http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-10-10 16:40:55 - _argp : RT @iamnion: break the academic paywall: http://tco/dMPJheMm paste link and enjoy their proxy service through universities with accesshttp://www.secuobs.com/twitter/news/349570.shtmlhttp://www.secuobs.com/twitter/news/349570.shtml Secuobs.com : 2012-09-28 13:55:51 - _argp - kernel_memory_leak_bugs++http://www.secuobs.com/twitter/news/346735.shtmlhttp://www.secuobs.com/twitter/news/346735.shtml Secuobs.com : 2012-09-28 13:55:51 - _argp - RT @roman_soft: Yesterday ppl used to do fullresearch and published once detailed at Phrack, Bugtraq, etc Less direct profit for th http://www.secuobs.com/twitter/news/346734.shtmlhttp://www.secuobs.com/twitter/news/346734.shtml Secuobs.com : 2012-09-21 22:26:49 - _argp - Today a kernel memory leak bug I found made my day I'll celebrate with Jägermeister and Electric Wizard: http://tco/k5sx2tvxhttp://www.secuobs.com/twitter/news/345829.shtmlhttp://www.secuobs.com/twitter/news/345829.shtml Secuobs.com : 2012-09-18 00:01:49 - _argp - @hakmem @mfukar Do you at this moment consider the IE execcommand bug a 0day or nothttp://www.secuobs.com/twitter/news/344635.shtmlhttp://www.secuobs.com/twitter/news/344635.shtml Secuobs.com : 2012-09-17 06:41:42 - _argp - People on reddit think that because they don't hear about Linux kernel 0days there are none Nicehttp://www.secuobs.com/twitter/news/344419.shtmlhttp://www.secuobs.com/twitter/news/344419.shtml Secuobs.com : 2012-09-14 17:25:41 - _argp - @halvarflake I hope you like it; we're planning to do more work on heap exploitation abstraction :http://www.secuobs.com/twitter/news/343936.shtmlhttp://www.secuobs.com/twitter/news/343936.shtml Secuobs.com : 2012-09-13 06:31:19 - _argp - RT @halvarflake: Bushido means to struggle desperately in the jaws of death, commented Lord Naoshige -- Hagakure, applicable to heapshttp://www.secuobs.com/twitter/news/343418.shtmlhttp://www.secuobs.com/twitter/news/343418.shtml Secuobs.com : 2012-09-06 21:52:59 - _argp - @snare what about the 0dayshttp://www.secuobs.com/twitter/news/341594.shtmlhttp://www.secuobs.com/twitter/news/341594.shtml Secuobs.com : 2012-08-20 12:41:30 - _argp - Heap exploitation abstraction by example bonus points if you get the weirding module reference: http://tco/3Uoufbk3http://www.secuobs.com/twitter/news/340493.shtmlhttp://www.secuobs.com/twitter/news/340493.shtml Secuobs.com : 2012-08-11 12:39:28 - _argp - RT @net__ninja: @d0c_s4vage yeah how annoying is it stack exhaustions = stack based buffer overflow :-http://www.secuobs.com/twitter/news/339605.shtmlhttp://www.secuobs.com/twitter/news/339605.shtml Secuobs.com : 2012-08-11 12:39:28 - _argp - From kernel hacking, to satellite tech, to the electro scene, Berlin is teh b0mbhttp://www.secuobs.com/twitter/news/339604.shtmlhttp://www.secuobs.com/twitter/news/339604.shtml Secuobs.com : 2012-08-08 11:13:02 - _argp - RT @nudehaberdasher: Who wants Windows 8 Heap Internals paper/slides Easy 90 pages to relax and read ; https://tco/vgWBPZRthttp://www.secuobs.com/twitter/news/338973.shtmlhttp://www.secuobs.com/twitter/news/338973.shtml Secuobs.com : 2012-08-06 15:22:43 - _argp - RT @thegrugq: I would point out that there were people running fuzzes on GSM at defcon If you phone crashed though, that’s just cause A http://www.secuobs.com/twitter/news/338460.shtmlhttp://www.secuobs.com/twitter/news/338460.shtml Secuobs.com : 2012-08-06 15:22:43 - _argp - @silviocesare yea that sucked, btw were you at defcon or just blackhathttp://www.secuobs.com/twitter/news/338459.shtmlhttp://www.secuobs.com/twitter/news/338459.shtml Secuobs.com : 2012-08-03 13:52:29 - _argp - RT @nudehaberdasher: Who wants Windows 8 Heap Internals paper/slides Easy 90 pages to relax and read ; https://tco/vgWBPZRthttp://www.secuobs.com/twitter/news/337928.shtmlhttp://www.secuobs.com/twitter/news/337928.shtml Secuobs.com : 2012-08-03 13:52:29 - _argp - RT @41414141: DEFCON slides by @teh_gerg and myself about Huawei routers published: http://tco/05XVtvTRhttp://www.secuobs.com/twitter/news/337927.shtmlhttp://www.secuobs.com/twitter/news/337927.shtml Secuobs.com : 2012-08-03 13:52:29 - _argp - @nudehaberdasher just about to print your whitepaper :http://www.secuobs.com/twitter/news/337926.shtmlhttp://www.secuobs.com/twitter/news/337926.shtml Secuobs.com : 2012-08-03 13:52:29 - _argp - Is the kernel debug kit for 108 out yethttp://www.secuobs.com/twitter/news/337925.shtmlhttp://www.secuobs.com/twitter/news/337925.shtml Secuobs.com : 2012-07-31 06:09:36 - _argp - At https://tco/J85TO2FF you can also find our PoC for CVE-2011-3026/Firefox and jemalloc/FF heap feng shui Javascript code #BlackHathttp://www.secuobs.com/twitter/news/337085.shtmlhttp://www.secuobs.com/twitter/news/337085.shtml Secuobs.com : 2012-07-29 04:30:25 - _argp - RT @osxreverser: Phrack CFP is out Seems like a good opportunity to write something interesting Let's give it a try with Mac anti-fore http://www.secuobs.com/twitter/news/336713.shtmlhttp://www.secuobs.com/twitter/news/336713.shtml Secuobs.com : 2012-07-27 03:08:08 - _argp - Best talk of #BlackHat day 1 was @nudehaberdasher's and @kernelpool's Windows 8 Heap Internals Ready for day 2http://www.secuobs.com/twitter/news/336222.shtmlhttp://www.secuobs.com/twitter/news/336222.shtml Secuobs.com : 2012-07-21 11:59:53 - _argp - Slide pwndeck, check Metal tshirts, check Hard disk encryption, check Java code audit gig wrap up, check Ready for #BlackHat Vegashttp://www.secuobs.com/twitter/news/335212.shtmlhttp://www.secuobs.com/twitter/news/335212.shtml Secuobs.com : 2012-07-19 23:05:22 - _argp - @thegrugq @lattera I bet Android will soon use ptrace protection similar to the one in Ubuntu: https://tco/YFRUbZvBhttp://www.secuobs.com/twitter/news/334815.shtmlhttp://www.secuobs.com/twitter/news/334815.shtml Secuobs.com : 2012-07-19 06:05:02 - _argp - @nicowaisman We've greatly extended unmask_jemalloc and targeted FF for a special BH release however it is gdb/Python Are you using