Security Researcher, Manager & Engineer

Eslam Salem.

Manager, Security Research @ Datadog.
20+ years breaking and building things. Founder, engineer, speaker, and open-source author. Hunting vulnerabilities before your coffee gets cold.

Security Researcher BlackHat Speaker Open Source Offensive Security Founder Cloud Security
→ View Research About Me
Eslam Salem
20+ Years of experience
2+ CVEs Found
9+ Conference Talks
3 OSS Tools
1 Startups Founded
Research

// vulnerability_research

view all →
CVE-2022-29078
EJS, Server side template injection RCE (CVE-2022-29078)

Note: The objective of this research or any similar researches is to improve the nodejs ecosystem security level.

Recently i was working on a related project …

CRITICAL Read writeup →
CVE-2020-8135
SSRF vulnerability in Uppy, Detected by Shieldfy

In this post, we will explain how Shieldfy detected an SSRF ( Server-side request forgery ) vulnerability in Uppy, one of the popular packages in NPM, diving …

HIGH Read writeup →
Speaking

// conference_talks

view all →
BlackHat MEA Riyadh, Saudi Arabia
Discover and Exploit Hidden Vulnerabilities with Out-Of-Band Attacks - Blackhat Mea 2023
2023
Slides
BlackHat MEA Riyadh, Saudi Arabia
Introduce HASH (HTTP Agnostic Software Honeypot) Framework - Blackhat Mea 2023
2023
BlackHat USA Las Vegas, USA
Introduce HASH (HTTP Agnostic Software Honeypot) Framework - Blackhat Usa 2023
2023
Slides Video
BlackHat MEA Riyadh, Saudi Arabia
Stealing the keys to the castle - Blackhat Mea 2022
2022
BSides Cairo Cairo, Egypt
Dive into the serverless security - Bsides Cairo 2020
2020
Slides
EgyptJS Cairo, Egypt
Writing secure nodeJS code - Egyptjs 2019
2019
Video
Writing

// external_writing

view all →
Oct 13, 2023
The Confluence CVE-2023-22515 Vulnerability: Overview, Detection, and Remediation
Deep-dive into the critical privilege escalation flaw in Atlassian Confluence, with detection logic and step-by-step remediation.
external Datadog Security Labs →
confluencecvecloud
Nov 1, 2022
The OpenSSL Punycode Vulnerability (CVE-2022-3602): Overview, Detection, Exploitation
Analysis of the most anticipated OpenSSL vulnerability of 2022.
external Datadog Security Labs →
opensslcvecryptography
Jun 7, 2022
The Confluence RCE Vulnerability (CVE-2022-26134): Overview, Detection, and Remediation
Analysis of the critical Confluence RCE that was actively exploited in the wild.
external Datadog Security Labs →
confluencercecve
Apr 1, 2022
The Spring4Shell Vulnerability: Overview, Detection, and Remediation
Complete breakdown of Spring4Shell — one of the most hyped vulnerabilities of 2022.
external Datadog Security Labs →
javaspringrcecve
About

// whoami

I'm Eslam Salem — a security researcher, engineer, and founder from Egypt 🇪🇬 with over 20 years in the field.

Currently leading Security Research at Datadog, hunting vulnerabilities in the cloud ecosystem and building tooling that helps defenders stay ahead. Previously co-founded Shieldfy, an application security platform.

I speak at conferences like BlackHat, write for Datadog Security Labs, and ship open-source tools used by tens of thousands of developers worldwide.