< Back to JetLib.com

paper

Feeds

268060 items (17 unread) in 27 feeds

« Expand/Collapse

307 items tagged "paper"

Skip to page: 1 2

December 29, 2012
7:08
[Audio] The Lastest in Paper Tripping, False Identity, and How to REALLY Not Be Found
» ‎ SecDocs

Authors: John Q. Newman
Tags: privacy
Event: DEFCON 6

Tags: audio lastest paper john-q.-newman john-q-newman privacy-event false-identity
December 07, 2012
13:21
[Audio] The paper trail of identity documents and what you can do about it. General Q&A
» ‎ SecDocs

Authors: John Q. Newman
Tags: identity management
Event: DEFCON 3

Tags: audio paper identity john-q.-newman john-q-newman management-event
November 28, 2012
21:31
[Paper] Vector Rewrite Attack
» ‎ SecDocs

Authors: Barnaby Jack
Tags: vulnerability
Event: CanSecWest 2007

Tags: vector rewrite paper barnaby-jack-tags vulnerability
November 25, 2012
13:37
[Paper] Everywhere there are people, there are access points...
» ‎ SecDocs

Authors: Andrew Daviel
Tags: wireless
Event: CanSecWest 2005

Tags: access authors paper andrew-daviel access-points wireless-event

November 05, 2012
20:41
Sophail: Applied Attacks Against Sophos Antivirus
» ‎ Packet Storm Security Recent Files

By design, antivirus products introduce a vast attack surface to a hostile environment. The vendors of these products have a responsibility to uphold the highest secure development standards possible to minimize the potential for harm caused by their software. This second paper in a series on Sophos internals applies the results previously presented to assess the increased threat Sophos customers face. This paper is intended for a technical audience, and describes the process a sophisticated attacker would take when targeting Sophos users.
Tags: sophail paper sophos sophisticated-attacker technical-audience antivirus-products

20:41
Sophail: Applied Attacks Against Sophos Antivirus
» ‎ Packet Storm Security Misc. Files

By design, antivirus products introduce a vast attack surface to a hostile environment. The vendors of these products have a responsibility to uphold the highest secure development standards possible to minimize the potential for harm caused by their software. This second paper in a series on Sophos internals applies the results previously presented to assess the increased threat Sophos customers face. This paper is intended for a technical audience, and describes the process a sophisticated attacker would take when targeting Sophos users.
Tags: sophail paper sophos sophisticated-attacker technical-audience antivirus-products

20:01
Russian Underground 101
» ‎ Packet Storm Security Recent Files

This research paper intends to provide a brief summary of the cybercriminal underground and shed light on the basic types of hacker activity in Russia. The bulk of the information in this paper was based on data gathered from online forums and services used by Russian cybercriminals. The authors also relied on articles written by hackers on their activities, the computer threats they create, and the kind of information they post on forums’ shopping sites.
Tags: paper russian information russia hacker-activity computer-threats brief-summary

20:01
Russian Underground 101
» ‎ Packet Storm Security Misc. Files

This research paper intends to provide a brief summary of the cybercriminal underground and shed light on the basic types of hacker activity in Russia. The bulk of the information in this paper was based on data gathered from online forums and services used by Russian cybercriminals. The authors also relied on articles written by hackers on their activities, the computer threats they create, and the kind of information they post on forums’ shopping sites.
Tags: paper russian information russia hacker-activity computer-threats brief-summary

October 26, 2012
14:01
Draw your own vinyl beats
» ‎ Hack a Day

The Dyskograf lets you make music with a magic marker. The musical installation looks much like a turntable for playing vinyl records. But instead of a spiraling groove containing the sounds, this uses marks on a paper disk to play sound samples. You can see the light outline of several tracks on the paper [...]
Tags: draw vinyl paper magic-marker vinyl-records sound-samples musical hacks

October 16, 2012
12:43
[Paper] Counterattack: Turning the tables on exploitation attempts from tools like Metasploit
» ‎ SecDocs

Authors: Matthew Weeks
Tags: vulnerability
Event: Black Hat DC 2011
Abstract: In hostile networks, most people hope their con kung-fu is good enough to avoid getting owned. But for everyone who has ever wanted to reverse the attack, not getting owned is not enough. We will see how it is often possible for the intended victim to not only confuse and frustrate the attacker, but actually trade places and own the attacker. This talk will detail vulnerabilities in security tools, how these vulnerabilities were discovered, factors increasing the number of vulnerable systems, how the exploits work, creating cross-platform payloads, and how to defend yourself whether attacking or counterattacking. The audience will be invited to participate as complete exploit code will be released and demonstrated against the Metasploit Framework itself.
Tags: attacker metasploit paper matthew-weeks hostile-networks metasploit-framework
October 15, 2012
21:55
[Paper] Your cloud in my pocket
» ‎ SecDocs

Authors: Matthieu Suiche
Tags: cloud computing
Event: Black Hat DC 2011
Abstract: LiveCloudKd makes possible to debug live Microsoft Hyper-V and VMWare Workstation virtual machines without having to enable the debug mode. With read+write access on the memory.
Tags: debug cloud paper virtual-machines black-hat workstation
12:54
[Paper] How to Steal Nuclear Warheads Without Voiding Your Xbox Warranty
» ‎ SecDocs

Authors: Eric Michaud Jamie Schwettmann
Tags: hardware hacking
Event: Black Hat DC 2011
Abstract: We will present the common elements and basic mechanisms of modern tamper-evident seals, tags, and labels, with emphasis on attack and circumvention. Adhesive seals, crimp seals, wire wraps, fiber optic seals, electronic, chemical, biological, and make-shift seals will be dissected, examined, and explained, with emphasis on their shortcomings and circumvention techniques. We will also present an overview of typical applications for tags, seals, and labels, including covert traps and uses ranging from consumer goods to loss reduction to government secrets.
Tags: emphasis circumvention paper eric-michaud jamie-schwettmann evident-seals nuclear-warheads
October 10, 2012
21:51
[Paper] Anti-Honeypot Technology
» ‎ SecDocs

Authors: Thorsten Holz
Tags: honeypot
Event: Chaos Communication Congress 21th (21C3) 2004
Abstract: Current Honeypot-based tools have a huge disadvantage: Attackers can detect honeypots with simple techniques and are to some extent also able to circumvent and disable the logging mechanisms. On the basis of some examples, we will show methods for attackers to play with honeypots. Honeypots / Honeynets are one of the more recent toys in the white-hat arsenal. These tools are usually assumed to be hard to detect and attempts to detect or disable them can be unconditionally monitored. The talk sheds some light on how attackers usually behave when they want to defeat honeypots. We will encompass the process of identifying and circumventing current honeypot technology and demonstrate several ways to achieve this. The focus will be on Sebek-based honeypots, but we will also show some ways how to accomplish similar results on different honeypot-architectures. Upon completion of this lecture, the attendees will have some insight in the limitations of current honeypot technology. Individuals or organization that would like to setup or harden their own lines of deception-based defense with the help of honeypots will see some constraints on the reliability and stealthiness of honeypots. On the other side, people with more offensive mindsets will get several ideas on how to identify and exploit honeypots.
Tags: technology honeypot paper thorsten-holz chaos-communication-congress logging-mechanisms technology-authors
October 08, 2012
21:28
[Paper] State of Emergent Democracy
» ‎ SecDocs

Authors: Joi Ito
Tags: social
Event: Chaos Communication Congress 21th (21C3) 2004
Abstract: Since I started my first web site 10 years ago, we've moved from a vision of cyber-utopia to the lust of the bubble, to bust and back to a cautious optimism. Two years after writing my somewhat optimistic paper on Emergent Democracy we've seen blogs challenge the mass media, Wikipedia challenge the authority of encyclopedias and an American election heavily influenced by the Internet. I will speak about the impact that blogging and other social software is having on politics and free speech, and will discuss the US elections in this context. At the dawn of the Internet, visionaries such as John Perry Barlow wrote about cyberspace challenging the sovereignty of the nation-state. We envisioned a kind of cyber-utopia which, to begin with, we thought we were making real. In a mad rush people flowed into the Internet, but the money they brought with them corrupted its open and collaborative nature. After the bubble burst, the money left and many people revisted the open, peer-to-peer nature of the Internet. (Indeed, some had never left.) Many of the original dreams of the Internet were naïve, but with the benefit of hindsight, the maturing of open standards and the increased penetration of the Internet, a new generation of social software such as wikis and blogs are creating the conversations and dialog that we had hoped for 10 years ago. On the other hand, as the Internet becomes an increasingly critical part of the economy, governments feel that they must become involved in its governance in order to protect the public interest. The age of mass media has crushed diversity and created a shallow culture. In particular, the focus of politics has been on voting, not deliberation or debate. As the Internet begins to provide people with a way to reach a wider community, it becomes increasingly clear that having a voice is more important than having a vote. People tend to over-estimate the short-term potential of new technologies and under-estimate the long-term potential. I will argue that although we are at risk of the Internet turning into yet another regulated channel, we have the ability to both prevent that and reverse the damage on culture and politics caused by monopolistic media.
Tags: internet emergent paper john-perry-barlow chaos-communication-congress internet-visionaries
October 03, 2012
9:41
[Paper] Free Software in South America
» ‎ SecDocs

Authors: Josef Spillner
Tags: Linux
Event: Chaos Communication Congress 21th (21C3) 2004
Abstract: Overview about the young and still developing Free Software scene in South and Latin America (mostly Brazil), ways to achieve independence of existing structures, and some specific projects. While in Germany people still talk about the ongoing partial migration in Munich, which is mostly in the hands of only few companies, other places have advanced some more already: where interested citizens are part of IT migrations in both companies and organizations. Not only is this a cultural difference, but also gives all hackers the possibility to block decisions heading the wrong way, and to integrate their own perspective.
Tags: free Software paper germany latin-america munich south-america chaos-communication-congress software-scene abstract-overview

September 26, 2012
10:01
Astounding papercraft skills result in this working robot
» ‎ Hack a Day

It would have been very hard to believe this is made from paper if we hadn’t seen all the parts being built. As a still image it looks neat, but the speed at which those paper gears turn in the video after the break will certainly leave you slack-jawed. It really is a walking robot [...]
Tags: astounding robot paper walking-robot still-image gears misc hacks

September 24, 2012
9:20
[Paper] WSIS - The Review
» ‎ SecDocs

Authors: Markus Beckedahl Ralf Bendrath Robert Guerra
Tags: social
Event: Chaos Communication Congress 22th (22C3) 2005

Tags: wsis review paper markus-beckedahl ralf-bendrath robert-guerra chaos-communication-congress ralf
September 14, 2012
10:30
[Paper] Autodafé: An Act of Software Torture
» ‎ SecDocs

Authors: Martin Vuagnoux
Tags: fuzzing
Event: Chaos Communication Congress 22th (22C3) 2005
Abstract: Automated vulnerability searching tools have led to a dramatic increase of the rate at which such flaws are discovered. One particular searching technique is fault injection – i.e. insertion of random data into input files, buffers or protocol packets, combined with a systematic monitoring of memory violations. Even if these tools allow to uncover a lot of vulnerabilities, they are still very primitive; despite their poor efficiency, they are useful because of the very high density of such vulnerabilities in modern software. This paper presents an innovative buffer overflow uncovering technique, which uses a more thorough and reliable approach. This technique, called "fuzzing by weighting attacks with markers", is a specialized kind of fault injection, which does not need source code or special compilation for the monitored program. As a proof of concept of the efficiency of this technique, a tool called Autodafé has been developed. It allows to detect automatically an impressive number of buffer overflow vulnerabilities.
Tags: autodaf paper technique martin-vuagnoux chaos-communication-congress buffer-overflow-vulnerabilities poor-efficiency
September 06, 2012
21:38
[Paper] Developing Intelligent Search Engines
» ‎ SecDocs

Authors: Isabel Drost
Tags: search engine
Event: Chaos Communication Congress 22th (22C3) 2005
Abstract: The presentation will give a short overview of the architecture of search engines and how machine learning can help improving search engines. In addition some projects you can take part in will be briefly introduced. Developers of search engines today do not only face technical problems such as designing an efficient crawler or distributing search requests among servers. Search has become a problem of identifying reliable information in an adversarial environment. Since the web is used for purposes as diverse as trade, communication, and advertisement search engines need to be able to distinguish different types of web pages. In this paper we describe some common properties of the WWW and social networks. We show one possibility of exploiting these properties for classifying web pages.
Tags: web search paper isabel-drost chaos-communication-congress intelligent-search-engines adversarial-environment
September 03, 2012
21:38
[Video] The grey commons
» ‎ SecDocs

