<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Peter Van Eeckhoutte&#039;s Blog</title>
	<atom:link href="http://www.corelan.be/index.php/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.corelan.be:8800</link>
	<description>:: [Knowledge is not an object, it´s a flow] ::</description>
	<lastBuildDate>Sun, 07 Mar 2010 17:02:30 +0000</lastBuildDate>
	
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>corelanc0d3r featured on Offensive Security Blog</title>
		<link>http://www.corelan.be:8800/index.php/2010/03/07/corelanc0d3r-featured-on-offensive-security-blog/</link>
		<comments>http://www.corelan.be:8800/index.php/2010/03/07/corelanc0d3r-featured-on-offensive-security-blog/#comments</comments>
		<pubDate>Sun, 07 Mar 2010 17:01:41 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[offensive security]]></category>
		<category><![CDATA[offsec]]></category>
		<category><![CDATA[quickzip]]></category>
		<category><![CDATA[seh]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=3292</guid>
		<description><![CDATA[A few moments ago I published a detailed write-up, explaining the steps I took to build a 0day exploit for a zip file handling bug in QuickZip, on the Offensive Security blog.
You can read the article here :
http://www.offensive-security.com/blog/vulndev/quickzip-stack-bof-0day-a-box-of-chocolates/
&#169; 2010, Peter Van Eeckhoutte. All rights reserved. Terms of Use are applicable to all content on this [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2010/03/07/corelanc0d3r-featured-on-offensive-security-blog/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Exploit writing tutorial part 9 : Introduction to Win32 shellcoding</title>
		<link>http://www.corelan.be:8800/index.php/2010/02/25/exploit-writing-tutorial-part-9-introduction-to-win32-shellcoding/</link>
		<comments>http://www.corelan.be:8800/index.php/2010/02/25/exploit-writing-tutorial-part-9-introduction-to-win32-shellcoding/#comments</comments>
		<pubDate>Thu, 25 Feb 2010 16:21:00 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[asm]]></category>
		<category><![CDATA[assembly]]></category>
		<category><![CDATA[bad chars]]></category>
		<category><![CDATA[beta3]]></category>
		<category><![CDATA[bits 32]]></category>
		<category><![CDATA[bytecode]]></category>
		<category><![CDATA[calc]]></category>
		<category><![CDATA[charset limitation]]></category>
		<category><![CDATA[decoder]]></category>
		<category><![CDATA[encoder]]></category>
		<category><![CDATA[ExitFunc]]></category>
		<category><![CDATA[ExitProcess]]></category>
		<category><![CDATA[ExitThread]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[exploit writing]]></category>
		<category><![CDATA[find function]]></category>
		<category><![CDATA[fstenv]]></category>
		<category><![CDATA[fstenv_mov]]></category>
		<category><![CDATA[GetProcess]]></category>
		<category><![CDATA[hash]]></category>
		<category><![CDATA[intel]]></category>
		<category><![CDATA[introduction win]]></category>
		<category><![CDATA[kernel32]]></category>
		<category><![CDATA[loadlibraryA]]></category>
		<category><![CDATA[loopd]]></category>
		<category><![CDATA[MessageBoxA]]></category>
		<category><![CDATA[metasploit]]></category>
		<category><![CDATA[nasm]]></category>
		<category><![CDATA[null bytes]]></category>
		<category><![CDATA[opcode]]></category>
		<category><![CDATA[part introduction]]></category>
		<category><![CDATA[peb]]></category>
		<category><![CDATA[pvefindaddr]]></category>
		<category><![CDATA[pvereadbin.pl]]></category>
		<category><![CDATA[pvewritebin.pl]]></category>
		<category><![CDATA[seh]]></category>
		<category><![CDATA[shellcode]]></category>
		<category><![CDATA[shikata_ga_nai]]></category>
		<category><![CDATA[skylined]]></category>
		<category><![CDATA[topstack]]></category>
		<category><![CDATA[tutorial part]]></category>
		<category><![CDATA[user32]]></category>
		<category><![CDATA[w32-testival]]></category>
		<category><![CDATA[win shellcoding]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[WinExec]]></category>
		<category><![CDATA[writing]]></category>
		<category><![CDATA[writing tutorial]]></category>
		<category><![CDATA[x86]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2830</guid>
		<description><![CDATA[Over the last couple of months, I have written a set of tutorials about building exploits that target the Windows stack. One of the primary goals of anyone writing an exploit is to modify the normal execution flow of the application and trigger the application to run arbitrary code… code that is injected by the [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2010/02/25/exploit-writing-tutorial-part-9-introduction-to-win32-shellcoding/feed/</wfw:commentRss>
		<slash:comments>8</slash:comments>
		</item>
		<item>
		<title>Starting to write Immunity Debugger PyCommands : my cheatsheet</title>
