Shells, terminals, and sudo mitm
Posted by scriptjunkie in /dev/urandom on April 14, 2011
In many situations, you can find yourself with a simple shell, able to read and write stdin/stdout, but some command that you are using requires a full terminal. Example: you got a netcat shell on a server or you’re writing a web application with popen() calls, etc. If you need to execute a command through […]
Important Stuff
Posted by scriptjunkie in Uncategorized on March 31, 2011
I am adding a page Important Stuff with some thoughts on non-information-security stuff. As fun and interesting as hacking is, there are more important sides of life. So I summarized just four of the reasons why I believe what I believe, and a bit of what that means. As you may know, I am a […]
Finding non-ASLR or DEP modules
Posted by scriptjunkie in Exploits on March 1, 2011
As the recent exploits for IE using the .NET 2.0 DLL demonstrate, sometimes a non-ASLR DLL to enable an exploit is just a LoadLibrary away. So if pvefindaddr won’t give you any ASLR-free DLL’s in memory, look for other DLL’s which the process will load, given the right input. Or from a system-hardening or development […]
Breaking mobile device crypto with chaos theory and hardware RNG’s
Posted by scriptjunkie in Crypto on February 5, 2011
This is a continuation of the previous post with details on breaking the cryptosystem in the paper “Design and FPGA Implementation of a Pseudo-Random Bit Sequence Generator Using Spatiotemporal Chaos,” which proposed a hardware-based PRNG using a chaotic function as the basis of a cryptosystem inspired by the one-time pad. It proposed the system as […]
Cryptology, Academics, and Chaos
Posted by scriptjunkie in Uncategorized on February 4, 2011
I saw an article the other day critical of the ACM (here also see this linked to in comments) and I have to say, I completely agree. As far as I can tell, the ACM, like the IEEE and other publishing houses, exists to leech off of the academic world, charging large amounts of money […]
Black Hat & Shmoocon
Posted by scriptjunkie in Uncategorized on December 14, 2010
Just got accepted to both Black Hat DC 2011 and Shmoocon 2011! Unfortunately, I will not be able to attend Shmoocon. I wish I could come; I have never spoken there before, and it’s a great conference. Instead you will have to see me at Black Hat. Link: http://www.blackhat.com/html/bh-dc-11/bh-dc-11-briefings.html#Weeks