SAP Business One 2005 – A License Manager Remote Buffer Overflow Analysis

Buddies,
Today I will write a small analysis paper on milw0rm exploit#9319. Due to security reasons I can’t share all the in-depth technical information about this vulnerability but I will be giving an overall idea on how the exploit affects the remote application and how the attacker is taking advantage of this vulnerability through the shared milw0rm code. And at last we will be discussing on how to write a signature to detect this exploitation attempt over the network packets transmission.

Read more…

Aug 31st, 2009 | Filed under Security

Javascript Obfuscation and Tools of the trade

What is JS Obfuscation?
JS Obfuscation is a process of scrambling your JavaScrips Codes in order to prevent the code from being analyzed. However it makes the code stealing job difficult as it converts the codes in such a format that it will be difficult to understand the functionality of code and how it works.

How to Obfuscate your JavaScript codes?
Although you can make your own JS Obfuscators, well there are some vendors which makes your life easier by providing readymade tools for solving your obfuscation purposes. Some of them are:
Read more…

Aug 30th, 2009 | Filed under Security

Blog theme updated and did some optimizations too!

Hi,
Finally I got another theme which suits my needs! This theme fits into the website context so well. One good feature I liked in this theme is its simplicity. Its not messy at all, no images and the interface looks so prolific that I wanted to stick with this at last. iNove theme is pretty decent but I had to do lots of rnd to make even a small change though I am not good in web designing related stuffs. However I managed to bring the new theme and I hope it will give a new and comfortable look in your eyes. If you have any suggestions/feedbacks/issues with this theme then please don’t hesitate to drop a mail or you can add comments below the post itself too. See the contacts page for pinging me. I will try my best to give your mail’s response as soon as possible.

Read more…

Aug 28th, 2009 | Filed under Misc

How to Analyze File format Vulnerabilities

Buddies,
I hope the title of the post explained you what this post will be all about. However, I just dropped it into the dashboard so that you can have a glimpse what I am doing. Actually I am trying to write a documentation (I won’t be able to cover each and every aspect of File Format Vulnerabilities) but I will be sharing how to Analyze file format vulnerabilities.

Read more…

Jul 7th, 2009 | Filed under Security

Malzilla Documentation for Web Based Malware Detection

Buddies,
Before delving deeper into the malware detection stuffs let me just add some lines for defining what a Malware is all about. Malwares are some certain piece of codes which makes them executed without the user’s interference. Malwares are of various kinds which depends upon how they work and how they replicate themselves into the system for affecting the victim. But we won’t be discussing about their characteristics here as we will be focusing on some methodologies they follow to spread over the wired world.

Read more…

Jul 4th, 2009 | Filed under Security

IE 7/8 Multiple XSS Vulnerabilities.

Buddies,
Its been a long time I am unable to be active in blogging due to my busy schedules. However thought to give a come back with something interesting. While just going through some security related feeds I just came through this nice IE XSS Vulnerability report and thought to drop it in this dashboard to feel the presence :P . Read more…

Jul 2nd, 2009 | Filed under Security

Google Chrome ported to Linux and Mac OS X

Google Chrome has taken a good place in tech arena for the browser wars. Its security features, sandboxing technology makes it a perfect and smooth browser! As we know Chrome is not supported for Linux editions as everyone is waiting for it to get it released officially. But if you are really eager to run chrome in Linux environment then you should have a look at Chromium. Chromium is not official supported by Google and the it is the ported version of Chrome which runs under Wine engine as developers soul intention was to demonstrate Wine Emulator’s Capabilities. Chromium is open source and it has the exact interface (obviously) which Google Chrome has. Chromium is fully OpenSource whose source code you can get from the website itself.

Read more…

May 17th, 2009 | Filed under Tech