Hi all,

I have received a ton of questions regarding a recently published ZDI advisory, which provides some details about a bug I discovered and reported to Microsoft (via ZDI), affecting Internet Explorer 8.  I wanted to take Read more

Table of Contents

• Introduction
• Discounts (in alphabetical order):
  • Hak5
  • Hex-Rays
  • Malformity Labs
  • Netsparker
  • No Starch Press
  • Paterva
  • Rapid7
  • SANS
  • Security Roots
  • Syngress
  • Your name here ?

Introduction

Corelan Team was founded in September of 2009. Over the last few Read more

Hi,

A few moments ago, I was informed about an article on www.securelist.com and the fact that Corelan Team was mentioned in that post.  Apparently a researcher at Kaspersky Labs found a piece of text ("You have been owned Read more

Professional pentesters typically use a host that is connected directly to the internet, has a public IP address, and is not hindered by any firewalls or NAT devices to perform their audit. Hacking "naked" is considered to be the Read more

It doesn't really matter how much time your developers have spent writing secure code and how many layers of security you have implemented to protect your website from being hacked and defaced.  Recent incidents have demonstrated that the bad Read more

Introduction

Last weekend I had some time so I wanted to have a look at a reversing challenge which you can find here:

https://www.ethicalhacker.net/features/special-events/reverse-engineering-101-newbie-contest-webcast-elearnsecurity

Reverse Engineering 101 Contest Steps

1. Get the exe to be hacked
2. Break it open and Read more

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The patch
•  
• Leveraging SQL Injection
• Cool! We got Admin, now what?
• Code Execution
•  
• Further Exploitation?

Introduction

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The Read more

Hi all,

As announced a couple of weeks ago, the Corelan Logo contest is now closed, which means we are no longer accepting new submissions.

3 people have submitted one or more designs:

Design 1

Design 2

Read more

For the third year in a row, I'll be teaching the Corelan Exploit Dev Bootcamp at Derbycon.  If you were able to grab a ticket to the course, you can expect a true bootcamp-style, very hands-on course, spanning 2 Read more

Table of Contents

• Foreword
• Introduction
• Analyzing the Crash Data
• Identifying the Cause of Exception
  • Page heap
  • Initial analysis
• Reversing the Faulty Function
• Determining Exploitability
  • Challenges
  • Prerequisites
  • Heap Basics
    • Lookaside Lists
    • Freelists
  • Preventative Security Measures
    • Safe-Unlinking
    • Heap Cookies
  • Application Specific Read more