IT Security and Hacking knowledge base

Papers

Date	Title	Author
August 07, 2010	Subverting the Xen Hypervisor	Rafal Wojtczuk
August 03, 2010	A Fox in the Hen House (UPnP IGD)	Jonathan Squire
August 01, 2010	How To Impress Girls With Browser Memory Protection Bypasses	Alexander Sotirov Mark Dowd
July 29, 2010	Alternative Medicine: The Malware Analyst's Blue Pill	Paul Royal
July 28, 2010	No More Signatures: Defending Web Applications from 0-Day Attacks with ModProfiler UsingTraffic Profiling	Ivan Ristic Ofer Shezaf
July 26, 2010	Client-side Security	Petko d. Petkov
July 24, 2010	Mobitex Network Security
July 22, 2010	A Hypervisor IPS based on Hardware Assisted Virtualization Technology	Junichi Murakami
July 21, 2010	Satan is on My Friends List: Attacking Social Networks	Shawn Moyer Nathan Hamiel
July 06, 2010	Side-channel Timing Attacks on MSP430 Microcontroller Firmware	Travis Goodspeed
July 03, 2010	Next Generation Collaborative Reversing with Ida Pro and CollabREate	Tim Vidas Chris Eagle
June 28, 2010	Active 802.11 Fingerpinting: a "Secret Handshake" to Know Your APs	Sergey Bratus
June 24, 2010	When Lawyers Attack: Dealing With the New Rules of Electronic Discovery	John Benson
June 24, 2010	RE:Trace - Applied Reverse Engineering on OS X	Tiller Beauchamp David Weston
June 22, 2010	Winning the Race to Bare Metal – UEFI Hypervisors	Martin Mocko Don Bailey
June 22, 2010	Security in depth for Linux software	Julien Tinnes Chris Evans
June 22, 2010	Unveiling Maltego 3.0	Roelof Temmingh
June 21, 2010	State Of Malware: Family Ties	Peter Silberman Ero Carrera
June 21, 2010	Attacking JAVA Serialized Communication	Manish Saindane
June 21, 2010	Hacking Cisco Enterprise WLANs	Daniel Mende Enno Rey

more papers

Slides

Date	Title	Author
September 01, 2010	WAF Virtual Patching Challenge: Securing WebGoat with ModSecurity	Ryan C. Barnett
August 31, 2010	SQL Server Anti-Forensics	Cesar Cerrudo
August 30, 2010	One Cell is Enough to Break Tor's Anonymity	Xinwen Fu
August 17, 2010	QuietRIATT: Rebuilding the Import Address Table Using Hooked DLL Calls	Jason Raber Brian Krumheuer
August 08, 2010	Leveraging the Edge: Abusing SSL VPNs	Mike Zusman
August 07, 2010	Nmap: Scanning the Internet	Fyodor
August 06, 2010	ePassports Reloaded	Jeroen van Beek
August 06, 2010	Inducing Momentary Faults Within Secure Smartcards / Microcontrollers	Christopher Tarnovsky
August 05, 2010	REST for the Wicked	Bryan Sullivan
August 05, 2010	Windows Hibernation File for Fun and Profit	Matthieu Suiche
August 04, 2010	Protocols and Encryption of The Storm Botnet	Joe Stewart
August 02, 2010	How To Impress Girls With Browser Memory Protection Bypasses	Alexander Sotirov Mark Dowd
August 01, 2010	MetaPost-Exploitation	Colin Ames Val Smith
July 31, 2010	Meet The Owner Of a Real Hacked Company - Forensic Investigation	Mark Shelhart
July 31, 2010	Return-Oriented Programming: Exploits Without Code Injection	Hovav Shacham
July 29, 2010	Alternative Medicine: The Malware Analyst's Blue Pill	Paul Royal
July 28, 2010	No More Signatures: Defending Web Applications from 0-Day Attacks with ModProfiler UsingTraffic Profiling	Ivan Ristic Ofer Shezaf
July 28, 2010	Secure the Planet! New Strategic Initiatives from Microsoft to Rock Your World	Mike Reavey Steve Adegbite Katie Moussouris
July 27, 2010	Temporal Reverse Engineering	Colin Ames Danny Quist
July 26, 2010	Malware Detection Through Network Flow Analysis	Bruce Potter