windbghttp://www.secuobs.com/twitter/news/334525.shtmlhttp://www.secuobs.com/twitter/news/334525.shtml Secuobs.com : 2012-07-19 06:05:02 - _argp - RT @sergeybratus: @thegrugq @_argp In the MS DLL Hell Bolgia, sinners get their random internal parts linked to random internal parts of http://www.secuobs.com/twitter/news/334524.shtmlhttp://www.secuobs.com/twitter/news/334524.shtml Secuobs.com : 2012-07-17 14:54:42 - _argp - RT @snare: Hello, Mountain Lion That's a nice kernel ASLR you've got there It'd be a shame if something were to happen to ithttp://www.secuobs.com/twitter/news/333984.shtmlhttp://www.secuobs.com/twitter/news/333984.shtml Secuobs.com : 2012-07-13 18:55:48 - _argp - Excellent feedback for our heap exploitation abstraction talk from @arisg, @munmap and @hakmem #OWASP #AppSechttp://www.secuobs.com/twitter/news/333085.shtmlhttp://www.secuobs.com/twitter/news/333085.shtml Secuobs.com : 2012-07-13 18:55:48 - _argp - @sergeybratus The #OWASP people got a PDF of the slides, if they don't post them in a couple of days, I will ;http://www.secuobs.com/twitter/news/333084.shtmlhttp://www.secuobs.com/twitter/news/333084.shtml Secuobs.com : 2012-07-13 18:55:48 - _argp - @arisg It felt weird presenting heap exploitation to people expecting to see a web security policy talkhttp://www.secuobs.com/twitter/news/333083.shtmlhttp://www.secuobs.com/twitter/news/333083.shtml Secuobs.com : 2012-07-12 15:13:17 - _argp - RT @dfunc: A treat from us for anyone attending #OWASP #AppSec 2012 We'll be doing a session on Heap Exploitation Abstraction tomorrow http://www.secuobs.com/twitter/news/332902.shtmlhttp://www.secuobs.com/twitter/news/332902.shtml Secuobs.com : 2012-07-12 15:13:17 - _argp - Just finished a 3-hour session of deep heap exploitation discussions and slide preparation with huku for #OWASP #AppSec 2012 See you therehttp://www.secuobs.com/twitter/news/332901.shtmlhttp://www.secuobs.com/twitter/news/332901.shtml Secuobs.com : 2012-06-28 10:52:01 - _argp - RT @dfunc: OWASP AppSec Research 2012 is coming up http://tco/AIrehSrr We'll be there to discuss latest developments + research dire http://www.secuobs.com/twitter/news/330805.shtmlhttp://www.secuobs.com/twitter/news/330805.shtml Secuobs.com : 2012-06-26 20:01:20 - _argp - RT @aaronportnoy: Looks like someone reverse engineered the #CrowdRE protocol and released a private server cleverly named Cloud Nein: h http://www.secuobs.com/twitter/news/330402.shtmlhttp://www.secuobs.com/twitter/news/330402.shtml Secuobs.com : 2012-06-26 00:41:37 - _argp - Interesting paper on the economics of vulnerability patching with examples on Firefox, Apache and Tomcat: http://tco/yctbge2hhttp://www.secuobs.com/twitter/news/330161.shtmlhttp://www.secuobs.com/twitter/news/330161.shtml Secuobs.com : 2012-06-26 00:41:37 - _argp - RT @VUPEN: Blog: Advanced Exploitation of Mozilla Firefox Use-after-free Vulnerability with ASLR/DEP bypass http://tco/XNNyH0WQ #sharin http://www.secuobs.com/twitter/news/330160.shtmlhttp://www.secuobs.com/twitter/news/330160.shtml Secuobs.com : 2012-06-22 08:08:25 - _argp - RT @miaubiz: My bluehat entry was to stop giving away codesigning certs and stop signing CA certs with md5http://www.secuobs.com/twitter/news/329260.shtmlhttp://www.secuobs.com/twitter/news/329260.shtml Secuobs.com : 2012-06-22 08:08:25 - _argp - RT @esizkur: Compared to the innovation that PaX was more than 10 years ago, all of these BlueHat entries look really lamehttp://www.secuobs.com/twitter/news/329259.shtmlhttp://www.secuobs.com/twitter/news/329259.shtml Secuobs.com : 2012-06-22 08:08:25 - _argp - RT @djrbliss: Five remotely exploitable kernel vulns in the Linux kernel's currently unused NFC stack: http://tco/30Z6Pgr5http://www.secuobs.com/twitter/news/329258.shtmlhttp://www.secuobs.com/twitter/news/329258.shtml Secuobs.com : 2012-06-15 07:37:12 - _argp - RT @djrbliss: @_argp Guess the cat is out of the bag for Rafal's BH talk Xen fix: http://tco/nHhJEYZ4 and Linux fix from 2006: http: http://www.secuobs.com/twitter/news/327618.shtmlhttp://www.secuobs.com/twitter/news/327618.shtml Secuobs.com : 2012-06-15 07:37:12 - _argp - The sysret kernel bug and the Linux fix from 2006 clearly demonstrate that Linux's policy of silently patching security bugs is problematichttp://www.secuobs.com/twitter/news/327617.shtmlhttp://www.secuobs.com/twitter/news/327617.shtml Secuobs.com : 2012-06-15 07:37:12 - _argp - @mfukar And the worst is that that's a policy decision by Linux on handling bugs with security repercussionshttp://www.secuobs.com/twitter/news/327616.shtmlhttp://www.secuobs.com/twitter/news/327616.shtml Secuobs.com : 2012-06-15 07:37:12 - _argp - RT @unimp0rtanttech: New kernel syscall in iOS 6 http://tco/0Ls6GewBhttp://www.secuobs.com/twitter/news/327615.shtmlhttp://www.secuobs.com/twitter/news/327615.shtml Secuobs.com : 2012-06-13 06:26:05 - _argp - Very interesting FreeBSD kernel bug: http://tco/QP0585imhttp://www.secuobs.com/twitter/news/327092.shtmlhttp://www.secuobs.com/twitter/news/327092.shtml Secuobs.com : 2012-06-13 06:26:05 - _argp - @djrbliss Nice find regarding the Linux patch from 2006 that forces iret Now, let's work on a poc ;http://www.secuobs.com/twitter/news/327091.shtmlhttp://www.secuobs.com/twitter/news/327091.shtml Secuobs.com : 2012-06-13 06:26:05 - _argp - @mfukar I'm bored of sql injections and xss craphttp://www.secuobs.com/twitter/news/327090.shtmlhttp://www.secuobs.com/twitter/news/327090.shtml Secuobs.com : 2012-06-11 20:24:16 - _argp - RT @agustingianni: 64bit integers in SQLite are signed Storing something bigger than 2^63-1 will boo boohttp://www.secuobs.com/twitter/news/326702.shtmlhttp://www.secuobs.com/twitter/news/326702.shtml Secuobs.com : 2012-06-11 20:24:16 - _argp - RT @i0n1c: Ohh looks like there will be a PHP talk at BlackHat about exploiting random numbershttp://www.secuobs.com/twitter/news/326701.shtmlhttp://www.secuobs.com/twitter/news/326701.shtml Secuobs.com : 2012-06-07 15:30:28 - _argp - RT @thegrugq: BlackHat Vegas is coming up pretty quickly, so that means the most important event of the InfoSec year is