Authors: Palle Torsson Rasmus Fleischer
Tags: law
Event: Chaos Communication Congress 22th (22C3) 2005
Abstract: We will have a paper ready until the first of December around the Nordic pirate projects and file shearing scene and its current development. Will we will describe the work of Piratbyran, The Pirate Bay, Piratgruppen and Artliberated. This will be done under the title The Grey Commons where we describe the special approach of temporal constructions that has been developing as a way to uphold the possibility of redistribution. The main issues and themes are talked about in the interview attached with Palle Torsson that will be published in the next issue of Mute. We will use this text as a base for our paper.
Tags: palle paper torsson rasmus-fleischer pirate-bay chaos-communication-congress file-shearing
13:12
[Paper] The grey commons
» ‎ SecDocs

Authors: Palle Torsson Rasmus Fleischer
Tags: law
Event: Chaos Communication Congress 22th (22C3) 2005
Abstract: We will have a paper ready until the first of December around the Nordic pirate projects and file shearing scene and its current development. Will we will describe the work of Piratbyran, The Pirate Bay, Piratgruppen and Artliberated. This will be done under the title The Grey Commons where we describe the special approach of temporal constructions that has been developing as a way to uphold the possibility of redistribution. The main issues and themes are talked about in the interview attached with Palle Torsson that will be published in the next issue of Mute. We will use this text as a base for our paper.
Tags: palle torsson paper rasmus-fleischer pirate-bay chaos-communication-congress file-shearing
13:12
[Slides] The grey commons
» ‎ SecDocs

Authors: Palle Torsson Rasmus Fleischer
Tags: law
Event: Chaos Communication Congress 22th (22C3) 2005
Abstract: We will have a paper ready until the first of December around the Nordic pirate projects and file shearing scene and its current development. Will we will describe the work of Piratbyran, The Pirate Bay, Piratgruppen and Artliberated. This will be done under the title The Grey Commons where we describe the special approach of temporal constructions that has been developing as a way to uphold the possibility of redistribution. The main issues and themes are talked about in the interview attached with Palle Torsson that will be published in the next issue of Mute. We will use this text as a base for our paper.
Tags: palle paper torsson rasmus-fleischer pirate-bay chaos-communication-congress file-shearing
13:12
[Audio] The grey commons
» ‎ SecDocs

Authors: Palle Torsson Rasmus Fleischer
Tags: law
Event: Chaos Communication Congress 22th (22C3) 2005
Abstract: We will have a paper ready until the first of December around the Nordic pirate projects and file shearing scene and its current development. Will we will describe the work of Piratbyran, The Pirate Bay, Piratgruppen and Artliberated. This will be done under the title The Grey Commons where we describe the special approach of temporal constructions that has been developing as a way to uphold the possibility of redistribution. The main issues and themes are talked about in the interview attached with Palle Torsson that will be published in the next issue of Mute. We will use this text as a base for our paper.
Tags: palle paper torsson rasmus-fleischer pirate-bay chaos-communication-congress file-shearing

July 17, 2012
11:01
Make your own magnetic ink
» ‎ Hack a Day

Here [Catarina Mota] is showing off a ring of magnetic ink printed on a piece of paper. It’s strong enough to hold a disc magnet in place when the paper is raised vertically. This strength comes from mixing your own batch of ink. Magnetic ink has been around a long time and is most often [...]
Tags: ink paper ring catarina-mota magnetic-ink piece-of-paper magnet chemistry hacks
July 13, 2012
11:01
Hacking a Brother thermal printer to use non-OEM continuous rolls
» ‎ Hack a Day

You can get your hands on a Brother thermal label printer for $65-75. But if you don’t want to buy the Brother branded continuous feed paper for it you’re out of luck. Unless you pull off this hack which lets you use any thermal paper you want with a Brother QL-500 printer. The printer is [...]
Tags: printer paper brother thermal-label-printer continuous-rolls continuous-feed peripherals hacks

June 27, 2012
7:12
Efficient Padding Oracle Attacks On Cryptographic Hardware
» ‎ Packet Storm Security Recent Files

This paper demonstrates how to exploit the encrypted key import functions of a variety of different cryptographic devices to reveal the imported key. The attacks are padding oracle attacks, where error messages resulting from incorrectly padded plaintexts are used as a side channel. This is the paper that made headlines regarding RSA tokens being cracked in 13 minutes.
Tags: padding oracle paper cryptographic-devices import-functions cryptographic-hardware

7:12
Efficient Padding Oracle Attacks On Cryptographic Hardware
» ‎ Packet Storm Security Misc. Files

This paper demonstrates how to exploit the encrypted key import functions of a variety of different cryptographic devices to reveal the imported key. The attacks are padding oracle attacks, where error messages resulting from incorrectly padded plaintexts are used as a side channel. This is the paper that made headlines regarding RSA tokens being cracked in 13 minutes.
Tags: padding oracle paper cryptographic-devices import-functions cryptographic-hardware
May 30, 2012
17:14
Breaking The Crypt
» ‎ Packet Storm Security Misc. Files

The purpose of this paper is to make the reader aware of various Hash Cracking Techniques ranging from Basic to Advanced. The intended audience for this paper is those who have a basic understanding of hash cracking and password hashing algorithms.
Tags: crypt paper hash hashing-algorithms

May 01, 2012
7:00
Bugtraq: Call for Paper: 3rd Workshop on Security and Privacy in Social Networks
» ‎ SecurityFocus Vulnerabilities

Call for Paper: 3rd Workshop on Security and Privacy in Social Networks
Tags: workshop security paper social-networks

April 23, 2012
13:01
Cabbage haters can turn their leftovers into litmus paper
» ‎ Hack a Day

[William Finucane] is making his own litmus paper by harnessing the power of cabbage. The process is much easier than the faux gunpowder he made, as it take just the one ingredient and a few kitchen tools. In case you’ve forgotten your High School chemistry, Litmus is a set of dyes that change color when [...]
Tags: cabbage paper litmus william-finucane high-school-chemistry litmus-paper finucane chemistry hacks

April 16, 2012
21:41
[Paper] Desktop on the Linux... (and BSD, of course)
» ‎ SecDocs

Authors: Wolfgang Draxinger
Tags: Linux
Event: Chaos Communication Congress 27th (27C3) 2010
Abstract: Time to take a look back and under the hood of the current state of FOSS based desktops: The Good, The Bad and The Ugly – Bloat, strange APIs, too much complexity. The first decade of the 21st century brought huge progress in the development of FOSS Desktop systems. Users can now choose from a broad range of environments, which all adhere to a coherent set of standards. Not to forget that FOSS did even pioneer some GUI technologies which were later adopted by other (read: non free) systems.
Tags: bsd paper linux foss foss-desktop wolfgang-draxinger chaos-communication-congress abstract-time course-authors
April 02, 2012
21:44
[Video] Resilience Towards Leaking or Why Julian Assange Might Be Wrong After All
» ‎ SecDocs

Authors: Kay Hamacher
Tags: privacy
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: In his now (in)famous pamphlet "Conspiracy as Governance" Julian Assange (JA) argues about the need for leaking as an efficient way to destroy "unjust" groups as the neo-feudalistic ones - luring the conspiracy theory leaning hacker community into his belief system. Eventually, JA used a biologistic argument on the benefits and drawbacks that uncontrolled leaking might pose for "just" and "unjust" systems, arriving at the conclusion that "unjust" systems are hurt more and thus will be less viable, essentially being destroyed by more "just" systems. While an innovative proposal, the underlying assumptions on complexity, network theory, and especially the evolutionary perspectives were never critically assessed. Some blogs and media raised questions on details and potential threats to innocent bystanders. Still, fundamental problems with the philosophy were never addressed. This paper argues against the general validity of such theories. In particular, we will refute some of the biologistic arguments. Theoretical biology has long ago pointed out the hidden complexity in evolutionary processes and as such the envisioned "leaking revolution" might be a limited artifact: there might even arise situations where the leaking envisioned and encouraged by Wikileaks and the like can actually strengthen some "conspiracies". In this paper I will describe some research questions, that should be answered before given the “leaking philosophy” an unconditioned “thumbs-up”. Empirically, for example, a potential strengthening is illustrated by the rise of a 'neo-feudalistic economy', which is linked closely to the paradigm of "intellectual property" as it is to the security-financial-political complex. The players have effectively created a closed network or a "conspiracy" and might be resilient towards Wikileaks-like attacks. The paper concludes with an alternative to that proposal; in particular, a way to deal with the 'conspiracy' that might be coined the rise of the neo-feudalistic society (which in itself is a self-sustainable, self-amplifying feedback loop, not necessarily a conscious conspiracy).
Tags: way conspiracy paper julian-assange kay-hamacher chaos-communication-congress innocent-bystanders
21:44
[Paper] Resilience Towards Leaking or Why Julian Assange Might Be Wrong After All
» ‎ SecDocs

Authors: Kay Hamacher
Tags: privacy
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: In his now (in)famous pamphlet "Conspiracy as Governance" Julian Assange (JA) argues about the need for leaking as an efficient way to destroy "unjust" groups as the neo-feudalistic ones - luring the conspiracy theory leaning hacker community into his belief system. Eventually, JA used a biologistic argument on the benefits and drawbacks that uncontrolled leaking might pose for "just" and "unjust" systems, arriving at the conclusion that "unjust" systems are hurt more and thus will be less viable, essentially being destroyed by more "just" systems. While an innovative proposal, the underlying assumptions on complexity, network theory, and especially the evolutionary perspectives were never critically assessed. Some blogs and media raised questions on details and potential threats to innocent bystanders. Still, fundamental problems with the philosophy were never addressed. This paper argues against the general validity of such theories. In particular, we will refute some of the biologistic arguments. Theoretical biology has long ago pointed out the hidden complexity in evolutionary processes and as such the envisioned "leaking revolution" might be a limited artifact: there might even arise situations where the leaking envisioned and encouraged by Wikileaks and the like can actually strengthen some "conspiracies". In this paper I will describe some research questions, that should be answered before given the “leaking philosophy” an unconditioned “thumbs-up”. Empirically, for example, a potential strengthening is illustrated by the rise of a 'neo-feudalistic economy', which is linked closely to the paradigm of "intellectual property" as it is to the security-financial-political complex. The players have effectively created a closed network or a "conspiracy" and might be resilient towards Wikileaks-like attacks. The paper concludes with an alternative to that proposal; in particular, a way to deal with the 'conspiracy' that might be coined the rise of the neo-feudalistic society (which in itself is a self-sustainable, self-amplifying feedback loop, not necessarily a conscious conspiracy).
Tags: way conspiracy paper julian-assange kay-hamacher chaos-communication-congress innocent-bystanders
15:18
[Audio] Resilience Towards Leaking or Why Julian Assange Might Be Wrong After All
» ‎ SecDocs

Authors: Kay Hamacher
Tags: privacy
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: In his now (in)famous pamphlet "Conspiracy as Governance" Julian Assange (JA) argues about the need for leaking as an efficient way to destroy "unjust" groups as the neo-feudalistic ones - luring the conspiracy theory leaning hacker community into his belief system. Eventually, JA used a biologistic argument on the benefits and drawbacks that uncontrolled leaking might pose for "just" and "unjust" systems, arriving at the conclusion that "unjust" systems are hurt more and thus will be less viable, essentially being destroyed by more "just" systems. While an innovative proposal, the underlying assumptions on complexity, network theory, and especially the evolutionary perspectives were never critically assessed. Some blogs and media raised questions on details and potential threats to innocent bystanders. Still, fundamental problems with the philosophy were never addressed. This paper argues against the general validity of such theories. In particular, we will refute some of the biologistic arguments. Theoretical biology has long ago pointed out the hidden complexity in evolutionary processes and as such the envisioned "leaking revolution" might be a limited artifact: there might even arise situations where the leaking envisioned and encouraged by Wikileaks and the like can actually strengthen some "conspiracies". In this paper I will describe some research questions, that should be answered before given the “leaking philosophy” an unconditioned “thumbs-up”. Empirically, for example, a potential strengthening is illustrated by the rise of a 'neo-feudalistic economy', which is linked closely to the paradigm of "intellectual property" as it is to the security-financial-political complex. The players have effectively created a closed network or a "conspiracy" and might be resilient towards Wikileaks-like attacks. The paper concludes with an alternative to that proposal; in particular, a way to deal with the 'conspiracy' that might be coined the rise of the neo-feudalistic society (which in itself is a self-sustainable, self-amplifying feedback loop, not necessarily a conscious conspiracy).
Tags: way conspiracy paper julian-assange kay-hamacher chaos-communication-congress innocent-bystanders
February 21, 2012
21:33
[Paper] The Insecure Workstation II `bob reloaded
» ‎ SecDocs

