chaptersinwebsecurity.blogspot.com

noobys-journey.blogspot.com

First steps into the world of application security: My own C# trojan - remote shell command execution

http://noobys-journey.blogspot.com/2010/05/my-own-c-trojan-remote-shell-command.html

First steps into the world of application security. Security research and tools development. Saturday, May 1, 2010. My own C# trojan - remote shell command execution. In this post I will present you a simple "shell" I created using c#.NET. The trojan runs in the background, opens a listening port on the machine running it and allows any connected client to execute remote shell commands. This application is for educational purposes only (mostly my own). How to use it? May 28, 2010 at 3:03 AM. January 14, ...

noobys-journey.blogspot.com

First steps into the world of application security: May 2010

http://noobys-journey.blogspot.com/2010_05_01_archive.html

First steps into the world of application security. Security research and tools development. Thursday, May 20, 2010. Automatic SQL injection tool update. This is an update about the automatic SQL injection tool I started developing. My first intention was to develop a simple. Automatic injection tool, then when I started developing it I found it to be far from simple. That is why I decided to join forces with my colleague Raviv Raz who previously developed Multinjector. Have a good weekend,. IsFirst) { m...

noobys-journey.blogspot.com

First steps into the world of application security: The ineffectiveness of AV demonstrated on the new UAC 0day POC file

http://noobys-journey.blogspot.com/2010/12/ineffectiveness-of-av-demonstrated-on.html

First steps into the world of application security. Security research and tools development. Wednesday, December 1, 2010. The ineffectiveness of AV demonstrated on the new UAC 0day POC file. A few days ago, a POC of the UAC bypass 0day was published. I decided to play a bit with the binary data and see what happens. :). You can download the undetected (until it will also get signed) POC file from here. September 27, 2011 at 8:20 AM. I m confused where is 0x00 value? Using HxD hexeditor and turkojan.

noobys-journey.blogspot.com

First steps into the world of application security: Injecting shellcode into XP/Vista/7 process using C++

http://noobys-journey.blogspot.com/2010/11/injecting-shellcode-into-xpvista7.html

First steps into the world of application security. Security research and tools development. Sunday, November 14, 2010. Injecting shellcode into XP/Vista/7 process using C. In this post I will present a tool I created for injecting shellcode into any process in the system (even privileged once if you have admin permissions). This tool only uses WinAPI functions and should work on any Windows platform and without any dependency. The next thing we would like to do is to enumerate the processes so we could ...

noobys-journey.blogspot.com

First steps into the world of application security: Automatic SQL injection tool update

http://noobys-journey.blogspot.com/2010/05/automatic-sql-injection-tool-update.html

First steps into the world of application security. Security research and tools development. Thursday, May 20, 2010. Automatic SQL injection tool update. This is an update about the automatic SQL injection tool I started developing. My first intention was to develop a simple. Automatic injection tool, then when I started developing it I found it to be far from simple. That is why I decided to join forces with my colleague Raviv Raz who previously developed Multinjector. Have a good weekend,.

noobys-journey.blogspot.com

First steps into the world of application security: Analysis of a Javascript Trojan found on a joomla based website

http://noobys-journey.blogspot.com/2010/01/analysis-of-javascript-trojan-found-on.html

First steps into the world of application security. Security research and tools development. Saturday, January 16, 2010. Analysis of a Javascript Trojan found on a joomla based website. Yesterday, I got my first freelance job. The owner of the website described that users are complaining that their spyware detection application alerts whenever they open some pages on the website. It didn't take a while to figure out where the Trojan is hiding and how its attacking. It replaces the charactes! Strange code...

chasenet.blogspot.com

Chasenet: November 2010

http://chasenet.blogspot.com/2010_11_01_archive.html

Tuesday, November 30, 2010. Peter Sunde Wants To Create Alternative To ICANN. So, it seems like finally someone is standing up against ICANN (was about time) And taking the first step against a new DNS solution at the moment named P2P-DNS. It has been formed an IRC channel #dns-p2p@irc.efnet.org and is already starting to fill up with alot of people interested in the project! Ideas of the project is currently beeing discussed in the irc channel, and ideas has been noted down Here. Tested it myself and wo...

noobys-journey.blogspot.com

First steps into the world of application security: January 2011

http://noobys-journey.blogspot.com/2011_01_01_archive.html

First steps into the world of application security. Security research and tools development. Saturday, January 8, 2011. Bypass Signature-Based Detection Tutorial (Hebrew). A tutorial I wrote on bypassing AV signature-based detection was published in a Israeli information security magazine called Digital Whisper. In this tutorial I demonstrate several techniques to bypass signature-based malware detection, and as a bonus demonstrate these techniques to bypass Symantec AV from detecting ZBot (Zeus worm).