just around the http://www.secuobs.com/twitter/news/325904.shtmlhttp://www.secuobs.com/twitter/news/325904.shtml Secuobs.com : 2012-06-07 15:30:28 - _argp - RT @mfukar: Inspecting malloc state with gdb | http://tco/dHmqPLVO by me #codesnippets #debugging #gdb #glibc #mallochttp://www.secuobs.com/twitter/news/325903.shtmlhttp://www.secuobs.com/twitter/news/325903.shtml Secuobs.com : 2012-06-02 17:17:03 - _argp - RT @nicowaisman: The key element of a heap overflow is superstition Blessed are those who untrust determinism: for they shall inherit http://www.secuobs.com/twitter/news/325031.shtmlhttp://www.secuobs.com/twitter/news/325031.shtml Secuobs.com : 2012-05-28 13:25:26 - _argp - @miaubiz I like how you always relate Javascript with the Great Old Oneshttp://www.secuobs.com/twitter/news/323842.shtmlhttp://www.secuobs.com/twitter/news/323842.shtml Secuobs.com : 2012-05-28 00:13:41 - _argp - Javascript is only tolerable when studying its impact with a debuggerhttp://www.secuobs.com/twitter/news/323772.shtmlhttp://www.secuobs.com/twitter/news/323772.shtml Secuobs.com : 2012-05-11 01:03:43 - _argp - @invisig0th How about a roadmap talk on which parts of vtrace/vdb need more work for example support for Linux/OSX multithreaded appshttp://www.secuobs.com/twitter/news/319612.shtmlhttp://www.secuobs.com/twitter/news/319612.shtml Secuobs.com : 2012-04-29 04:13:26 - _argp - RT @snare: rootkit loader boot screen by ben baker m/ http://tco/pqwmRIYwhttp://www.secuobs.com/twitter/news/316454.shtmlhttp://www.secuobs.com/twitter/news/316454.shtml Secuobs.com : 2012-04-20 06:02:16 - _argp - RT @mdowd: Re: OpenSSL bug: It's in chapter 6 pg 222 I mentioned asn1_d2i_fp though, not asn1_d2i_bio Looks identical thoughhttp://www.secuobs.com/twitter/news/314055.shtmlhttp://www.secuobs.com/twitter/news/314055.shtml Secuobs.com : 2012-04-17 02:02:26 - _argp - Phrack 0x44 is out with my and huku's work on exploiting jemallochttp://www.secuobs.com/twitter/news/313043.shtmlhttp://www.secuobs.com/twitter/news/313043.shtml Secuobs.com : 2012-04-17 02:02:26 - _argp - RT @alexsotirov: 25 years of SummerCon in the latest issue of Phrack: http://tco/4HwEjiVa I'm looking forward to SummerCon 2012http://www.secuobs.com/twitter/news/313042.shtmlhttp://www.secuobs.com/twitter/news/313042.shtml Secuobs.com : 2012-04-17 02:02:26 - _argp - RT @nudehaberdasher: Cross one off the bucket list Article in phrack, check http://tco/T6nmEdeahttp://www.secuobs.com/twitter/news/313041.shtmlhttp://www.secuobs.com/twitter/news/313041.shtml Secuobs.com : 2012-04-17 02:02:26 - _argp - RT @ortegaalfredo: 2012: ~20 infosec confs/month, u$s 100K exploits and phrack still publish solid and unique research, for free Awesom http://www.secuobs.com/twitter/news/313040.shtmlhttp://www.secuobs.com/twitter/news/313040.shtml Secuobs.com : 2012-04-14 20:14:20 - _argp - RT @ortegaalfredo: Phrack 68 http://tco/DCCJpd5Jhttp://www.secuobs.com/twitter/news/312549.shtmlhttp://www.secuobs.com/twitter/news/312549.shtml Secuobs.com : 2012-04-14 01:58:40 - _argp - RT @_clem1: #phrack68 topics disclosed on http://tco/pmVWz1Du, jemalloc, android rootkit, IIS and VLC pwnage looks awesome hum f5f5 http://www.secuobs.com/twitter/news/312398.shtmlhttp://www.secuobs.com/twitter/news/312398.shtml Secuobs.com : 2012-03-30 01:35:24 - _argp - @bigthingist @hakmem and monkeys with sqlmap do too, apparentlyhttp://www.secuobs.com/twitter/news/307835.shtmlhttp://www.secuobs.com/twitter/news/307835.shtml Secuobs.com : 2012-03-26 10:46:11 - _argp - RT @djrbliss: Just bypassed kernel module code-signing enforcement on the Logitech Revue Google TV, allows running unsigned kernel cod http://www.secuobs.com/twitter/news/306584.shtmlhttp://www.secuobs.com/twitter/news/306584.shtml Secuobs.com : 2012-03-21 10:23:57 - _argp - After vdb/vtrace, metasm, ragweed/nerve, and a custom ptrace2 wrapper in C, I am back to gdb/Pythonhttp://www.secuobs.com/twitter/news/305323.shtmlhttp://www.secuobs.com/twitter/news/305323.shtml Secuobs.com : 2012-03-20 18:32:38 - _argp - I've grown to accept 0xdeadbeef as a reality in my Mac OS X kernel heap play timehttp://www.secuobs.com/twitter/news/305122.shtmlhttp://www.secuobs.com/twitter/news/305122.shtml Secuobs.com : 2012-03-20 02:09:27 - _argp - Are you having problems with VPN and @cytacyprus's MTU Add '--mssfix 1400' to your openvpn command linehttp://www.secuobs.com/twitter/news/304895.shtmlhttp://www.secuobs.com/twitter/news/304895.shtml Secuobs.com : 2012-03-15 09:55:32 - _argp - RT @jduck1337: If anyone is bored, come to #ms12-020 on freenode Live collaborative reverse engineering and exploit development http://www.secuobs.com/twitter/news/303693.shtmlhttp://www.secuobs.com/twitter/news/303693.shtml Secuobs.com : 2012-03-15 09:55:32 - _argp - RT @silviocesare: New web services Bug detection in binaries, embedded code detection in Linux, and software similarity http://tco/TnW http://www.secuobs.com/twitter/news/303692.shtmlhttp://www.secuobs.com/twitter/news/303692.shtml Secuobs.com : 2012-03-10 14:30:07 - _argp - RT @cBekrar: Haha, the secret message put by Google in Chrome just for us is causing troubles to users :- http://tco/olOQWzSp #0xabad1 http://www.secuobs.com/twitter/news/302141.shtmlhttp://www.secuobs.com/twitter/news/302141.shtml Secuobs.com : 2012-03-10 07:26:40 - _argp - Suhosin bypass: check PHPIDS bypass: check PHP really ist krieghttp://www.secuobs.com/twitter/news/302038.shtmlhttp://www.secuobs.com/twitter/news/302038.shtml Secuobs.com : 2012-03-09 23:38:23 - _argp - RT @legerov: has anyone demonstrated firefox 0day at pwn2own or at least something more interesting than flash and iehttp://www.secuobs.com/twitter/news/301841.shtmlhttp://www.secuobs.com/twitter/news/301841.shtml Secuobs.com : 2012-03-07 19:26:06 - _argp - RT @dguido: You're the great all knowing Sabu, king of sqlmap zing http://tco/0wFxqLnihttp://www.secuobs.com/twitter/news/300892.shtmlhttp://www.secuobs.com/twitter/news/300892.shtml Secuobs.com : 2012-02-26 11:49:41 - _argp - RT @ioerror: This is a fantastic example of