ePsiLoN's Information Security Blog

Year: 2014

Autodafe fuzzer compile fix
ePsiLoN
12/18/2014
Security tools
I wanted to take a look at an old fuzzer called AutoDafe because its name popped up in several papers I read in regards to protocol and file formats fuzzing. The last version is from August 2006 which is far back in time, but still – it might be worthy looking at. It is available…
Maritime Cybersecurity Mind Map
ePsiLoN
11/26/2014
Learning and Information Security Career Development
Recently I have been researching the cyber threats in the maritime industry, what has been done and which areas are not well investigated. I have summarised the initial recon in this field in a mind map – not very accurate and may be could benefit some improvements but putting it out there. MaritimeCyberSecurity_v2
Stack canaries cartoon
ePsiLoN
11/07/2014
Random
Lately I have been busy studying different buffer overflow protection mechanisms and while reading about stack canaries a funny picture came to my mind. I am visual person and drawing things help me remember. Here is my stack canary drawing 😉
DLink dir655 rev B firmware reverse engineering – part 1
ePsiLoN
09/08/2014
Malware and Reverse Engineering
Intro Recently I stumbled upon Paul dot com blog post Reverse Engineering Firmware Primer and decided to see if I could repeat the process and to test my newly installed Debian VM packed with RE tools. Here is my take on the task. To repeat the steps one generally needs binwalk and cpio. Walk through…
Setting up capstone (Debian Wheezy)
ePsiLoN
09/07/2014
Malware and Reverse Engineering
Intro Recently I’ve decided to dedicate a fresh Debian environment for my RE tools and having binwalk seemed as a good idea so I can play with firmware binaries. I followed the general install instructions from the project wiki and it seemed that all the dependencies were installed. On starting the executable however I got…
Practical Reverse Engineering Exercises – Ch1-Ex2 – Write-Up
ePsiLoN
07/17/2014
Malware and Reverse Engineering
Intro This is the second post of a blog series following my progress with the “Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation”, Bruce Dang, Alexandre Gazet, Elias Bachaalany, Sebastien Josse, ISBN: 978-1-118-78731-1. The book includes number of exercises and the authors encourage the people to blog their solutions. The solutions…
Practical Reverse Engineering Exercises – Ch1-Ex1 – Write-Up
ePsiLoN
07/07/2014
Malware and Reverse Engineering
Intro This is the first post of what should be a blog series following my progress with the “Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation”, Bruce Dang, Alexandre Gazet, Elias Bachaalany, Sebastien Josse, ISBN: 978-1-118-78731-1. The book includes number of exercises and the authors encourage the people to blog their…
D3 experiments: Simple vulnerability summary representation
ePsiLoN
04/28/2014
Random
19 May Update I have improved a bit the host representation. Digging into d3 capabilities found several very useful capabilities like scales. Also utilising jQuery tipsy for nice hover text info display. That lead to v0.2 which could be found here. My first d3 experiment I have started experimenting with data visualisation recently using d3…
Nice Software Vulnerability Management white paper by Chad Butler – Mind maps
ePsiLoN
03/21/2014
Information Security Management and Governance, Learning and Information Security Career Development
Your external security consultant just sent you the vulnerability report from the last test you ordered? What shall you do with all those findings and how to successfully communicate with the concerned parties? What could go wrong and why?