Authors: Deral Heiland
Tags: Windows
Event: DEFCON 13

Tags: insecure workstation paper
February 20, 2012
21:46
[Paper] Lost in Translation
» ‎ SecDocs

Authors: Christian Grothoff
Tags: steganography
Event: DEFCON 13

Tags: authors translation paper christian-grothoff lost-in-translation
February 19, 2012
21:40
[Paper] Surgical Recovery from Kernel-Level Rootkit Installations
» ‎ SecDocs

Authors: Julian Grizzard
Tags: kernel rootkit
Event: DEFCON 13

Tags: rootkit kernel paper julian-grizzard kernel-level
21:40
[Paper] Top Ten Legal Issues in Computer Security
» ‎ SecDocs

Authors: Jennifer Granick
Tags: law
Event: DEFCON 13

Tags: computer legal paper jennifer-granick security-authors computer-security
February 16, 2012
21:49
[Paper] The Hacker’s Guide to Search and Arrest
» ‎ SecDocs

Authors: Steve Dunker
Tags: social social engineering
Event: DEFCON 13

Tags: hacker guide paper steve-dunker dunker social-engineering
February 15, 2012
21:44
[Paper] Sketchtools: Prototyping Physical Interfaces
» ‎ SecDocs

Authors: Matt Cottam
Tags: hardware hacking
Event: DEFCON 13

Tags: prototyping sketchtools paper matt-cottam physical-interfaces cottam
21:44
[Paper] Countering Denial of Information Attacks
» ‎ SecDocs

Authors: Greg Conti
Tags: security
Event: DEFCON 13

Tags: countering denial paper greg-conti information-attacks security-event
January 30, 2012
21:49
[Paper] DTRACE: The Reverse Engineer's Unexpected Swiss Army Knife
» ‎ SecDocs

Authors: David Weston Tiller Beauchamp
Tags: reverse engineering
Event: Black Hat EU 2008

Tags: dtrace engineer paper david-weston-tiller swiss-army-knife david-weston reverse-engineer
January 29, 2012
21:41
[Paper] Hacking Second Life
» ‎ SecDocs

Authors: Michael Thumann
Tags: Second Life
Event: Black Hat EU 2008

Tags: life second paper michael-thumann second-life black-hat
21:41
[Paper] Exposing Vulnerabilities in Media Software
» ‎ SecDocs

Authors: David Thiel
Tags: vulnerability
Event: Black Hat EU 2008

Tags: vulnerabilities exposing paper david-thiel software-authors black-hat
January 28, 2012
21:51
[Paper] Attacking Anti-Virus
» ‎ SecDocs

Authors: Feng Xue
Tags: antivirus
Event: Black Hat EU 2008

Tags: attacking anti paper feng-xue virus-authors black-hat anti-virus
21:51
[Paper] Client-side Security
» ‎ SecDocs

Authors: Petko d. Petkov
Tags: client side
Event: Black Hat EU 2008

Tags: client-side security paper security-authors petkov black-hat
6:41
[Paper] The Fundamentals of Physical Security
» ‎ SecDocs

Authors: Deviant Ollam
Tags: physical security lockpicking
Event: Black Hat EU 2008

Tags: fundamentals security paper security-authors physical-security black-hat
January 27, 2012
21:52
[Paper] Developments in Cisco IOS Forensics
» ‎ SecDocs

Authors: Felix 'FX' Lindner
Tags: Cisco
Event: Black Hat EU 2008

Tags: authors forensics paper felix cisco-event cisco-ios black-hat lindner
21:52
[Paper] Biologger - A Biometric Keylogger
» ‎ SecDocs

Authors: Matthew Lewis
Tags: biometric
Event: Black Hat EU 2008

Tags: biologger biometric paper matthew-lewis-tags matthew-lewis black-hat
21:52
[Paper] Intercepting Mobile Phone/GSM Traffic
» ‎ SecDocs

Authors: David Hulton
Tags: GSM
Event: Black Hat EU 2008

Tags: mobile gsm paper david-hulton black-hat mobile-phone
13:43
[Paper] URI Use and Abuse
» ‎ SecDocs

Authors: Billy Rios Nathan McFeters Rob Carter
Tags: URI
Event: Black Hat EU 2008

Tags: abuse authors paper nathan-mcfeters rob-carter-tags uri-event billy-rios uri-use rob-carter black-hat
January 26, 2012
21:49
[Paper] 0-Day Patch -Exposing Vendors (In)Security Performance
» ‎ SecDocs

Authors: Bernard Tellenbach Stefan Frei
Tags: vulnerability
Event: Black Hat EU 2008

Tags: day patch paper bernard-tellenbach stefan-frei black-hat vulnerability
21:49
[Paper] New Viral Threats of PDF Language
» ‎ SecDocs

Authors: Eric Filiol
Tags: malware PDF
Event: Black Hat EU 2008

Tags: new pdf paper eric-filiol viral-threats black-hat
21:49
[Paper] CrackStation
» ‎ SecDocs

Authors: Nick Breese
Tags: cracking
Event: Black Hat EU 2008

Tags: authors crackstation paper nick-breese black-hat
13:49
[Paper] Malware on the Net - Behind the Scenes
» ‎ SecDocs

Authors: Iftach Ian Amit
Tags: malware
Event: Black Hat EU 2008

Tags: malware scenes paper ian-amit-tags black-hat amit
13:41
[Paper] LDAP Injection & Blind LDAP Injection
» ‎ SecDocs

Authors: Chema Alonso José Parada
Tags: authentication
Event: Black Hat EU 2008

Tags: injection ldap paper alonso-jos black-hat alonso authentication
12:56
[Paper] Spam-Evolution
» ‎ SecDocs

Authors: Aseem Jakhar
Tags: spam
Event: Black Hat EU 2008

Tags: evolution spam paper black-hat
January 24, 2012
21:50
[Paper] Analyzing an Unknown RF-Based Data Transmission
» ‎ SecDocs

Authors: Max Moser
Tags: radio
Event: Black Hat DC 2008

Tags: analyzing rf-based paper max-moser black-hat data-transmission moser
21:50
[Paper] (un)Smashing the Stack: Overflows, Countermeasures, and the Real World
» ‎ SecDocs

Authors: Shawn Moyer
Tags: buffer overflow exploiting
Event: Black Hat DC 2008

Tags: smashing stack paper shawn-moyer stack-overflows buffer-overflow world-authors
21:50
[Paper] Exploiting Live Virtual Machine Migration
» ‎ SecDocs

Authors: Jon Oberheide
Tags: virtualization virtual machine
Event: Black Hat DC 2008

Tags: machine exploiting paper jon-oberheide black-hat virtual-machine migration
12:23
[Paper] Preparing for the Cross Site Request Forgery Defense
» ‎ SecDocs

Authors: Chuck Willis
Tags: CSRF
Event: Black Hat DC 2008

Tags: preparing cross paper chuck-willis-tags chuck-willis black-hat forgery
12:20
[Paper] DTRACE: The Reverse Engineer's Unexpected Swiss Army Knife
» ‎ SecDocs

Authors: David Weston Tiller Beauchamp
Tags: reverse engineering
Event: Black Hat DC 2008

Tags: dtrace engineer paper david-weston-tiller swiss-army-knife david-weston reverse-engineer
12:12
[Paper] Classification and Detection of Application Backdoors
» ‎ SecDocs

Authors: Chris Wysopal
Tags: backdoor
Event: Black Hat DC 2008

Tags: detection classification paper chris-wysopal black-hat
January 22, 2012
21:45
[Paper] A Hypervisor IPS based on Hardware Assisted Virtualization Technology
» ‎ SecDocs

Authors: Junichi Murakami
Tags: virtualization IDS
Event: Black Hat Asia 2008

Tags: hypervisor virtualization paper asia technology-authors black-hat
January 20, 2012
21:58
[Paper] Cyberspace and the Changing Nature of Warfare
» ‎ SecDocs

Authors: Kenneth Geers
Tags: warfare
Event: Black Hat Asia 2008

Tags: cyberspace paper warfare kenneth-geers asia geers black-hat
January 18, 2012
21:49
[Paper] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat Federal 2006

Tags: malware symbian paper black-hat
January 15, 2012
21:31
[Paper] Combatting Symbian Malware
» ‎ SecDocs

Authors: Jarno Niemelä
Tags: malware phone
Event: Black Hat EU 2006

Tags: malware symbian paper black-hat
January 13, 2012
21:49
[Paper] How to Automatically Sandbox IIS With Zero False Positive and Negative
» ‎ SecDocs

Authors: Tzi-cker Chiueh
Tags: IIS
Event: Black Hat EU 2006

Tags: automatically iis paper black-hat

January 10, 2012
15:27
Unshredding Paper
» ‎ Hack a Day

[Roel] had read that people won the DARPA shredder challenge, but that their technology was kept a secret, interested in this concept he also remembered an episode of the X-Files where they had reconstructed shredded paper using a computer system. Unlike most computer based TV show BS this did not seem to be too far [...]
Tags: unshredding computer paper shredded-paper roel shredder misc hacks

December 28, 2011
21:38
[Paper] Bluetooth Hacking - Full Disclosure
» ‎ SecDocs

Authors: Adam Laurie Marcel Holtmann Martin Herfurt
Tags: bluetooth
Event: Black Hat EU 2005

Tags: hacking bluetooth paper martin-herfurt adam-laurie-marcel-holtmann marcel-holtmann adam-laurie full-disclosure

December 27, 2011
1:32
Installing I2p On Backtrack
» ‎ Packet Storm Security Recent Files

This is a detailed paper on how to install I2P on BT5 and configure it with some of the features.
Tags: BackTrack paper installing i2p

1:32
Installing I2p On Backtrack
» ‎ Packet Storm Security Misc. Files

This is a detailed paper on how to install I2P on BT5 and configure it with some of the features.
Tags: BackTrack paper installing i2p

December 25, 2011
21:49
[Paper] Stopping Injection Attacks with Computational Theory
» ‎ SecDocs

Authors: Meredith L. Patterson Robert 'Rsnake' Hansen
Tags: security intrusion detection
Event: Black Hat USA 2005

Tags: injection stopping paper l.-patterson robert usa computational-theory intrusion-detection black-hat
December 24, 2011
21:41
[Paper] Remote Windows Kernel Exploitation - Step In To the Ring 0
» ‎ SecDocs

Authors: Barnaby Jack
Tags: Windows kernel
Event: Black Hat USA 2005

Tags: kernel paper windows barnaby-jack-tags usa windows-kernel ring-0 black-hat
December 23, 2011
21:28
[Paper] Shatter-proofing Windows
» ‎ SecDocs

Authors: Tyler Close
Tags: Windows
Event: Black Hat USA 2005

Tags: shatter-proofing paper windows tyler usa black-hat

8:30
Make any scrap of paper sticky with 2000 volts
» ‎ Hack a Day

Who needs chemistry when a little bit of physics will do? Instead of brewing up a batch of weak adhesive to make his own post-it notes, [Valentin] built this handheld device to add an electrostatic charge to bits of paper. Just give them a couple of seconds to charge and they’ll stick to the wall [...]
Tags: scrap paper chemistry valentin electrostatic-charge handheld-device volts misc hacks

December 21, 2011
21:30
[Paper] Legal Aspects of Computer Network Defense
» ‎ SecDocs

Authors: Robert Clark
Tags: law
Event: Black Hat USA 2005

Tags: aspects legal paper robert-clark-tags usa computer-network-defense black-hat legal-aspects
December 15, 2011
11:22
[Paper] Trusted Computing 101
» ‎ SecDocs

Authors: David Blight
Tags: trusted computing
Event: Black Hat Windows Security 2004

Tags: trusted computing paper david-blight black-hat windows-security
December 13, 2011
21:30
[Paper] Windows Heap Overflows
» ‎ SecDocs

