It happened again at work. This time twice the number of machines hit. The same people hit my company, and they took my advice when I last spoke to them – they obfuscated the executable to make it harder to perform a routine reverse engineering analysis. In this particular case, the obfuscation used was compiled […]
Howdy fellow crackers and hackers alike! Have I got a treat for you? A live botnet. The other day at work, I encountered a number of machines all attacking other hosts. Normally its just one machine, but this there were several. We isolated the exe responsible because it was eating up 100% CPU (not exactly […]
Hello everybody! Its been a wonderful new year. Full of new experiences and all that other stuff. Lately I’ve been running into a lot of .net stuff. Managed assemblies (compiled MSIL dlls) interacting with normal binaries as well as .net binaries. The beauty of it is most of the time, I can decompile them and […]
Hello everyone, Today we will be going over the answers to the test offered by Tenable / Nessus when you interview with them to be an appsec guy. I was told I was the first to ace all 3 tests, so I might as well be the first to spoil all 3 tests. What they […]
This week I encountered a password hash I hadnt seen in a while. Base64 with a twist. SmarterTools.com has a mail server called SmarterMail written in all .net. It stores its passwords in xml files in what looks to be base64, but not quite. Unlike most companies, I assume SmarterTools doesn’t know how to encrypt […]
I recently went to Defcon and had some time to think about the next thing to write. I had been toying with the idea for some time. A password snarfer for those password database programs like Norton Identity Manager, PassSafe off of sourceforge, LastPass, Kaspersky Password Manager, Roboform Desktop, Iron Key and the rest. I’m […]
This week for work I ran into a couple of applications running over terminal services. Its like a pseudo remote desktop sort of thing. The idea is that you have an application that runs remotely that others can use. What’s supposed to happen is a user can only use said application and nothing more. That’s […]
Reversing aint easy these days and is getting harder. Every other executable is packed with this or that, PEID is no longer updated, and many software companies are moving towards dongle based security. The idea is simple – store the registration key or encryption key on a mobile piece of hardware. So what is a […]
The triumphant release of Battlefield 3 marks the second time in my life where I waited til midnight to purchase a game standing outside a store. The first of which being Fallout 3 (after all I did wait 10 years for a sequel). And with the newest game out you would think there would be […]
The Battlefield 3 beta is over. Now all i have is their stupid knock off of steam until the 28th when the release Bf3 to the masses. After some careful manipulation (setting the 3rd byte of the PEB to always return FALSE like noted in my last paper) I was finally able to browse the […]