If you like this, you can use flattr. ;)
- Quickpost: Inspiring Windows software profilers and checkers
- 0x41 - back to bugs
- low footprint/hardware assisted virtualization with Linux and GrSec
- Postfix troubleshooting - a security nightmare
- New content soon
- 0x41 - (weekly) exploitation matters - Vista Heap, scripting debuggers with debug libs and how to learn to use that knowledge
- 0x41 - weekly exploitation matters - Shellcode and frameworks
- Explicit and implicit security in software development - measures and change
- 0x41 - weekly exploitation matters - Heap overflow fundamentals
- 0x41 - weekly exploitation matters - About
- wishinet: checking out GDB with Dtrace support for OS X... (1.9.2). Should be interesting.
- wishinet: RT @bfoo: Worth reading: http://merbist.com/2010/08/22/discussion-with-a-java-switcher/
- wishinet: nächstes Jahr Taikai in Nürnberg (http://www.taikai.de/) - und nu aus Nürnberg total groggy in die Falle! ;)
UnprotectedHex - about formal software verification
Sean's blog
Xecurity - a security feed collecter
Reddit RCE group
Freedom To Tinker
Emergent Chaos
Woodmann RCE forums
OpenRCE community forums
SecViz - security data visualization
DAVIX Live - for security metrics
Hex Live
Security Metrics
Immunity's Free Software
Core Security's OpenSouce research
Zynamics Blog
0x41 - weekly exploitation matters - About
Fri, 03/19/2010 - 13:32 | wishi
txtBecause it's a passion
Soon after I started with writing exploits I found out that I'm copying tutorials and performing attacks that have been created by people whose insight-level is far greater than mine. But I always wanted to at least document a bunch of things that fascinate me regarding the art of exploitation - and contribute at least something to the whole.
Therefore I decided to begin with summing up stuff that matters - to me. For now. This is not a smart-arse competition. I simply have got some time left and this is just another blog that deals with that special computer science topic.
Another reason for the "weekly exploitation matters" is that I believe that even if knowledge is out there regarding software security, it's getting ignored because that's easier and cheaper.
As a software-developer I always want(ed) to do a perfect job. Until I found out that 100% software security is impossible. But if you introduce security to a software-project, there's 10-times more work to do. The way to manage security within a software development plan is to at least motivate current issues of modern well known attacks.
If you know that stuff:
Last but not least: if you want to share inspiration, you can write an eMail to wishi - at - sandokai.eu (PGP 0xCCCA5E74). The comment function of this blog is just to bother spammers and to let them waste resources. They never learn.
Facts in short
- I'm not starting at zero-knowledge.
- I'm not dropping zero-days here.
I'm going to send the articles to tubler, too - or however this thing is named. That's just a backup.
Blogspot- My note-db will most often contain the stuff I link to. Did you ever stumble upon an older tutorial with just dead links? Long live the cloud.
- I'm going to focus on Windows and vulnerability discovery techniques. I didn't read the 5th edition of Windows Internals to forget about it ;)
- Any book recommendation is a book I read and like. But I will never link to security-sell-out books with hacky titles and zero-content.
instead.
Have fun,
wishi
Tags: 
Post new comment