Archives
-
Allow BIND DNS Queries from external networks
Folks,
If you have ever configured ISC BIND DNS in your machines locally and the application is not replying you with the required DNS response then this post is for you. This post will tell how to do a basic troubleshoot if you face such issues. Some couple of days back, [...]Feb 28th, 2010 | Filed under Security -
How to install OpenVAS 3 in Ubuntu 9.10
Folks,
As you must be knowing that OpenVAS Community has released a new version for OpenVAS 3.x and they have come up with some many additional features this time i.e. GSA, openvas-administrator and openvas-manager. They are some of the useful features that you should give it a try! And at the same [...]Dec 22nd, 2009 | Filed under Security -
An approach to SMB v2 Negotiate Protocol BSOD Vulnerability Remote Check
As we know recently, there had been a hype about SMB v2 protocol vulnerability which was causing BSOD in the vulnerable system. This vulnerability exists in srv2.sys which was not able to handle a higher/lower PID value in the SMB_Negotiate protocol field (2 Bytes). The vulnerability can be successfully exploited by the [...]
Oct 25th, 2009 | Filed under Security -
SAP Business One 2005 – A License Manager Remote Buffer Overflow Analysis
Buddies,
Today I will write a small analysis paper on milw0rm exploit#9319. Due to security reasons I can’t share all the in-depth technical information about this vulnerability but I will be giving an overall idea on how the exploit affects the remote application and how the attacker is taking advantage of this vulnerability through the shared [...]Aug 31st, 2009 | Filed under Security -
Javascript Obfuscation and Tools of the trade
What is JS Obfuscation?
JS Obfuscation is a process of scrambling your JavaScrips Codes in order to prevent the code from being analyzed. However it makes the code stealing job difficult as it converts the codes in such a format that it will be difficult to understand the functionality of code and how it works.
How to [...]Aug 30th, 2009 | Filed under Security -
How to Analyze File format Vulnerabilities
Buddies,
I hope the title of the post explained you what this post will be all about. However, I just dropped it into the dashboard so that you can have a glimpse what I am doing. Actually I am trying to write a documentation (I won’t be able to cover each and every aspect of File [...]Jul 7th, 2009 | Filed under Security -
Malzilla Documentation for Web Based Malware Detection
Buddies,
Before delving deeper into the malware detection stuffs let me just add some lines for defining what a Malware is all about. Malwares are some certain piece of codes which makes them executed without the user’s interference. Malwares are of various kinds which depends upon how they work and how they replicate themselves into the [...]Jul 4th, 2009 | Filed under Security