jetlib.sec » Tags » vulnerability-analysis

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

10 items tagged "vulnerability analysis"

Related tags: txt [+], reverse engineering [+], paris [+], hes [+], france [+], engineering research [+], cfp [+], tomcat [+], hash collision [+], denial [+], apache tomcat [+], apache [+], vulnerability [+], analysis [+], video introduction [+], video [+], victim [+], system [+], presentation [+], network trace [+], exploitation techniques [+], drew copley [+], copley [+], black hat [+], binaries [+], ars [+], angel recon [+], andrzej dereszowski [+]

• January 17, 2012
• 16:29

  Apache Tomcat Large Number Denial Of Service

   » ‎ Packet Storm Security Advisories
  Apache Tomcat versions 7.0.0 through 7.0.22, 6.0.0 through 6.0.33 and 5.5.0 through 5.5.34 suffer from a denial of service vulnerability. Analysis of the recent hash collision vulnerability identified unrelated inefficiencies with Apache Tomcat's handling of large numbers of parameters and parameter values. These inefficiencies could allow an attacker, via a specially crafted request, to cause large amounts of CPU to be used which in turn could create a denial of service. The issue was addressed by modifying the Tomcat parameter handling code to efficiently process large numbers of parameters and parameter values.

  Tags:  tomcat denial apache hash-collision apache-tomcat vulnerability-analysis  

• 16:29

  Apache Tomcat Large Number Denial Of Service

   » ‎ Packet Storm Security Recent Files
  Apache Tomcat versions 7.0.0 through 7.0.22, 6.0.0 through 6.0.33 and 5.5.0 through 5.5.34 suffer from a denial of service vulnerability. Analysis of the recent hash collision vulnerability identified unrelated inefficiencies with Apache Tomcat's handling of large numbers of parameters and parameter values. These inefficiencies could allow an attacker, via a specially crafted request, to cause large amounts of CPU to be used which in turn could create a denial of service. The issue was addressed by modifying the Tomcat parameter handling code to efficiently process large numbers of parameters and parameter values.

  Tags:  tomcat denial apache hash-collision apache-tomcat vulnerability-analysis  

• 16:29

  Apache Tomcat Large Number Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  Apache Tomcat versions 7.0.0 through 7.0.22, 6.0.0 through 6.0.33 and 5.5.0 through 5.5.34 suffer from a denial of service vulnerability. Analysis of the recent hash collision vulnerability identified unrelated inefficiencies with Apache Tomcat's handling of large numbers of parameters and parameter values. These inefficiencies could allow an attacker, via a specially crafted request, to cause large amounts of CPU to be used which in turn could create a denial of service. The issue was addressed by modifying the Tomcat parameter handling code to efficiently process large numbers of parameters and parameter values.

  Tags:  tomcat denial apache hash-collision apache-tomcat vulnerability-analysis  

• January 16, 2012
• 21:33

  [Slides] Angel Recon System (ARS) Prototype: Heuristic Vulnerability Analysis and Attack

   » ‎ SecDocs
  Authors: Drew Copley
  Tags: vulnerability
  Event: Black Hat Federal 2006
  

  Tags:  system vulnerability ars angel-recon drew-copley vulnerability-analysis black-hat copley  

• November 19, 2010
• 10:46

  [Video] Introduction to Vulnerability Analysis

   » ‎ SecDocs
  Tags: vulnerability
  Event: PhreakNIC 11
  Abstract: This presentation will cover the basics of vulnerability analysis. It will cover topics ranging from reading a public advisory, to analyzing binaries, and finally identifying the location of the problem. An overview of various tools used and how to use them in tracking down a bug will also be given.

  Tags:  video vulnerability analysis vulnerability-analysis video-introduction binaries  

• November 08, 2010
• 19:02

  HES2011-CFP.txt

   » ‎ Packet Storm Security Misc. Files
  The Hackito Ergo Sum 2011 Call For Papers has been announced. It will be held from April 7th to the 9th, 2011 in Paris, France. HES2011 will be a bigger event with even more talks, focusing on hardcore computer and network security, insecurity, vulnerability analysis, reverse engineering, research and hacking, and will try to keep the high quality content.

  Tags:  txt hes cfp paris france vulnerability-analysis engineering-research reverse-engineering  

• 19:02

  HES2011-CFP.txt

   » ‎ Packet Storm Security Recent Files
  The Hackito Ergo Sum 2011 Call For Papers has been announced. It will be held from April 7th to the 9th, 2011 in Paris, France. HES2011 will be a bigger event with even more talks, focusing on hardcore computer and network security, insecurity, vulnerability analysis, reverse engineering, research and hacking, and will try to keep the high quality content.

  Tags:  txt hes cfp paris france vulnerability-analysis engineering-research reverse-engineering  

• June 17, 2010
• 2:00

  [Slides] Targeted attacks: from being a victim to counter attacking

   » ‎ SecDocs
  Authors: Andrzej Dereszowski
  Tags: malware exploiting browser malware analysis
  Event: Black Hat EU 2010
  Abstract: This presentation is an analysis of a common sort of targeted attacks performed nowadays against many organizations. As it turns out, publicly available remote access tools - RAT (which we usually call trojans) are frequently used to maintain control over the victim after a successful penetration. The presentation and the white paper do not focus on a particular exploitation techniques used in these attacks. Instead, they aim to get a closer look at one of the most popular remote access trojans. The presentation describes a way to figure out which particular trojan has been used. It shows the architecture, capabilities and techniques employed by developers of the identified trojan, including mechanisms to hide its presence in the system, and to cover its network trace. It speaks about tools and techniques used to perform this analysis. Finally, it presents a vulnerability analysis and a proof of concept exploit to show that the intruders could also be an object of an attack.

  Tags:  analysis victim presentation andrzej-dereszowski vulnerability-analysis exploitation-techniques network-trace  

• February 04, 2010
• 0:00

  HES2010-CFP.txt

   » ‎ Packet Storm Security Misc. Files
  The Hackito Ergo Sum 2010 Call For Papers has been announced. It will be held from April 8th to 10th, 2010 in Paris, France. HES2010 will focus on hardcore computer security, insecurity, vulnerability analysis, reverse engineering, research and hacking.

  Tags:  txt hes cfp paris france vulnerability-analysis engineering-research reverse-engineering  

• 0:00

  HES2010-CFP.txt

   » ‎ Packet Storm Security Recent Files
  The Hackito Ergo Sum 2010 Call For Papers has been announced. It will be held from April 8th to 10th, 2010 in Paris, France. HES2010 will focus on hardcore computer security, insecurity, vulnerability analysis, reverse engineering, research and hacking.

  Tags:  txt hes cfp paris france vulnerability-analysis engineering-research reverse-engineering