Creating Arbitrary Shellcode In Unicote Expanded Strings
[Abstract]
The paper is intended to be read by the portion of the security community responsible for creating protective mechanisms to guard against “shellcode� type security flaws; the
intention is to remove the perception that Unicode buffer overflows are non exploitable and thereby improve the general state of network security. [...]
Entries Categorized as 'WhitePapers'
The Venetian Exploit
July 17, 2005
The Price is Right
July 15, 2005
Mark Rasch, 2005-07-11
How much does a security breach actually “cost,” and who pays for it? When the breach involves personal information, like credit card data, the answer is, a lot more than you may think. The problem is that the people who “pay” for the cost of the breach are rarely the ones responsible for [...]
Attack Trees
July 15, 2005
Dr. Dobb’s Journal December 1999
Modeling security threats
By Bruce Schneier
Bruce is the CTO of Counterpane Internet Security, author of Applied Cryptography, Second Edition (John Wiley & Sons, 1995), and inventor of the Blowfish and Twofish encryption algorithms. You can contact Bruce at http://www.counterpane.com/.
Few people truly understand computer security, as illustrated by computer-security company marketing literature that [...]
Flaws could open systems to attack
July 15, 2005
By Joris Evers
Two serious security flaws in a technology widely used for network authentication could expose a swath of software products to hacker attack, experts have warned.
The flaws could allow an online intruder to crash or gain access to computers running Kerberos, a freely available authentication technology that was developed by the Massachusetts Institute of [...]
A little basic exploit tutorial for beginners
July 15, 2005
*** What is an exploit ***
An exploit is a computer programm, which circumvent computer security.
There are many ways to exploit security holes. If a computer programmer
make a programming mistake in a computer program, it is sometimes possible to
circumvent security. The coding of such programs, which attack (hack) the
programming mistakes or security holes is the art [...]
Rooting Linux with a floppy
July 15, 2005
You have lost your root password on your linux box and now you consider formatting
everythign to regain control? Your admin is a moron that leaves the server available
physically for everybody? You wanna test your Linux box? Don’t worry if you have at least
a floppy rescue disk under hand,you can root it )
The problem [...]
Posted in
Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers, Recent readers,