21st Century Haking Techniques
(5/2009)

»Windows Timeline Analysis - Harlan Carvey

The increase in sophistication of the Microsoft (MS) Windows family of operating systems (Windows 2000, XP, 2003, Vista, 2008, and Windows 7) as well as that of cybercrime has long required a corresponding increase or upgrade in incident response and computer forensic analysis techniques.

»Analyzing Malware Introduction to Advanced Topics - Jason Carpenter

In this final article in our three-part series on analyzing malware we will discuss more advanced topics. The topics we are going to include are: polymorphic code, metamorphic code, and alternative data stream.

»Hacking ASLR & Stack Canaries on Modern Linux - Stephen Sims

This article will demonstrate methods used to hack stack canaries and Address Space Layout Randomization (ASLR) on modern Linux kernels running the PaX patch and newer versions of GCC.

»Mashup Security - Antonio Fanelli  

Mashups will have a significant role in the future of Web 2.0, thanks to one of the most recent data interchange techniques: JSON. But what about security?

»My ERP Got Hacked – An Introduction to Computer Forensics, Part II - Ismael Valenzuela  

In Part I of this article we introduced the scenario described in the Third Forensic Challenge organised by the UNAM-CERT (Mexico) back in 2006.

»First Password Shooters - Tam Hanna  

An average Graphics Processing Unit (GPU) has a dull life; it renders aliens, objects, trees, and maybe the occasional nude. That’s too bad for them…but mine is better off; it cracks passwords for fun and profit (as I forget my passwords all the time).

»RSA & AES in JAVA - Michael Schratt  

Cryptography is used for hiding information. The term cryptography itself represents several algorithms like Symmetrickey cryptography, Asymmetric-key cryptography (also called Public-key cryptography), but also Cryptosystems and Cryptanalysis.

»AV Scanner 101 - Ryan Hicks

Over the past two decades antivirus technology has evolved considerably. The changing nature of threats has driven research and development in order to combat the flood of new malware.

»The Underworld of CVV Dumping - Julian Evans  

CVV stands for CARD VERIFICATION VALUE CODE (CVV). CVV is an authentication procedure which was established by credit card companies to further efforts towards reducing fraud over the Internet

»It's All About Reputation - Matthew Jonkman  

I have a reputation. Mostly good I hope, but I have one. You have one. Probably good as well. If it's not good you probably know why, and whatever it was you did was probably worth it. Reputation is a very important concept. It allows us as humans to make decisions about many things.

»Interview with Andrey Belenko - Ewa Dudzic  

Company Established in 1990, ElcomSoft Co. Ltd is a privately owned software company headquartered in Moscow, Russia, specializing in Windows productivity and utility applications for businesses and end users.

»DefenseWall Pure Policy-Based Sandbox Application - Ewa Dudzic  

Ilya Rabinovich is the owner of SoftSphere Technologies. He is a self-taught programmer – his original degree is Engineer-Nuclear Physicist. Ilya developed DefenseWall because he saw the real need for a pure policy-based, with untrusted attribute inheritance, sandbox application. His project was, and is, the first one in the world!

CSRRT-LU, Computer Security Research and Response Team Luxembourg, is organizing for the fifth year its annual hack.lu computer security conference in Luxembourg. As every year speakers from all over the world will talk about the newest threats, techniques and researches done in both the hacking communities and the academic world.

Visit Hakin9 Website @ http://www.hakin9.org/en

<< back