분류 전체보기3288 728x90 Offensive Security Exploit Weekend Sud0′s story : After quickly analyzing the pdf file, it was clear that the PDF reader is vulnerable to a buffer overflow when parsing an overly long string in the "Title" field. (Simply open the pdf file in a editor or use Didier Stevens’ pdf-parser.py tool to list the elements in the pdf file) When opening the PoC pdf file in Foxit Reader (with Immunity Debugger attached to it), an access viola.. 2010. 11. 23. Hash Cracking tutorial with HashCat HashCat is a tool for cracking various types of hash. This tool can do more than one Hash cracking, which means we can put some hashes into a file.txt and it crack the hashes simultaneously. we can do offline cracking hashes (it means we don`t need an Internet connection that uses the hash databases that have been cracked before). the hash algorithm supported by this tool include: * MD5 * Md5 ($.. 2010. 11. 22. iPhone Forensics White Paper Summary (from Company Information) iPhoneAnalyzer is a newcomer to the iPhone forensics market providing a cross-platform software solution. With both open-source and low-cost commercial options is provides a cost-effective way of exploiting iPhone data in a forensically safe way or simply exploring the usually hidden files on an iPhone, iTouch or iPad. Based on a robust Java library it provides.. 2010. 11. 19. 웹로그에서 폰 브라우저명 추출 스크립트 #!/bin/sh # # 웹로그에서 폰 브라우저만 추출 # # 2009.4.13(월) # by 좋은진호(truefeel, http://coffeenix.net/ ) DATE="20090412" if [ "$1" != "" ]; then DATE="$1" fi for ph in SCH- SPH- SGH- LG- CANU IM- EV- iPhone Nokia BlackBerry do echo "* search : $DATE & $ph" grep -h $ph access.log.${DATE}* > phone-${DATE}_${ph}.txt sleep 1 done # awk -F\" '{print $6}' phone-${DATE}_* |sort | uniq > phone-list_${DATE}.txt 제 목 :.. 2010. 11. 19. 종신보험, PCA· 메트라이프 등 외국계가 비싸 [ 삼성생명·메트라이프생명의 변액보험 자산비중 ] (단위: %) 2010. 11. 17. 이전 1 ··· 494 495 496 497 498 499 500 ··· 658 다음 728x90 728x90