 Link] | iOS 11.4 iPhone 5s and later, iPad Air and later, and iPod touch 6th generation 29 May 2018
 +
* '''macOS High Sierra 10.13.5''' [https://support.apple.com/en-in/HT208849 Link] |  macOS High Sierra 10.13.5 Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan
 +
* '''tvOS 11.4''' [https://support.apple.com/en-in/HT208850 Link] | tvOS 11.4 Apple TV 4K and Apple TV (4th generation) 29 May 2018
 +
* '''watchOS 4.3.1''' [https://support.apple.com/en-in/HT208851 Link] | watchOS 4.3.1 All Apple Watch models 29 May 2018
 +
'''Available for:''' macOS High Sierra 10.13.4, Apple TV, WatchOS, iOS.
 +
 +
'''Impact:''' Processing a maliciously crafted message may lead to a denial of service
 +
 +
'''Description:''' This issue was addressed with improved message validation.
 +
 +
'''CVE-2018-4240:''' Sriram (@Sri_Hxor) of PrimeFort Pvt. Ltd
  
 
==Hall of Fames==
 
==Hall of Fames==
Line 20: Line 45:
 
* 500px  
 
* 500px  
 
* Dropmymail etc.  
 
* Dropmymail etc.  
 +
* Sayat.me
 +
* Wittyfeed
  
 
==Talks==
 
==Talks==
Line 35: Line 62:
 
* Hindustan University, Chennai
 
* Hindustan University, Chennai
 
* Sathyabama University, Chennai  
 
* Sathyabama University, Chennai  
 +
* Chennai Institute of Technology, Chennai
 +
* SRM Vadapalani
 +
* M.O.P. Vaishnav College for Women
 +
* Ganesh College of Engineering
 +
* Millennial Startups
 +
* Josh Talks
 +
* Agni College of Engineering
 +
* Panimalar Engineering College
  
 
==OWASP Cyber Security Meet-ups==
 
==OWASP Cyber Security Meet-ups==
Line 48: Line 83:
 
* National Engineering College, Madurai
 
* National Engineering College, Madurai
 
* SJS Pauls Engineering College.
 
* SJS Pauls Engineering College.
 +
 +
== Interviews ==
 +
* Blacksheep (Demystifying MoMo) [https://www.youtube.com/watch?v=9tyftYsDDm8&t=0s&list=PLE3PORmImirG9F1lVnekhGPzxrWQGRNDu&index=2 Link]
 +
* Blacksheep Special Interview [https://www.youtube.com/watch?v=3pZ9FpHupEg&t=84s&list=PLE3PORmImirG9F1lVnekhGPzxrWQGRNDu&index=5 Part 1] & [https://www.youtube.com/watch?v=__pzcUJMfe0&t=475s&list=PLE3PORmImirG9F1lVnekhGPzxrWQGRNDu&index=7 Part 2]
 +
* Sun TV - [https://www.youtube.com/watch?v=2DN5vYWUDks&list=PLE3PORmImirG9F1lVnekhGPzxrWQGRNDu&index=6&t=0s Facebook Hack]
 +
* Puthiya Thalamurai - [https://www.youtube.com/watch?v=-rjvm-pWEp0&list=PLE3PORmImirG9F1lVnekhGPzxrWQGRNDu&index=4&t=1s Special Interview about Hackers]
 +
* Mirchi FM - [https://www.youtube.com/watch?v=g2z8BO1Y-C8&list=PLE3PORmImirG9F1lVnekhGPzxrWQGRNDu&index=3&t=15s Interview About Cyber Security]

Latest revision as of 11:24, 14 August 2019

Sriram
LinkedIn.gif

Biography

Sriram @Sri_Hxor is an Independent Security Researcher!. Also, He is the Founder and CTO of Primefort Pvt. Ltd. He has had experiences with several other companies working on application penetration testing. Sriram got listed in the hall of fame of Barracuda Labs, Apple, Blackberry, 500px, Freshbooks, Splash ID and many other companies for reporting severe vulnerabilities. He has also trained more than 45,000 students in the field of Information Security. In addition to these, Sriram has delivered talks at various conferences. He is a part of the Technical Team Committee of National Cyber Defence Research Centre. He is leading the Entrepreneurs Council of India Pondicherry Chapter and Open Web Application Security Project Pondicherry Chapter, Lead Steering Committee of National Information Security Council and also the Core Member of Hackersday. and Head of Tamilnadu Region of Cybershrishti

Volunteer Experience

  • Technical Team Member at NCDRC
  • Chapter Leader of OWASP Pondicherry
  • Head of The Security At MindFreakers Networking
  • CTO at WittyIdiots

CVE (Common Vulnerabilities and Exposures)

Apple

CVE-2017-2351 (2017)

  • iOS 10.2.1 Link | iOS 10.2.1 iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later 23 Jan 2017

Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later

Impact: An activation-locked device can be manipulated to briefly present the home screen

Description: An issue existed with handling user input that caused a device to present the home screen even when activation locked. This was addressed through improved input validation.

CVE-2018-4240 (2018)

  • iOS 11.4 Link | iOS 11.4 iPhone 5s and later, iPad Air and later, and iPod touch 6th generation 29 May 2018
  • macOS High Sierra 10.13.5 Link | macOS High Sierra 10.13.5 Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan
  • tvOS 11.4 Link | tvOS 11.4 Apple TV 4K and Apple TV (4th generation) 29 May 2018
  • watchOS 4.3.1 Link | watchOS 4.3.1 All Apple Watch models 29 May 2018

Available for: macOS High Sierra 10.13.4, Apple TV, WatchOS, iOS.

Impact: Processing a maliciously crafted message may lead to a denial of service

Description: This issue was addressed with improved message validation.

CVE-2018-4240: Sriram (@Sri_Hxor) of PrimeFort Pvt. Ltd

Hall of Fames

  • Apple
  • Blackberry
  • Barracuda Networks
  • Splash ID
  • 500px
  • Dropmymail etc.
  • Sayat.me
  • Wittyfeed

Talks

  • Null Chennai
  • Hackersday, Lucknow
  • OWASP Cuttack
  • KIIT University, Bhubaneswar
  • National Engineering College, Madurai.
  • Hindustan University, Chennai
  • Achariya College of Engineering, Pondicherry
  • MVIT Pondicherry
  • Sri Manakula Vinayagar College at Startup Puducherry
  • National Engineering College, Madurai.
  • Hindustan University, Chennai
  • Sathyabama University, Chennai
  • Chennai Institute of Technology, Chennai
  • SRM Vadapalani
  • M.O.P. Vaishnav College for Women
  • Ganesh College of Engineering
  • Millennial Startups
  • Josh Talks
  • Agni College of Engineering
  • Panimalar Engineering College

OWASP Cyber Security Meet-ups

  • Achariya College of Engineering, Pondicherry
  • MVIT, Pondicherry
  • St. Joseph College of Arts, Pondicherry
  • SMVEC, Pondicherry
  • Ganesh College of Engineering, Pondicherry
  • Christ College of Engineering, Pondicherry
  • Achariya College of Arts & Science, Pondicherry
  • PRIST University, Pondicherry
  • National Engineering College, Madurai
  • SJS Pauls Engineering College.

Interviews