why cryptography isn't a panacea: http://tco/WcMkQjuG #pidgin #otrhttp://www.secuobs.com/twitter/news/297637.shtmlhttp://www.secuobs.com/twitter/news/297637.shtml Secuobs.com : 2012-02-10 08:10:46 - _argp - RT @nudehaberdasher: Have a different pwn2own where you get a dead bug, spend 3 months writing an exploit that gets EIP Resulting in ev http://www.secuobs.com/twitter/news/292706.shtmlhttp://www.secuobs.com/twitter/news/292706.shtml Secuobs.com : 2012-02-08 17:56:37 - _argp - RT @41414141: Linux vs Windows is reversed on mobile phones compared to PCs a decade ago: Linux widely used and full of malware, Window http://www.secuobs.com/twitter/news/291993.shtmlhttp://www.secuobs.com/twitter/news/291993.shtml Secuobs.com : 2012-02-08 11:26:38 - _argp - RT @legerov: we've just released Vulndisco 917 with mysql 0dayhttp://www.secuobs.com/twitter/news/291869.shtmlhttp://www.secuobs.com/twitter/news/291869.shtml Secuobs.com : 2012-02-08 11:26:38 - _argp - #Metasploit now includes my Mac OS X x64 exec command payload and Mach-o x64 binary templatehttp://www.secuobs.com/twitter/news/291868.shtmlhttp://www.secuobs.com/twitter/news/291868.shtml Secuobs.com : 2012-02-06 11:13:20 - _argp - RT @mfukar: A phishing mail in the company inbox HAMMERTIMEhttp://www.secuobs.com/twitter/news/291134.shtmlhttp://www.secuobs.com/twitter/news/291134.shtml Secuobs.com : 2012-01-23 17:48:45 - _argp - RT @djrbliss: Published my whitepaper on Linux kernel SLOB exploitation: http://tco/OZUBPPRxhttp://www.secuobs.com/twitter/news/286630.shtmlhttp://www.secuobs.com/twitter/news/286630.shtml Secuobs.com : 2012-01-23 07:36:18 - _argp - RT @Fyyre: Disable PatchGuard Driver Signing Patch Updated -- http://tco/pgK7AVxphttp://www.secuobs.com/twitter/news/286462.shtmlhttp://www.secuobs.com/twitter/news/286462.shtml Secuobs.com : 2012-01-20 13:30:35 - _argp - RT @41414141: Cisco tries to fix default root account and fails, leaves root account open over SSH after update: http://tco/0MVn66aD #N http://www.secuobs.com/twitter/news/285815.shtmlhttp://www.secuobs.com/twitter/news/285815.shtml Secuobs.com : 2012-01-17 13:58:17 - _argp - RT @HaifeiLi: @cBekrar @VUPEN Nice work It highlights that the custom heap managements are now pretty threats for OS-level exploitation http://www.secuobs.com/twitter/news/284600.shtmlhttp://www.secuobs.com/twitter/news/284600.shtml Secuobs.com : 2012-01-17 09:02:10 - _argp - RT @djrbliss: My SLOB exploitation slides from Infiltrate are online: http://tco/EULV7yFf, expect a whitepaper with more detail soonhttp://www.secuobs.com/twitter/news/284554.shtmlhttp://www.secuobs.com/twitter/news/284554.shtml Secuobs.com : 2012-01-16 20:15:46 - _argp - Using for the first time vdb/vtrace for real work on Linuxhttp://www.secuobs.com/twitter/news/284256.shtmlhttp://www.secuobs.com/twitter/news/284256.shtml Secuobs.com : 2012-01-16 09:32:54 - _argp - RT @jonoberheide: My slides on Linux kernel stack overflows from Infiltrate are now up: http://tco/mVHGujd7http://www.secuobs.com/twitter/news/284170.shtmlhttp://www.secuobs.com/twitter/news/284170.shtml Secuobs.com : 2012-01-15 14:42:37 - _argp - RT @djrbliss: Here's libplayground, a simple framework for developing Linux kernel heap exploit techniques: https://tco/EtzNECyghttp://www.secuobs.com/twitter/news/283996.shtmlhttp://www.secuobs.com/twitter/news/283996.shtml Secuobs.com : 2012-01-08 21:29:39 - _argp - RT @djrbliss: Hipster 0day of the day: possible local root on an architecture so obscure you've never heard of it: https://tco/Y9XIUoEUhttp://www.secuobs.com/twitter/news/281773.shtmlhttp://www.secuobs.com/twitter/news/281773.shtml Secuobs.com : 2012-01-08 14:07:21 - _argp - gdb-based GUI debugger for Windows/Visual Studio: http://tco/1IxRivgUhttp://www.secuobs.com/twitter/news/281568.shtmlhttp://www.secuobs.com/twitter/news/281568.shtml Secuobs.com : 2012-01-07 13:04:58 - _argp - RT @Fyyre: Prevx employ Andrea Allievi, copying my work x64 nopg bootkit stuffs http://tco/nmIuP1Pd , see pages 19 - 25 of linked d http://www.secuobs.com/twitter/news/281496.shtmlhttp://www.secuobs.com/twitter/news/281496.shtml Secuobs.com : 2012-01-05 09:30:17 - _argp - @thezdi How about a kernel exploitation competition ;http://www.secuobs.com/twitter/news/280700.shtmlhttp://www.secuobs.com/twitter/news/280700.shtml Secuobs.com : 2012-01-04 21:58:50 - _argp - RT @jduck1337: Execute Metasploit modules at blazing speed - my #Metasploit autoload stuff - http://tco/5Und4aJ7 Slides: http://tco/JP http://www.secuobs.com/twitter/news/280579.shtmlhttp://www.secuobs.com/twitter/news/280579.shtml Secuobs.com : 2012-01-04 21:58:50 - _argp - RT @pipesec: @micahflee: PGP Desktop source code is available to download for peer review http://tco/ytE6Dzky via @kevinmitnickwait http://www.secuobs.com/twitter/news/280578.shtmlhttp://www.secuobs.com/twitter/news/280578.shtml Secuobs.com : 2012-01-03 22:10:40 - _argp - RT @facuman: http://tco/NJEm72MV The Linux kernel memory allocators from an exploitation perspectivehttp://www.secuobs.com/twitter/news/280235.shtmlhttp://www.secuobs.com/twitter/news/280235.shtml Secuobs.com : 2012-01-03 22:10:40 - _argp - My notes on Linux kernel heap exploitation: http://tco/kL1u06a2http://www.secuobs.com/twitter/news/280234.shtmlhttp://www.secuobs.com/twitter/news/280234.shtml Secuobs.com : 2011-12-31 09:17:11 - _argp - I am experiencing stack pivoting frustration@##$ pourcentshttp://www.secuobs.com/twitter/news/279492.shtmlhttp://www.secuobs.com/twitter/news/279492.shtml Secuobs.com : 2011-12-30 14:11:43 - _argp - @i0n1c @dfunc Yes, the OS X kernel provides endless hours of funhttp://www.secuobs.com/twitter/news/279311.shtmlhttp://www.secuobs.com/twitter/news/279311.shtml Secuobs.com : 2011-12-30 14:11:43 - _argp - RT @longledinh: Just a fun tutorial: exploit telnetd on Ubuntu 1110 x86-64: http://tco/K25RPsVghttp://www.secuobs.com/twitter/news/279310.shtmlhttp://www.secuobs.com/twitter/news/279310.shtml Secuobs.com : 2011-12-28 15:24:45 - _argp - While playing with the telnetd bug I missed Apple's gdb's 'attach -waitfor', so