简介：informative information for the uninformed

原站：http://uninformed.org/

“Uninformed Journal”的内容更新

累计：48 篇（自 2009-11-27 起）

更新：约2篇/月，最后更新811 天前

Uninformed Journal

Using dual-mappings to evade automated unpackers

automated unpackers such as renovo, saffron, and pandora's bochs attempt to dynamically unpack executables by detecting the execution of code from regions of virtual memory that have been written to. while this is an elegant method of detecting dynamic code execution, it is possible to evade these unpackers by dual-mapping physical pages to two distinct ... (306 天前)

http://inezha.com/w/uo609o8

Uninformed Journal

Analyzing local privilege escalations in win32k

this paper analyzes three vulnerabilities that were found in win32k.sys that allow kernel-mode code execution. the win32k.sys driver is a major component of the gui subsystem in the windows operating system. these vulnerabilities have been reported by the author and patched in ms08-025. the first vulnerability is a kernel pool overflow with an old commun... (306 天前)

http://inezha.com/w/zn5qooe

Uninformed Journal

Exploiting Tomorrow's Internet Today: Penetration te

this paper illustrates how ipv6-enabled systems with link-local and auto-configured addresses can be compromised using existing security tools. while most of the techniques described can apply to "real" ipv6 networks, the focus of this paper is to target ipv6-enabled systems on the local network.... (306 天前)

http://inezha.com/w/qu17xo6

Uninformed Journal

Can you find me now? Unlocking the Verizon Wireless

in august 2008 verizon wireless released a firmware upgrade for their xv6800 (rebranded htc titan) line of windows mobile smartphones that provided a number of new features previously unavailable on the device on the initial release firmware. in particular, support for accessing the device's built-in qualcomm gpsone assisted gps chipset was introduced wi... (306 天前)

http://inezha.com/w/2x6fg3u

Uninformed Journal

An Objective Analysis of the Lockdown Protection Sys

near the end of 2006, blizzard deployed the first major update to the version check and client software authentication system used to verify the authenticity of clients connecting to battle.net using the binary game client protocol. this system had been in use since just after the release of the original diablo game and the public launch of battle.net. t... (306 天前)

http://inezha.com/w/8w5de3a

Uninformed Journal

ActiveX - Active Exploitation

this paper provides a general introduction to the topic of understanding software vulnerabilities that affect activex controls. a brief description of how activex controls are exposed to internet explorer is given along with an analysis of three example activex vulnerabilities that have been previously disclosed.... (306 天前)

http://inezha.com/w/op1eq3q

Uninformed Journal

Context-keyed Payload Encoding

a common goal of payload encoders is to evade a third-party detection mechanism which is actively observing attack traffic somewhere along the route from an attacker to their target, filtering on commonly used payload instructions. the use of a payload encoder may be easily detected and blocked as well as opening up the opportunity for the payload to be ... (306 天前)

http://inezha.com/w/ji9293l

订阅者 ( 1 )

相关订阅源