http://secdocs.lonerunners.net Latest security documents RSS feed for author Alexander Sotirov en-us <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/49-reverse-engineering">reverse engineering</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/95-black-hat-usa-2006">Black Hat USA 2006</a> <br/> Wed, 11 Jan 2012 06:40:32 +0100 http://secdocs.lonerunners.net/documents/details/4716-hotpatching-and-the-rise-of-third-party-patches http://secdocs.lonerunners.net/documents/details/4716-hotpatching-and-the-rise-of-third-party-patches <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/273-javascript">Javascript</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/69-black-hat-eu-2007">Black Hat EU 2007</a> <br/> Thu, 21 Jul 2011 00:04:28 +0200 http://secdocs.lonerunners.net/documents/details/3883-heap-feng-shui-in-javascript http://secdocs.lonerunners.net/documents/details/3883-heap-feng-shui-in-javascript <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/273-javascript">Javascript</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/69-black-hat-eu-2007">Black Hat EU 2007</a> <br/> Wed, 20 Jul 2011 23:58:00 +0200 http://secdocs.lonerunners.net/documents/details/3882-heap-feng-shui-in-javascript http://secdocs.lonerunners.net/documents/details/3882-heap-feng-shui-in-javascript <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/152-browser">browser</a> <a href="http://secdocs.lonerunners.net/tags/details/273-javascript">Javascript</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/68-black-hat-usa-2007">Black Hat USA 2007</a> <br/> Sun, 19 Jun 2011 21:24:10 +0200 http://secdocs.lonerunners.net/documents/details/3829-heap-feng-shui-in-javascript http://secdocs.lonerunners.net/documents/details/3829-heap-feng-shui-in-javascript <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/152-browser">browser</a> <a href="http://secdocs.lonerunners.net/tags/details/273-javascript">Javascript</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/68-black-hat-usa-2007">Black Hat USA 2007</a> <br/> Sun, 19 Jun 2011 21:23:38 +0200 http://secdocs.lonerunners.net/documents/details/3828-heap-feng-shui-in-javascript http://secdocs.lonerunners.net/documents/details/3828-heap-feng-shui-in-javascript <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <a href="http://secdocs.lonerunners.net/authors/details/460-mark-dowd">Mark Dowd</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/50-memory">memory</a> <a href="http://secdocs.lonerunners.net/tags/details/83-exploiting">exploiting</a> <a href="http://secdocs.lonerunners.net/tags/details/152-browser">browser</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/42-black-hat-usa-2008">Black Hat USA 2008</a> <br/> Mon, 02 Aug 2010 06:12:14 +0200 http://secdocs.lonerunners.net/documents/details/2765-how-to-impress-girls-with-browser-memory-protection-bypasses http://secdocs.lonerunners.net/documents/details/2765-how-to-impress-girls-with-browser-memory-protection-bypasses <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <a href="http://secdocs.lonerunners.net/authors/details/460-mark-dowd">Mark Dowd</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/50-memory">memory</a> <a href="http://secdocs.lonerunners.net/tags/details/83-exploiting">exploiting</a> <a href="http://secdocs.lonerunners.net/tags/details/152-browser">browser</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/42-black-hat-usa-2008">Black Hat USA 2008</a> <br/> Mon, 02 Aug 2010 06:12:11 +0200 http://secdocs.lonerunners.net/documents/details/2764-how-to-impress-girls-with-browser-memory-protection-bypasses http://secdocs.lonerunners.net/documents/details/2764-how-to-impress-girls-with-browser-memory-protection-bypasses <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <a href="http://secdocs.lonerunners.net/authors/details/460-mark-dowd">Mark Dowd</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/50-memory">memory</a> <a href="http://secdocs.lonerunners.net/tags/details/83-exploiting">exploiting</a> <a href="http://secdocs.lonerunners.net/tags/details/152-browser">browser</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/42-black-hat-usa-2008">Black Hat USA 2008</a> <br/> Sun, 01 Aug 2010 06:11:40 +0200 http://secdocs.lonerunners.net/documents/details/2763-how-to-impress-girls-with-browser-memory-protection-bypasses http://secdocs.lonerunners.net/documents/details/2763-how-to-impress-girls-with-browser-memory-protection-bypasses <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <a href="http://secdocs.lonerunners.net/authors/details/460-mark-dowd">Mark Dowd</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/50-memory">memory</a> <a href="http://secdocs.lonerunners.net/tags/details/83-exploiting">exploiting</a> <a href="http://secdocs.lonerunners.net/tags/details/152-browser">browser</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/42-black-hat-usa-2008">Black Hat USA 2008</a> <br/> Sun, 01 Aug 2010 06:11:39 +0200 http://secdocs.lonerunners.net/documents/details/2762-how-to-impress-girls-with-browser-memory-protection-bypasses