Authors: David Litchfield
Tags: heap overflow
Event: Black Hat Windows Security 2004

Tags: heap paper windows david-litchfield black-hat overflows
December 11, 2011
21:43
[Paper] HTTP Fingerprinting and Advanced Assessment Techniques
» ‎ SecDocs

Authors: Saumil Shah
Tags: web server fingerprinting
Event: Black Hat EU 2004

Tags: http fingerprinting paper shah-tags saumil-shah assessment-techniques black-hat
December 10, 2011
21:45
[Paper] Pseudorandom Number Generation, Entropy Harvesting, and Provable Security in Linux
» ‎ SecDocs

Authors: Seth Hardy
Tags: Linux
Event: Black Hat EU 2004

Tags: pseudorandom paper linux seth-hardy number-generation black-hat entropy
December 09, 2011
7:59
[Paper] Hide 'n' Seek? Anatomy of Stealth Malware
» ‎ SecDocs

Authors: Gergely Erdelyi
Tags: malware
Event: Black Hat EU 2004

Tags: anatomy malware paper hide black-hat stealth
December 07, 2011
12:46
[Paper] A Comparison Buffer Overflow Prevention Implementations & Weaknesses
» ‎ SecDocs

Authors: Peter Silberman Richard Johnson
Tags: buffer overflow
Event: Black Hat USA 2004

Tags: buffer overflow paper peter-silberman richard-johnson-tags usa buffer-overflow richard-johnson black-hat
December 03, 2011
21:28
[Paper] You got that with GOOGLE?
» ‎ SecDocs

Authors: Johnny Long
Tags: social engineering
Event: Black Hat USA 2004

Tags: authors google paper johnny-long usa black-hat social-engineering
December 02, 2011
21:25
[Paper] Hacker Court ’04: Pirates of the Potomac
» ‎ SecDocs

Tags: hacking
Event: Black Hat USA 2004

Tags: court hacker paper usa black-hat pirates

10:03
Printable solar cells that can be folded up when not in use
» ‎ Hack a Day

Here’s a photovoltaic cell that can be printed onto paper. The manufacturing technique is almost as simple as using an inkjet printer. The secret is in the ink itself. It takes five layers deposited on the paper in a vacuum chamber. But that’s a heck of a lot easier than current solar cell fabrication practices. [...]
Tags: printable cell paper solar-cell-fabrication fabrication-practices vacuum-chamber green hacks

December 01, 2011
21:25
[Paper] A Historical Look at Hardware Token Compromises
» ‎ SecDocs

Authors: Joe Grand
Tags: hardware hacking
Event: Black Hat USA 2004

Tags: historical Hardware paper joe-grand usa hardware-hacking black-hat
21:25
[Paper] Introduction to Embedded Security
» ‎ SecDocs

Authors: Joe Grand
Tags: embedded
Event: Black Hat USA 2004

Tags: introduction security paper joe-grand usa security-authors black-hat
November 30, 2011
21:53
[Paper] Program Semantics-Aware Intrusion Detection
» ‎ SecDocs

Authors: Tzi-cker Chiueh
Tags: intrusion detection IDS
Event: Black Hat USA 2004

Tags: intrusion detection paper usa program-semantics intrusion-detection black-hat
21:53
[Paper] Evasion and Detection of Web Application Attacks
» ‎ SecDocs

Tags: web application
Event: Black Hat USA 2004

Tags: application web paper usa black-hat web-application evasion
November 29, 2011
21:37
[Paper] Shoot the Messenger
» ‎ SecDocs

Authors: Brett Moore
Tags: Windows
Event: Black Hat USA 2004

Tags: messenger shoot paper moore-tags usa black-hat brett-moore
November 26, 2011
2:26
[Paper] Understanding Hardware Security
» ‎ SecDocs

Authors: Joe Grand
Tags: hardware hacking
Event: Black Hat Asia 2004

Tags: Hardware understanding paper joe-grand asia security-authors hardware-hacking

November 23, 2011
10:01
Gif player does it using paper medium
» ‎ Hack a Day

Ditch that fancy wide-format LCD monitor and go back to the days when animation was made up of moving frames played back by a specialized device. [Pieterjan Grandry] built this gif player which does just that. The frames of the animation are printed on a paper disk. When spun and viewed through a looking hole [...]
Tags: paper player gif paper-medium ditch gif-player video hacks

November 19, 2011
21:44
[Paper] Dynamic Routing Inside IPsec VPNs
» ‎ SecDocs

Authors: Paul Knight
Tags: IPSEC
Event: Black Hat USA 2002

Tags: ipsec dynamic paper paul-knight usa dynamic-routing black-hat
November 17, 2011
21:31
[Paper] Setiri
» ‎ SecDocs

Authors: Haroon Meer Roelof Temmingh
Tags: malware virus
Event: Black Hat USA 2002

Tags: authors setiri paper usa black-hat virus
November 16, 2011
21:50
[Paper] Cisco Router Forensics
» ‎ SecDocs

Authors: Thomas Akin
Tags: forensic Cisco
Event: Black Hat USA 2002

Tags: authors forensics paper cisco-event thomas-akin cisco-router usa black-hat forensic

5:01
Zero-G experiments will make some pretty pictures
» ‎ Hack a Day

Does a yo-yo work in zero-g? How about a paper airplane? These questions were answered in 1985 on the Space Shuttle Discovery, but reproduction of results is the cornerstone of the scientific method. [Rob] is about to reproduce some of the awesome zero-g pictures by riding on a vomit comet and taking a few pictures of [...]
Tags: zero paper work rob space-shuttle-discovery paper-airplane pretty-pictures classic hacks

November 15, 2011
21:42
[Paper] Views On the Future Direction of Information Assurance
» ‎ SecDocs

Authors: Richard George
Tags: security
Event: Black Hat USA 2002

Tags: direction future paper richard-george-tags usa security-event black-hat information-assurance
November 14, 2011
21:47
[Paper] Setiri
» ‎ SecDocs

Authors: Haroon Meer Jaco van Graan
Tags: malware virus
Event: Black Hat Asia 2002

Tags: authors setiri paper asia jaco-van graan black-hat
November 13, 2011
21:52
[Paper] Java and Java Virtual Machine Security Vulnerabilities and Their Exploitation Techniques
» ‎ SecDocs

Tags: Java
Event: Black Hat Asia 2002

Tags: java virtual paper asia java-virtual-machine exploitation-techniques security-vulnerabilities
November 07, 2011
21:30
[Paper] Remote Web Application Disassembly with ODBC Error Messages
» ‎ SecDocs

Authors: David Litchfield
Tags: web application SQL injection
Event: Black Hat Asia 2001

Tags: application web paper david-litchfield asia black-hat web-application
November 02, 2011
22:43
[Paper] The Future of Internet Worms
» ‎ SecDocs

Authors: Jose Nazario
Tags: malware
Event: Black Hat USA 2001

Tags: internet future paper jose usa internet-worms jose-nazario future-of-internet

November 01, 2011
8:23
The Trash Attack
» ‎ Packet Storm Security Recent Files

This short paper describes the trash attack which is effective against the majority of fully- verifiable election systems. The paper then offers a simple but counter-intuitive mitigation which can be incorporated within many such schemes to substantially reduce the effectiveness of the attack. This mitigation also offers additional benefits as it significantly improves the statistical properties of existing verifiable systems.
Tags: trash attack paper trash-attack statistical-properties election-systems

8:23
The Trash Attack
» ‎ Packet Storm Security Misc. Files

This short paper describes the trash attack which is effective against the majority of fully- verifiable election systems. The paper then offers a simple but counter-intuitive mitigation which can be incorporated within many such schemes to substantially reduce the effectiveness of the attack. This mitigation also offers additional benefits as it significantly improves the statistical properties of existing verifiable systems.
Tags: trash attack paper trash-attack statistical-properties election-systems

October 31, 2011
22:48
[Paper] Introducing X: Playing Tricks with ICMP
» ‎ SecDocs

Authors: Ofir Arkin
Tags: icmp
Event: Black Hat USA 2001

Tags: tricks icmp paper arkin-tags usa black-hat
22:48
[Paper] Hackproofing Lotus Domino
» ‎ SecDocs

Authors: David Litchfield
Tags: Domino
Event: Black Hat EU 2001

Tags: hackproofing lotus paper david-litchfield domino authors domino-event lotus-domino black-hat
October 26, 2011
0:10
[Paper] Compromising Web Servers, and Defensive Techniques
» ‎ SecDocs

Authors: David Litchfield
Tags: web server
Event: Black Hat USA 2000

Tags: compromising web paper david-litchfield usa black-hat web-servers
October 22, 2011
5:16
[Paper] .NET from the Hacker's Perspective
» ‎ SecDocs

Authors: Drew Miller
Tags: .NET
Event: Black Hat Windows Security 2003

Tags: hacker net paper drew-miller black-hat windows-security
October 21, 2011
0:00
[Paper] Securing Wireless Networks with 802.1x, EAP-TLS and PEAP
» ‎ SecDocs

Authors: Steve Riley
Tags: WiFi
Event: Black Hat Windows Security 2003

Tags: securing Wireless paper steve-riley-tags securing-wireless-networks peap steve-riley
0:00
[Paper] The Role of Non Obvious Relationships in the Foot Printing Process
» ‎ SecDocs

Authors: Charl van der Walt Haroon Meer
Tags: intelligence social engineering
Event: Black Hat Windows Security 2003

Tags: role NON paper walt-haroon van-der-walt haroon printing-process
October 19, 2011
23:54
[Paper] Hunting Flaws in MS SQL Server
» ‎ SecDocs

Authors: Aaron Newman Cesar Cerrudo
Tags: SQL Server
Event: Black Hat Windows Security 2003

Tags: server sql paper cesar-cerrudo aaron-newman ms-sql-server black-hat
October 11, 2011
1:04
[Paper] SPIDeR
» ‎ SecDocs

Authors: Patrick Miller
Tags: intrusion detection IDS
Event: Black Hat USA 2003

Tags: authors spider paper patrick-miller usa intrusion-detection black-hat
October 09, 2011
2:15
[Paper] Putting The Tea Back Into CyberTerrorism
» ‎ SecDocs

Tags: terrorism cybercrime
Event: Black Hat USA 2003

Tags: cyberterrorism tea paper usa black-hat terrorism
October 06, 2011
23:12
[Paper] Variations in Exploit Methods Between Linux and Windows
» ‎ SecDocs

Authors: David Litchfield
Tags: exploiting
Event: Black Hat USA 2003

Tags: variations exploit paper david-litchfield usa black-hat
October 04, 2011
1:22
[Paper] Security Implications of IPv6
» ‎ SecDocs

Authors: Michael H. Warfield
Tags: IPv6
Event: Black Hat Federal 2003

Tags: ipv security paper michael-h.-warfield security-implications black-hat warfield
October 01, 2011
4:51
[Paper] Enhancing Network Security Through Competitive Cyber Exercises
» ‎ SecDocs

Tags: security network
Event: Black Hat Federal 2003

Tags: network security paper black-hat security-network network-security
4:42
[Paper] Putting The Tea Back Into CyberTerrorism
» ‎ SecDocs

Tags: terrorism cybercrime
Event: Black Hat Federal 2003

Tags: cyberterrorism tea paper black-hat terrorism
September 30, 2011
11:23
[Paper] Putting The Tea Back Into CyberTerrorism
» ‎ SecDocs

Tags: terrorism exploiting cybercrime
Event: Black Hat Asia 2003

Tags: cyberterrorism tea paper asia black-hat terrorism

September 27, 2011
4:02
Toilet paper printer made from scrap parts
» ‎ Hack a Day

Some of our favorite hacks are those made with scrap materials, so we were delighted to see a contest being held by the German technology magazine c’t which focuses on using salvaged components. “Mach flott den Schrott” is the name of the competition, which loosely translates to “Make fast the scrap”. German builder [Mario Lukas’] [...]
Tags: toilet scrap paper mario-lukas german-technology scrap-materials toilet-paper arduino hacks