I wrote a small script to mimic it: https://tco/dXAvCwJJhttp://www.secuobs.com/twitter/news/278822.shtmlhttp://www.secuobs.com/twitter/news/278822.shtml Secuobs.com : 2011-12-22 13:53:39 - _argp - At last gdb informed me that process 4976 is executing new program: /bin/dash ;http://www.secuobs.com/twitter/news/277508.shtmlhttp://www.secuobs.com/twitter/news/277508.shtml Secuobs.com : 2011-12-20 21:23:30 - _argp - RT @dfunc: @ioerror unfortunately snooping on OTR chats is easy too For Linux/pidgin you just listen to dbus No keylogger software is http://www.secuobs.com/twitter/news/276989.shtmlhttp://www.secuobs.com/twitter/news/276989.shtml Secuobs.com : 2011-12-19 17:55:59 - _argp - @legerov Nice, by loading please wait you probably mean please wait for the AS heap spraying to finish, right ;http://www.secuobs.com/twitter/news/276537.shtmlhttp://www.secuobs.com/twitter/news/276537.shtml Secuobs.com : 2011-12-16 15:44:07 - _argp - I am going Chinese on this heaphttp://www.secuobs.com/twitter/news/275833.shtmlhttp://www.secuobs.com/twitter/news/275833.shtml Secuobs.com : 2011-12-14 17:40:33 - _argp - Hint: When you debug Chrome 'Mathasin' and 'br asin' can really help ;http://www.secuobs.com/twitter/news/275113.shtmlhttp://www.secuobs.com/twitter/news/275113.shtml Secuobs.com : 2011-12-09 17:44:34 - _argp - wow, your knowledge of sqlmap command line options really impresses mehttp://www.secuobs.com/twitter/news/273608.shtmlhttp://www.secuobs.com/twitter/news/273608.shtml Secuobs.com : 2011-12-07 23:24:46 - _argp - RT @fotisl: Creating a dynamic DNS service using djbdns: http://tco/IupBYW6Khttp://www.secuobs.com/twitter/news/272943.shtmlhttp://www.secuobs.com/twitter/news/272943.shtml Secuobs.com : 2011-11-20 15:58:48 - _argp - RT @x05x37: #0x375 0x07 talk #2: Playing hide-and-seek with a compromised kernel by @apoikoshttp://www.secuobs.com/twitter/news/267613.shtmlhttp://www.secuobs.com/twitter/news/267613.shtml Secuobs.com : 2011-11-19 19:26:31 - _argp - RT @kargig: Phishing attempt for forthnetgr username/password: http://tco/B7ywl7Qahttp://www.secuobs.com/twitter/news/267460.shtmlhttp://www.secuobs.com/twitter/news/267460.shtml Secuobs.com : 2011-10-28 19:40:54 - _argp - @_frego_ the idea was to abstract kernel heap exploitation and find reusable primitives, like @nudehaberdasher has done on win userlandhttp://www.secuobs.com/twitter/news/260960.shtmlhttp://www.secuobs.com/twitter/news/260960.shtml Secuobs.com : 2011-10-24 15:33:13 - _argp - RT @x05x37: #0x375 0x06 talk #2: Dr kerneldev or how I learned to stop worrying and love the pagefault by @jtsiombhttp://www.secuobs.com/twitter/news/259478.shtmlhttp://www.secuobs.com/twitter/news/259478.shtml Secuobs.com : 2011-10-20 20:49:46 - _argp - Notes from my honeypot: BitDefender detected Duqu before the public announcement as Gen:TrojanHeurhttp://www.secuobs.com/twitter/news/258631.shtmlhttp://www.secuobs.com/twitter/news/258631.shtml Secuobs.com : 2011-10-07 11:52:41 - _argp - dtrace for Linux by Oracle: http://tco/PbTUmBmUhttp://www.secuobs.com/twitter/news/255229.shtmlhttp://www.secuobs.com/twitter/news/255229.shtml Secuobs.com : 2011-10-04 10:44:41 - _argp - RT @djrbliss: Looks like kernelorg is back online Finallyhttp://www.secuobs.com/twitter/news/254136.shtmlhttp://www.secuobs.com/twitter/news/254136.shtml Secuobs.com : 2011-10-04 10:44:41 - _argp - @_clem1 Yes, dtrace is an amazing tool for kernel vulnerability research and exploit development ;http://www.secuobs.com/twitter/news/254135.shtmlhttp://www.secuobs.com/twitter/news/254135.shtml Secuobs.com : 2011-10-04 00:51:05 - _argp - RT @dfunc: CVE-2011-3340 Netvolution referer header SQL injection vulnerability Bugtraq post: http://tco/vwIgppG0 and writeup: http: http://www.secuobs.com/twitter/news/254001.shtmlhttp://www.secuobs.com/twitter/news/254001.shtml Secuobs.com : 2011-09-12 16:00:57 - _argp - RT @d_olex: ASLR in Windows 7 kernel: http://tco/VmxR0BLI suck :http://www.secuobs.com/twitter/news/247109.shtmlhttp://www.secuobs.com/twitter/news/247109.shtml Secuobs.com : 2011-09-10 05:52:41 - _argp - The functionality implemented by @jonoberheide's kstructhunter is very helpful during the development of kernel heap overflow exploitshttp://www.secuobs.com/twitter/news/246657.shtmlhttp://www.secuobs.com/twitter/news/246657.shtml Secuobs.com : 2011-09-10 05:52:41 - _argp - I have coded something similar for FreeBSD for finding structures that can _actually_ be placed on the kernel heap It misses some thoughhttp://www.secuobs.com/twitter/news/246656.shtmlhttp://www.secuobs.com/twitter/news/246656.shtml Secuobs.com : 2011-09-09 10:31:22 - _argp - RT @thegrugq: whiskey in the jar = 0day theft and back hacks Wh0t4myDaddi0 is his root passwd on Molly, his first hop + svn serve http://www.secuobs.com/twitter/news/246476.shtmlhttp://www.secuobs.com/twitter/news/246476.shtml Secuobs.com : 2011-09-06 17:34:13 - _argp - RT @jonoberheide: List of all Linux kernel structs and sizes: http://tco/F6DZzD9http://www.secuobs.com/twitter/news/245522.shtmlhttp://www.secuobs.com/twitter/news/245522.shtml Secuobs.com : 2011-09-03 10:22:46 - _argp - Saturday morning 0day -- 0turdayhttp://www.secuobs.com/twitter/news/244719.shtmlhttp://www.secuobs.com/twitter/news/244719.shtml Secuobs.com : 2011-08-18 21:56:05 - _argp - RT @strcpy: posthacktivism: the act of finding a sql injection on some random website then figuring out why you are against themhttp://www.secuobs.com/twitter/news/239569.shtmlhttp://www.secuobs.com/twitter/news/239569.shtml Secuobs.com : 2011-08-08 19:32:57 - _argp - My fingers are getting itchy to play with gcc python: http://tco/5l0KlrFhttp://www.secuobs.com/twitter/news/236283.shtmlhttp://www.secuobs.com/twitter/news/236283.shtml Secuobs.com : 2011-08-01 01:57:30 - _argp - @TheRealSpaf's comment about Chrome security cracked me up: Chrome is less safe than Safari, Opera, OmniWeb, and a few others, btw ;http://www.secuobs.com/twitter/news/233495.shtmlhttp://www.secuobs.com/twitter/news/233495.shtml Secuobs.com : 2011-07-19 12:35:40 - _argp - RT @41414141: Awesome eglibc memcpy bug: http://wwwnodefenseorg/eglibctxt Negative length argument becomes jump table offset Ubuntu http://www.secuobs.com/twitter/news/229106.shtmlhttp://www.secuobs.com/twitter/news/229106.shtml Secuobs.com : 2011-07-18 13:47:39 - _argp - meterpreter's autoroute is the bombhttp://www.secuobs.com/twitter/news/228740.shtmlhttp://www.secuobs.com/twitter/news/228740.shtml Secuobs.com : 2011-06-20 15:18:25 - _argp - RT @djrbliss: Remote kernel exploitation talk rejected from DEFCON Glad I get to save the talk for a more appropriate conferencehttp://www.secuobs.com/twitter/news/219187.shtmlhttp://www.secuobs.com/twitter/news/219187.shtml Secuobs.com : 2011-06-15 14:21:05 - _argp - RT @mfukar: Whitehats, Blackhats, Asshats #infosec #taxonomy #abridgedhttp://www.secuobs.com/twitter/news/217694.shtmlhttp://www.secuobs.com/twitter/news/217694.shtml Secuobs.com : 2011-06-09 21:43:05 - _argp - RT @kernelpool: I'll be speaking on kernel attacks in the Win32k subsystem at #BlackHat USA: http://bitly/m2GUxV #bugsallnightlonghttp://www.secuobs.com/twitter/news/215950.shtmlhttp://www.secuobs.com/twitter/news/215950.shtml Secuobs.com : 2011-06-09 21:43:05 - _argp - RT @crypt0ad: Note to self: stop saying to people that EMET will protect them against 0dayshttp://www.secuobs.com/twitter/news/215949.shtmlhttp://www.secuobs.com/twitter/news/215949.shtml Secuobs.com : 2011-06-09 11:21:40 - _argp - @_clem1 yea, I much prefer FreeBSD's inline kernel debugger toohttp://www.secuobs.com/twitter/news/215724.shtmlhttp://www.secuobs.com/twitter/news/215724.shtml Secuobs.com : 2011-06-07 18:00:32 - _argp - Working on CVE-2011-0611 on Linux Chrome: http://wwwflickrcom/photos/argp/5807752859/http://www.secuobs.com/twitter/news/214844.shtmlhttp://www.secuobs.com/twitter/news/214844.shtml Secuobs.com : 2011-06-06 11:45:35 - _argp - @_clem1 Well, suffice it to say that it is a kernel bughttp://www.secuobs.com/twitter/news/214257.shtmlhttp://www.secuobs.com/twitter/news/214257.shtml Secuobs.com : 2011-05-30 04:17:19 - _argp - @0xcharlie Maybe a way to do that would be to compare sha hashes of core files and/or stack traceshttp://www.secuobs.com/twitter/news/211822.shtmlhttp://www.secuobs.com/twitter/news/211822.shtml Secuobs.com : 2011-05-25 01:15:30 - _argp - I am going to publish this one: md5: bcaac03a882cb10ac7c01acdb36b6287 sha1: f653e2d13f97bc83b343ebc7d8e97d8890d8be8fhttp://www.secuobs.com/twitter/news/210021.shtmlhttp://www.secuobs.com/twitter/news/210021.shtml Secuobs.com : 2011-05-21 16:35:03 - _argp - RT @ithilgore: Ncrack wins http://seclistsorg/nmap-dev/2011/q2/650http://www.secuobs.com/twitter/news/209088.shtmlhttp://www.secuobs.com/twitter/news/209088.shtml Secuobs.com : 2011-05-20 17:18:05 - _argp - RT @legerov: quick demo of Opera 1111 0day - http://intevydiscom/opera_0dayhtmlhttp://www.secuobs.com/twitter/news/208679.shtmlhttp://www.secuobs.com/twitter/news/208679.shtml Secuobs.com : 2011-05-20 17:18:05 - _argp - RT @djrbliss: Linux kernel snuck in partial PAX_UDEREF-like support via Intel SMEP feature: http://googl/WtpSChttp://www.secuobs.com/twitter/news/208678.shtmlhttp://www.secuobs.com/twitter/news/208678.shtml Secuobs.com : 2011-05-15 12:51:38 - _argp - Once again deep into heap manager internals; while listening to the latest Altar of Plagueshttp://www.secuobs.com/twitter/news/206683.shtmlhttp://www.secuobs.com/twitter/news/206683.shtml Secuobs.com : 2011-05-11 09:51:35 - _argp - RT @jonoberheide: PaX adds support to clear the kernel stack on the return of every syscall PAX_MEMORY_STACKLEAKhttp://www.secuobs.com/twitter/news/204878.shtmlhttp://www.secuobs.com/twitter/news/204878.shtml Secuobs.com : 2011-05-08 13:07:28 - _argp - #fosscomm2011 currently at @manjiki's VoIP/SIP talkhttp://www.secuobs.com/twitter/news/203489.shtmlhttp://www.secuobs.com/twitter/news/203489.shtml Secuobs.com : 2011-05-06 20:38:40 - _argp - RT @kernelpool: Modern Kernel Pool Exploitation: Attacks and Techniques More on reliability and some bonus slides on MS11-034: http://b http://www.secuobs.com/twitter/news/203088.shtmlhttp://www.secuobs.com/twitter/news/203088.shtml Secuobs.com : 2011-05-01 21:35:06 - _argp - Spent most of the day refactoring my Python fuzzer It was a good May dayhttp://www.secuobs.com/twitter/news/201333.shtmlhttp://www.secuobs.com/twitter/news/201333.shtml Secuobs.com : 2011-04-27 18:46:19 - _argp - pydbg for Linux would be really useful right about now; I think I will start porting its main functionality to a ptrace basishttp://www.secuobs.com/twitter/news/199874.shtmlhttp://www.secuobs.com/twitter/news/199874.shtml Secuobs.com : 2011-04-17 15:30:41 - _argp - RT @EdiStrosar: grsecurity/Pax Team blogpost : Much ado about nothing A response in text and code - http://googl/gemq8http://www.secuobs.com/twitter/news/196627.shtmlhttp://www.secuobs.com/twitter/news/196627.shtml Secuobs.com : 2011-04-17 03:02:56 - _argp - RT @reversemode: Just wrote a post to explain why mscoriedll no longer works: ASLR_TRICKS-- http://isgd/sK0uvchttp://www.secuobs.com/twitter/news/196495.shtmlhttp://www.secuobs.com/twitter/news/196495.shtml Secuobs.com : 2011-04-14 18:14:21 - _argp - RT @daveaitel: Exploit Necromancy in TCMalloc – Reviving the 4-to-N Byte Overflow Primitive with Insert to FreeListX http://dlvrit/NSDk7http://www.secuobs.com/twitter/news/195622.shtmlhttp://www.secuobs.com/twitter/news/195622.shtml Secuobs.com : 2011-04-14 18:14:21 - _argp - RT @dfunc: We'll be presenting our Blackhat EU'11 Protecting the Core paper at the coming OWASPgr meeting in Athens C u there http: http://www.secuobs.com/twitter/news/195621.shtmlhttp://www.secuobs.com/twitter/news/195621.shtml Secuobs.com : 2011-04-14 01:14:09 - _argp - Going postal on heap implementationshttp://www.secuobs.com/twitter/news/195324.shtmlhttp://www.secuobs.com/twitter/news/195324.shtml Secuobs.com : 2011-04-11 22:26:59 - _argp - Can you imagine all the fun that Microsoft's rumored PDF reader will bring I canhttp://www.secuobs.com/twitter/news/194287.shtmlhttp://www.secuobs.com/twitter/news/194287.shtml