Burp Suite Essentials
上QQ阅读APP看书,第一时间看更新

About the Reviewers

Luca De Fulgentis is an Offensive Security enthusiast with experience in application security engineering and penetration testing. He holds a Master's degree in Computer Engineering from Politecnico di Milano, from where he graduated with a thesis on evolutionary fuzzing. As the CTO of Secure Network S.r.l., he delivers and coordinates the company's top-notch security services. He is also involved in training tigers for the team and researching advanced client-side exploitation techniques, cross-device attacks, and Windows Phone platform security.

Rejah Rehim is currently a software engineer with Digital Brand Group (DBG), India, and is a longtime preacher of the open source community. He is a steady contributor to the Mozilla Foundation, and his name has been featured in the San Francisco Monument made by the Mozilla Foundation.

He is a part of the Mozilla add-on review board and has contributed to the development of several node modules. He has also been credited with the creation of eight Mozilla add-ons, including the highly successful Clear Console add-on that was selected as one of the best Mozilla add-ons of 2013. With a user base of more than 44,000, it has registered more than 450,000 downloads till date. He has successfully created the world's first, one-of-a-kind, open source, Linux-based security penetration testing browser bundle, PenQ. It is preconfigured with tools for spidering, advanced web searching, fingerprinting, and much more.

Rejah is also an active member of OWASP and the chapter leader of OWASP Kerala. He is also one of the moderators of the OWASP Google+ group and an active speaker at Coffee@DBG, one of the most premier monthly technology reviews in Technopark, Kerala. Besides being a part of the Cyber Security division of DBG currently and QBurst in the past, he is also a fan of process automation and has implemented it in DBG.

David Shaw has extensive experience in many aspects of information security. Beginning his career as a network security analyst, he monitored perimeter firewalls and intrusion detection systems in order to identify and neutralize threats in real time. After working in the trenches of perimeter analysis, he joined the External Threat Assessment Team as a security researcher, working closely with large financial institutions to mitigate external risk and combat phishing attacks.

David joined Redspin in 2009 and has worked as a senior security engineer, director of penetration testing, and senior director of engineering. He is currently the CTO and Vice President of Professional Services at Redspin, specializing in external and application security assessments and managing a team of highly skilled engineers.

He has keen interest in complex threat modeling and unconventional attack vectors and has been a speaker at THOTCON, NolaCon, ToorCon, LayerOne, DEF CON, BSides Las Vegas, BSides Los Angeles, and BSides Seattle.