		<link>http://www.corelan.be:8800/index.php/2010/01/26/starting-to-write-immunity-debugger-pycommands-my-cheatsheet/</link>
		<comments>http://www.corelan.be:8800/index.php/2010/01/26/starting-to-write-immunity-debugger-pycommands-my-cheatsheet/#comments</comments>
		<pubDate>Tue, 26 Jan 2010 22:03:00 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Development]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Scripts]]></category>
		<category><![CDATA[api]]></category>
		<category><![CDATA[assemble]]></category>
		<category><![CDATA[cheatsheet]]></category>
		<category><![CDATA[debugger]]></category>
		<category><![CDATA[disassemble]]></category>
		<category><![CDATA[immlib]]></category>
		<category><![CDATA[immunity]]></category>
		<category><![CDATA[immunity debugger]]></category>
		<category><![CDATA[module]]></category>
		<category><![CDATA[plugin]]></category>
		<category><![CDATA[pycommand]]></category>
		<category><![CDATA[python]]></category>
		<category><![CDATA[readmemory]]></category>
		<category><![CDATA[script]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2802</guid>
		<description><![CDATA[When I started Win32 exploit development many years ago, my preferred debugger at the time was WinDbg (and some Olly). While Windbg is a great and fast debugger, I quickly figured out that some additional/external tools were required to improve my exploit development experience.
Despite the fact that the command line oriented approach in windbg has [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2010/01/26/starting-to-write-immunity-debugger-pycommands-my-cheatsheet/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Exploit writing tutorial part 8 : Win32 Egg Hunting</title>
		<link>http://www.corelan.be:8800/index.php/2010/01/09/exploit-writing-tutorial-part-8-win32-egg-hunting/</link>
		<comments>http://www.corelan.be:8800/index.php/2010/01/09/exploit-writing-tutorial-part-8-win32-egg-hunting/#comments</comments>
		<pubDate>Sat, 09 Jan 2010 18:57:00 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[alpha2]]></category>
		<category><![CDATA[alpha3]]></category>
		<category><![CDATA[alphanumeric]]></category>
		<category><![CDATA[asm]]></category>
		<category><![CDATA[bad char]]></category>
		<category><![CDATA[custom encoder]]></category>
		<category><![CDATA[direct ret]]></category>
		<category><![CDATA[egg]]></category>
		<category><![CDATA[eip]]></category>
		<category><![CDATA[encode]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[exploit writing]]></category>
		<category><![CDATA[find shellcode]]></category>
		<category><![CDATA[hunter]]></category>
		<category><![CDATA[hunting]]></category>
		<category><![CDATA[immunity]]></category>
		<category><![CDATA[inject]]></category>
		<category><![CDATA[isbadreadptr]]></category>
		<category><![CDATA[marker]]></category>
		<category><![CDATA[memory]]></category>
		<category><![CDATA[metasploit]]></category>
		<category><![CDATA[nasm]]></category>
		<category><![CDATA[nop]]></category>
		<category><![CDATA[ntdisplaystring]]></category>
		<category><![CDATA[omelet]]></category>
		<category><![CDATA[pvefindaddr]]></category>
		<category><![CDATA[search]]></category>
		<category><![CDATA[seh]]></category>
		<category><![CDATA[shellcode]]></category>
		<category><![CDATA[skape]]></category>
		<category><![CDATA[skylined]]></category>
		<category><![CDATA[small buffer]]></category>
		<category><![CDATA[staged]]></category>
		<category><![CDATA[tag]]></category>
		<category><![CDATA[trampoline]]></category>
		<category><![CDATA[tutorial]]></category>
		<category><![CDATA[unicode]]></category>
		<category><![CDATA[venetian]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[win32_seh_omelet]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2677</guid>
		<description><![CDATA[Introduction
Easter is still far away, so this is probably the right time to talk about ways to hunting for eggs (so you would be prepared when the easter bunny brings you another 0day vulnerability) 
In the first parts of this exploit writing tutorial series, we have talked about stack based overflows and how they can [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2010/01/09/exploit-writing-tutorial-part-8-win32-egg-hunting/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Happy New Year</title>
		<link>http://www.corelan.be:8800/index.php/2010/01/01/happy-new-year/</link>
		<comments>http://www.corelan.be:8800/index.php/2010/01/01/happy-new-year/#comments</comments>
		<pubDate>Thu, 31 Dec 2009 23:01:00 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[Private]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2668</guid>
		<description><![CDATA[I would like to wish you all a Happy New Year with
- good health 
- lots of fun
- lots of time to do research and learn 
- the strength to share your knowledge with others
- new tutorials
- constructive discussions
- the best of everything !!