Secuobs.com : 2011-04-03 15:09:05 - _argp - Someone posted how to crack Amazon's Android app store DRM: http://pastebincom/cFddguZXhttp://www.secuobs.com/twitter/news/191982.shtmlhttp://www.secuobs.com/twitter/news/191982.shtml Secuobs.com : 2011-03-23 18:13:22 - _argp - @xsploitedsec that's the content of Gray Hat Python chapter 10http://www.secuobs.com/twitter/news/187836.shtmlhttp://www.secuobs.com/twitter/news/187836.shtml Secuobs.com : 2011-03-22 20:22:11 - _argp - @tkeetch Most probably I will be at ph-neutral Berlin at the end of May; BruCon sounds fun, it would be nice to visit Brussels toohttp://www.secuobs.com/twitter/news/187435.shtmlhttp://www.secuobs.com/twitter/news/187435.shtml Secuobs.com : 2011-03-22 20:22:11 - _argp - RT @dfunc: Protecting the Core presentation slides + whitepaper now online http://bitly/hlYPc1 #BlackHatEUhttp://www.secuobs.com/twitter/news/187434.shtmlhttp://www.secuobs.com/twitter/news/187434.shtml Secuobs.com : 2011-03-21 18:40:02 - _argp - RT @jtsiomb: This wednesday March 23, I'm presenting about my pet kernel project at the Thessaloniki Tech Talk Sessions More info: ht http://www.secuobs.com/twitter/news/186983.shtmlhttp://www.secuobs.com/twitter/news/186983.shtml Secuobs.com : 2011-03-20 03:02:00 - _argp - RT @_topo: Fuzzing and Debugging Cisco IOS presentation code at http://wwwgroundworkstechcom/projects/dynamips-gdb-mod #blackhateuro http://www.secuobs.com/twitter/news/186631.shtmlhttp://www.secuobs.com/twitter/news/186631.shtml Secuobs.com : 2011-03-12 10:16:01 - _argp - RT @VUPEN: Nobody has challenged Chrome at this year's pwn2own If next year Google offers 40k to pwn Chrome, maybe we will do the magichttp://www.secuobs.com/twitter/news/183949.shtmlhttp://www.secuobs.com/twitter/news/183949.shtml Secuobs.com : 2011-03-10 10:58:05 - _argp - RT @stephenfewer: Awesome, just popped ie8 at pwn2own :http://www.secuobs.com/twitter/news/182957.shtmlhttp://www.secuobs.com/twitter/news/182957.shtml Secuobs.com : 2011-03-10 10:58:05 - _argp - RT @EdiStrosar: The two browsers that are practising bug bounties survived Pwn2Ownhttp://www.secuobs.com/twitter/news/182956.shtmlhttp://www.secuobs.com/twitter/news/182956.shtml Secuobs.com : 2011-03-09 15:39:32 - _argp - Very helpful ollydbg plugin for dumping memory ranges for further manipulation: http://jmp/eaDvkthttp://www.secuobs.com/twitter/news/182492.shtmlhttp://www.secuobs.com/twitter/news/182492.shtml Secuobs.com : 2011-03-07 15:54:49 - _argp - RT @Blackmond_: An open source Softice like debugger, great to learn a lot of things on NT Kernel - http://bugcheckercom/http://www.secuobs.com/twitter/news/181489.shtmlhttp://www.secuobs.com/twitter/news/181489.shtml Secuobs.com : 2011-03-07 15:54:49 - _argp - BugChecker looks great; I much prefer inline or single-host kernel debuggers to remote ones; going to test it tomorrow morninghttp://www.secuobs.com/twitter/news/181488.shtmlhttp://www.secuobs.com/twitter/news/181488.shtml Secuobs.com : 2011-03-05 16:07:08 - _argp - Kernel stuff on hold; back to malware reversinghttp://www.secuobs.com/twitter/news/181094.shtmlhttp://www.secuobs.com/twitter/news/181094.shtml Secuobs.com : 2011-03-01 04:11:42 - _argp - Snow Leopard kernel debugging all nighterhttp://www.secuobs.com/twitter/news/179231.shtmlhttp://www.secuobs.com/twitter/news/179231.shtml Secuobs.com : 2011-02-25 19:54:02 - _argp - @jduck1337 Is this the first time a pwn2own can be won with a metasploit bundled exploithttp://www.secuobs.com/twitter/news/178241.shtmlhttp://www.secuobs.com/twitter/news/178241.shtml Secuobs.com : 2011-02-24 19:43:57 - _argp - @mprodeus Chrome is definitely the most interesting target for this year's pwn2ownhttp://www.secuobs.com/twitter/news/177886.shtmlhttp://www.secuobs.com/twitter/news/177886.shtml Secuobs.com : 2011-02-24 12:31:00 - _argp - This week is 'frantic kernel debugging' week; Juggling gdb windbg ddb, mixing their commands and crashing kernels while *not* keeping noteshttp://www.secuobs.com/twitter/news/177764.shtmlhttp://www.secuobs.com/twitter/news/177764.shtml Secuobs.com : 2011-02-24 12:31:00 - _argp - RT @jtsiomb: Made a website for my kernel development articles: http://nuclearsdf-euorg/articles/kerneldev/http://www.secuobs.com/twitter/news/177763.shtmlhttp://www.secuobs.com/twitter/news/177763.shtml Secuobs.com : 2011-02-11 16:17:19 - _argp - Our talk on kernel exploitation mitigations with @dfunc was accepted at Black Hat EU 2011: http://jmp/ez00Zlhttp://www.secuobs.com/twitter/news/172942.shtmlhttp://www.secuobs.com/twitter/news/172942.shtml Secuobs.com : 2011-02-09 02:26:54 - _argp - RT @jtsiomb: Linux inside with the first part of my kernel development article series should be available now Relevant blog post: http: http://www.secuobs.com/twitter/news/171755.shtmlhttp://www.secuobs.com/twitter/news/171755.shtml Secuobs.com : 2011-02-07 01:16:39 - _argp - RT @kargig: Article on IPv6 for Linux Inside http://ffim/-xrfKChttp://www.secuobs.com/twitter/news/170936.shtmlhttp://www.secuobs.com/twitter/news/170936.shtml Secuobs.com : 2011-01-31 14:48:35 - _argp - RT @h4z3dic: Using nt_MiSystemVaType to navigate dynamic kernel address space in Windows7 http://bitly/gWftk0http://www.secuobs.com/twitter/news/168551.shtmlhttp://www.secuobs.com/twitter/news/168551.shtml Secuobs.com : 2011-01-31 00:07:10 - _argp - Chrome extension to remove the annoying you're using an older version of twitter bar: http://jmp/ekA1Ophttp://www.secuobs.com/twitter/news/168375.shtmlhttp://www.secuobs.com/twitter/news/168375.shtml Secuobs.com : 2011-01-28 18:51:09 - _argp - RT @41414141: Seriously @symantec, no less than 4 unauthenticated stack based buffer overflows + 1 command exec via msgsysexe Security http://www.secuobs.com/twitter/news/167653.shtmlhttp://www.secuobs.com/twitter/news/167653.shtml Secuobs.com : 2011-01-28 04:22:50 - _argp - Today I noticed some cases in the Linux kernel where NULL is used to signify default; going to look whether this can lead to subtle