Archives
-
Metasploit Encoders and Code Injection Whitepaper
Folks, I just came across with an excellent whitepaper published in PacketStorm Security website and couldn’t stop sharing with you about it. This paper gives you a very brief idea about various types of payload encoders which are present inside Metasploit tool. If you really want to know what type of payload you craft while [...]
Mar 8th, 2012 | Filed under Security -
PyDbg: An Installation Guide
PyDbg is one of the coolest User-Mode (Ring3) debugger available which is open source and completely scriptable in Python. If you want to parse the exe, decode instructions on the fly then this is the right choice for you! You can even code your own API Hooking, Monitoring tools (can be extended in various ways [...]
Mar 8th, 2012 | Filed under Security -
Allow BIND DNS Queries from external networks
Folks, If you have ever configured ISC BIND DNS in your machines locally and the application is not replying you with the required DNS response then this post is for you. This post will tell how to do a basic troubleshoot if you face such issues. Some couple of days back, I was in need [...]
Feb 28th, 2010 | Filed under Security -
How to install OpenVAS 3 in Ubuntu 9.10
Folks, As you must be knowing that OpenVAS Community has released a new version for OpenVAS 3.x and they have come up with some many additional features this time i.e. GSA, openvas-administrator and openvas-manager. They are some of the useful features that you should give it a try! And at the same time we can [...]
Dec 22nd, 2009 | Filed under Security -
An approach to SMB v2 Negotiate Protocol BSOD Vulnerability Remote Check
As we know recently, there had been a hype about SMB v2 protocol vulnerability which was causing BSOD in the vulnerable system. This vulnerability exists in srv2.sys which was not able to handle a higher/lower PID value in the SMB_Negotiate protocol field (2 Bytes). The vulnerability can be successfully exploited by the poc provided by [...]
Oct 25th, 2009 | Filed under Security -
SAP Business One 2005 – A License Manager Remote Buffer Overflow Analysis
Buddies, Today I will write a small analysis paper on milw0rm exploit#9319. Due to security reasons I can’t share all the in-depth technical information about this vulnerability but I will be giving an overall idea on how the exploit affects the remote application and how the attacker is taking advantage of this vulnerability through the [...]
Aug 31st, 2009 | Filed under Security -
Javascript Obfuscation and Tools of the trade
What is JS Obfuscation? JS Obfuscation is a process of scrambling your JavaScrips Codes in order to prevent the code from being analyzed. However it makes the code stealing job difficult as it converts the codes in such a format that it will be difficult to understand the functionality of code and how it works. [...]
Aug 30th, 2009 | Filed under Security