Security_Guy

A lot have been discussed recently about this vulnerability in bash. The internet was totally shocked just like what happened with heartbleed. Several vulnerabilities have been discovered in bash, which caused the distros to release several updates on the same package and being a little chaotic to know which was…

Posted on July 17, 2011 by Edd, on canthack.org. Radare2 is an open-source reverse engineering toolkit, consisting of a disassembler, debugger and hex editor. In this article I will show you the basics by reversing some shellcode I found on Project Shellcode. To put this into context let’s briefly discuss…

Under some situations you need to automatize or extend the features of radare. There are so many scripting languages out there: python, ruby, perl, lua between others. All of them are supported by the radare package and you can use them from inside r2 using r_lang plugins and the ‘#!’…

This is a translation of this article. One of the most common technics used in UNIX for analyzing and modifying a program consists in preloading a library to make the dynamic linker priorize the functions in there before the ones coming from external libraries. In fact, in iOS, the whole…

The summer is almost over and everyone is back to the main loop. Some of us will be in Oct 21-24 at hack.lu giving a talk and a workshop. See http://radare.today/well-be-at-hack-lu-2014/ But pancake (aka Sergi Àlvarez), the author and main contributor to the project will be busy giving two trainings…