-EDIT- IM DONE Long time no update. What have I been working on? Lots. For starters, I am coding my own HTTP fuzzer in my favorite web lang – php. Here, take a look: http://gironsec.com/code/fuzzy.html Want to see the back end code? Now that I’m done, here it is: http://gironsec.com/code/myfuz.php I’m calling it ‘Joe’s Hot […]
GAHHH! The epitome of shitty design, aka baby’s first program also known as the wordpress plugin. There area SHITLOAD of these floating around the internet. Most of which promise the same shit – increased ad revenue, dumbing down an already easy to do process (such as auto-tweeting your lame posts), posting a bunch of […]
I have close to 140 GB of music, all mp3’s. From time to time I get stuck with file names which make no sense. The title and tag info is there, but not the file name. Since this is windows, I can’t just run a perl / bash command. Instead I wrote about 400 lines […]
This week for work I ran into a couple of applications running over terminal services. Its like a pseudo remote desktop sort of thing. The idea is that you have an application that runs remotely that others can use. What’s supposed to happen is a user can only use said application and nothing more. That’s […]
I can never EVER find one when i need one, so I just made one. This came in handy for a pen test I was working on for a company I can’t disclose. This one is password protected, allows for downloading, uploading, copying, viewing and deleting of files as well as emulating the ‘dir’ command. […]
Have you ever wondered how to make your own task manager? That thing that pops up when you press control+shift+escape and shows all the process names, ids and files associated with them? Well now you can! What you need is a C compiler, the dll, and the library. You can download them here: PROCS […]
Reversing aint easy these days and is getting harder. Every other executable is packed with this or that, PEID is no longer updated, and many software companies are moving towards dongle based security. The idea is simple – store the registration key or encryption key on a mobile piece of hardware. So what is a […]
The Battlefield 3 beta is over. Now all i have is their stupid knock off of steam until the 28th when the release Bf3 to the masses. After some careful manipulation (setting the 3rd byte of the PEB to always return FALSE like noted in my last paper) I was finally able to browse the […]
Battlefield 3’s beta made its debut launch this week. Great little game that shows promise. I, being the curious type wanted to peek at some of the extras it came bundled with. One of the extras was this mumble / teamspeak knockoff program called Sonar. While single stepping though in WinDBG (giving immunity a break) […]
From time to time, I encounter….weird forms of software protection. Stuff most other reverse engineers have probably never seen. Take this example. I was trying to track down a string in a binary, but couldn’t find it through conventional means, so I opened the program up with a resource editor. Then i stumble upon this […]