The Shadow File

Sometimes I need a MIPS Linux system that I can use for development and testing.  Maybe I need to test some shellcode or debug a binary I...

Nothing original here, but this is a great tip, so I want to share it.  Thanks to @thegrugq  for cluing me into this via Twitter. For ever...

In previous parts of the Bowcaster tutorial, I showed how to construct your buffer overflow using the OverflowBuffer class.  I also mention...

In part 1 of the Bowcaster tutorial I showed how to generate an overflow string with the OverflowBuffer class. In part 2 , I showed how to...

Crossbow has been renamed to Bowcaster. It turns out "Crossbow" is a popular word.  Who knew?  A company in California has the wor...

This is the third part in a multi part tutorial on using the Bowcaster exploit development framework to build a buffer overflow exploit. He...

This is the second in a multi-part tutorial on developing a buffer overflow exploit using Bowcaster.  Here's Part 1 . In part 1, we ha...

This is the first in a multi-part tutorial on developing a buffer overflow exploit using Crossbow  (now called Bowcaster), which I released ...

UPDATE: Crossbow has been renamed to Bowcaster. It turns out "Crossbow" is a popular word.  Who knew?  A company in California has...

I love hacking.  I love vulnerability research.  I love software exploitation.  I love finding creative ways to subvert control of an applic...

With all the excitement regarding UPnP vulnerabilities lately, I though I'd write up this one I found a few weeks back.  I had kind of f...

Update:  I received a personal communication from Mr. Flemming.  He makes the case that what I believed to be a subtextual threat was not in...

[NOTE: This was going to be a post about how to relocate a shared library that is loaded using LD_PRELOAD such that a program's linked l...