If you like this, you can use flattr. ;)
- Quickpost: Inspiring Windows software profilers and checkers
- 0x41 - back to bugs
- low footprint/hardware assisted virtualization with Linux and GrSec
- Postfix troubleshooting - a security nightmare
- New content soon
- 0x41 - (weekly) exploitation matters - Vista Heap, scripting debuggers with debug libs and how to learn to use that knowledge
- 0x41 - weekly exploitation matters - Shellcode and frameworks
- Explicit and implicit security in software development - measures and change
- 0x41 - weekly exploitation matters - Heap overflow fundamentals
- 0x41 - weekly exploitation matters - About
- wishinet: checking out GDB with Dtrace support for OS X... (1.9.2). Should be interesting.
- wishinet: RT @bfoo: Worth reading: http://merbist.com/2010/08/22/discussion-with-a-java-switcher/
- wishinet: nächstes Jahr Taikai in Nürnberg (http://www.taikai.de/) - und nu aus Nürnberg total groggy in die Falle! ;)
UnprotectedHex - about formal software verification
Sean's blog
Xecurity - a security feed collecter
Reddit RCE group
Freedom To Tinker
Emergent Chaos
Woodmann RCE forums
OpenRCE community forums
SecViz - security data visualization
DAVIX Live - for security metrics
Hex Live
Security Metrics
Immunity's Free Software
Core Security's OpenSouce research
Zynamics Blog
conference materials
0x41 - (weekly) exploitation matters - Vista Heap, scripting debuggers with debug libs and how to learn to use that knowledge
Sat, 04/10/2010 - 21:36 | wishi
The hardended heap
What a long headline...
The attack surfaces of modern NT 6 systems shifted. Nowadays there's no generic way to bypass heap protection mechanisms. There're many requirements to meet to exploit vulnerabilities with current approaches. In the following this is a about attacking heap data (application specific) and not heap metadata (generic).
The Heap and its Memory API
Tags: Best of securitytube for RE and security
Sun, 09/13/2009 - 14:22 | wishi
A collection of tutorials, videos and fun
I think it's an amazing site. There're many video tutorial sites these days. However the quality differs a lot. In the following I listed stuff I like so far. Feel invited to watch everything:
Programming
Python programming course from MIT - the advanced stuff may be of some interest, however it starts of with fairly trivial and introductorily mentioned stuff.
MacOS Software Auditing - some ways
Tue, 08/04/2009 - 15:50 | wishi
Apple developers left doors open. Threats come out.
About the idea
Currently I'm doing some research on vulnerability discovery techniques, speaking of black-boxing, white-boxing and yes... gray boxing, too. These are general code-review techniques for source-code auditing, automated function-auditing and formal software verification.
BinVis re-released - Visual Reverse Engineering and Forensics
Thu, 07/16/2009 - 17:31 | wishi
Visual Reverse Engineering and Forensics
Actually I'm extending the functionality of BinVis. It now has got a new Google Code repository here.
The initial upload just contained Greg Conti's original files. However now it's released under GPL and therefore I've got the opportunity too add new sweet features.
Plans
At "Hacking At Random" I'll release a Mono-based version (with fixed compatibility issues especially for MacOS). This version will not have new features.
Security researchers who care
Wed, 06/17/2009 - 08:53 | wishi
Teaching?
What took the most of us to learn,
is what we teach best.
I found a good collection of IT security specific learning materials. Even if you're an old hand in the fields, you might catch something new, nevertheless I guess it's a university course intended for starters.
Introduction and Source Code Analysis, Dan Guido
Reverse Code Engineering, Stephen A. Ridley
Memory Corruption, Dino Dai Zovi
Fuzzing, Mike Zusman
Client-side attacks and Post-Exploitation, Dean De Beer
Web Hacking, Erik Cabetas
Securing over the top - in depth vs. just sketchy
Thu, 06/11/2009 - 17:57 | wishi
About good people in IT being too good and bad guys playing better
Bugs flew in the Eniac and caused errors. Since ages bugs cause trouble in IT. Now it's time to exterminate them?
Easy AI programming in Python
Wed, 05/13/2009 - 14:46 | wishi
At PyCon 2009 this was presented two weeks ago. Sounds kind of interesting. More here.
