jbremer.org

cuckoosandbox.org

Automated Malware Analysis - Cuckoo Sandbox

https://cuckoosandbox.org/download.html

Tear it apart, discover its ins and outs and collect actionable threat data. Cuckoo is the leading open source. Automated malware analysis system. The following fields are optional. They are intended as a survey for us to better understand the type of userbase we have, so we invite you to fill out the form if you can. What are you going to use Cuckoo for? Integration with a commercial security product. Integration with internal security measures. Integration with a malware analysis service. Malware analy...

cuckoosandbox.org

Automated Malware Analysis - Cuckoo Sandbox

https://cuckoosandbox.org/development.html

Tear it apart, discover its ins and outs and collect actionable threat data. Cuckoo is the leading open source. Automated malware analysis system. The following fields are optional. They are intended as a survey for us to better understand the type of userbase we have, so we invite you to fill out the form if you can. What are you going to use Cuckoo for? Integration with a commercial security product. Integration with internal security measures. Integration with a malware analysis service. Malware analy...

cuckoosandbox.org

Automated Malware Analysis - Cuckoo Sandbox

https://cuckoosandbox.org/faq.html

Tear it apart, discover its ins and outs and collect actionable threat data. Cuckoo is the leading open source. Automated malware analysis system. The following fields are optional. They are intended as a survey for us to better understand the type of userbase we have, so we invite you to fill out the form if you can. What are you going to use Cuckoo for? Integration with a commercial security product. Integration with internal security measures. Integration with a malware analysis service. Malware analy...

codearcana.com

Code Arcana - gdb

http://codearcana.com/tag/gdb.html

Gdb breakpoint commands and conditional breakpoints. Sat 16 May 2015. During my first week at my new job, I had the opportunity to teach some of my new coworkers about. Breakpoint commands and conditional breakpoints. I had a lot of fun teaching these techniques my friends here and thought others might find the story enjoyable as well.

codearcana.com

Code Arcana - ctf

http://codearcana.com/tag/ctf.html

Ghost in the Shellcode 2014 -. Sun 19 January 2014. Is a "super secure parsing engine", that includes a histogram function. The histogram ascii text uses a buffer on the stack, but will increment buckets past the end of the buffer if non ascii text is provided, allowing us to rop. Binary and exploit available. Ghost in the Shellcode 2014 -. Sun 19 January 2014. Cross post from PPP blog.

codearcana.com

Code Arcana - security

http://codearcana.com/category/security.html

Ghost in the Shellcode 2014 -. Sun 19 January 2014. Is a "super secure parsing engine", that includes a histogram function. The histogram ascii text uses a buffer on the stack, but will increment buckets past the end of the buffer if non ascii text is provided, allowing us to rop. Binary and exploit available. Ghost in the Shellcode 2014 -. Sun 19 January 2014. Cross post from PPP blog. Introduction to return oriented programming (ROP). Tue 28 May 2013. A brief introduction to x86 calling conventions.

codearcana.com

Code Arcana - conditional breakpoint

http://codearcana.com/tag/conditional-breakpoint.html

Gdb breakpoint commands and conditional breakpoints. Sat 16 May 2015. During my first week at my new job, I had the opportunity to teach some of my new coworkers about. Breakpoint commands and conditional breakpoints. I had a lot of fun teaching these techniques my friends here and thought others might find the story enjoyable as well.

codearcana.com

Reading resumes

http://codearcana.com/posts/2013/09/25/reading-resumes.html

Wed 25 September 2013. Tonight, I sat down and read through every resume in the 2013 SCS senior resume book. Reading resumes for a company is really interesting, because I find myself looking at them very differently. As a student, I didn't really understand what sections of the resume are important. I thought it would be interesting to give a brief walk through of my resume scan process. I look at the sections of the resume in roughly this order:. Graduation year / major. I do not care. I want to see.

codearcana.com

Ghost in the Shellcode 2014 - gitsmsg

http://codearcana.com/posts/2014/01/19/ghost-in-the-shellcode-2014-gitsmsg.html

Ghost in the Shellcode 2014 -. Sun 19 January 2014. Is a messaging server. A heap overflow led to arbitrary read / write and eventual code exec after circumventing RELRO. Binary and exploit available here. Cross post from PPP blog. First, we reverse engineered much of the binary. You "login" as a user, then can compose messages to other users. The messages were saved to a linked list and could be edited before being serialized to disk. Each message is a tagged union of. Byte,dword,double}{ ,array}. Messa...

codearcana.com

Bash Performance Tricks

http://codearcana.com/posts/2013/08/06/bash-performance-tricks.html

Tue 06 August 2013. My coworkers presented a silly programming interview style question to me the other day: given a list of words, find the largest set of words from that list that all have the same hash value. Everyone was playing around with a different language, and someone made the claim that it couldn't be done efficiently in. Rising to the challenge, I rolled up my sleeves and started playing around. The first trick was to figure out how to write the hash function in. I HASH RESULT function. Solut...