September 22, 2011
1:31
[Paper] Becoming the six-million-dollar man
» ‎ SecDocs

Authors: Gunter Ollmann
Tags: malware cybercrime
Event: Black Hat USA 2010
Abstract: Starting a life of Internet crime is easy; in fact you’ve probably already doing it as far as the RIAA is concerned. Now that you’ve chosen to embark upon a new career, how are you going to get dirty, filthy, stinking rich? How do you become a millionaire? The tool of choice has got to be botnets. Building them is just the start. How do you monetize the tens or hundreds of thousands of machines under your control? Should you harvest confidential and personal information from the victims, or would it be more prudent to become a specialist service provider to other botnet operators? Which models work best, and how can you become a six-million-dollar man within a year?
Tags: man becoming paper gunter-ollmann usa specialist-service-provider dollar-man black-hat
September 05, 2011
1:53
[Paper] Standing on the shoulders of the blue monster - Hardening Windows applications
» ‎ SecDocs

Tags: Windows hardening secure development
Event: Black Hat USA 2010
Abstract: Microsoft has implemented lots of useful functionality in Windows that they use in their own products. Many of these features can be used to enhance the security of third party applications, but not many developers or software architects know about them. This talk will detail some of the technical underpinnings of Windows features like UAC, IE protected mode and Terminal Serivces and show how they can be used to defend your own software from attack.
Tags: Software paper windows usa technical-underpinnings software-architects standing-on-the-shoulders

September 02, 2011
12:01
Get out the graph paper get started on the new discrete logic contest
» ‎ Hack a Day

Here’s another chance to ply your hacking skills for cash and prizes. Dangerous Prototypes has just announced the Open 7400 Logic Competition. First prize is $100 and a bunch of hacking goodies. But even better is that since it was announced, more sponsors have stepped up to increase the kitty, and the number of entries [...]
Tags: logic paper graph discrete-logic graph-paper cash-and-prizes contests

August 26, 2011
11:15
Bypassing PHPIDS 0.6.5
» ‎ Packet Storm Security Recent Files

Using the attacks in this paper allows you to bypass all of PHPIDS's rule sets, which defeats all protection PHPIDS can provide. Furthermore, on a default install of PHPIDS the log file can be used to drop a PHP backdoor. This can use PHPIDS as a vital steping stone in turning an LFI vulnerability into remote code execution. The end result is that use of PHPIDS 0.6.5 can make you less secure. All of these issues have been fixed in version 0.7.
Tags: bypassing phpids paper steping-stone code-execution end-result

11:15
Bypassing PHPIDS 0.6.5
» ‎ Packet Storm Security Misc. Files

Using the attacks in this paper allows you to bypass all of PHPIDS's rule sets, which defeats all protection PHPIDS can provide. Furthermore, on a default install of PHPIDS the log file can be used to drop a PHP backdoor. This can use PHPIDS as a vital steping stone in turning an LFI vulnerability into remote code execution. The end result is that use of PHPIDS 0.6.5 can make you less secure. All of these issues have been fixed in version 0.7.
Tags: bypassing phpids paper steping-stone code-execution end-result

August 09, 2011
13:58
[Paper] Volatools: Integrating Volatile Memory Forensics into the Digital Investigation Process
» ‎ SecDocs

Authors: Aaron Walters Nick Petroni
Tags: forensic memory
Event: Black Hat DC 2007

Tags: volatools memory paper aaron-walters-nick-petroni volatile-memory investigation-process petroni
13:52
[Paper] Exploting Similarity Between Variants to Defeat Malware
» ‎ SecDocs

Authors: Andrew Walenstein
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: exploting malware paper andrew-walenstein black-hat similarity variants
August 08, 2011
14:30
[Paper] Danger From Below: The Untold Tale of Database Communication Protocol Vulnerabilities
» ‎ SecDocs

Authors: Amichai Shulman
Tags: database
Event: Black Hat DC 2007

Tags: danger database paper communication-protocol black-hat shulman
August 06, 2011
16:14
[Paper] Reversing C++
» ‎ SecDocs

Authors: Mark Vincent Yason Paul Vincent Sabanal
Tags: reverse engineering C / C++
Event: Black Hat DC 2007

Tags: authors tags paper paul-vincent-sabanal mark-vincent-yason mark-vincent paul-vincent black-hat
August 01, 2011
12:58
[Paper] Botnet Tracking: Tools, Techniques, and Lessons Learned
» ‎ SecDocs

Authors: Jose Nazario
Tags: malware botnet malware analysis
Event: Black Hat DC 2007

Tags: malware botnet paper jose jose-nazario tracking-tools black-hat
July 31, 2011
11:38
[Paper] Being Explicit about Software Weaknesses
» ‎ SecDocs

Authors: Robert A. Martin Sean Barnum Steve Christey
Tags: vulnerability
Event: Black Hat DC 2007

Tags: explicit Software paper steve-christey robert-a.-martin-sean-barnum robert-a-martin black-hat barnum
July 30, 2011
4:08
[Paper] Advanced Oracle Attack Techniques
» ‎ SecDocs

Authors: David Litchfield
Tags: Oracle SQL injection
Event: Black Hat DC 2007

Tags: oracle advanced paper david-litchfield advanced-oracle oracle-sql
July 29, 2011
13:56
[Paper] Practical Malware Analysis: Fundamental Techniques and a New Method for Malware Discovery
» ‎ SecDocs

Authors: Chad McMillan Kris Kendall
Tags: malware malware analysis
Event: Black Hat DC 2007

Tags: analysis malware paper chad fundamental-techniques black-hat kendall
13:45
[Paper] Firmware Rootkits and the Threat to the Enterprise
» ‎ SecDocs

Authors: John Heasman
Tags: rootkit
Event: Black Hat DC 2007

Tags: firmware rootkits paper john-heasman black-hat
July 28, 2011
12:15
[Paper] Practical 10 Minute Security Audit: The Oracle Case
» ‎ SecDocs

Authors: Cesar Cerrudo
Tags: Oracle
Event: Black Hat DC 2007

Tags: oracle practical paper cesar-cerrudo oracle-case black-hat security-audit
July 27, 2011
12:00
[Paper] Attack Patterns: Knowing Your Enemies in Order to Defeat Them
» ‎ SecDocs

Authors: Sean Barnum
Tags: vulnerability
Event: Black Hat DC 2007

Tags: attack enemies paper sean-barnum attack-patterns black-hat barnum
July 26, 2011
11:34
[Paper] Secure Processors for Embedded Applications
» ‎ SecDocs

Authors: James D. Broesch
Tags: embedded
Event: Black Hat DC 2007

Tags: secure processors paper james-d.-broesch black-hat
11:34
[Paper] Secure Processors for Embedded Applications
» ‎ SecDocs

Authors: James D. Broesch
Tags: embedded
Event: Black Hat DC 2007

Tags: secure processors paper james-d.-broesch black-hat
July 25, 2011
14:36
[Paper] NAC
» ‎ SecDocs

Authors: Ofir Arkin
Tags: NAC
Event: Black Hat DC 2007

Tags: authors nac paper arkin-tags black-hat
July 23, 2011
12:57
[Paper] 360° Anomaly Based Unsupervised Intrusion Detection
» ‎ SecDocs

Authors: Stefano Zanero
Tags: intrusion detection IDS
Event: Black Hat Europe 2007

Tags: intrusion detection paper stefano-zanero europe hat-europe intrusion-detection black-hat
July 21, 2011
11:44
[Paper] GS and ASLR in Windows Vista
» ‎ SecDocs

Authors: Ollie Whitehouse
Tags: Windows Vista
Event: Black Hat Europe 2007

Tags: vista paper windows ollie-whitehouse europe hat-europe aslr black-hat
July 20, 2011
15:04
[Paper] Heap Feng Shui in JavaScript
» ‎ SecDocs

Authors: Alexander Sotirov
Tags: Javascript
Event: Black Hat Europe 2007

Tags: javascript heap paper alexander-sotirov feng-shui europe hat-europe black-hat
July 19, 2011
11:10
[Paper] Kicking Down the Cross Domain Door (One XSS at a Time)
» ‎ SecDocs

Authors: Billy Rios Raghav Dube
Tags: web application XSS
Event: Black Hat Europe 2007

Tags: xss kicking paper billy-rios europe hat-europe time-authors raghav
July 18, 2011
12:10
[Paper] Attacking the Giants: Exploiting SAP Internals
» ‎ SecDocs

Authors: Mariano Nunez Di Croce
Tags: SAP
Event: Black Hat Europe 2007

Tags: attacking sap paper di-croce mariano-nunez europe hat-europe black-hat
July 17, 2011
2:34
[Paper] SMTP Information Gathering
» ‎ SecDocs

Authors: Lluis Mora
Tags: mail
Event: Black Hat Europe 2007

Tags: smtp information paper mora-tags europe hat-europe mail black-hat
July 16, 2011
4:17
[Paper] Challenging Malicious Inputs with Fault Tolerance Techniques
» ‎ SecDocs

Authors: Bruno Luiz
Tags: vulnerability bug hunting
Event: Black Hat Europe 2007

Tags: challenging malicious paper bruno-luiz-tags europe fault-tolerance-techniques hat-europe black-hat
July 15, 2011
11:37
[Paper] SCTPscan - Finding Entry Points to SS7 Networks & Telecommunication Backbones
» ‎ SecDocs

Authors: Philippe Langlois
Tags: GSM SS7
Event: Black Hat Europe 2007

Tags: finding sctpscan paper philippe-langlois europe hat-europe black-hat backbones
July 13, 2011
13:55
[Paper] Make My Day – Just Run a Web Scanner: Countering The Faults of Typical Web Scanners Through Byte-code Injection
» ‎ SecDocs

Authors: Toshinari Kureha
Tags: web application vulnerability assessment scanning
Event: Black Hat Europe 2007

Tags: make web paper europe web-scanner hat-europe vulnerability-assessment

July 11, 2011
14:00
Bugtraq: POC2011 Call for Paper
» ‎ SecurityFocus Vulnerabilities

POC2011 Call for Paper
Tags: poc call paper

13:36
[Paper] Vboot Kit: Compromising Windows Vista Security
» ‎ SecDocs

Authors: Nitin Kumar Vipin Kumar
Tags: Windows Vista
Event: Black Hat Europe 2007

Tags: vista paper windows nitin-kumar-vipin-kumar-tags europe vipin-kumar security-authors hat-europe
July 10, 2011
11:26
[Paper] Making Windows Exploits More Reliable
» ‎ SecDocs

Authors: Kostya Kortchinsky
Tags: Windows exploiting
Event: Black Hat Europe 2007

Tags: exploits paper windows kostya-kortchinsky europe hat-europe black-hat
July 09, 2011
3:06
[Paper] Next Generation Debuggers for Reverse Engineering
» ‎ SecDocs

Tags: reverse engineering debugger
Event: Black Hat Europe 2007

Tags: generation engineering paper europe hat-europe black-hat reverse-engineering
July 08, 2011
11:35
[Paper] Kernel Wars
» ‎ SecDocs

Authors: Joel Eriksson
Tags: kernel
Event: Black Hat Europe 2007

Tags: authors kernel paper joel-eriksson europe hat-europe black-hat
July 07, 2011
16:04
[Paper] Hacking Databases for Owning Your Data
» ‎ SecDocs

Authors: Cesar Cerrudo Esteban Martínez Fayó
Tags: database SQL injection
Event: Black Hat Europe 2007

Tags: hacking databases paper cesar-cerrudo esteban-martnez europe hat-europe database-sql black-hat
July 06, 2011
12:20
[Paper] New Botnets Trends and Threats
» ‎ SecDocs

Authors: André Fucs Augusto Paes de Barros Victor Pereira
Tags: malware botnet
Event: Black Hat Europe 2007

Tags: new botnets paper victor-pereira europe de-barros hat-europe

July 05, 2011
16:01
Paper Craft Claw
» ‎ Hack a Day

Grab some stiff paper and get to work building your own paper claw. [Dombeef] posted the instructions to recreate the claw above because he was unsatisfied with his previous design which was flimsy and unable to pick up just about anything. This version is a bit larger and it internalizes all of the parts. Being [...]
Tags: craft claw paper stiff-paper previous-design paper-craft misc hacks

July 04, 2011
13:00
[Paper] Wi-Fi Advanced Fuzzing
» ‎ SecDocs

Authors: Laurent Butti
Tags: fuzzing WiFi
Event: Black Hat Europe 2007

Tags: advanced paper laurent-butti europe hat-europe butti black-hat
July 03, 2011
3:37
[Paper] APHRODITE: an Anomaly-based Architecture for False Positive Reduction
» ‎ SecDocs

Authors: Damiano Bolzoni
Tags: intrusion detection IDS
Event: Black Hat Europe 2007

