Cody Pierce
Security Researcher
Cody Pierce, aka intropy, is a researcher within TippingPoint's security research group. His responsibilities include reverse engineering and developing auditing and reverse engineering automation tools. Cody has discovered critical vulnerabilities affecting a wide range of enterprise vendors, including: Microsoft, Hewlett-Packard, America Online, Computer Associates and others. Prior to TippingPoint, Cody was a security researcher for Citadel Security Software responsible for vulnerability analysis, research, and remediation. Though he spends much of his personal and free time in the world of a reverse engineer, Cody's true passion is music.
- Published Advisories:
- TPTI-08-07: Microsoft Windows Message Queuing Service Memory Corruption Vulnerability
- TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP Listing Display Stack Overflow Vulnerability
- TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability
- TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability
- TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability
- TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability
- TPTI-07-14: HP OpenView Multiple Product Shared Trace Service Stack Overflow Vulnerabilities
- TPTI-07-13: Borland Interbase ibserver.exe Create-Request Buffer Overflow Vulnerability
- TPTI-07-11: Multiple Vendor SQL fbserver 'connect' Buffer Overflow Vulnerability
- TPTI-07-10: Centennial Software XFERWAN Stack Overflow Vulnerability
- TPTI-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability
- TPTI-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability
- TPTI-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability
- TPTI-06-03: eIQnetworks ESA Syslog Server Buffer Overflow Vulnerabilities
- TPTI-06-04: eIQnetworks ESA Topology Server Buffer Overflow Vulnerability
- Upcoming Advisories:
- Oracle (113 days since report)
- Sophos (94 days since report)
- Microsoft (54 days since report)
- Appearances:
- RPC Auditing Tools and Techniques
2007-11-22 DeepSec In-Depth Security Conference- RPC Auditing Tools and Techniques
- PyEmu: A Multi-Purpose Scriptable x86 Emulator
2007-08-02 BlackHat US- PyEmu: A Multi-Purpose Scriptable x86 Emulator
- Blog Entries
- MindshaRE: Finding ActiveX Methods Dynamically
created 2009-06-01 (5 comments, 894 views)- MindshaRE: Finding ActiveX Methods Dynamically
- MindshaRE: Checking Return Values
created 2009-04-16 (3 comments, 1629 views)- MindshaRE: Checking Return Values
- MindshaRE: MSEC !exploitable
created 2009-03-26 (2 comments, 1879 views)- MindshaRE: MSEC !exploitable
- MindshaRE: Labeling UUIDS From Type Information
created 2009-03-05 (1 comments, 1247 views)- MindshaRE: Labeling UUIDS From Type Information
- MindshaRE: Command Line Binary Analysis
created 2009-02-12 (0 comments, 1565 views)- MindshaRE: Command Line Binary Analysis
- MindshaRE: OpenRCE.org
created 2009-02-05 (0 comments, 1359 views)- MindshaRE: OpenRCE.org
- MindshaRE: IDA 5.4
created 2009-01-29 (2 comments, 1684 views)- MindshaRE: IDA 5.4
- MindshaRE: WinDbg Extensions
created 2009-01-22 (0 comments, 5523 views)- MindshaRE: WinDbg Extensions
- MindshaRE: Displaying Constants
created 2009-01-15 (0 comments, 1007 views)- MindshaRE: Displaying Constants
- MindshaRE: Finding Object Constructors
created 2008-12-18 (0 comments, 1577 views)- MindshaRE: Finding Object Constructors
- MindshaRE: Using Gflags
created 2008-12-11 (5 comments, 1953 views)- MindshaRE: Using Gflags
- MindshaRE: Utilizing PyDbg Within IDA
created 2008-11-20 (2 comments, 2386 views)- MindshaRE: Utilizing PyDbg Within IDA
- MindshaRE: Importing Multiple Modules Into a Single IDB
created 2008-11-13 (0 comments, 1578 views)- MindshaRE: Importing Multiple Modules Into a Single IDB
- MindshaRE: Finding Executable Images in WinDbg
created 2008-11-06 (1 comments, 3070 views)- MindshaRE: Finding Executable Images in WinDbg
- MindshaRE: Path Finding
created 2008-10-23 (1 comments, 1714 views)- MindshaRE: Path Finding
- MindshaRE: Using Marks
created 2008-10-16 (0 comments, 1377 views)- MindshaRE: Using Marks
- MindshaRE: First Things First
created 2008-10-09 (0 comments, 1520 views)- MindshaRE: First Things First
- MindshaRE: Naming Conventions
created 2008-10-02 (5 comments, 1417 views)- MindshaRE: Naming Conventions
- MindshaRE: WinDbg Introduction
created 2008-09-25 (2 comments, 2948 views)- MindshaRE: WinDbg Introduction
- MindshaRE: Live Analysis Markup
created 2008-09-18 (3 comments, 1611 views)- MindshaRE: Live Analysis Markup
- MindshaRE: Using Structures
created 2008-09-04 (7 comments, 1676 views)- MindshaRE: Using Structures
- MindshaRE: The IDA Pro Book
created 2008-08-28 (0 comments, 2697 views)- MindshaRE: The IDA Pro Book
- MindshaRE: Fixing Functions
created 2008-08-21 (2 comments, 1690 views)- MindshaRE: Fixing Functions
- MindshaRE: Arithmetic in Assembly
created 2008-08-15 (2 comments, 1761 views)- MindshaRE: Arithmetic in Assembly
- MindshaRE: Anti-Reversing Techniques
created 2008-08-07 (0 comments, 2285 views)- MindshaRE: Anti-Reversing Techniques
- MindshaRE: Using Symbols
created 2008-07-31 (0 comments, 1923 views)- MindshaRE: Using Symbols
- MindshaRE: Cross References in IDA
created 2008-07-24 (6 comments, 2207 views)- MindshaRE: Cross References in IDA
- MindshaRE: Hit Tracing in WinDbg
created 2008-07-17 (2 comments, 3216 views)- MindshaRE: Hit Tracing in WinDbg
- MindshaRE: Strings!
created 2008-07-10 (5 comments, 2146 views)- MindshaRE: Strings!
- MindshaRE: Identifying Encryption Functions
created 2008-07-03 (1 comments, 2683 views)- MindshaRE: Identifying Encryption Functions
- MindshaRE: Adding IDA to Explorer Context Handler
created 2008-06-26 (4 comments, 2258 views)- MindshaRE: Adding IDA to Explorer Context Handler
- MindshaRE: Searching in IDA
created 2008-06-19 (3 comments, 2675 views)- MindshaRE: Searching in IDA
- MindshaRE: Looping in Assembly
created 2008-06-13 (0 comments, 3080 views)- MindshaRE: Looping in Assembly
- MindshaRE: Public Toolkits
created 2008-06-05 (6 comments, 3558 views)- MindshaRE: Public Toolkits
- Owning Kraken Zombies, a Detailed Dissection
created 2008-04-28 (4 comments, 14911 views)- Owning Kraken Zombies, a Detailed Dissection
- MSRPC NDR Types Technical Overview
created 2007-11-24 (0 comments, 4278 views)- MSRPC NDR Types Technical Overview
- Step by Step of How TPTI-07-013 was Discovered
created 2007-07-24 (5 comments, 9468 views)- Step by Step of How TPTI-07-013 was Discovered
