Hello people! Long time, no update. I am sorry for that. I’ve been working at my new job and have been focusing my time on video games and women. The bane of all procrastination. I’ve been hammering away at my brutus app every time I get the chance. With the basic auth stub out of […]
Welcome loyal readers! It’s been a dogs age. I’ve been split on projects and time, playing lots of video games and writing lots of code. Recently I found a format string vulnerability in a video game. A popular one at that. Further research into this video game revealed this vulnerability is not new. I found […]
It happened again at work. This time twice the number of machines hit. The same people hit my company, and they took my advice when I last spoke to them – they obfuscated the executable to make it harder to perform a routine reverse engineering analysis. In this particular case, the obfuscation used was compiled […]
Greetings and salutations! I’ve been busy not with breaking things, but instead making things! Its a totally different balls park to make something useful than it is to try and find flaws in it. This little stub application is part of a larger application I’ve been slowly building up over the last few months. I […]
A few weeks ago I was speaking with a buddy of mine who’s studying law. He wants to be a cyber lawyer dealing with cyber crime. He claimed file date-time stamps were admissible evidence in court. Any win32 coder worth their weight in sand knows date time stamps can be faked, but he wasn’t convinced. […]
Howdy all! Who here remembers Brutus? That C++ app that allows for rapid brute forcing of FTP / HTTP Basic Auth stuff? That app that gets picked up by EVERY AV under the sun? Well I remember it quite well. It helped me get into a number of boxes back in the day. To show […]
As per my talk at toorcon, I said I would post the code here. You can download the talk here (PDF form here) I have uploaded the videos here: Snaring Window Messages and here: App In Action
Hello everyone, Today we will be going over the answers to the test offered by Tenable / Nessus when you interview with them to be an appsec guy. I was told I was the first to ace all 3 tests, so I might as well be the first to spoil all 3 tests. What they […]
This week I encountered a password hash I hadnt seen in a while. Base64 with a twist. SmarterTools.com has a mail server called SmarterMail written in all .net. It stores its passwords in xml files in what looks to be base64, but not quite. Unlike most companies, I assume SmarterTools doesn’t know how to encrypt […]
I recently went to Defcon and had some time to think about the next thing to write. I had been toying with the idea for some time. A password snarfer for those password database programs like Norton Identity Manager, PassSafe off of sourceforge, LastPass, Kaspersky Password Manager, Roboform Desktop, Iron Key and the rest. I’m […]