Dion's great paper on Pointer Inference / JIT Spraying.

BHDC-2010-Paper.pdf (application/pdf Object)

Thursday, March 18, 2010
The Latest Adobe Exploit and Session Upgrading
On March 12th and 13th, a researcher named "villy" posted a couple of blogs relating to an exploit for CVE-2010-0188. On the 15th, I ported that exploit (python) over to Metasploit (ruby), which you can find here, in the module browser.

Metasploit: The Latest Adobe Exploit and Session Upgrading

In my last post, Pentesting Adobe Flex Applications with a Custom AMF Client, I described how one could write a client using Python and PyAMF to perform manual penetration testing of Flex applications. The example application I focused on utilized RemoteObjects and communicated via binary AMF encoded messages, a common roadblock for security testers.

Penetrating Intranets through Adobe Flex Applications - Gotham Digital Science

How _NOT_ to do AV heuristics!

The sorry state of Avira anti-virus heuristics � grack.com: Matt Mastracci's blog

Herein you will find two things: First, my HTML version of the public domain file intel.doc, which derives from the PC Game Programmer's guide. This HTML version was produced by me alone, Zack Smith. HTML modifications are therefore copyrighted © 2005 and 2009 by Zack Smith, all rights reserved. This information is provided in the hope that it will be useful, but without any warranty; it is provided AS-IS, without even the implied warranty of fitness for a particular purpose.

8086.tk

22 March 2010, 10:28
Google releases web security scanner

Skipfish runs via a Linux / Unix command line. Vergr��ern Google has released an open source scanner that allows web application developers to test their applications for security holes.

Google releases web security scanner - The H Security: News and Features

An exploit writer at Core Security Technologies has discovered a serious vulnerability that exposes users of Microsoft’s Virtual PC virtualization software to malicious hacker attacks.

Microsoft Virtual PC Flaw Lets Hackers Bypass Windows Defenses | threatpost

When tearing off one of the toolbars in IDA 5.5 this morning, my Windows 7 virtual machine locked up, and became unresponsive. Of course, I immediately attached a debugger to see what was going on.

Creating Window Cycles

A gentle introduction to return-oriented programming
By Tim Kornau

Hi,

As I have promised in my last post I will start a series about return-oriented programming. I start with a short introduction about the topic.

A gentle introduction to return-oriented programming � blog.zynamics.com

The REIL language – Part I
By Sebastian Porst

If you have followed the development of BinNavi over the last two years you might know that we are making heavy use of something called REIL to provide features backed by advanced static code analysis. REIL is short for Reverse Engineering Intermediate Language and at its core it is a platform-independent pseudo-assembly language that can be used to emulate native assembly code.

The REIL language – Part I « blog.zynamics.com