"This new Immunity Debugger release provides a lot of new scripts and important fixes. New scripts to improve your debugging experience include: gflags, hookssl, and hookndr.
The API has been reinforced with new functionality which allows you to gather more information from the remote process, such as Threads, findRetValue. This release also includes some important fixes such as correct Memory Page protection flags, which are also available via the Python API." March 27, 2008
And more, was announced that they are looking for some experts (hackers =p)
http://debugger.immunityinc.com/hireahacker.html
Immunity Debugger is very similar to the OllyDbg but with great support for python language and a lot of useful functionalities already done for use with python language, for example, the functionalities intent to hook are pretty good.
Well, cya, i go test that release !
Tuesday, April 1, 2008
1st of April
Today after browsing i decided to look at metaslploit website, look for something related with framework progress, what i found?
"Metasploit Framework 4.0 is Closed Source
Emerging from over a year and a half in stealth-mode, Metasploit Corporation has announced the 4.0 release of their flag-ship product, The Metasploit Framework. The new release comes jam-packed with exciting features that are sure to please even the German legal system. After years of struggling to define Metasploit's licensing position a final decision has been made to "screw it" and move the framework to a closed source license agreement. The decision was made to sell out for a number of reasons, not the least of which has to do with the benjamins. Metasploit 2.x and 3.x will no longer be available for public download. We request that anyone who has downloaded a copy of Metasploit 2 or 3 to please remove the hard drive from their computer and destroy it in the most efficient way possible (grind the disks, melt the platters, etc). "
LOL i forgot that today is the "Day" ^^
Now i'm waiting someone say "Microsoft acquire Yahoo" Haha!
"Metasploit Framework 4.0 is Closed Source
Emerging from over a year and a half in stealth-mode, Metasploit Corporation has announced the 4.0 release of their flag-ship product, The Metasploit Framework. The new release comes jam-packed with exciting features that are sure to please even the German legal system. After years of struggling to define Metasploit's licensing position a final decision has been made to "screw it" and move the framework to a closed source license agreement. The decision was made to sell out for a number of reasons, not the least of which has to do with the benjamins. Metasploit 2.x and 3.x will no longer be available for public download. We request that anyone who has downloaded a copy of Metasploit 2 or 3 to please remove the hard drive from their computer and destroy it in the most efficient way possible (grind the disks, melt the platters, etc). "
LOL i forgot that today is the "Day" ^^
Now i'm waiting someone say "Microsoft acquire Yahoo" Haha!
Wireshark 1.0 Released
Would you like to use an advanced tool for examine a wide variety of protocols?
If yes you have Wireshark!
Ok, you still can use WinPcap libraries to do your job in some customized application using c/c++, python, and so on, but with wireshark you have so far a good tool.
The 1.0 version has finally reached, i remember when i first used the ethereal(old name), but now it's amazing, with more statistics, better parser, more protocols, functionalities, etc.
What's New
Bug Fixes
The following vulnerabilities have been fixed. See the security advisory for details and a workaround.
*The X.509sat dissector could crash.
Versions affected: 0.99.5 to 0.99.8
*The Roofnet dissector could crash on Windows, Solaris, and possibly other platforms.
Versions affected: 0.99.5 to 0.99.8
*The LDAP dissector could crash on Windows and possibly other platforms.
Versions affected: 0.99.2 to 0.99.8
*The SCCP dissector could crash while using the "decode as" feature.
Versions affected: 0.99.6 to 0.99.8
The following bugs have been fixed:
*Several SNMP-related bugs have been fixed.
*Several memory-related bugs have been fixed.
New and Updated Features
The following features are new (or have been significantly updated) since the last release:
*The "About" box finally displays version 1.0.
*Wireshark now supports custom columns.
*This release includes an experimental Mac OS X package.
