Author Archives: Sijmen Ruwhof

About Sijmen Ruwhof

Independent IT Security Researcher / Ethical Hacker

Security audits as an integral part of PHP application development

More often than not, web applications start off as a bright idea, which is then brought into realization at a fast and furious pace, with little eye for anything but result. Once all envisioned functionality is incorporated in the design … Continue reading →

Posted in php security, presentation, security audit, website | Comments Off on Security audits as an integral part of PHP application development

NU.nl gehackt: Malware-analyse

NU.nl is gehackt, zo schrijft hun weblog vandaag, waarbij mogelijk 100.000 computers zijn besmet met kwaadaardige code. Ik was benieuwd naar wat voor kwaadaardige code werd geïnjecteerd en heb deze dan ook geanalyseerd. Laat je testen of je geïnfecteerd bent Naar … Continue reading →

Posted in analysis, drive-by, security vulnerability, website | 66 Comments

Presentation: Next in security

Slides from a presentation that I gave about the developments in the hacking world:

Posted in presentation, security | Comments Off on Presentation: Next in security

Presentatie op PFCongres: Website vulnerability management

Op 17 april heb ik op het PFCongres een presentatie geven over geautomatiseerd website vulnerability management. Websitebeveiliging is een onderwerp waaraan eigenlijk pas sinds 2003 echt aandacht aan wordt besteed. In tegenstelling tot wat de meeste klanten verwachten, zijn bijna … Continue reading →

Posted in presentation, security audit, vulnerability management, website | Comments Off on Presentatie op PFCongres: Website vulnerability management

Web Programmer’s Hacking Guide

Ongeveer 80% van de websites op het internet hebben beveiligingslekken. Men denkt over het algemeen dat de software die men schrijft, veilig is. Ik durf het tegengestelde te beweren. Waarom? Omdat programmeurs niet geleerd wordt om veilig te programmeren. Een opmerkelijke … Continue reading →

Posted in article, cross-site scripting, php security, security audit, website | Comments Off on Web Programmer’s Hacking Guide

Contact

You can reach me via , by phone and WhatsApp/Signal (most secure option) via +31652627625.

Posted in menu | Comments Off on Contact

Research

Almost all my professional work is highly confidential and thus I cannot publicize about it. Sometimes I find time in my busy work schedule to write about some of my research which doesn’t fall under a non disclosure agreement. All … Continue reading →

Posted in menu | Comments Off on Research

About me

I started this weblog in 2010 to tell stories about things I come across during security research I perform in my free time. To create more awareness about insecurity in computer systems and their threat to our daily lives. But … Continue reading →

Posted in menu | Comments Off on About me

In the media

Sometimes the media talks or interviews me about my work, and sometimes I’m asked to comment on hacking and cyber security related news: List of webpages with tv appearances List of webpages with radio interviews (all media appearances listed below … Continue reading →

Posted in media, menu | Comments Off on In the media

Links

Links to my public social media accounts: Twitter LinkedIn Content from this weblog is hosted at: YouTube SoundCloud SlideShare In my professional life I’m an IT security consultant and ethical hacker and founded Secundity. If you want to protect yourself … Continue reading →

Posted in menu | Comments Off on Links

Photo’s

Quite often journalists ask me to send photo’s. To speed things up I’ve collected some so I can easily reference them to this page:

Posted in media | Comments Off on Photo’s