Giter Site home page Giter Site logo

👋 Hi, I’m Peter, also known as @p- or @ulldma. I'm a security researcher at the GitHub Security Lab. I've started out as a software engineer and have first hands experience what it means to protect applications against threats and fix vulnerabilities. I’m especially interested in vulnerabilities in implementations of authentication protocols and deserialization vulnerabilities. My main tool for querying and identifying vulnerabilities in source code is CodeQL.

Here are some authentication related vulnerabilities I've found:

Excerpt of some vulnerabilities due to unsafe deserialization I've found - covering 4 different programming languages (C#, Java, Ruby & Elixir):

  • CVE-2024-28213 - nGrinder vulnerable to unsafe Java objects deserialization
  • CVE-2022-36038 - Remote Code Execution (RCE) in CircuitVerse
  • CVE-2020-15150 - Paginator (for Elixir Ecto): Remote Code Execution Vulnerability
  • CVE-2018-8540 - Microsoft .NET Framework: Remote Code Injection Vulnerability

Peter Stöckli's Projects

nginx icon nginx

Nginx is a Web Server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache

nomulus icon nomulus

Top-level domain name registry service on Google App Engine

notes icon notes

Random notes on different tools

opensnitch icon opensnitch

OpenSnitch is a GNU/Linux port of the Little Snitch application firewall

plotjuggler icon plotjuggler

The Time Series Visualization Tool that you deserve.

portfoli.go icon portfoli.go

A simple and flexible portfolio template written with Go and Bootstrap

punx icon punx

Python Utilities for NeXus HDF5 files

pyresttable icon pyresttable

Format a nice table in reST (reStructuredText) from Python

pyrodocker icon pyrodocker

My personal collection of Dockerfiles, docker-compose templates, docker images, docker scripts and other helpful resources

ql icon ql

The libraries and queries that power CodeQL and LGTM.com

reel-moby icon reel-moby

search for new docker tags and update them in your docker-compose file

refinebio icon refinebio

Refine.bio harmonizes petabytes of publicly available biological data into ready-to-use datasets for cancer researchers and AI/ML scientists.

registry-auth icon registry-auth

Provider authentication and authorization for docker registry.

scalabel icon scalabel

Scalabel: A versatile web-based visual data annotation tool

scrapy_dbt_imensa_de icon scrapy_dbt_imensa_de

Project of scraping imensa.de, loading into a PostgreSQL database and transforming the data with dbt

server icon server

The Triton Inference Server provides an optimized cloud and edge inferencing solution.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.