bugshttp://www.secuobs.com/twitter/news/167380.shtmlhttp://www.secuobs.com/twitter/news/167380.shtml Secuobs.com : 2011-01-27 16:19:03 - _argp - Users of Thunderbird Enigmail MUST enable the option to use PGP/MIME to make their emails have correct headers Do it Nowhttp://www.secuobs.com/twitter/news/167118.shtmlhttp://www.secuobs.com/twitter/news/167118.shtml Secuobs.com : 2011-01-26 18:51:08 - _argp - RT @nelhage: I wrote up a handful of simple but useful gdb tricks for the @ksplice blog: http://tco/phObeF4http://www.secuobs.com/twitter/news/166697.shtmlhttp://www.secuobs.com/twitter/news/166697.shtml Secuobs.com : 2011-01-25 13:34:46 - _argp - RT @steaIth: whats really new with porting any old evil code to MOBILE backdoor my ass, rootkit my ass, botnet my asshttp://www.secuobs.com/twitter/news/166159.shtmlhttp://www.secuobs.com/twitter/news/166159.shtml Secuobs.com : 2011-01-23 16:14:36 - _argp - @__fastcall Linux kernel, more details laterhttp://www.secuobs.com/twitter/news/165568.shtmlhttp://www.secuobs.com/twitter/news/165568.shtml Secuobs.com : 2011-01-22 07:13:31 - _argp - Still up looking at a kernel bughttp://www.secuobs.com/twitter/news/165250.shtmlhttp://www.secuobs.com/twitter/news/165250.shtml Secuobs.com : 2011-01-21 13:46:47 - _argp - RT @jduck1337: Neat research to reduce entropy of stack cookies - http://cipherorguk/2011/01/20/taking-advantage-of-file-descriptor-ex http://www.secuobs.com/twitter/news/164893.shtmlhttp://www.secuobs.com/twitter/news/164893.shtml Secuobs.com : 2011-01-13 14:52:29 - _argp - Kudos to @dfunc for a Linux ASLR bypass trickhttp://www.secuobs.com/twitter/news/162202.shtmlhttp://www.secuobs.com/twitter/news/162202.shtml Secuobs.com : 2011-01-12 16:42:33 - _argp - @halvarflake #heapcon would be an appropriate place for me to talk about binding FreeBSD's kernel heap to one's bidding ;http://www.secuobs.com/twitter/news/161842.shtmlhttp://www.secuobs.com/twitter/news/161842.shtml Secuobs.com : 2011-01-07 19:50:33 - _argp - @kernelpool @Ivanlef0u a while ago I played with ROP on x64 Linux; instruction seqs with 64bit operands are uncommon due to rex prefixeshttp://www.secuobs.com/twitter/news/160697.shtmlhttp://www.secuobs.com/twitter/news/160697.shtml Secuobs.com : 2011-01-02 15:20:00 - _argp - New PSP kernel exploit that enables the running of unsigned code on all PSP models by downgrading: http://jmp/f4Sm76http://www.secuobs.com/twitter/news/159133.shtmlhttp://www.secuobs.com/twitter/news/159133.shtml Secuobs.com : 2010-12-23 06:05:01 - _argp - Has anyone looked at the http://jmp/ey6Bd8 Tor remote heap overflow I will try to dig into it tomorrowhttp://www.secuobs.com/twitter/news/156665.shtmlhttp://www.secuobs.com/twitter/news/156665.shtml Secuobs.com : 2010-12-16 09:57:22 - _argp - The Phrack #68 call for papers is out: http://wwwphrackorg/cfp_p68txthttp://www.secuobs.com/twitter/news/153957.shtmlhttp://www.secuobs.com/twitter/news/153957.shtml Secuobs.com : 2010-12-12 12:39:29 - _argp - RT @kargig: Stupid Anonymous Greek guy, puts his name on a pdf press releaseJust earned a place in Internet Hall of Shame http: http://www.secuobs.com/twitter/news/152338.shtmlhttp://www.secuobs.com/twitter/news/152338.shtml Secuobs.com : 2010-12-07 20:24:29 - _argp - My goal for today is to quickly finish the writing of a pentest report and actually do some work afterwards ;http://www.secuobs.com/twitter/news/150103.shtmlhttp://www.secuobs.com/twitter/news/150103.shtml Secuobs.com : 2010-12-07 20:24:29 - _argp - @mfukar Yes, it's funny too I especially laughed at the part about heap exploitation being easy to integrate into their frameworkhttp://www.secuobs.com/twitter/news/150102.shtmlhttp://www.secuobs.com/twitter/news/150102.shtml Secuobs.com : 2010-12-07 20:24:29 - _argp - RT @esizkur: to extend AEG to handle heap-based overflows consider heap management structures, which is a straight-forward extens http://www.secuobs.com/twitter/news/150101.shtmlhttp://www.secuobs.com/twitter/news/150101.shtml Secuobs.com : 2010-12-03 08:09:43 - _argp - RT @djrbliss: Turn a DoS into privilege escalation: http://wwwopenwallcom/lists/oss-security/2010/12/02/2http://www.secuobs.com/twitter/news/148672.shtmlhttp://www.secuobs.com/twitter/news/148672.shtml Secuobs.com : 2010-11-26 02:25:05 - _argp - I just realized I have been using Chrome as a pdf reader for a while now Amazing; I didn't even notice it ;http://www.secuobs.com/twitter/news/146363.shtmlhttp://www.secuobs.com/twitter/news/146363.shtml Secuobs.com : 2010-11-26 02:25:05 - _argp - RT @eugeneteo: CVE tagged Linux kernel git repositories: http://bitly/fxtTLz #securityhttp://www.secuobs.com/twitter/news/146362.shtmlhttp://www.secuobs.com/twitter/news/146362.shtml Secuobs.com : 2010-11-18 21:25:54 - _argp - I am biased The exploitation of heap overflows is a subject close to my hearthttp://www.secuobs.com/twitter/news/143890.shtmlhttp://www.secuobs.com/twitter/news/143890.shtml Secuobs.com : 2010-11-17 22:21:16 - _argp - RT @_koikonom: Hacking the Kinect - How to hack USB device drivers: http://melt/24mdhttp://www.secuobs.com/twitter/news/143418.shtmlhttp://www.secuobs.com/twitter/news/143418.shtml Secuobs.com : 2010-11-17 08:24:03 - _argp - The Phrack #67 table of contents is out: http://phrackorg/http://www.secuobs.com/twitter/news/143160.shtmlhttp://www.secuobs.com/twitter/news/143160.shtml Secuobs.com : 2010-11-06 00:06:56 - _argp - RT @41414141: Score Blitzableiter protects against Flash 0day CVE-2010-3654 out of the box Format Normalization works Thanks to @jduc http://www.secuobs.com/twitter/news/139521.shtmlhttp://www.secuobs.com/twitter/news/139521.shtml Secuobs.com : 2010-10-11 16:53:01 - _argp - RT @mtrojnar: iPhone 4 jailbreak has been finally released http://limera1ncom/ Great news for the pentest I'm doing this weekhttp://www.secuobs.com/twitter/news/130234.shtmlhttp://www.secuobs.com/twitter/news/130234.shtml Secuobs.com : 2010-10-11 01:18:19 - _argp - http://jmp/crolGa I should get into PSP kernel exploitationhttp://www.secuobs.com/twitter/news/130080.shtmlhttp://www.secuobs.com/twitter/news/130080.shtml