Archive for the ‘Security’ Category

Patching Security Holes With OllyDbg (Part 1/3)

Posted by rajivvishwa On February - 10 - 2009
This entry is part 1 of 3 in the series OllyDbg

OllyDbg is a 32-bit assembler level analyzing debugger for Microsoft Windows. This machine level debugger is created by Oleh Yuschuk for the 80×86. OllyDbg traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings. These features can be utilized to understand how an application internals.

Introduction

Ollydbg mainly has 4 windows in the default layout. CPU Window, Registers, Memory Stack and HEX Dump window. We will be working on CPU window most of the time.

ollydbgrefscreen

OllyDbg Download : Download

A set of 3 tutorials illustrated here explains on how effectively can OllyDbg be used to identify the security holes and to ensure that the code written is healthy.

Read the rest of this entry »

Quickly Switch Between OpenDNS And Direct Connection With NetSetMan

Posted by rajivvishwa On February - 3 - 2009

OpenDNS is a service which provides parental control solution by filtering the sites based on the URL entered by the user. OpenDNS can be easily setup by replacing the DNS nameserver provided by the ISP to the OpenDNS specific one. By changing the settings as in when required we can switch from direct connection/OpenDNS and vice versa. But this might be a tedious task to go and change the LAN settings when one might want to do it frequently. Let us find a work around for this.

Read the rest of this entry »

Download Saved Passwords in Firefox With Firepassword

Posted by rajivvishwa On January - 11 - 2009

Firepassword is a tool which is used to enumerate the passwords saved in the Firefox password manager. This tool can be used to extract the credentials in plain text from the Firefox database and download it into a flat file for later use.
Read the rest of this entry »

Cross-site request forgery Demo

Posted by rajivvishwa On December - 31 - 2008

XSRF is an exploit where malicious scripts are transmitted from one trusted site to trigger undesirable operations in some other user authenticated trusted site. The user-website trust is broken and this is exploited. Read the rest of this entry »

Enable-Disable Usb Drives With a Batch file in a Click

Posted by rajivvishwa On December - 15 - 2008

With the help of batch programming we can enable or disable USB device in a single click.ACL permissions are also set during the process.

The script will enable the security permissions which will help us to modify certain registry keys, then modifies the required keys and reverts back the permissions.

Read the rest of this entry »

Subscribe RSS
Follow me on TwitterTechnoratiYoutube VidsLinkedIn ProfileDelicious