NickFnord

I’ve done the infosec reverse engineering course.  I did the online version and paid my own money for it.

If you see it as an entry level course, then I think it is fine, although the lab manual does leave a little bit to be desired.

I’ve spoken with the institute and they assure me they’re revamping the course significantly as well as…[Read more]

they’re not usually the same thing – what are you trying to achieve?

a disassembler is often combined with a debugger (as in the case of OllyDbg or IDAPro), but sometimes you can get no frills dissassemblers like objdump or windbg, which will just output the straight dissassembly with no extra functionality.

on the other side, if you’re writing…[Read more]

just came back from this conference- was quite good – listened to the kaspersky lab’s “the botnet business” seminar but it was nothing new, mostly just the details of conficker for people who didn’t already know – making the point that malware is getting far more sophisticated. 
went arround to the other vendors that were doing talks and realised…[Read more]

That actually looks really good – I found python very easy to pick up, but then hit the wall of having to search for an hour or more for every 2 minutes of code I wanted to write. was thinking of buying a python manual anyway so this looks like it could be the one to get. 

I’ll be very interested in knowing your thoughts on it.

hmm – this is all getting mighty expensive for a non-proffessional like me.

I guess I could make it tax deductible but still….  I’ve never had a need for an MSDN subscription because I almost entirely work with oracle/unix..

can’t even afford justify the cost of a full copy of IDA Pro….  guess it’s time to get me a job in the industry  🙂

back in the day we had to patch the .exe to make it not run from the HD, not the CD.  but I guess that’s not so much a problem now days with virtual CD’s etc.  not that I engage in this kind of nefarious stuff at all.

I don’t understand why they would do this – a keygen is just a reproduction of the algorithm used to produce a registration key.

unless they used the program itself to self-keygen and that somehow flagged it….

Danny Quist also has something to say about it.  interesting how anti-virus software is reporting obfuscation as potential malware

http://www.offensivecomputing.net/?q=node/1165

that would be this one  that you’re after

it’s free if you register before the 24th.  I don’t know why they don’t want students…… but just say you’re a programmer or something for your own company.  I had to put my company details in the registration form for some reason, even though I’m just going on behalf of myself.

if you’ve got a free day or so, no reason why you shouldn’t go a…[Read more]

just came accross this site also:
http://samspade.org/whois/74.125.67.100

may provide some additional info, perhaps not.

care to link to that talk?  it sounds interesting?

@skiglades wrote:

Personally I see a lot of MS-SQL when testing.  If I follow that road, does it make sense to familiarize yourself with MS-SQL and my-SQL?  Of course there is some generic injection syntax that works over both types of database, but does it make sense to concentrate on one or gain an understanding of both?

Thanks

I’d say t…[Read more]

the word “extortion” comes to mind….

but yes, discover a bug and report it and you risk a negative reaction by the vendor.  discover a bug and don’t report it and you’ll be morally conflicted until someone else reports it and it’s not your problem any more.  discover a bug and try to use this fact to get money out of people and you risk your s…[Read more]

and it’s been posted:

http://theinvisiblethings.blogspot.com/2009_03_01_archive.html

I have a personal preference for python – it’s easier to read (IMHO) and can still do a lot of the things that perl can do.  perl was originally made as a text parsing language so it’s very good at that sort of thing.  

I only use either for ad-hoc once-off type scripts or write-and-forget type jobs so for me they’re equal in functionality with p…[Read more]

I second python – only learned it this year but after forcing myself to learn perl, python feels like cheating it’s so useful and quick to develop in.

definately looking forward to this – I’m slowly creeping my way through shelcoders and havn’t made the time to fully understand heap overflows yet – this should be good  🙂

yeah, sorry – I got the subject line wrong…..  will edit it.

javascript needs to be enabled for the let me google that for you site… perhaps he has it disabled…

or perhaps he’s a troll…..