Tags: architecture anomaly-based paper aphrodite europe hat-europe intrusion-detection black-hat
3:36
[Paper] POSEIDON: a 2-tier Anomaly-based Network Intrusion Detection System
» ‎ SecDocs

Authors: Damiano Bolzoni
Tags: intrusion detection IDS
Event: Black Hat Europe 2007

Tags: intrusion detection paper europe network-intrusion-detection network-intrusion-detection-system intrusion-detection-system
July 02, 2011
1:31
[Paper] Software Virtualization Based Rootkits
» ‎ SecDocs

Authors: Sun Bing
Tags: virtualization rootkit
Event: Black Hat Europe 2007

Tags: virtualization Software paper bing-tags europe hat-europe paper-software black-hat

June 30, 2011
14:01
Driving and old receipt printer
» ‎ Hack a Day

It seems like receipt printers are pretty popular as hacking targets lately. Aside from the wasted paper, they cooler than plain old blinking LEDs and we’d image there’s a ton of them floating around out there as advances in technology have prompted retailers to trade in the bulky dinosaurs for slimmer thermal printers. [Philip Hayton] [...]
Tags: printer receipt paper philip-hayton receipt-printers receipt-printer arduino hacks

June 29, 2011
12:16
[Paper] The Art of Unpacking
» ‎ SecDocs

Authors: Mark Vincent Yason
Tags: reverse engineering
Event: Black Hat USA 2007

Tags: authors unpacking paper mark-vincent-yason art usa mark-vincent black-hat
June 28, 2011
13:30
[Paper] OpenID: Single Sign-On for the Internet
» ‎ SecDocs

Authors: Eugene Tsyrklevich Vlad Tsyrklevich
Tags: authentication
Event: Black Hat USA 2007

Tags: openid tsyrklevich paper eugene usa internet-authors black-hat vlad
June 27, 2011
13:04
[Paper] Static Detection of Application Backdoors
» ‎ SecDocs

Authors: Chris Eng Chris Wysopal
Tags: backdoor static analysis
Event: Black Hat EU 2007

Tags: static detection paper chris-eng chris-wysopal static-detection static-analysis black-hat
June 26, 2011
5:09
[Paper] Timing Attacks for Recovering Private Entries From Database Engines
» ‎ SecDocs

Authors: Ariel Waissbein Damian Saura
Tags: SQL injection
Event: Black Hat USA 2007

Tags: private timing paper damian-saura-tags usa private-entries database-engines black-hat
June 25, 2011
1:10
[Paper] Exposing Vulnerabilities in Media Software
» ‎ SecDocs

Authors: David Thiel
Tags: audio fuzzing music
Event: Black Hat USA 2007

Tags: vulnerabilities exposing paper david-thiel usa software-authors music-event
June 23, 2011
12:56
[Paper] Premature Ajax-ulation
» ‎ SecDocs

Authors: Billy Hoffman Bryan Sullivan
Tags: AJAX
Event: Black Hat USA 2007

Tags: premature ajax-ulation paper billy-hoffman bryan-sullivan usa ulation
June 22, 2011
13:49
[Paper] Just Another Windows Kernel Perl Hacker
» ‎ SecDocs

Authors: Joe Stewart
Tags: kernel Perl
Event: Black Hat USA 2007

Tags: perl kernel paper joe-stewart-tags usa windows-kernel perl-hacker joe-stewart
June 21, 2011
13:21
[Paper] Blind Security Testing—An Evolutionary Approach
» ‎ SecDocs

Authors: Scott Stender
Tags: bug hunting unit testing
Event: Black Hat USA 2007

Tags: testing blind paper scott-stender usa evolutionary-approach stender black-hat
June 19, 2011
14:24
[Paper] Heap Feng Shui in JavaScript
» ‎ SecDocs

Authors: Alexander Sotirov
Tags: browser Javascript
Event: Black Hat USA 2007

Tags: javascript heap paper alexander-sotirov feng-shui usa black-hat
June 17, 2011
12:52
[Paper] Building and Breaking the Browser
» ‎ SecDocs

Authors: Mike Shaver Window Snyder
Tags: browser SDLC secure development
Event: Black Hat USA 2007

Tags: building browser paper mike-shaver usa black-hat
June 16, 2011
11:23
[Paper] Anonymity and its Discontents
» ‎ SecDocs

Authors: Len Sassaman
Tags: privacy
Event: Black Hat USA 2007

Tags: discontents anonymity paper len-sassaman usa privacy-event sassaman black-hat
June 14, 2011
13:51
[Paper] Covert Debugging: Circumventing Software Armoring Techniques
» ‎ SecDocs

Authors: Danny Quist Val Smith
Tags: reverse engineering debugging
Event: Black Hat USA 2007

Tags: covert debugging paper danny-quist usa val-smith quist black-hat
June 13, 2011
13:06
[Paper] PyEmu: A multi-purpose scriptable x86 emulator
» ‎ SecDocs

Authors: Cody Pierce
Tags: virtual machine python
Event: Black Hat USA 2007

Tags: pyemu emulator paper pierce-tags usa black-hat virtual-machine multi-purpose
June 12, 2011
5:30
[Paper] Securing the Tor Network
» ‎ SecDocs

Authors: Mike Perry
Tags: Tor
Event: Black Hat USA 2007

Tags: authors securing paper tor-event mike-perry-tags tor-network usa black-hat mike-perry
June 11, 2011
3:45
[Paper] Social Network Site Data Mining
» ‎ SecDocs

Authors: Stephen Patton
Tags: data mining social
Event: Black Hat USA 2007

Tags: social mining paper stephen-patton-tags usa black-hat data-mining patton
June 09, 2011
13:15
[Paper] (un)Smashing the Stack
» ‎ SecDocs

Authors: Shawn Moyer
Tags: buffer overflow memory exploiting
Event: Black Hat USA 2007

Tags: smashing stack paper shawn-moyer usa buffer-overflow black-hat
June 08, 2011
15:14
[Paper] Type Conversion Errors: How a Little Data Type Can Do a Whole Lot of Damage
» ‎ SecDocs

Authors: Jeff Morin
Tags: vulnerability
Event: Black Hat USA 2007

Tags: conversion type paper jeff-morin usa conversion-errors type-conversion black-hat
June 07, 2011
11:35
[Paper] Tactical Exploitation
» ‎ SecDocs

Authors: H.D. Moore Val Smith
Tags: exploiting
Event: Black Hat USA 2007

Tags: exploitation tactical paper h.d.-moore-val usa val-smith d-moore black-hat
June 05, 2011
9:28
[Paper] Other Wireless: New ways of being Pwned
» ‎ SecDocs

Authors: Luis Miras
Tags: wireless sniffer
Event: Black Hat USA 2007

Tags: other Wireless paper luis-miras usa wireless-sniffer black-hat miras
9:12
[Paper] It's All About the Timing
» ‎ SecDocs

Authors: Haroon Meer Marco Slaviero
Tags: exploiting
Event: Black Hat USA 2007

Tags: authors timing paper marco-slaviero usa black-hat
June 04, 2011
10:10
[Paper] Hacking Leopard: Tools and techniques for attacking the newest Mac OS X
» ‎ SecDocs

Authors: Charlie Miller
Tags: Mac OS X
Event: Chaos Communication Congress 24th (24C3) 2007

Tags: hacking leopard paper x-event mac-os charlie-miller authors chaos-communication-congress mac-os-x
10:08
[Paper] Simple Solutions to Complex Problems from the Lazy Hacker’s Handbook
» ‎ SecDocs

Authors: Robert Graham
Tags: hacking
Event: Black Hat USA 2007

Tags: problems simple paper robert-graham-tags usa handbook-authors black-hat simple-solutions
June 01, 2011
15:19
[Paper] OpenBSD Remote Exploit
» ‎ SecDocs

Authors: Alfredo Ortega
Tags: OpenBSD
Event: Black Hat USA 2007

Tags: openbsd remote paper alfredo-ortega usa remote-exploit black-hat ortega
May 30, 2011
14:18
[Paper] Attacking the Windows Kernel
» ‎ SecDocs

Authors: Jonathan Lindsay
Tags: Windows kernel
Event: Black Hat USA 2007

Tags: kernel paper windows jonathan-lindsay usa windows-kernel black-hat jonathan
May 27, 2011
13:21
[Paper] Anonymous Authentication— Preserving Your Privacy Online
» ‎ SecDocs

Authors: Andrew Lindell
Tags: privacy
Event: Black Hat USA 2007

Tags: privacy anonymous paper andrew-lindell usa anonymous-authentication privacy-event black-hat
May 23, 2011
14:29
[Paper] A Picture's Worth...
» ‎ SecDocs

Authors: Neal Krawetz
Tags: forensic
Event: Black Hat USA 2007

Tags: worth picture paper neal-krawetz usa black-hat
May 21, 2011
0:54
[Paper] Vulnerabilities in Wi-Fi/Dual-Mode VoIP Phones
» ‎ SecDocs

Authors: Krishna Kurapati
Tags: VoIP WiFi
Event: Black Hat USA 2007

Tags: vulnerabilities voip paper usa dual-mode black-hat krishna
May 18, 2011
13:16
[Paper] Status of Cell Phone Malware in 2007
» ‎ SecDocs

Authors: Mikko Hypponen
Tags: malware phone
Event: Black Hat USA 2007

Tags: malware phone paper usa black-hat cell-phone
May 15, 2011
7:51
[Paper] The Little Hybrid Web Worm that Could
» ‎ SecDocs

Authors: Billy Hoffman John Terrill
Tags: malware web
Event: Black Hat USA 2007

Tags: little web paper billy-hoffman john-terrill-tags usa john-terrill web-worm
May 13, 2011
14:56
[Paper] Vista Network Attack Surface Analysis and Teredo Security Implications
» ‎ SecDocs

Authors: Jim Hoagland
Tags: Windows Vista IPv6
Event: Black Hat USA 2007

Tags: vista network paper jim-hoagland usa teredo security-implications
May 11, 2011
15:10
[Paper] Stealth Secrets of the Malware Ninjas
» ‎ SecDocs

Authors: Nick Harbour
Tags: forensic malware malware analysis
Event: Black Hat USA 2007

Tags: malware stealth paper nick-harbour usa stealth-secrets black-hat forensic
May 10, 2011
15:11
[Paper] A Dynamic Technique for Enhancing the Security and Privacy of Web Applications
» ‎ SecDocs

Authors: Ariel Waissbein Ezequiel D. Gutesman
Tags: security web application
Event: Black Hat USA 2007

Tags: web security paper d.-gutesman usa dynamic-technique black-hat ezequiel
May 09, 2011
15:01
[Paper] Hacking Intranet Websites from the Outside (Take 2)—"Fun With and Without JavaScript Malware"
» ‎ SecDocs

Authors: Jeremiah Grossman Robert 'Rsnake' Hansen
Tags: malware Javascript
Event: Black Hat USA 2007

Tags: javascript malware paper robert jeremiah-grossman usa black-hat grossman jeremiah
May 06, 2011
13:55
[Paper] Greetz from Room 101
» ‎ SecDocs

Authors: Kenneth Geers
Tags: hacking
Event: Black Hat USA 2007

Tags: greetz room paper kenneth-geers usa geers room-101 black-hat
May 05, 2011
13:41
[Paper] SQL Server Database Forensics
» ‎ SecDocs

Authors: Kevvie Fowler
Tags: SQL Server forensic
Event: Black Hat USA 2007

Tags: server sql paper usa black-hat server-database forensics
13:37
[Paper] Understanding the Heap by Breaking It
» ‎ SecDocs

Authors: Justin Ferguson
Tags: heap overflow exploiting heap
Event: Black Hat USA 2007

Tags: heap understanding paper justin-ferguson-tags usa justin-ferguson black-hat

May 04, 2011
13:01
Cutting paper scrolls with frickin’ lasers
» ‎ Hack a Day

This circuit illustration adds a scrolling paper feeder to the bed of a laser cutter. In the video after the break you can see that the actual assembly is put on the bed of the laser cutter. After the laser has cut out the specified pattern, the scroll is wound to move an un-cut portion [...]
Tags: laser bed paper paper-feeder laser-cutter lasers arduino hacks

12:52
[Paper] CaffeineMonkey: Automated Collection, Detection and Analysis of Malicious JavaScript
» ‎ SecDocs

