Practical Reverse Engineering Exercises – Ch1-Ex2 – Write-Up
Intro This is the second post of a blog series following my progress with the “Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation”, Bruce Dang, Alexandre Gazet, Elias Bachaalany, Sebastien Josse, ISBN: 978-1-118-78731-1. The book includes number of exercises and the authors encourage the people to blog their solutions. The solutions…
Practical Reverse Engineering Exercises – Ch1-Ex1 – Write-Up
Intro This is the first post of what should be a blog series following my progress with the “Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation”, Bruce Dang, Alexandre Gazet, Elias Bachaalany, Sebastien Josse, ISBN: 978-1-118-78731-1. The book includes number of exercises and the authors encourage the people to blog their…
D3 experiments: Simple vulnerability summary representation
19 May Update I have improved a bit the host representation. Digging into d3 capabilities found several very useful capabilities like scales. Also utilising jQuery tipsy for nice hover text info display. That lead to v0.2 which could be found here. My first d3 experiment I have started experimenting with data visualisation recently using d3…
Information Security Management and Governance, Learning and Information Security Career DevelopmentNice Software Vulnerability Management white paper by Chad Butler – Mind maps
Your external security consultant just sent you the vulnerability report from the last test you ordered? What shall you do with all those findings and how to successfully communicate with the concerned parties? What could go wrong and why?
How to emulate Gaussian blur in iDraw
I am sorry but this is not a security related blog post. However I still consider some workarounds as “life hacks” and if someone could benefit the shared info I will be most than happy. I recently started using iDraw and while working on some of my old drawings made with InkSkape I have noticed…
Cool visualisation ideas
I have always admired people that could represent complex ideas in a simple way or have come up with ideas to visualise complex/big data in a graspable manner. Here is my personal collection of cool visualisations. If you have anything cool in your own collection, please drop me a line Enjoy! Internet map
Vulnerable web applications to play with
This is just a list with applicaitons and frameworks out there that could be used to test your web application pentesting kung fu skills or to test your automated tools. I am trying to keep copy of those with me, because projects tend to die. So if you find that some of the links is…
Doxygen & PHP static code analysis call graphs
This post is more to document my own “discovery” and not to get into the loop of researching the same topic again and again. And if someone finds it helpful its great. I was searching for PHP static code analysis tools that generate call graphs and for my surprise the tool that I found most useful…
Fix the problem, not just point at it – thoughts on the “bug hunting” initiatives etc.
I have been thinking a lot about the fact that the panetesting, sourco code reviews and all those security assurance problems just point out the problem. Fixing the discovered application security issue however is a prerogative of the developers which unfortunately are still lacking security expertise. Bug hunters and zero days discoverers have been long…
Visualise your Apache logs with logstalgia
Couple of days ago a colleague of mine (thanks DL) got my attention with a lovely web server access log visualization tool called “logstalgia” (opensource c++ project). Well you can read the description by yourself on the project site but with few words – it gives you the amusing option to “play” your Apache or…