&#160;
Take care in 2010 !
&#169; 2010, Peter Van Eeckhoutte. All rights reserved. [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2010/01/01/happy-new-year/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Exchange Server 2010 available worldwide</title>
		<link>http://www.corelan.be:8800/index.php/2009/11/10/exchange-server-2010-available-worldwide/</link>
		<comments>http://www.corelan.be:8800/index.php/2009/11/10/exchange-server-2010-available-worldwide/#comments</comments>
		<pubDate>Tue, 10 Nov 2009 06:13:45 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[MS Exchange]]></category>
		<category><![CDATA[2010]]></category>
		<category><![CDATA[available]]></category>
		<category><![CDATA[download]]></category>
		<category><![CDATA[release]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/index.php/2009/11/10/exchange-server-2010-available-worldwide/</guid>
		<description><![CDATA[From the MSExchangeTeam Blog :
It is my distinct pleasure to announce today the global availability of Exchange Server 2010. This has been an amazing journey from conception to launch, and the team has delivered an unprecedented line up of innovations in this release. I am incredibly proud of the team and our product.
The dedication of [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2009/11/10/exchange-server-2010-available-worldwide/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Exploit writing tutorial part 7 : Unicode &#8211; from 0&#215;00410041 to calc</title>
		<link>http://www.corelan.be:8800/index.php/2009/11/06/exploit-writing-tutorial-part-7-unicode-from-0x00410041-to-calc/</link>
		<comments>http://www.corelan.be:8800/index.php/2009/11/06/exploit-writing-tutorial-part-7-unicode-from-0x00410041-to-calc/#comments</comments>
		<pubDate>Fri, 06 Nov 2009 11:02:40 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[00410041]]></category>
		<category><![CDATA[0x00410041]]></category>
		<category><![CDATA[0x06]]></category>
		<category><![CDATA[0xeb]]></category>
		<category><![CDATA[alpha2]]></category>
		<category><![CDATA[BufferRegister]]></category>
		<category><![CDATA[Building IA32 'Unicode-Proof' Shellcodes]]></category>
		<category><![CDATA[chris anley]]></category>
		<category><![CDATA[code page]]></category>
		<category><![CDATA[Creating Arbitrary Shellcode in Unicode Expanded string]]></category>
		<category><![CDATA[dave aitel]]></category>
		<category><![CDATA[decoder]]></category>
		<category><![CDATA[eax]]></category>
		<category><![CDATA[eip]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[fx]]></category>
		<category><![CDATA[msfencode]]></category>
		<category><![CDATA[MultiByteToWideChar]]></category>
		<category><![CDATA[nseh]]></category>
		<category><![CDATA[null bytes]]></category>
		<category><![CDATA[ollyuni]]></category>
		<category><![CDATA[prepend]]></category>
		<category><![CDATA[pvefindaddr]]></category>
		<category><![CDATA[seh]]></category>
		<category><![CDATA[shellcode]]></category>
		<category><![CDATA[skylined]]></category>
		<category><![CDATA[unicode]]></category>
		<category><![CDATA[unicode jump seh]]></category>
		<category><![CDATA[utf-16]]></category>
		<category><![CDATA[utf-7]]></category>
		<category><![CDATA[utf-8]]></category>
		<category><![CDATA[venetian]]></category>
		<category><![CDATA[vense.pl]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2387</guid>
		<description><![CDATA[Finally … after spending a couple of weeks working on unicode and unicode exploits, I’m glad and happy to be able to release this next article in my basic exploit writing series : writing exploits for stack based unicode buffer overflows (wow &#8211; that’s a mouthful).