Authors: Ben Feinstein Daniel Peck
Tags: malware Javascript
Event: Black Hat USA 2007

Tags: javascript caffeinemonkey paper daniel-peck ben-feinstein usa black-hat feinstein
May 03, 2011
12:23
[Paper] Kernel Wars
» ‎ SecDocs

Tags: kernel exploiting
Event: Black Hat USA 2007

Tags: kernel tags paper usa black-hat

7:20
Owning A Cop Car
» ‎ Packet Storm Security Exploits

This paper details how poorly Linux devices in cop cars are set up and how their lack of a secure design puts everyone at risk.
Tags: paper car cop cop-cars cop-car secure-design

7:20
Owning A Cop Car
» ‎ Packet Storm Security Recent Files

This paper details how poorly Linux devices in cop cars are set up and how their lack of a secure design puts everyone at risk.
Tags: paper car cop cop-cars cop-car secure-design

7:20
Owning A Cop Car
» ‎ Packet Storm Security Misc. Files

This paper details how poorly Linux devices in cop cars are set up and how their lack of a secure design puts everyone at risk.
Tags: paper car cop cop-cars cop-car secure-design

May 02, 2011
12:10
[Paper] Something Old (H.323), Something New (IAX), Something Hollow (Security), and Something Blue (VoIP Administrators)
» ‎ SecDocs

Authors: Himanshu Dwivedi Zane Lackey
Tags: VoIP SIP
Event: Black Hat USA 2007

Tags: voip something paper himanshu-dwivedi zane-lackey usa black-hat h-323 lackey
May 01, 2011
1:14
[Paper] PISA: Protocol Identification via Statistical Analysis
» ‎ SecDocs

Authors: Rob King Rohit Dhamankar
Tags: network sniffer
Event: Black Hat USA 2007

Tags: protocol identification paper rob-king rohit-dhamankar pisa usa network-sniffer black-hat rohit
1:06
[Paper] Revolutionizing the Field of Grey-box Attack Surface Testing with Evolutionary Fuzzing
» ‎ SecDocs

Authors: Jared DeMott
Tags: fuzzing
Event: Black Hat USA 2007

Tags: revolutionizing field paper jared-demott usa black-hat
April 29, 2011
11:21
[Paper] VoIP Security: Methodology and Results
» ‎ SecDocs

Authors: Barrie Dempster
Tags: VoIP
Event: Black Hat USA 2007

Tags: voip security paper usa security-methodology black-hat
10:55
[Paper] The Security Analytics Project: Alternatives in Analysis
» ‎ SecDocs

Tags: malware malware analysis
Event: Black Hat USA 2007

Tags: malware analysis paper usa project-alternatives black-hat
April 28, 2011
10:52
[Paper] Building an Effective Application Security Practice on a Shoestring Budget
» ‎ SecDocs

Authors: David Coffey John Viega
Tags: compliance
Event: Black Hat USA 2007

Tags: effective application paper john-viega david-coffey usa shoestring-budget
April 27, 2011
11:38
[Paper] Unforgivable Vulnerabilities
» ‎ SecDocs

Authors: Steve Christey
Tags: vulnerability
Event: Black Hat USA 2007

Tags: vulnerabilities unforgivable paper steve-christey usa black-hat vulnerability
11:35
[Paper] Iron Chef Blackhat
» ‎ SecDocs

Tags: exploiting
Event: Black Hat USA 2007

Tags: iron chef paper usa black-hat iron-chef
April 26, 2011
13:35
[Paper] Intranet Invasion With Anti-DNS Pinning
» ‎ SecDocs

Authors: David Byrne
Tags: DNS
Event: Black Hat USA 2007

Tags: intranet dns paper david-byrne-tags usa black-hat david-byrne invasion
April 20, 2011
14:02
[Paper] Remote and Local Exploitation of Network Drivers
» ‎ SecDocs

Authors: Yuriy Bulygin
Tags: wireless exploiting
Event: Black Hat USA 2007

Tags: remote local paper yuriy-bulygin usa network-drivers black-hat
12:00
[Paper] Smoke 'em Out!
» ‎ SecDocs

Authors: Keith Jones Rohyt Belani
Tags: insider
Event: Black Hat USA 2007

Tags: authors smoke paper keith-jones-rohyt usa belani black-hat insider
11:31
[Paper] Injecting RDS-TMC Traffic Information Signals a.k.a. How to freak out your Satellite Navigation
» ‎ SecDocs

Authors: Andrea Barisani Daniele Bianco
Tags: hardware hacking RDS-TMC
Event: Black Hat USA 2007

Tags: rds-tmc injecting paper andrea-barisani usa satellite-navigation freak-out hardware-hacking
April 19, 2011
11:42
[Paper] Fuzzing Sucks! (or Fuzz it Like you Mean it!)
» ‎ SecDocs

Authors: Aaron Portnoy Pedram Amini
Tags: fuzzing
Event: Black Hat USA 2007

Tags: sucks fuzzing paper aaron-portnoy usa pedram-amini portnoy black-hat
11:20
[Paper] Dangling Pointer
» ‎ SecDocs

Authors: Jonathan Afek
Tags: memory exploiting
Event: Black Hat USA 2007

Tags: dangling pointer paper jonathan-afek usa dangling-pointer afek black-hat
11:01
[Paper] The Psychology of Security
» ‎ SecDocs

Authors: Bruce Schneier
Tags: security
Event: Black Hat USA 2007

Tags: psychology security paper bruce-schneier usa security-authors security-event

7:15
Old Dogs And New Tricks: Do You Know Where Your Handles Are?
» ‎ Packet Storm Security Recent Files

This paper offers incremental research in the area of untrusted program input via synchronization handle manipulations. Unlike the Michal Zalewski paper on Delivering Signals for Fun and Profit, this paper focuses on the source of the Unix signal handlers. Tested were personal computers running Windows XP and Vista. The synchronization objects were mutexes and events, and the security software included products from AVG, Avast, Avira, BitDefender, BullGuard, CheckPoint, Eset, F-Prot, F-Secure, Kaspersky, McAfee, Microsoft (Security Essentials), Nor- man, Norton, Panda, PC Tools, Quick Heal, Symantec, and Trend Micro.
Tags: security synchronization paper pc-tools incremental-research unix-signal old-dogs

7:15
Old Dogs And New Tricks: Do You Know Where Your Handles Are?
» ‎ Packet Storm Security Misc. Files

This paper offers incremental research in the area of untrusted program input via synchronization handle manipulations. Unlike the Michal Zalewski paper on Delivering Signals for Fun and Profit, this paper focuses on the source of the Unix signal handlers. Tested were personal computers running Windows XP and Vista. The synchronization objects were mutexes and events, and the security software included products from AVG, Avast, Avira, BitDefender, BullGuard, CheckPoint, Eset, F-Prot, F-Secure, Kaspersky, McAfee, Microsoft (Security Essentials), Nor- man, Norton, Panda, PC Tools, Quick Heal, Symantec, and Trend Micro.
Tags: security synchronization paper pc-tools incremental-research unix-signal old-dogs

April 16, 2011
5:41
[Paper] Extrusion and Web Hacking
» ‎ SecDocs

Authors: Laurent Oudot
Tags: web application web server exploiting covert channel
Event: Black Hat Abu Dhabi 2010
Abstract: This technical talk will focus on web attackers and how they try to handle extrusion issues. Indeed, when intruders get an illegal access on a web resource, it might become complex for them to keep a stealth and remote control without being caught. They usually try to create easy channels that allow them to get the very best from their target. But sometimes, they need to improve those concepts, especially against a hardened or monitored network. Based on real technical examples, we will describe how web attackers can anonymously talk to web backdoors, either by playing with HTTP issues or by finding secret paths to bounce out of DMZ (cover channels, etc). For this presentation to be accurate, we will also propose solutions, so that the defenders might detect or contain those attacks on their sensitive networks.
Tags: web extrusion paper laurent-oudot abu-dhabi secret-paths covert-channel
2:23
[Paper] Attacking with HTML5
» ‎ SecDocs

Authors: Lavakumar Kuppan
Tags: web application XSS HTML
Event: Black Hat Abu Dhabi 2010
Abstract: HTML5 is a set of powerful features aimed at moving the web applications closer to existing desktop applications in terms of user experience and features. HTML5 is no more just the technology of the future as many believe, it is available right now in almost all modern browsers. Though the widespread use of HTML5 by websites is still a few years away, the abuse of these features is already possible. Web developers and users assume that just because their site does not implement any HTML5 features they are unaffected. Also a large section of the internet community believes that HTML5 is only about stunning graphics and video streaming. This talk will show how these assumptions are completely contrary to reality. This presentation will show how existing 'HTML4' sites can be attacked using HTML5 features in a number of interesting ways. Then we look at how it is possible to use the browser to perform attacks that were once thought to require code execution outside the sandbox. Finally we look at an attack where the attacker is not interested in the victim's data or a shell on the machine but is instead after something that might perhaps even be legal to steal!
Tags: web html paper abu-dhabi code-execution web-developers technology-of-the-future
April 13, 2011
13:39
[Paper] Malware Distribution via Widgetization of the Web
» ‎ SecDocs

Authors: Neil Daswani
Tags: malware
Event: Black Hat DC 2011
Abstract: The Web 2.0 transformation has in part involved many sites using third-party widgets. We present the "widgetized web graph" showing the structure of high traffic web sites from the standpoint of widgets, show how web-based malware and scareware is propagated via such widgets, and provide data on how a mass web-based malware attack can take place against the Quantcast 1000 web sites via widgets.
Tags: malware web paper neil-daswani web-graph mass-web
April 04, 2011
21:25
[Paper] An Examination of the Adequacy of the Laws Related to Cyber Warfare
» ‎ SecDocs

Authors: Dondi West
Tags: warfare law
Event: DEFCON 18

Tags: examination paper warfare dondi-west laws-related cyber-warfare adequacy

March 26, 2011
11:00
Papercraft gyroscope
» ‎ Hack a Day

Although spring keeps trying to break through the winter doldrums you might be looking for just one more weekend activity before the outdoor season begins. Grab the kids and give this paper gyroscope a try. It’s not an electronic sensor made of paper, but the modern equivalent of a spinning top. The frame remains stationary [...]
Tags: gyroscope papercraft paper winter-doldrums electronic-sensor spinning-top toy hacks
March 22, 2011
6:05
Paper Mechanical Iris
» ‎ Hack a Day

This functioning mechanical irs is made from paper templates, foam core poster board, old credit / gift / etc cards, paper clips and masking tape. First, patterns are designed and multiples are printed and laid out to make the 10 parts needed. Two rings are cut out of foam board and a third ring is [...]
Tags: foam board paper iris foam-board foam-core poster-board how-to

March 19, 2011
5:38
[Paper] Operating System Fingerprinting for Virtual Machines
» ‎ SecDocs

Authors: Nguyen Anh Quynh
Tags: virtual machine fingerprinting
Event: DEFCON 18

Tags: system operating paper nguyen-anh quynh virtual-machines
March 14, 2011
22:25
[Paper] This is not the droid you're looking for...
» ‎ SecDocs

Authors: Christian Papathanasiou Nicholas J. Percoco
Tags: Android
Event: DEFCON 18

Tags: authors droid paper christian-papathanasiou nicholas-j.-percoco papathanasiou
March 02, 2011
21:25
[Paper] Hacking .NET Applications at Runtime: A Dynamic Attack
» ‎ SecDocs

Authors: Jon McCoy
Tags: web application ASP.NET .NET
Event: DEFCON 18

Tags: hacking net paper jon-mccoy application-asp web-application mccoy
February 19, 2011
2:33
[Paper] Exploiting Digital Cameras
» ‎ SecDocs

Authors: Alfredo Ortega Oren Isacson
Tags: exploiting photo camera
Event: DEFCON 18

Tags: digital exploiting paper oren-isacson alfredo-ortega photo-camera oren digital-cameras
2:20
[Paper] Exploiting Digital Cameras
» ‎ SecDocs

Authors: Alfredo Ortega Oren Isacson
Tags: exploiting photo camera
Event: DEFCON 18

Tags: digital exploiting paper oren-isacson alfredo-ortega photo-camera oren digital-cameras

February 12, 2011
6:27
Paper accelerometers for pennies in the works
» ‎ Hack a Day

