I am Parsia, a Senior Security Engineer at Electronic Arts. I work on every product (mostly videogames) and services that we release. Realistic video of me hacking videogames at work.

2013-2019: Senior Security Consultant at Synopsys Software Integrity Group via the 2016 Cigital acquisition.

Major Presentations

• DEF CON 26 Main Track: Tineola Taking a Bite Out of Enterprise Blockchain
  • https://www.youtube.com/watch?v=xKYIde5jh_8
  • I guess I should add DEF CON Speaker to my LinkedIn title (lol).
• DEF CON 28 Appsec Village: localghost: Escaping Browser Sandbox Without 0-Days
  • https://www.youtube.com/watch?v=Cgl51ZcACLg&t=90

Who is Hackerman?

Hackerman is a character from the movie Kung Fury. He is the greatest hacker of all time and can hack people through time. His cheesy hacking tutorial.

What is This Website?

This website is my security research and notes. It doubles as my cheat sheet and knowledge base along with parsiya.io. I look up pages or send links to this website at least a few times every day. It's part of my brand. You don't wanna be the other guy from Wham!

What does "Don't be The Other Guy from Wham!" Mean?

Wham! was a popular UK music duo. Most people remember one of its members, George Michael. No one remembers the other guy, Andrew Ridgeley. Write a blog, don't be afraid to promote yourself (if you have the time). It's worth it.

Goals in Progress:

• Bug bounties: I started the bug bounty game really late and mostly only work the ocassional Windows desktop application.
  • My first and highest bounty to date: $15,000 from PlayStation
  • Hacker One profile: https://hackerone.com/parsiya
  • Bugcrowd profile (I have one bug there lol): https://bugcrowd.com/Parsiya
  • If you have Windows desktop applications in your program, invite me. Unless they are videogames, I cannot touch videogames :)
• Go in security: I have replaced Python with Go in my workflow.
  • https://github.com/parsiya/Hacking-with-Go
  • https://github.com/parsiya/Go-Security
  • https://github.com/parsiya/Parsia-Code
  • https://parsiya.net/categories/go/
• Automation:
  • https://parsiya.net/categories/automation/
  • Borrowed Time: My project and note management app
    • https://github.com/parsiya/borrowedtime/
  • ESLinter: Burp extension to automatically extract and ESLint JavaScript
    • https://github.com/parsiya/eslinter

Done and Dusted:

• Enterprise blockchain and Hyperledger Fabric security:
  • DEF CON 26 video: https://www.youtube.com/watch?v=xKYIde5jh_8
  • My post on Synopsys' corporate blog: Tineola: Taking a Bite out of Enterprise Blockchain
  • Tineola the tool: https://github.com/tineola/tineola
  • Random posts as I learned: https://parsiya.net/categories/blockchain/

Gone to The Dogs:

• In-memory fuzzing via binary instrumentation (aka traversing arbitrary assembly blobs over and over and over).
  • https://parsiya.net/categories/winappdbg/