Andrew Klaus

Open Source Contributions

Ansible

• Created the Ansible syspatch module
• Created the Ansible sysupgrade module

Zeek

• Created the Zeek sniffpass module
• Created the Zeek httpattacks module

Volunteering

• YEGSEC - Edmonton security meetup group
  • One of the Admins
• YEGIX - Edmonton internet exchange
  • Network Operator
  • Aggregate IX Graphs
  • Secure routes with RPKI

Blog Posts

• Cybera security analyst works with NREN to identify, fix a vulnerability on FortiSIEM
• Open source “password sniffer” fights back against online phishing
• OpenConext Deployment: Part 1
• OpenConext Deployment: Part 2
• OpenConext Deployment: Part 3
• Decentralized File Synchronization

Security Research

Disclosures

Fortinet FortiSIEM:

• Hardcoded SSH Key^{1 2}
• Improper Certificate Validation¹

Actiontec Modems:

• Multiple Remote + Local Privilege Escalations, and Information Disclosure.

OpenConext-EngineBlock

• Cross Site Scripting¹

Presentations

• Detecting malicious activity with Zeek
• Introduction to embedded device hacking
• Advanced SSH Concepts
• Removing Intel Management Engine

Certifications

• OSCP (Offensive Security Certified Professional)
• OSWE (Offensive Security Web Expert)
• OSEP (Offensive Security Experienced Penetration Tester)