Monday, October 13, 2008

Uninformed Journal Volume 10

The Uninformed Journal has released volume 10! Skywing wrote a great article on bypassing client-side restrictions on the GPS device for the HTC Titan. Skape rocks it yet again with a new technique for bypassing malware unpackers using dual memory mappings. Mxatone digs into three vulnerabilities in win32k.sys that were patched with MS08-025 and demonstrates how to find and exploit bugs in this subsystem. Finally, I wrote an article on penetration testing IPv6 nodes on the local network, which is a detailed version of the SecTOR 2008 'Exploiting IPv6' mini-talk.

2 comments:

mac said...

Nice practical article about IPv6. However, the TCP port scanner module does not seem to be present in trunk nor 3.1:

[root@localhost trunk]# svn update
At revision 5756.
[root@localhost trunk]# find . -name tcp.rb
./lib/rex/socket/tcp.rb
./lib/msf/core/exploit/tcp.rb
./lib/packetfu/tcp.rb

hdm said...

Portscan module committed, woops :-)