IT Security and Hacking knowledge base

Date	Type	Title	Author	Event
December 29, 2011	Slides	SQL Injection and Data Mining Through Inference	David Litchfield	Black Hat EU 2005
December 14, 2011	Slides	Windows Heap Overflows	David Litchfield	Black Hat Windows Security 2004
December 14, 2011	Paper	Windows Heap Overflows	David Litchfield	Black Hat Windows Security 2004
December 11, 2011	Slides	Oracle PL/SQL Injection	David Litchfield	Black Hat EU 2004
November 26, 2011	Audio	Oracle PL/SQL Injection	David Litchfield	Black Hat Asia 2004
November 26, 2011	Slides	Oracle PL/SQL Injection	David Litchfield	Black Hat Asia 2004
November 25, 2011	Slides	Oracle Vulnerabilities	David Litchfield Sherief Hammad	Black Hat Windows Security 2002
November 15, 2011	Slides	Database Security	David Litchfield	Black Hat Asia 2002
November 11, 2011	Slides	Remote Web Application Disassembly with ODBC Error Messages	David Litchfield	Black Hat Windows Security 2001
November 08, 2011	Slides	Remote Web Application Disassembly with ODBC Error Messages	David Litchfield	Black Hat Asia 2001
November 08, 2011	Paper	Remote Web Application Disassembly with ODBC Error Messages	David Litchfield	Black Hat Asia 2001
November 01, 2011	Paper	Hackproofing Lotus Domino	David Litchfield	Black Hat EU 2001
October 26, 2011	Paper	Compromising Web Servers, and Defensive Techniques	David Litchfield	Black Hat USA 2000
October 23, 2011	Slides	Auditing The Security of Applications	David Litchfield	Black Hat EU 2000
October 16, 2011	Slides	All New Oracle Ø-Day: Attacking and Defending Oracle	David Litchfield	Black Hat EU 2003
October 07, 2011	Paper	Variations in Exploit Methods Between Linux and Windows	David Litchfield	Black Hat USA 2003
October 01, 2011	Slides	Defeating the Stack Based Buffer Overflow Exploitation Prevention Mechanism of Microsoft Windows 2003 Server	David Litchfield	Black Hat Federal 2003
September 29, 2011	Paper	Defeating the Stack Based Buffer Overflow Exploitation Prevention Mechanism of Microsoft Windows 2003 Server	David Litchfield	Black Hat Asia 2003
July 30, 2011	Paper	Advanced Oracle Attack Techniques	David Litchfield	Black Hat DC 2007
July 30, 2011	Slides	Advanced Oracle Attack Techniques	David Litchfield	Black Hat DC 2007
June 01, 2011	Slides	Database Forensics	David Litchfield	Black Hat USA 2007
August 16, 2010	Video	The Forensic Investigation of a Compromised Oracle Database Server	David Litchfield	Black Hat DC 2009
August 15, 2010	Audio	The Forensic Investigation of a Compromised Oracle Database Server	David Litchfield	Black Hat DC 2009
January 17, 2009	Paper	Hackproofing Lotus Domino Web Server	David Litchfield
May 03, 2008	Paper	Lateral SQL Injection: A new Class of Vulnerability in Oracle	David Litchfield
January 28, 2008	Paper	Assessing IIS Configuration Remotely	David Litchfield
December 30, 2007	Paper	Securing PL/SQL Applications with DBMS_ASSERT	David Litchfield
December 30, 2007	Paper	Analysis of the Oracle Oct 2006 CPU	David Litchfield
December 30, 2007	Paper	Cursor Snarfing - A New Class of Attack in Oracle	David Litchfield
December 30, 2007	Paper	Hack Proofing Oracle Application Server	David Litchfield
December 30, 2007	Paper	Cursor Injection - A New Method for Exploiting PL/SQL Injection and Potential Defences	David Litchfield
December 30, 2007	Slides	In-memory Backdoors in Oracle	David Litchfield
December 29, 2007	Paper	Oracle Forensics Part 1: Dissecting the Redo Logs	David Litchfield
December 29, 2007	Paper	Oracle Forensics Part 2: Locating Dropped Objects	David Litchfield
December 29, 2007	Paper	Oracle Forensics Part 4: Live Response	David Litchfield
December 29, 2007	Paper	Oracle Forensics Part 3: Isolating Evidence of Attacks Against the Authentication Mechanism	David Litchfield
December 29, 2007	Paper	Oracle Forensics Part 5: Finding Evidence of Data Theft in the Absence of Auditing	David Litchfield
December 29, 2007	Paper	Oracle Forensics Part 6: Examining Undo Segments, Flashback and the Oracle Recycle Bin	David Litchfield
December 29, 2007	Paper	Microsoft SQL Server Passwords	David Litchfield
December 29, 2007	Paper	Threat Profiling Microsoft SQL Server	David Litchfield

December 29, 2011

Slides

SQL Injection and Data Mining Through Inference

David Litchfield

Black Hat EU 2005

December 14, 2011

Slides

Windows Heap Overflows

David Litchfield

Black Hat Windows Security 2004

December 14, 2011

Paper