http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com Renraku OS Road to v1 http://www.secuobs.com/revue/news/184833.shtml http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#4660 http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#4660 Detecting EICAR With a .NET Micro-controller http://www.secuobs.com/revue/news/176887.shtml http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#4301 http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#4301 WCF Binary Soap Plug-In for Burp http://www.secuobs.com/revue/news/163187.shtml http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#3823 http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#3823 Renraku OS, Designing a .NET Computer : Networking, Hosted Mode, Moving Forward http://www.secuobs.com/revue/news/163006.shtml http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#3810 http://www.secuobs.com/news/comments114112008-spoitnet_injection_rootkits.shtml#3810 A way to protect .NET assemblies vs Reverse Engineering and recompilation http://www.secuobs.com/revue/news/117724.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#2270 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#2270 Session Fixation attacks against .NET applications http://www.secuobs.com/revue/news/110945.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1976 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1976 Ruby for Pentesters: A ViewState (de)serializer http://www.secuobs.com/revue/news/106031.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1806 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1806 Tool NET-Sploit 1.0.zip (New version) http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=wkKIknI%2btog%3dtabid=161mid=555 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1122 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1122 .NET-Sploit rootkit Easy to install, hard to defend against http://www.secuobs.com/revue/news/84895.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1110 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#1110 Black Hat Europe : .NET Framework Rootkits http://www.secuobs.com/secumail/fdsecumail/msg23728.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#975 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#975 Year Old Un-Patched Windows Exploit Now In The Wild? Microsoft Drops Ball Again http://www.secuobs.com/revue/news/72168.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#783 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#783 OWASP testing Guide Version 3.0 Released http://www.secuobs.com/revue/news/44895.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#390 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#390 .NET Framework Rootkits - Backdoors inside your Framework http://www.secuobs.com/revue/news/42056.shtml http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#347 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#347 le système de signature n'est pas un mauvais choix en soi pour assurer la validité des DLL .Net c'est plutôt ici l'implémentation de ce mécanisme qui pose problème ; avoir une ou des valeurs de contrôle ne sert à rien si le système de vérification de ces valeurs peut être contourné via une faille tierce dans sa conception http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#345 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#345 A quand les check sum sur les dll ? http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#343 http://www.secuobs.com/news/comments14112008-spoitnet_injection_rootkits.shtml#343