Code Review on the Cheap At the 31. Chaos Communication Congress I had the pleasure to watch the presenta... 2015-1-6 16:56:10 | 阅读: 25 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu lexers parsers crotch machine python

WebLogic undocumented hacking During an externa... 2014-10-3 23:23:57 | 阅读: 37 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu wl weblogic

How to get root access on FireEye OS 1. BackgroundA... 2014-7-29 04:30:24 | 阅读: 45 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ssh fireeye unlimited ordinary slogin

HP-UX 0day local privilege escalation We worked for a b... 2014-6-25 20:54:6 | 阅读: 38 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu pppoec ux pppd sgid sr

Trend Micro OfficeScan - A chain of bugs Analyzing the security of security software is one of my favorite research areas... 2014-6-6 18:0:24 | 阅读: 34 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu proxy officescan client pwd requesting

ISAKMP hacking - How much should we trust our tools? During a VPN test... 2014-4-17 22:0:39 | 阅读: 32 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu 004400 ike psk isakmp nmap

Quick and dirty Android binary XML edits Last week I had an Android application that I wanted to test in the Android emulator (... 2014-4-4 19:43:29 | 阅读: 30 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu apk hu blogpost keystore

OWASP Top 10 is overrated OWASP Top 10 doesn’t need an introduction: it’s certainly the most well-known pr... 2014-3-31 18:0:20 | 阅读: 28 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security materials injection bashing

SNMP trap? During one of our... 2014-3-14 20:47:21 | 阅读: 32 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu switches 3com h3c network nse

Sanitizing input with regex considered harmful Sanitizing input (as in trying to remove a subset of user input so that the remaining... 2014-3-8 01:54:49 | 阅读: 28 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu nbar foobar php dotall replaceall

From Read to Domain Admin - Abusing Symantec Backup Exec with Frida Symantec (formerly Veritas) Backup Exec is one of my all-time favorites in pentest pro... 2014-2-27 20:33:5 | 阅读: 22 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu backup cencrypt memory qaexxz ciphertext

Testing websites using ASP.NET Forms Authentication with Burp Suite Testing a website... 2014-2-20 20:37:43 | 阅读: 24 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu burp helpers messageinfo ri

JDB tricks to hack Java Debug Wire During a recent p... 2014-2-10 01:56:4 | 阅读: 40 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu jdb printwriter quotation 4444

Compressed file upload and command execution In this post I wo... 2014-1-31 21:45:6 | 阅读: 27 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu php deflated s2crew xxa

Banging 3G rocks I’ve always wante... 2014-1-23 22:0:59 | 阅读: 31 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu stick modems unlocker zte software

How did I find the Apple Remote Desktop bug? - CVE-2013-5135 Inspired by the W... 2014-1-13 17:0:37 | 阅读: 30 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu vnc network mh remote