![]() | SekIT 2008 |
enum Sections
{- lang = PL | EN;
- RSS(PL, EN);
- Tools*new*
- Security advisories
- Code Snippets
- Photo gallery
- About me

class BlogRoll
{- int arashi coldwind blogspot();
- int arashi coldwind brocante();
- int j00ru blog();
- int portolio xa();
- int nemessica uw-blog org();
- int icewall blog();
- int krzywy-rce();
- int pi3 blog();
- int blog pentestera();
- int piotr konieczny();
- int security news();
- int sil2100/vx's web log();
- int lcamtuf's blog();
- int invisible things();
enum Tags
{Complexity
OS
Arch/Computer
- cpc464 ()
Branch
- security ()
- format bug ()
- race condition ()
- re ()
Language
Other
};class SitesOfTheGuyThatHostsMe:)
{- int 2o6_pl();
- int jabber_2o6_pl();
- int pctk_org();
- int afterme_pl();
int main()
{- "How NOT to hide your face";
- "What's up at my workshop? Presenting, HWFramework";
- "CONFidence 2010 - video from our lecture about the Windows vulnerabilities";
- "Just some old PHP research";
- "HiperDrop 0.0.1";
- "Hispasec, time to move on...";
- "RECON - slideshow";
- "CONFidence 2010 slides and original vulnerability advisories";
- "RECON 2010 - paper accepted";
- "Windows CSRSS cross-version API Table";
- "HITB Dubai PDF and CONFidence 2010 in Krakow";
- "Volcano in the backyard and HITB Dubai";
- "[HISPASEC Research] Windows Kernel Vulnerabilities... x5 :)";
- "Hack In The Box 2010 Dubai, "Case study of recent Windows vulnerabilities"";
- "Microsoft Windows CSRSS Local Privilege Elevation Vulnerability";
- "The tale of Syndicate Wars Port";
- "Syndicate Wars Port - a reverse-engineering tale";
- "GDT and LDT in Windows kernel vulnerability exploitation";
- "HITB Magazine (ezin) #1";
- "DR6 may or may not be useful for bochs/VirtualPC detection";
- "BSWAP + 66h prefix";
- "VirusTotal Uploader 2.0";
- "CONFidence 2.0, slideshow, SilkProxy 0.0.1";
- "Windows Win32k syscall table";
- "Google Go, my thoughts and a simple raytracer";
- "PHP getimagesize internals (part 3): PNG";
- "My first laptop - Bondwell B200 (CPU 80C88)";
- "PHP getimagesize internals (part 2): GIF";
- "PHP getimagesize internals (part 1)";
- "D-Link DI-524 and 2v2 in StarCraft";
- "A step beyond the drivers\etc\hosts file";
- "RAND_MAX-related misinterpretation, and Art of File 3D";
- "Random thoughs, 2nd edition";
- "Banker trojans - a return to the past";
- "Random security thoughts";
- "Art of file - graphical interpretation of a file";
- "CONFidence 2009 ESET crackme - solution";
- "CONFidence 2009 - gg plz re :)";
- "RE-Enter teh blog";
- "ANSI Escape Codes for Windows 7 RC";
- "How to make your life simpler - GDB scripts embedded in assembly source code";
- "SysDay 2009 post conference materials (and the unicorn)";
- "March GDPL 3h compo - results";
- "After the march 3h GDPL compo...";
- "OS X, Objective C i RE";
- "OS X vs Write-What-Where Condition";
- "Automagical function list in C++";
- "Entropy";
- "Ent v.0.0.3";
- "Referer spam, episode 2";
- "Conferences, conferences...";
- "Few random things";
- "Someone forgot to finish the spam generator. Again.";
- "Return-oriented exploiting";
- "ExcpHook ver 0.0.5-rc2";
- "New layout";
- "CPC464 and cassettes";
- "Windows 7 - a list of change in exports, update";
- "SIN*COS";
- "Enter teh ANSI Escape Code support for internal cmd.exe commands and BAT scripts";
- "Using OpenGL in .BAT scripts";
- "Windows 7 - short list of changes in kernel32.dll exports";
- "BAT scripts and objective programming";
- "Rant: The week of my own private Hardware War";
- "Lightsack - code from CPC, conclusion";
- "Lightsack - how to send data from CPC 464 to PC without owning the neccesery cables";
- "CPC 464";
- "Code snippets";
- "A malware "stealing" AppInit_DLLs entrypoint";
- "LOOP vs. default Mac OS X assembler";
- "Forgot something?";
- "Freedom for everything - total annihilation of process memory";
- ".S.k.y.";
- "Format bug, Vista and %n";
- "An interesting anti-RE schema";
- "Missing gettimeofday function and a race condition";
- "SekIT 2008";
- "Hacker Challenge 2008";
- "Security Days - task 3, 4";
- "Security Days 6 - task 2";
- "Quick news - final results of Security Days 6 and photos from the SekIT conference";
- "SekIT 2008";
- "Security Days 6, day 1 - solution";
- "Install Chrome, and You will stop being anonymous to Google";
- "Security Days 6, day 1";
- "Is function hooking in Chrome really a security mechanism?";
- "Is automatic file download in Google Chrome really a vulnerability?";
- "Remote Buffer Overflow in Google Chrome";
- "Google Chrome's Sandbox";
- "Google Chrome - first impression";
- "Urban Terror";
- "Subsection ";
- "Security Days 6";
- "Old advisories";
- "Fibers in a thread";
- "Metaball, Python+Pygame+Psyco and SDL+C++";
- "UFO: Alien Invasion";
- "Naked functions in gcc/g++";
- "1rd";
- return "vexillium.org";
class OldSites
{- int gynvael_vexillium_org();
- int gynvael_lunarii_org();
- int gynvael_uw-blog_org();
// copyright © Gynvael Coldwind
// design & art by Xa
// logo font (birdman regular) by utopiafonts / Dale Harris
/* the author and owner of this blog hereby allows anyone to test the security of this blog (on HTTP level only, the server is not mine, so let's leave it alone ;>), and try to break in (including successful breaks) without any consequences of any kind (DoS attacks are an exception here) ... I'll add that I planted in some places funny photos of some kittens, there are 7 of them right now, so have fun looking for them ;> let me know if You find them all, I'll add some congratz message or sth ;> */
Vulns found in blog:
* XSS (pers, user-inter) by ged_
* XSS (non-pers) by Anno & Tracerout
* XSS (pers) by Anno & Tracerout
* Blind SQLI by Sławomir Błażek
* XSS (pers) by Sławomir Błażek
// design & art by Xa
// logo font (birdman regular) by utopiafonts / Dale Harris
/* the author and owner of this blog hereby allows anyone to test the security of this blog (on HTTP level only, the server is not mine, so let's leave it alone ;>), and try to break in (including successful breaks) without any consequences of any kind (DoS attacks are an exception here) ... I'll add that I planted in some places funny photos of some kittens, there are 7 of them right now, so have fun looking for them ;> let me know if You find them all, I'll add some congratz message or sth ;> */
Vulns found in blog:
* XSS (pers, user-inter) by ged_
* XSS (non-pers) by Anno & Tracerout
* XSS (pers) by Anno & Tracerout
* Blind SQLI by Sławomir Błażek
* XSS (pers) by Sławomir Błażek

