If you like this, you can use flattr. ;)
- Quickpost: Inspiring Windows software profilers and checkers
- 0x41 - back to bugs
- low footprint/hardware assisted virtualization with Linux and GrSec
- Postfix troubleshooting - a security nightmare
- New content soon
- 0x41 - (weekly) exploitation matters - Vista Heap, scripting debuggers with debug libs and how to learn to use that knowledge
- 0x41 - weekly exploitation matters - Shellcode and frameworks
- Explicit and implicit security in software development - measures and change
- 0x41 - weekly exploitation matters - Heap overflow fundamentals
- 0x41 - weekly exploitation matters - About
- wishinet: http://www.godblock.com/#what "block sexual, and psychologically harmful material" like "holy texts". Protect "from being indoctrinated"
- wishinet: Load average: 23.69 20.11 14.95 - jepp, this is obviously bad.
- wishinet: http://img2.moonbuggy.org/imgstore/ethernet-killer.jpg
- wishinet: According to my 400d stats the most viewed page at my blog is phpids's xss warning. You can do better! :)
- wishinet: I'm super-hungry after some meditation... guess this isn't normal. :-) 0xf000000d
UnprotectedHex - about formal software verification
Sean's blog
Xecurity - a security feed collecter
Reddit RCE group
Freedom To Tinker
Emergent Chaos
Woodmann RCE forums
OpenRCE community forums
SecViz - security data visualization
DAVIX Live - for security metrics
Hex Live
Security Metrics
Immunity's Free Software
Core Security's OpenSouce research
Zynamics Blog
C++
0x41 - (weekly) exploitation matters - Vista Heap, scripting debuggers with debug libs and how to learn to use that knowledge
Sat, 04/10/2010 - 21:36 | wishi
The hardended heap
What a long headline...
The attack surfaces of modern NT 6 systems shifted. Nowadays there's no generic way to bypass heap protection mechanisms. There're many requirements to meet to exploit vulnerabilities with current approaches. In the following this is a about attacking heap data (application specific) and not heap metadata (generic).
The Heap and its Memory API
x86 differently: VINE and LLVM-klee
Sat, 09/19/2009 - 13:45 | wishi
The power of intermediate languages
That's a Pentium I form 1993... and it grows more complex since these days.
x86 for RCE isn't that kewl: you've to cope with CISC, mostly more than 7 general purpose registers, complex memory access operands, flags, condition codes, specific model registers... Even if you know your stuff it's not desirable to spend a hell lot of time reading and hacking x86 while other people have relationships and party hard.
Stack is protected: so we don't need secure coding?
Fri, 09/11/2009 - 18:36 | wishi
Do anti-exploitation strategies displace secure programming?
Rumors say you were able to change the color from blue to red.
About stack-smashing, stack-protections and fun-stuff
Thu, 08/20/2009 - 11:40 | wishi
"If you don't check inputs you'll code in EWOK in future!"
Stack based frame-pointer overwrites
JAE AE - just another essay about exploits. - Literature as a great variety of books covering these exploitation schematics. Some miss the howto-factor to really do it. Others are simply outdated. (The linked ones are awesome.)
wishi's blog | 
Add new comment | 1+[encrypted]+#b94+ | 
Tags: C, C++, Exploits, haq tutorial, IT security science, Reversing
MacOS Software Auditing - some ways
Tue, 08/04/2009 - 15:50 | wishi
Apple developers left doors open. Threats come out.
About the idea
Currently I'm doing some research on vulnerability discovery techniques, speaking of black-boxing, white-boxing and yes... gray boxing, too. These are general code-review techniques for source-code auditing, automated function-auditing and formal software verification.
Valgrind on MacOS X Leopard
Wed, 04/15/2009 - 20:39 | wishi
No Linux required
Since quite a while I intended to have a look at Valgrind to have some real fun with C, without having to assume where the errors are. Valgrind has been recommended by many very experienced people to me as "the solution". Nevertheless I didn't want a Linux VM. Even with Portable Ubuntu this sucks.
A new perspective for exploit development
wishi's blog | Add new comment | 1+[encrypted]+#b94+ | Tags: C, C++, commandline-fun, Exploits, Unix