New Protocol Support
*IEEE 802.15.4, Infiniband, Parallel Redundancy Protocol, RedBack Lawful Intercept, Xcsl
Updated Protocol Support
AFS, ALCAP, ATM, BACapp, CIGI, DCC (renamed from DCCP), DCCP (renamed from DCP), DCERPC SPOOLSS, DCERPC NT, DHCP, DirectPlay, EtherCAT, FIX, GIOP, GTP, H.248, HTTP, ICMPv6, ICQ, IPv6, ISIS, JXTA, NCP, P_Mul, PCAP, PKIX1Explicit, PTP, RADIUS, Roofnet, RTCP, RTMPT, RTP, RX, SABP, SCSI OSD, sFlow, SMPP, SNMP, SSCOP, TAPA, TIPC, TPNCP, UNISTIM, X.25, X.509sat, XML
New and Updated Capture File Support
Hilscher Analyzer "
http://www.wireshark.org/
If yes you have Wireshark!
Ok, you still can use WinPcap libraries to do your job in some customized application using c/c++, python, and so on, but with wireshark you have so far a good tool.
The 1.0 version has finally reached, i remember when i first used the ethereal(old name), but now it's amazing, with more statistics, better parser, more protocols, functionalities, etc.
What's New
Bug Fixes
The following vulnerabilities have been fixed. See the security advisory for details and a workaround.
*The X.509sat dissector could crash.
Versions affected: 0.99.5 to 0.99.8
*The Roofnet dissector could crash on Windows, Solaris, and possibly other platforms.
Versions affected: 0.99.5 to 0.99.8
*The LDAP dissector could crash on Windows and possibly other platforms.
Versions affected: 0.99.2 to 0.99.8
*The SCCP dissector could crash while using the "decode as" feature.
Versions affected: 0.99.6 to 0.99.8
The following bugs have been fixed:
*Several SNMP-related bugs have been fixed.
*Several memory-related bugs have been fixed.
New and Updated Features
The following features are new (or have been significantly updated) since the last release:
*The "About" box finally displays version 1.0.
*Wireshark now supports custom columns.
*This release includes an experimental Mac OS X package.
New Protocol Support
*IEEE 802.15.4, Infiniband, Parallel Redundancy Protocol, RedBack Lawful Intercept, Xcsl
Updated Protocol Support
AFS, ALCAP, ATM, BACapp, CIGI, DCC (renamed from DCCP), DCCP (renamed from DCP), DCERPC SPOOLSS, DCERPC NT, DHCP, DirectPlay, EtherCAT, FIX, GIOP, GTP, H.248, HTTP, ICMPv6, ICQ, IPv6, ISIS, JXTA, NCP, P_Mul, PCAP, PKIX1Explicit, PTP, RADIUS, Roofnet, RTCP, RTMPT, RTP, RX, SABP, SCSI OSD, sFlow, SMPP, SNMP, SSCOP, TAPA, TIPC, TPNCP, UNISTIM, X.25, X.509sat, XML
New and Updated Capture File Support
Hilscher Analyzer "
http://www.wireshark.org/
Thursday, March 27, 2008
Firefox 2.0.0.13
OMG! =p
Firefox 2.0.0.12
MFSA 2008-19 XUL popup spoofing variant (cross-tab popups)
MFSA 2008-18 Java socket connection to any local port via LiveConnect
MFSA 2008-17 Privacy issue with SSL Client Authentication
MFSA 2008-16 HTTP Referrer spoofing with malformed URLs
MFSA 2008-15 Crashes with evidence of memory corruption (rv:1.8.1.13)
MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution
That's my favorite browser because the amazing plug-ins like firebug, but looking at these bugs i'm still afraid to run it on my machine! even though if i'm with Windows Vista with latest patches (Vista with its isolation is pretty good, but really i think that we need be careful before do somethings...)
Hey i'm not protecting the Internet Explorer, i just don't use it, but anyway later i think that i'll make a comparison of both browsers.
Would be good "fly" in the web inside one VM, or an isolation especially made for web applications inside the OS's!
^^
BitBlaze - Binary Analysis for COTS Protection and Malicious Code Defense
Has passed some months that i have jumped onto world of bits, rather some kind of studies related with reverse engineering.After some hours navigating through our amazing web i have found some nice interesting things about malware analysis, something that really need figure out what is the behavior of such applications.The BitBlaze is a great goal because what i have found in my little life in RCE is still far away from an "automated" analysis.Sure that actually we have some engines inside anti-virus that do something like heuristic analysis, but that framework is a bit different.