more slides

Videos

Date	Title	Author
September 01, 2010	WAF Virtual Patching Challenge: Securing WebGoat with ModSecurity	Ryan C. Barnett
August 31, 2010	SQL Server Anti-Forensics	Cesar Cerrudo
August 31, 2010	XSS Anonymous Browser	Matthew Flick
August 30, 2010	One Cell is Enough to Break Tor's Anonymity	Xinwen Fu
August 30, 2010	Reversing and Exploiting Wireless Sensors	Travis Goodspeed
August 18, 2010	DNS 2008 and the New (old) Nature of Critical Infrastructure	Dan Kaminsky
August 18, 2010	Let Your Mach-O Fly	Vincenzo Iozzo
August 17, 2010	QuietRIATT: Rebuilding the Import Address Table Using Hooked DLL Calls	Jason Raber Brian Krumheuer
August 17, 2010	Emulation-based Software Protection Providing Encrypted Code Execution and Page Granularity Code Signing	William Kimball
August 16, 2010	Making Privacy-Preserving Data Mining Practical with Smartcards	Andrew Lindell
August 16, 2010	The Forensic Investigation of a Compromised Oracle Database Server	David Litchfield
August 15, 2010	New Techniques for Defeating SSL/TLS	Moxie Marlinspike
August 15, 2010	Windows Vista Security Internals	Michael Muckin
August 14, 2010	Your Face Is NOT Your Password	Duc Nguyen
August 14, 2010	Snort My Memory	Peter Silberman
August 13, 2010	Dissecting Web Attacks	Colin Ames Val Smith
August 12, 2010	A Wolf in Sheep's Clothing: The Dangers of Persistent Web Browser Storage	Michael Sutton
August 12, 2010	Defending Your DNS in a Post-Kaminsky World	Paul Wouters
August 09, 2010	Defending Against BGP Man-In-The-Middle Attacks	Earl Zmijewski
August 08, 2010	Leveraging the Edge: Abusing SSL VPNs	Mike Zusman

more videos

Audios

Date	Title	Author
September 01, 2010	WAF Virtual Patching Challenge: Securing WebGoat with ModSecurity	Ryan C. Barnett
August 31, 2010	SQL Server Anti-Forensics	Cesar Cerrudo
August 31, 2010	XSS Anonymous Browser	Matthew Flick
August 30, 2010	One Cell is Enough to Break Tor's Anonymity	Xinwen Fu
August 19, 2010	Reversing and Exploiting Wireless Sensors	Travis Goodspeed
August 18, 2010	Blinded by Flash: Widespread Security Risks Flash Developers Don't See	Prajakta Jagdale
August 18, 2010	Let Your Mach-O Fly	Vincenzo Iozzo
August 18, 2010	DNS 2008 and the New (old) Nature of Critical Infrastructure	Dan Kaminsky
August 17, 2010	Emulation-based Software Protection Providing Encrypted Code Execution and Page Granularity Code Signing	William Kimball
August 17, 2010	QuietRIATT: Rebuilding the Import Address Table Using Hooked DLL Calls	Jason Raber Brian Krumheuer
August 16, 2010	Satellite Hacking for Fun and Profit	Adam Laurie
August 16, 2010	Making Privacy-Preserving Data Mining Practical with Smartcards	Andrew Lindell
August 15, 2010	New Techniques for Defeating SSL/TLS	Moxie Marlinspike
August 15, 2010	The Forensic Investigation of a Compromised Oracle Database Server	David Litchfield
August 15, 2010	Windows Vista Security Internals	Michael Muckin
August 14, 2010	Your Face Is NOT Your Password	Duc Nguyen
August 14, 2010	Snort My Memory	Peter Silberman
August 13, 2010	Dissecting Web Attacks	Colin Ames Val Smith
August 12, 2010	A Wolf in Sheep's Clothing: The Dangers of Persistent Web Browser Storage	Michael Sutton
August 12, 2010	Attacking Intel® Trusted Execution Technology	Rafal Wojtczuk Joanna Rutkowska

more audios