I is HaXoR

It's official.  My own entry in the Hackers Database and everything! 

What is the Hackers Database?  From the FAQ:

What is the main goal of the Hacker Database? (Known as the HDB)

The HDB is a community oriented database intended to document hackers, phreakers, and people who have influenced the realm of computer security. One major goal is to get factual documentation concerning people who are in the database. Another goal is to get rumors (unconfirmed possible facts) to be listed in the rumors section of their entry. If there are entries or information that somebody would like to see in the database, feel free to contact me or cisc0ninja with the information and your sources and we will be more than happy to make it a part of the database. If there is information that you need censored (such as your full real name) you will need to contact RaT in order to get those changes made.

 

DEP Bypass Tutorial for Vulnserver

When Vulnserver was originally released I did say at the time that I would release a tutorial that covers the process of bypassing DEP.  That was of course just before I started in a new job and my blog posting regularity pretty much dropped off the cliff.  Well the good news (for me, and for you too perhaps) is that now I dont have to write that tutorial, because someone else has already done it!

Check out the tutorial here.  Ive only given it a quick skim so far, but based on what Ive seen it looks pretty good.

Article in Pentest Magazine - Building a pentest system using Ubuntu

Ive got an article in the latest edition of Pentest Magazine about setting up a pentesting system using Ubuntu Linux.  This covers the actual process I use at work when setting up a pentesting box.

Read more about this issue here.

There were a few bits and pieces I wrote but left out of the article because of space reasons, so I will be posting them here on my blog soonish.

Restricted Character Set Buffer Overflow Tutorial for Vulnserver

The title says it all.

You can find the tutorial here.

Egghunter based exploit for Vulnserver

A link to the most recent entry in the Vulnserver series is provided below.  Its at the InfoSec Institute site once more.

Link


Hopefully the next part in the series will be coming up soon, keep watching this space.