Anyway i still don't have a concrete idea in what this will be when it release, so i'm just someone that is curious. :)
Well one thing really make sense, we are in an era that information is growing more each day, and a way to organize it is by computers in general term, but what about the security?
That's good!
Today we have a wide variety of tools that generate malware in seconds... is good we start improve our "skills" in something beyond the old "signatures" ...
Thursday, February 14, 2008 has occur an event by Dawn Song at UC Berkeley
I would like to watch it :]
If i find the video i'll post here...
More informations at:
http://bitblaze.cs.berkeley.edu
Anyway i still don't have a concrete idea in what this will be when it release, so i'm just someone that is curious. :)
Well one thing really make sense, we are in an era that information is growing more each day, and a way to organize it is by computers in general term, but what about the security?
That's good!
Today we have a wide variety of tools that generate malware in seconds... is good we start improve our "skills" in something beyond the old "signatures" ...
Thursday, February 14, 2008 has occur an event by Dawn Song at UC Berkeley
I would like to watch it :]
If i find the video i'll post here...
More informations at:
http://bitblaze.cs.berkeley.edu
Saturday, March 1, 2008
Blender
Long time has passed that i don't post anything about drawing stuff, specifically in the side of 3D digital art.Sometime i'll post my works here.
Here is some examples in where you can reach with some practices
http://www.blender.org/features-gallery/gallery/images/
Blender Wiki
Some Books
Here is some examples in where you can reach with some practices
http://www.blender.org/features-gallery/gallery/images/
Blender Wiki
Some Books
- Introducing Character Animation with Blender
- Blender Basics Second Edition
Finally Code::Blocks 8.02 has been released!
I was waiting for it for a long time!
Just because thats the best IDE for code C-C++ stuff on various platforms, really fast(the software is fast and package take you ready to code!), i recommend to beginners and professionals that code something that go beyond the Windows(that is good, why you will code forever just for windows?thats really not good...we change with the time!)
However i recommend to anybody never be attached to just "one thing", the world is big and we have a lot of things, why be focused on just one thing?
If you like to code in both platforms like Windows and Unix like systems, you can use others tools too(i mean related with c/c++ coding):
Eclipse: thats a good tool, but for code in both systems you will need some time to set up the configurations and make sure that what you did is the right thing(bad for who is starting)
Netbeans: same as eclipse in some aspects and you still need be more experienced with programming on these languages and compile systems.
As you see if you want first learn the language (C/C++ in this case) an later venture in something else (i recommend first learn language :) ) better you choose the CodeBlocks IDE that come with compiler(in case of windows the MinGW).
Thats all, thanks for the guys that made this IDE, go there download the IDE and start coding maybe in sometime you can make a great thing like they did now.
:)
Just because thats the best IDE for code C-C++ stuff on various platforms, really fast(the software is fast and package take you ready to code!), i recommend to beginners and professionals that code something that go beyond the Windows(that is good, why you will code forever just for windows?thats really not good...we change with the time!)
However i recommend to anybody never be attached to just "one thing", the world is big and we have a lot of things, why be focused on just one thing?
If you like to code in both platforms like Windows and Unix like systems, you can use others tools too(i mean related with c/c++ coding):
Eclipse: thats a good tool, but for code in both systems you will need some time to set up the configurations and make sure that what you did is the right thing(bad for who is starting)
Netbeans: same as eclipse in some aspects and you still need be more experienced with programming on these languages and compile systems.
As you see if you want first learn the language (C/C++ in this case) an later venture in something else (i recommend first learn language :) ) better you choose the CodeBlocks IDE that come with compiler(in case of windows the MinGW).
Thats all, thanks for the guys that made this IDE, go there download the IDE and start coding maybe in sometime you can make a great thing like they did now.
:)
Subscribe to:
Posts (Atom)