He runs his own company - [ISR] Infobyte Security Research from where he published his developments in audit tools and vulnerabilities in products from companies like Novell, IBM, Sun Microsystems, Apple, Microsoft.Founding organizer of ekoparty south america security conference This new release of FOCA, version 2, adds tools to scans internal domains using PTR Scanning, Software recognition through installation paths, etc.
He is currently working on his Ph D thesis about Blind Techniques.
Recently spoke in BH Europe 2008 about LDAP Injection & Blind LDAP Injection attacks, in DEF CON 16 about Time-Based Blind SQL Injection using heavy Queries, in Toorcon X about RFD (Remote File Downloading) and in Deep Sec 2k8 in Austria.
FOCA is a tool to extract information in footprinting and fingerprinting phases during a penetration test.
It helps auditors to extract and analyze information from metadata, hidden info and lost data in published files.
Chema Alonso is a Computer Engineer by the Rey Juan Carlos University and System Engineer by the Politecnica University of Madrid.
He has been working as security consultant last six years and had been awarded as Microsoft Most Valuable Professional since 2005 to present time.
He is a Microsoft frequent speaker in Security Conferences.
He writes monthly in several Spanish Technical Magazines.
He has discovered many security flaws and implementation vulnerabilities which has been presented in several international security events such as Defcon, Toorcon, Comsware etc.
He holds an MTech in Computer Science from Indian Institute of Technology Roorkee, India.
Recently has been selected to be presenting in Hack Con#4 and Hack Con #5 in Norway and in Schmoo Con 2k9 in Washington DC, Black Hat Europe 2k9 , DEF CON 17 and Ekoparty and Argentina.