Apr 12, 2011

“In everything one thing is impossible: rationality.” –Friedrich Nietzsche

Apr 11, 2011

The GNU Compiler Collection has a FORTIFY_SOURCE option that does automatic bounds checking of dangerous functions to prevent simple buffer overflows. The FORTIFY_SOURCE code will do static and dynamic checks on buffer sizes to prevent these buffer overflows.

Apr 8, 2011

Vicnum is a training game put out by OWASP. If you play the game the first page will ask you for your name. Enter anything then hit continue. I typed ‘Name’. You should be at this URL now:

Apr 4, 2011

This is a toy program that we want to monkeypatch. It really doesn’t do anything except call socket().

Mar 25, 2011

Hi there! So this post will be the first in a series that focuses on an interdisciplinary approach to cyber security- with an emphasis on finance.  The series of posts will address the growing evidence that security can only be achieved through a thorough, well-rounded understanding of all the issues that play a role in cyber security.  Thanks for reading, and I hope you enjoy!              

Mar 10, 2011

A well-known set of vulnerable programs to practice exploitation can be found at gera’s insecure programming. I will go through several challenges over the coming weeks. Ideally, I want to complete them all. Let’s see how far I can go. In this post I will go over how to solve format string #1 (fs1.c).

Mar 10, 2011

1. Run metasploit:

Mar 2, 2011

In which we weaponize an XSS bug in Frog CMS 0.9.5