Security Foundry Home Page

Greetings and welcome to Security Foundry. This site is currently just a place for me (Chuck Willis) to post information about the talks I have given at conferences and the little tools that I have written. I hope you find it useful.

* If you would like to add this site to your Bookmarks or Favorites, please add this link: http://www.securityfoundry.com/ since I may move to a real hosting service someday. To add this link to your Bookmarks or Favorites, right click on the link and select "Add to Favorites" or "Bookmark this Link".

Papers and Presentations:

Web Application Incident Response & Forensics: A Whole New Ball Game! - Presented with Rohyt Belani at the Black Hat USA 2006 Briefings and OWASP AppSec Seattle 2006 and to be presented at the Black Hat DC 2007 Briefings
Trends in Licensing of Security Tools - Presented at DefCon 13, Las Vegas USA, July 2005
Hacking without TCP - Presented at IT Underground, Prague, Czech Republic, February 2005
Forensics with Linux 101 - Presented at the Black Hat USA 2003 Briefings
College Papers - Some papers I wrote in college, including my Master's Thesis

Tools:

Some little things that I have written or worked on that someone else may find useful:

Guess.sh - "Universal command line brute forcer"
Nessus XML Stylesheet - An updated stylesheet for formatting the XML output of the Nessus Open Source Security Scanner into HTML
Blind SQL Injection lesson for the WebGoat training tool from the Open Web Application Security Project

Work:

I work as a Security Consultant for MANDIANT. If you are in need of any sort of security consulting, computer forensics, incident response, or training services, please check out our website at http://www.mandiant.com/ or you can email me directly at chuck.willis (at) mandiant (dot) com.

MANDIANT also has several free security tools for security professionals and system administrators available on our website.

Links to other useful sites

Contact Chuck

This page last modified on