Personal security research blog
There is a lot of hype with LLMs and their capabilities. Models such as Mythos are praised like the modern era Gods. Developers fully rely on basic prompts for their work, quickly forgetting any of the skills they learned through the years. Companies invest millions and billions in tokens while most of them are wasted Continue reading When LLMs do more than they have to
Long time ago I wrote three detailed blog posts about how to write shellcodes for Windows (x86 32 bits). The articles are beginner friendly and contain a lot of details. First part explains what is a shellcode and which are its limitations, second part explains PEB (Process Environment Block), PE (Portable Executable) file format Continue reading Writing shellcodes for Windows x64
Introduction First step in the process of penetration testing is “Information gathering”, the phase where it is useful to get as much information about the target(s) as possible. While it might be different for the different type of penetration tests, such as web application or mobile application pentest, network scanning is a crucial step in Continue reading Network scanning with nmap
Some time ago I detailed PHP Object Injection vulnerabilities and this post will get into details of Java deserialization vulnerabilities. The concept is simple: developers use a feature of the programming language, serialization, to simplify their job, but they are not aware about the risks. Java deserialization is a vulnerability similar to deserialization vulnerabilities in Continue reading…
I had the opportunity to present NetRipper at BlackHat Asia Arsenal 2018 and it was amazing. As you probably know, BlackHat conferences have trainings, briefings (presentations), vendor s area and Arsenal. Arsenal is the perfect place for anyone who wants to present its open-source tool. It is organised by ToolsWatch and I totally recommend you to Continue reading NetRipper at BlackHat Asia…
The purpose of NetRipper is to capture functions that encrypt or decrypt data and send them through the network. This can be easily achieved for applications such as Firefox, where it is enough to find two DLL exported functions: PR_Read and PR_Write, but it is way more difficult for Google Chrome, where the SSL_Read and Continue reading Hooking Chrome s SSL functions
The previous two blog posts describe how a Stack Based Buffer Overflow vulnerability works on x86 (32 bits) Windows. In the first part, you can find a short introduction to x86 Assembly and how the stack works, and on the second part you can understand this vulnerability and find out how to exploit it. This Continue reading Stack Based Buffer Overflows on x64 (Windows)
In the first part of this article, we discussed about the basics that we need to have in order to properly understand this type of vulnerability. As we went through how the compiling process works, how assembly looks like and how the stack works, we can go further and explore how a Stack Based Buffer Continue reading Stack Based Buffer Overflows on x86 (Windows) – Part II
I wrote this article in Romanian, in 2014, and I decided to translate it, because it is a very detailed introduction in the exploitation of a Stack Based Buffer Overflow on x86 (32 bits) Windows. Introduction This tutorial is for beginners, but it requires at least some basic knowledge about C/C++ programming in order to Continue reading Stack Based Buffer Overflows on x86 (Windows) Part I
I decided to start a blog. I will try to write as much as possible, but this will not happen too often. I will probably talk about my projects, NetRipper and Shellcode Compiler, reverse engineering or exploit development, but I will also try to cover web application security. Previous blog posts I previously wrote a Continue reading Hello, world!