IANS Lone Star Information Security Forum
Friday, July 9th, 2010 Posted in Computers, Intarweb, News, Software, Unspecific | No Comments »On June 23-24, 2010 I attended the IANS Lone Star Information Security Forum. Details of the event can be found here: http://www.iansresearch.com/forums/splash.html?forum_id=51 A PDF of the forum program is attacked (Forum_Program51.pdf). *UPDATE (7/12/2010)* All links and attachments to slides have been removed per the ...
SSL-Cipher-Check v1.6
Wednesday, October 21st, 2009 Posted in Computers, Software, Unspecific | No Comments »SSL-Cipher-Check v1.6 (http://unspecific.com/ssl/) Released. Bugfix for SSLv2 incomplete handshake causing false positive. Steven Andrés (of Special Ops Security) pointed out a flaw and gave me a fix. " For some cipher combinations, OpenSSL will return a "verify return" command but then later ...
ssl-cipher-check
Monday, February 16th, 2009 Posted in Computers, Intarweb, Software, Unspecific | 5 Comments »I wanted a simple way to verify all the SSL ciphers a website could use (thanks PCI). I just needed something simple, not running a full blown vuln scanner and all the tools I could find (thanks THC) were ...
I think I broke Google
Thursday, February 5th, 2009 Posted in Computers, Intarweb, Unspecific | No Comments »*UPDATE* I was able to reproduce this with ant search that ended with " Tr" but it appeared that it was a rendering problem with the Ubuntu version of Firefox 3.0.5. Upgraded to 3.0.6 today and the problem is gone.
nmap-search bug fix (v1.2)
Friday, January 16th, 2009 Posted in Computers, Software, Unspecific | No Comments »Quick update to nmap-search to fix a small bug I found. Because of the way I was handling certain things, when I added in version detection the spliting of the fields broke. I had to switch from split to a ...
nmap-report v1.1 released
Thursday, January 15th, 2009 Posted in Computers, Intarweb, Software, Unspecific | No Comments »I updated nmap-report to match all the other scripts, so you can use it with the new time and file formats. Simple update, should have been done a while back. Thanks to Detmar Liesen from Germany for pointing out the problem ...
Malware writer’s clever trick
Wednesday, January 7th, 2009 Posted in Computers, Unspecific | No Comments »When is AUTORUN.INF really an AUTORUN.INF? From F-Secure. An interesting little trick. The AUTORUN.INF looks like a binary file so expetced to not work as an AUTORUN.INF should work. But to someone paying close attention, the binary portions are actually commented ...
nmap-diff 1.3 released
Tuesday, January 6th, 2009 Posted in Computers, Software, Unspecific | No Comments »so after fixing the stupid flub this morning I added a simple web interface to nmap-diff. It allows you to specify the base date, scan date and an IP or partial IP to search for. The IP chould be in ...
nmap-diff 1.2 release
Tuesday, January 6th, 2009 Posted in Computers, Intarweb, Software, Unspecific | No Comments »I am a fool and I fucked up. I didn't QA my nmap-diff script and it broke last time I updated it. It was bad. It is fixed now. I am using it daily and know it works now. Oh and ...
‘hosts’ update
Monday, December 29th, 2008 Posted in Computers, Software, Unspecific | No Comments »I added a web interface to my 'hosts' program. now at version 1.3.0 Aren't you excited?