http://secdocs.lonerunners.net/documents/details/2762-how-to-impress-girls-with-browser-memory-protection-bypasses <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/27-buffer-overflow">buffer overflow</a> <a href="http://secdocs.lonerunners.net/tags/details/45-windows">Windows</a> <a href="http://secdocs.lonerunners.net/tags/details/50-memory">memory</a> <a href="http://secdocs.lonerunners.net/tags/details/83-exploiting">exploiting</a> <a href="http://secdocs.lonerunners.net/tags/details/315-windows-7">Windows 7</a> <br/> Mon, 14 Dec 2009 11:45:00 +0100 http://secdocs.lonerunners.net/documents/details/1759-is-exploitation-over-bypassing-memory-protections-in-windows-7 http://secdocs.lonerunners.net/documents/details/1759-is-exploitation-over-bypassing-memory-protections-in-windows-7 <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <a href="http://secdocs.lonerunners.net/authors/details/502-mike-zusman">Mike Zusman</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/93-x509">X.509</a> <a href="http://secdocs.lonerunners.net/tags/details/246-ssl">SSL</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/30-black-hat-usa-2009">Black Hat USA 2009</a> <br/> Tue, 22 Sep 2009 02:22:00 +0200 http://secdocs.lonerunners.net/documents/details/1312-breaking-the-security-myths-of-extended-validation-ssl-certificates http://secdocs.lonerunners.net/documents/details/1312-breaking-the-security-myths-of-extended-validation-ssl-certificates <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <a href="http://secdocs.lonerunners.net/authors/details/502-mike-zusman">Mike Zusman</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/93-x509">X.509</a> <a href="http://secdocs.lonerunners.net/tags/details/246-ssl">SSL</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/30-black-hat-usa-2009">Black Hat USA 2009</a> <br/> Tue, 22 Sep 2009 02:20:00 +0200 http://secdocs.lonerunners.net/documents/details/1311-breaking-the-security-myths-of-extended-validation-ssl-certificates http://secdocs.lonerunners.net/documents/details/1311-breaking-the-security-myths-of-extended-validation-ssl-certificates <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/5-security">security</a> <a href="http://secdocs.lonerunners.net/tags/details/162-xss">XSS</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/22-recon-2008">REcon 2008</a> <br/><b>Abstract</b>: Many of us limit ourselves to what we already know and don't look for new challanges. I've spent a long time reversing x86 code, but there are a lot of other interesting targets out there. Cross site scripting vulnerabilities and web security in general are perceived to not be interesting enough for hardcode reversers, but this talk aims to dispel this notion. We all know that web apps are the future, but where do we, reversers, fit in this brave new world? I will present the challanges of blackbox reversing and the beauty of reconstructing complicated algorithms based on nothing but some well chosen inputs and outputs. I will demonstrate the tools I've written to make this easier and perhaps drop a few 0days as well :-) Wed, 22 Apr 2009 03:18:00 +0200 http://secdocs.lonerunners.net/documents/details/778-blackbox-reversing-of-xss-filters http://secdocs.lonerunners.net/documents/details/778-blackbox-reversing-of-xss-filters <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/5-security">security</a> <a href="http://secdocs.lonerunners.net/tags/details/162-xss">XSS</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/22-recon-2008">REcon 2008</a> <br/><b>Abstract</b>: Many of us limit ourselves to what we already know and don't look for new challanges. I've spent a long time reversing x86 code, but there are a lot of other interesting targets out there. Cross site scripting vulnerabilities and web security in general are perceived to not be interesting enough for hardcode reversers, but this talk aims to dispel this notion. We all know that web apps are the future, but where do we, reversers, fit in this brave new world? I will present the challanges of blackbox reversing and the beauty of reconstructing complicated algorithms based on nothing but some well chosen inputs and outputs. I will demonstrate the tools I've written to make this easier and perhaps drop a few 0days as well :-) Wed, 22 Apr 2009 03:18:00 +0200 http://secdocs.lonerunners.net/documents/details/779-blackbox-reversing-of-xss-filters http://secdocs.lonerunners.net/documents/details/779-blackbox-reversing-of-xss-filters <b>Authors</b>: <a href="http://secdocs.lonerunners.net/authors/details/83-alexander-sotirov">Alexander Sotirov</a> <br/><b>Tags</b>: <a href="http://secdocs.lonerunners.net/tags/details/51-vulnerability">vulnerability</a> <a href="http://secdocs.lonerunners.net/tags/details/246-ssl">SSL</a> <br/><b>Event</b>: <a href="http://secdocs.lonerunners.net/events/details/12-chaos-communication-congress-25th-25c3-2008">Chaos Communication Congress 25th (25C3) 2008</a> <br/> Wed, 28 Jan 2009 14:24:00 +0100 http://secdocs.lonerunners.net/documents/details/373-md5-considered-harmful-today http://secdocs.lonerunners.net/documents/details/373-md5-considered-harmful-today