The latest (IN)SECURE Magazine issue includes my article on White Hat Shellcode.
Friday 17 February 2012
Thursday 19 January 2012
Analyzing IOS Core Dumps (SOPA-style)
Do you need to analyze a Cisco IOS Core Dump?
Read this.
“But that doesn’t explain how to analyze a core dump“, you say? Correct, unfortunately. That’s all you get with SOPA/PIPA enacted.
“But SOPA blackout day” was yesterday, you say? Correct. But I’m not following the crowd 😉
Tuesday 9 December 2008
Updates: bpmtk and Hakin9; PDF and Metasploit
Hakin9 has published my bpmtk article. The article mentions bpmtk version 0.1.4.0; however, this new version has no new features. But it comes with extra PoC code, like a LUA-mode keylogger and “rootkit”. New blogposts will explain this new PoC code.
And upcoming bpmtk version 0.1.5.0 contains a new feature to inject shellcode. Just have to update the documentation.
On the PDF front: I’ve produced my first Ruby code ;-). I worked together with MC from Metasploit to optimize the PDF generation code in this util.printf exploit module. It uses some obfuscation techniques I described 8 months ago.
Monday 8 December 2008
@TweetXmasTree
Tuesday 5 August 2008
How Is My Hacking? (.com)
My new stickers arrived today:
From now on, winners of my little puzzles can expect a little prize (I’ll contact winners of past puzzles)…
Saturday 19 April 2008
Taking the GSSP-C Exam
I’ve a blogpost over at the PaulDotCom Community Blog about my GSSP-C certification.
Thursday 1 November 2007
Announcing Quickposts
From now on, I’ll intersperse my blog with Quickposts.
I’ve a need to post short tips and tricks, mainly for my own reference. These Quickposts will document solutions for small problems I encountered during my work or research. I could also use a Quickpost to announce a discovery I don’t plan to research extensively.
The main characteristic of Quickposts will be the limited amount of time and research I spend on them, hence the quality of the content will suffer.
Quickposts have their own Quickpost category, the title will always start with Quickpost:, and if a Quickpost requires updating (to correct errors), I will edit the post instead of publishing a new Quickpost.
The first Quickpost will be about installing Kismet on my N800.
Of course, I stay committed to my weekly posts.
Didier Stevens 