Cheap paper accelerometers? Put us down for a dozen to start. They’re not quite ready for mass production yet but it looks like they’re on the way. [George Whitesides] led a team to develop the new technology that uses simple manufacturing methods to produce the sensor seen above. Graphite and silver inks were screen printed [...]
Tags: dozen mass paper george-whitesides silver-inks accelerometers parts

February 10, 2011
21:25
[Paper] How to Hack Millions of Routers
» ‎ SecDocs

Authors: Craig Heffner
Tags: router DNS exploiting
Event: DEFCON 18

Tags: routers hack paper craig-heffner heffner craig

February 05, 2011
5:54
Custom enclosures made of paper
» ‎ Hack a Day

[Sivan Toledo] needed a enclosure for a unique sized electronic project, not finding what he needed in off the shelf solutions, he went to the next best thing, … Papier Mâché! Using a mold made out of standard corrugated cardboard, he slowly built up layers made of magazine paper, and ordinary “white glue” diluted with [...]
Tags: custom paper enclosure sivan-toledo corrugated-cardboard shelf-solutions Hardware

January 29, 2011
4:01
[Paper] Token Kidnapping's Revenge
» ‎ SecDocs

Authors: Cesar Cerrudo
Tags: Windows exploiting
Event: DEFCON 18

Tags: token kidnapping paper cesar-cerrudo revenge
January 20, 2011
21:25
[Paper] Seccubus – Analyzing vulnerability assessment data the easy way...
» ‎ SecDocs

Authors: Frank Breedijk
Tags: vulnerability assessment
Event: DEFCON 18

Tags: assessment vulnerability paper frank-breedijk vulnerability-assessment assessment-data
January 19, 2011
21:25
[Paper] Mobile Privacy: Tor on the iPhone and Other Unusual Devices
» ‎ SecDocs

Authors: Marco Bonetti
Tags: Tor phone
Event: DEFCON 18

Tags: privacy mobile paper tor marco-bonetti iphone
January 17, 2011
21:25
[Paper] Exploitation on ARM - Technique and Bypassing Defense Mechanisms
» ‎ SecDocs

Authors: Itzhak Avraham
Tags: ARM exploiting
Event: DEFCON 18

Tags: ARM exploitation paper itzhak-avraham-tags defense-mechanisms itzhak
January 15, 2011
21:25
[Paper] Cyber[Crime | War] Charting Dangerous Waters
» ‎ SecDocs

Authors: Iftach Ian Amit
Tags: malware warfare intelligence cybercrime
Event: DEFCON 18

Tags: crime cyber paper ian-amit-tags crime-war dangerous-waters cyber-crime
January 13, 2011
21:25
[Paper] WPA Too!
» ‎ SecDocs

Authors: MD Sohail Ahmad
Tags: WiFi
Event: DEFCON 18

Tags: authors wpa paper ahmad-tags sohail-ahmad

10:35
Let paper dolls teach you science
» ‎ Hack a Day

Remember how fun it was studying chemistry and physics in high school? Well we guess your recollection depends on the person who taught the class. Why not have another go at it by learning the A-to-Z of electronics from one of our favorite teachers, [Jeri Ellsworth]. You know, the person who whips up chemistry experiments [...]
Tags: paper chemistry person chemistry-experiments paper-dolls ellsworth misc hacks

January 10, 2011
22:08
[Paper] Connection String Parameter Attacks
» ‎ SecDocs

Authors: Chema Alonso Jose Palazon
Tags: database web application
Event: DEFCON 18

Tags: connection string paper alonso-jose-palazon string-parameter connection-string database-web

January 04, 2011
13:07
Solar monsters… you know… for kids!
» ‎ Hack a Day

Teaching kids to solder using kits is a fun time, but most of these beginner kits are a bit mundane. Not this one, it’s a solar-powered monster project. The components and their wiring connections are printed on a sheet of paper along with a background for that particular monster. The base of the paper is [...]
Tags: solar paper monster monster-project beginner-kits wiring-connections misc hacks

December 16, 2010
10:00
Bugtraq: Call for Paper @ Swiss Cyber Storm 3
» ‎ SecurityFocus Vulnerabilities

Call for Paper @ Swiss Cyber Storm 3
Tags: swiss cyber paper cyber-storm

December 13, 2010
11:05
Building a spectrophotometer
» ‎ Hack a Day

What can you make with a toilet paper roll, duct tape, and a graphing calculator? A stand for your homemade spectrometer. This is neither as pretty nor as accurate as a precision scientific instrument, but that doesn’t mean it’s useless. In fact, it works perfectly well for rudimentary observations. Light is shined through a sample [...]
Tags: paper toilet spectrophotometer toilet-paper-roll graphing-calculator scientific-instrument chemistry hacks

December 02, 2010
12:00
Bugtraq: New paper by Amit Klein (Trusteer): "Detecting virtualization over the web with IE9 (platform preview) and Semi-permanent computer fingerprinting and user tracking in IE9 (platform preview)"
» ‎ SecurityFocus Vulnerabilities

New paper by Amit Klein (Trusteer): "Detecting virtualization over the web with IE9 (platform preview) and Semi-permanent computer fingerprinting and user tracking in IE9 (platform preview)"
Tags: paper preview platform amit-klein platform-preview virtualization amit

November 16, 2010
11:00
Paper touchpad
» ‎ Hack a Day

If you don’t mind getting your fingers a little dirty you can replace your mouse with a piece of paper. [Dr. West] made this touchpad himself, which measures signals at the corners of the paper using four voltage dividers. The paper has been completely covered with graphite from a pencil (which we see in hacks [...]
Tags: mind touchpad paper dr.-west voltage-dividers dr-west peripherals hacks

October 14, 2010
0:11
[Paper] Smashing the stack in 2010
» ‎ SecDocs

Authors: Andrea Cugliari Mariano Graziano
Tags: buffer overflow memory exploiting

Tags: authors smashing paper andrea-cugliari mariano-graziano buffer-overflow graziano stack
October 12, 2010
2:13
[Paper] Android Forensics: Simplifying Cell Phone Examinations
» ‎ SecDocs

Authors: Gary C. Kessler Jeff Lessard
Tags: forensic Android

Tags: android forensics paper jeff-lessard gary-c.-kessler gary-c-kessler lessard
October 01, 2010
4:04
[Paper] W32.Stuxnet Dossier
» ‎ SecDocs

Authors: Eric Chien Liam O Murchu Nicolas Falliere
Tags: malware malware analysis Stuxnet

Tags: malware stuxnet paper liam-o-murchu eric-chien nicolas-falliere
September 27, 2010
4:08
[Paper] Stuxnet Under the Microscope
» ‎ SecDocs

Tags: malware malware analysis Stuxnet

Tags: malware stuxnet paper microscope

Skip to page: 1 2

jetlib.sec » Tags » paper

Feeds

307 items tagged "paper"

Tags: audio lastest paper john-q.-newman john-q-newman privacy-event false-identity

Tags: audio paper identity john-q.-newman john-q-newman management-event

Tags: vector rewrite paper barnaby-jack-tags vulnerability

Tags: access authors paper andrew-daviel access-points wireless-event

Tags: sophail paper sophos sophisticated-attacker technical-audience antivirus-products

Tags: sophail paper sophos sophisticated-attacker technical-audience antivirus-products

Tags: paper russian information russia hacker-activity computer-threats brief-summary

Tags: paper russian information russia hacker-activity computer-threats brief-summary

Tags: draw vinyl paper magic-marker vinyl-records sound-samples musical hacks

Tags: attacker metasploit paper matthew-weeks hostile-networks metasploit-framework

Tags: debug cloud paper virtual-machines black-hat workstation

Tags: emphasis circumvention paper eric-michaud jamie-schwettmann evident-seals nuclear-warheads

Tags: technology honeypot paper thorsten-holz chaos-communication-congress logging-mechanisms technology-authors

Tags: internet emergent paper john-perry-barlow chaos-communication-congress internet-visionaries

Tags: free Software paper germany latin-america munich south-america chaos-communication-congress software-scene abstract-overview

Tags: astounding robot paper walking-robot still-image gears misc hacks

Tags: wsis review paper markus-beckedahl ralf-bendrath robert-guerra chaos-communication-congress ralf

Tags: autodaf paper technique martin-vuagnoux chaos-communication-congress buffer-overflow-vulnerabilities poor-efficiency

Tags: web search paper isabel-drost chaos-communication-congress intelligent-search-engines adversarial-environment

Tags: palle paper torsson rasmus-fleischer pirate-bay chaos-communication-congress file-shearing

Tags: palle torsson paper rasmus-fleischer pirate-bay chaos-communication-congress file-shearing

Tags: palle paper torsson rasmus-fleischer pirate-bay chaos-communication-congress file-shearing

Tags: palle paper torsson rasmus-fleischer pirate-bay chaos-communication-congress file-shearing

Tags: ink paper ring catarina-mota magnetic-ink piece-of-paper magnet chemistry hacks

Tags: printer paper brother thermal-label-printer continuous-rolls continuous-feed peripherals hacks

Tags: padding oracle paper cryptographic-devices import-functions cryptographic-hardware

Tags: padding oracle paper cryptographic-devices import-functions cryptographic-hardware

Tags: crypt paper hash hashing-algorithms

Tags: workshop security paper social-networks

Tags: cabbage paper litmus william-finucane high-school-chemistry litmus-paper finucane chemistry hacks

Tags: bsd paper linux foss foss-desktop wolfgang-draxinger chaos-communication-congress abstract-time course-authors

Tags: way conspiracy paper julian-assange kay-hamacher chaos-communication-congress innocent-bystanders

Tags: way conspiracy paper julian-assange kay-hamacher chaos-communication-congress innocent-bystanders

Tags: way conspiracy paper julian-assange kay-hamacher chaos-communication-congress innocent-bystanders

Tags: insecure workstation paper

Tags: authors translation paper christian-grothoff lost-in-translation

Tags: rootkit kernel paper julian-grizzard kernel-level

Tags: computer legal paper jennifer-granick security-authors computer-security

Tags: hacker guide paper steve-dunker dunker social-engineering

Tags: prototyping sketchtools paper matt-cottam physical-interfaces cottam

Tags: countering denial paper greg-conti information-attacks security-event

Tags: dtrace engineer paper david-weston-tiller swiss-army-knife david-weston reverse-engineer

Tags: life second paper michael-thumann second-life black-hat

Tags: vulnerabilities exposing paper david-thiel software-authors black-hat

Tags: attacking anti paper feng-xue virus-authors black-hat anti-virus

Tags: client-side security paper security-authors petkov black-hat

Tags: fundamentals security paper security-authors physical-security black-hat

Tags: authors forensics paper felix cisco-event cisco-ios black-hat lindner

Tags: biologger biometric paper matthew-lewis-tags matthew-lewis black-hat

Tags: mobile gsm paper david-hulton black-hat mobile-phone

Tags: abuse authors paper nathan-mcfeters rob-carter-tags uri-event billy-rios uri-use rob-carter black-hat

Tags: day patch paper bernard-tellenbach stefan-frei black-hat vulnerability

Tags: new pdf paper eric-filiol viral-threats black-hat

Tags: authors crackstation paper nick-breese black-hat

Tags: malware scenes paper ian-amit-tags black-hat amit

Tags: injection ldap paper alonso-jos black-hat alonso authentication

Tags: evolution spam paper black-hat

Tags: analyzing rf-based paper max-moser black-hat data-transmission moser

Tags: smashing stack paper shawn-moyer stack-overflows buffer-overflow world-authors

Tags: machine exploiting paper jon-oberheide black-hat virtual-machine migration

Tags: preparing cross paper chuck-willis-tags chuck-willis black-hat forgery

Tags: dtrace engineer paper david-weston-tiller swiss-army-knife david-weston reverse-engineer

Tags: detection classification paper chris-wysopal black-hat

Tags: hypervisor virtualization paper asia technology-authors black-hat

Tags: cyberspace paper warfare kenneth-geers asia geers black-hat

Tags: malware symbian paper black-hat

Tags: malware symbian paper black-hat

Tags: automatically iis paper black-hat

Tags: unshredding computer paper shredded-paper roel shredder misc hacks

Tags: hacking bluetooth paper martin-herfurt adam-laurie-marcel-holtmann marcel-holtmann adam-laurie full-disclosure

Tags: BackTrack paper installing i2p

Tags: BackTrack paper installing i2p

Tags: injection stopping paper l.-patterson robert usa computational-theory intrusion-detection black-hat