Adrian Furtuna is the founder of https://Pentest-Tools.com, an online platform that includes a full arsenal for easier and effective penetration testing. Having more than 10 years of experience in ethical hacking and cyber security, Adrian enjoys finding weaknesses in so-called ‘secure environments’ and exploiting them for fun and ethical profit.

Adrian also has a PhD in Information Security and he teaches penetration testing classes at the Politehnica University of Bucharest and at the Technical Military Academy of Bucharest. He also gave some talks at BlackHat, ZeroNights, Hacktivity, Hack.lu, previous Defcamp editions, OWASP Romania, Black Hat Europe, and other security events.

Automatic exploitation of critical CVEs using Sniper: ProxyShell, OMIGOD, Confluence RCE and more

A mandatory step in every penetration test, vulnerability exploitation is much more effective when you validate CVEs through exploitation to determine their true risk for the business.

Join me as I introduce Sniper, a new pentesting tool (in Pentest-Tools.com) that performs automatic exploitation of critical vulnerabilities. Sniper significantly decreases the time for exploitation during a pentest by quickly showing which targets are exploitable and by gathering evidence for the report.