How an excercise eventually becomes my first public exploit
A couple of days ago, I was working on my exploit-writing routine as preparation for my upcoming OSCE examination.
Research archive
Security research grounded in software.
Analysis of real attack surfaces, secure engineering decisions, and tooling designed to turn findings into useful signal.
Area 01
Security Research
Deep analysis of vulnerabilities, exploitability and real attack surfaces.
A closer look to msf-egghunter
The egghunting is a technique used in exploit writing to deal with evil shellcode to be placed in a memory location different from the one we are redirected via EIP...
Digging into Vulnserver: fuzzing it
Vulnserver is a Win32 application built to simulate a TCP/IP server listening on port 9999 and accepting commands from unauthenticated clients.
Ruby and omniauth-facebook gem security issues this week
A couple of days ago, on Italian Ruby mailing list, Paolo Montrasio reported two security issues occured in the ruby world.
Fingerprint phpbb forum platform
phpbb is a popular forum platform written in php. In the past it suffered from tons of tons of security issues.
Create a bot engine in Ruby: the botolo project
There are a lot of tutorials for creating bots on several programming languages and for a lot of web applications.
Area 02
Secure Software Engineering
Code review, threat modeling, secure design and practical engineering guardrails.
Rails patching Wednesday
Past weeks were busy for Ruby on Rails core team and appsec people looking at the framework’s security. Yesterday, core rails member Aaron Patterson announced three Ruby on Rails security...
How to wrap a long text to fit your terminal width in ruby
Today I was working over a new tabular output for Codesake::Dawn and I faced a problem. Vulnerabilities have a very long description that breaks all formatting resulting in something unreadable....
Every bug has a sad, sad song
It was a busy month. Web sites out there are still attacked by villains and the first Codesake::Dawn major release was out this week. That’s because I didn’t post anything...
Updates from the Ruby security world: 6 new vulnerabilities as X'mas gift
Wow, last week it was very busy in the ruby security annonuncement discussion group. A bunch of six new vulnerabilities were announced and, most of them, are cross site scripting...
Ruby and omniauth-facebook gem security issues this week
A couple of days ago, on Italian Ruby mailing list, Paolo Montrasio reported two security issues occured in the ruby world.
Let the sake for code to flow
UPDATE For a mistake this post appeared today on armoredcode.com without the text. Reason is that I created a placeholder to remember me to work on this.
Area 03
Security Tooling
Open-source tools that reduce noise and turn findings into actionable signal.
Create your own telemetry system
In order to monitor dawnscanner security scaner usage, I introduced in upcoming version 2.0.0, a telemetry system.
Updates from the Ruby security world: 6 new vulnerabilities as X'mas gift
Wow, last week it was very busy in the ruby security annonuncement discussion group. A bunch of six new vulnerabilities were announced and, most of them, are cross site scripting...
Ruby and omniauth-facebook gem security issues this week
A couple of days ago, on Italian Ruby mailing list, Paolo Montrasio reported two security issues occured in the ruby world.
Let the sake for code to flow
UPDATE For a mistake this post appeared today on armoredcode.com without the text. Reason is that I created a placeholder to remember me to work on this.
Howto crawl web.xml with ruby to discover servlet urls for a pentest
Something very boring happening in a web application penetration test is to reach out URLs that are not referenced in other pages.
How to quote a code review
A premise: I don’t trust gantt and fancy IT project managers’ document where every project step fits in a perfect order without dealing with the unpredictable.