You may (or may not) have encountered a situation where [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2009/11/06/exploit-writing-tutorial-part-7-unicode-from-0x00410041-to-calc/feed/</wfw:commentRss>
		<slash:comments>18</slash:comments>
		</item>
		<item>
		<title>Str0ke R.I.P. (or alive &amp; kicking ?)</title>
		<link>http://www.corelan.be:8800/index.php/2009/11/04/str0ke-r-i-p/</link>
		<comments>http://www.corelan.be:8800/index.php/2009/11/04/str0ke-r-i-p/#comments</comments>
		<pubDate>Wed, 04 Nov 2009 11:42:44 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[cardiac arrest]]></category>
		<category><![CDATA[died]]></category>
		<category><![CDATA[milw0rm]]></category>
		<category><![CDATA[passed away]]></category>
		<category><![CDATA[rip]]></category>
		<category><![CDATA[str0ke]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/index.php/2009/11/04/str0ke-r-i-p/</guid>
		<description><![CDATA[I have received a very sad message this morning that str0ke (milw0rm) has passed away yesterday.
I sincerely hope this is some (bad and morbid) joke, but if it’s not then all I can say is that this is terrible. My thoughts and prayers are with his family (wife &#38; 4 children) now.
Rest in peace, str0ke. [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2009/11/04/str0ke-r-i-p/feed/</wfw:commentRss>
		<slash:comments>9</slash:comments>
		</item>
		<item>
		<title>Exchange 2010 Certificates</title>
		<link>http://www.corelan.be:8800/index.php/2009/10/24/exchange-2010-certificates/</link>
		<comments>http://www.corelan.be:8800/index.php/2009/10/24/exchange-2010-certificates/#comments</comments>
		<pubDate>Sat, 24 Oct 2009 09:11:09 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[Certificates]]></category>
		<category><![CDATA[MS Exchange]]></category>
		<category><![CDATA[2007]]></category>
		<category><![CDATA[2010]]></category>
		<category><![CDATA[certificate]]></category>
		<category><![CDATA[data variable]]></category>
		<category><![CDATA[exchange certificates]]></category>
		<category><![CDATA[gui digicert]]></category>
		<category><![CDATA[new-certificaterequest]]></category>
		<category><![CDATA[requests]]></category>
		<category><![CDATA[set-content]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2360</guid>
		<description><![CDATA[In an older blog post on Certificate Authorities, I have provided some information about the process to generate Exchange 2007 certificates.  This process has slightly changed in Exchange 2010, and Johan Delimon (pro-exchange.be) has written an excellent article about this : Generating Exchange 2010 Certificates (Exchange Management Shell)
The 2 most important changes are :

the new-exchangecertificate [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2009/10/24/exchange-2010-certificates/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Backup &amp; Restore Windows Server based Print Servers</title>
		<link>http://www.corelan.be:8800/index.php/2009/10/23/backup-restore-windows-server-based-print-servers/</link>
		<comments>http://www.corelan.be:8800/index.php/2009/10/23/backup-restore-windows-server-based-print-servers/#comments</comments>
		<pubDate>Fri, 23 Oct 2009 07:01:44 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[Scripts]]></category>
		<category><![CDATA[Windows Server]]></category>
		<category><![CDATA[2000]]></category>
		<category><![CDATA[2003]]></category>
		<category><![CDATA[2008]]></category>
		<category><![CDATA[print server]]></category>
		<category><![CDATA[printbrm]]></category>
		<category><![CDATA[printerbackup]]></category>
		<category><![CDATA[printerexport]]></category>
		<category><![CDATA[printers]]></category>
		<category><![CDATA[printers cab]]></category>
		<category><![CDATA[printmig]]></category>
		<category><![CDATA[recovery]]></category>
		<category><![CDATA[restore]]></category>
		<category><![CDATA[schedule]]></category>
		<category><![CDATA[script]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2350</guid>
		<description><![CDATA[After having to recover a broken Windows Server based print server yesterday, I decided to write this small article on how to set up print server backups, and describe the simple process of recovering the print server after a crash (or even roll back printer drivers in case a newly installed driver messes up your [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2009/10/23/backup-restore-windows-server-based-print-servers/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
