It doesn’t really matter how much time your developers have spent writing secure code and how many layers of security you have implemented to protect your website from being hacked and defaced.  Recent incidents have demonstrated that the bad Read more

Introduction

Last weekend I had some time so I wanted to have a look at a reversing challenge which you can find here:

https://www.ethicalhacker.net/features/special-events/reverse-engineering-101-newbie-contest-webcast-elearnsecurity

Reverse Engineering 101 Contest Steps

1. Get the exe to be hacked
2. Break it open and Read more

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The patch
•  
• Leveraging SQL Injection
• Cool! We got Admin, now what?
• Code Execution
•  
• Further Exploitation?

Introduction

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The Read more

Hi all,

As announced a couple of weeks ago, the Corelan Logo contest is now closed, which means we are no longer accepting new submissions.

3 people have submitted one or more designs:

Design 1

Design 2

Read more

For the third year in a row, I’ll be teaching the Corelan Exploit Dev Bootcamp at Derbycon.  If you were able to grab a ticket to the course, you can expect a true bootcamp-style, very hands-on course, spanning 2 Read more

Table of Contents

• Foreword
• Introduction
• Analyzing the Crash Data
• Identifying the Cause of Exception
  • Page heap
  • Initial analysis
• Reversing the Faulty Function
• Determining Exploitability
  • Challenges
  • Prerequisites
  • Heap Basics
    • Lookaside Lists
    • Freelists
  • Preventative Security Measures
    • Safe-Unlinking
    • Heap Cookies
  • Application Specific Read more

Jake Williams (@malwareJake) from CSR Group has more than a decade of experience with systems engineering, network defines, malware reverse engineering, penetration testing and forensics. He spent some good time looking at Cloud synchronization services and is presenting some Read more

Good afternoon everyone,

The next talk I will be covering today is presented by Zhenhua ‘Eric’ Liu, Senior Security researcher at Fortinet.

Why doing this type of research.

Facts : Exploiting memory corruption vulnerabilities are more difficult today, Read more

Kyle Wilhoit, Threat researcher at Trend Micro, explains that he will provide an overview of ICS systems before looking at some interesting attacks at ICS systems.

Concerns/Overview of ICS Security and Typical deployments

ICS devices are used Read more

Good morning friends,

I’d like to welcome you back on this second day of BlackHat Europe 2013.  Day 1 has been pretty interesting, so let’s see how day 2 goes (especially after Rapid7 and IOActive parties last night). Read more