The Shadow File

In previous parts of the Bowcaster tutorial, I showed how to construct your buffer overflow using the OverflowBuffer class.  I also mention...

In part 1 of the Bowcaster tutorial I showed how to generate an overflow string with the OverflowBuffer class. In part 2 , I showed how to...

Crossbow has been renamed to Bowcaster. It turns out "Crossbow" is a popular word.  Who knew?  A company in California has the wor...

This is the third part in a multi part tutorial on using the Bowcaster exploit development framework to build a buffer overflow exploit. He...

This is the second in a multi-part tutorial on developing a buffer overflow exploit using Bowcaster.  Here's Part 1 . In part 1, we ha...

This is the first in a multi-part tutorial on developing a buffer overflow exploit using Crossbow  (now called Bowcaster), which I released ...

UPDATE: Crossbow has been renamed to Bowcaster. It turns out "Crossbow" is a popular word.  Who knew?  A company in California has...

I love hacking.  I love vulnerability research.  I love software exploitation.  I love finding creative ways to subvert control of an applic...

With all the excitement regarding UPnP vulnerabilities lately, I though I'd write up this one I found a few weeks back.  I had kind of f...

Update:  I received a personal communication from Mr. Flemming.  He makes the case that what I believed to be a subtextual threat was not in...

[NOTE: This was going to be a post about how to relocate a shared library that is loaded using LD_PRELOAD such that a program's linked l...

I decided to POP out all my Yahoo mail into my Google Apps account so I could stop paying for Yahoo's "premium" service (WTF, ...

Here are some long-form articles I've enjoyed this year. The Hazards of Nerd Supremacy: The Case of Wikileaks (theatlantic.com) The...

I was using up all of my accumulated credits on Audible.com just now, and realized I've listened to several great audiobooks over the la...

[Disclaimer: I don't know crap about javascript, other than what I pieced together from the 'tubes.] I read something somewhere (I ...

Update : My friend, Chad, creator of Pear Note , has an interesting perspective that is much more in-depth than what I have written. While...

We all know there are shady marketing/image promotion firms that do things like post fake reviews on Amazon.com and others. However, I'...