Hello loyal readers. Good news! I’ve been picked to speak at ToorCon in San Diego next month in October. I will be going over my findings in malware that manages to slip by FireEye undetected. A chink in the armor of one of the most powerful (and expensive) malware appliances out there. But enough about […]
Hello again loyal readers. I’ve had a lot of ideas rattling around in my head lately. Malware related things. For example, what if someone used Gopher for C&C? Who the hell uses gopher anymore? The API’s for handling gopher, while deprecated, are still around. Though you would probably have to load it from an older […]
Hello again people! I’ve been busy lately with my awesome job giving me free time to code things up. I’ve constructed a raw TCP packet builder in C# for the hell of it. I coded this up using winpcap to test a topic I saw at Defcon this year. It was said a vulnerability exists […]
Hello fellow readers, Its been a while since I’ve posted. Today at work I was going over malware already flagged by McAfee and sent to the quarantined folder. The way McAfee encrypts / encodes its quarantined files is pretty basic – XOR (exclusive OR) on each byte by the value of 0x6a (106 in decimal). […]
Hello people! Long time, no update. I am sorry for that. I’ve been working at my new job and have been focusing my time on video games and women. The bane of all procrastination. I’ve been hammering away at my brutus app every time I get the chance. With the basic auth stub out of […]
Welcome loyal readers! It’s been a dogs age. I’ve been split on projects and time, playing lots of video games and writing lots of code. Recently I found a format string vulnerability in a video game. A popular one at that. Further research into this video game revealed this vulnerability is not new. I found […]
It happened again at work. This time twice the number of machines hit. The same people hit my company, and they took my advice when I last spoke to them – they obfuscated the executable to make it harder to perform a routine reverse engineering analysis. In this particular case, the obfuscation used was compiled […]
Greetings and salutations! I’ve been busy not with breaking things, but instead making things! Its a totally different balls park to make something useful than it is to try and find flaws in it. This little stub application is part of a larger application I’ve been slowly building up over the last few months. I […]
I threw this together tonight because I was sick of trying to think of them(passwords) off the top of my head. As a sys admin I have to use this all the time on compromised accounts. Here’s what it looks like. You can download the full program here.
A few weeks ago I was speaking with a buddy of mine who’s studying law. He wants to be a cyber lawyer dealing with cyber crime. He claimed file date-time stamps were admissible evidence in court. Any win32 coder worth their weight in sand knows date time stamps can be faked, but he wasn’t convinced. […]