The Glider

It wasn’t supposed to be this way.

The Republican race this year wasn’t supposed to start until February, so voters didn’t have to be troubled with politics when they were still concentrating on mistletoe.

Read full article >>

If you’re following the Nevada caucuses this evening, you may notice something different about the election results: They’ll be broadcast via Google and Twitter.

It’s the second time Republican Party officials have partnered with Google to release election results.  In January, the Iowa GOP provided caucus results via Google, providing a faster alternative to the Associated Press, which most news organizations use to provide election data.

Read full article >>

This time i made a video about basic exploit development process on windows. The target machine is a Windows Server 2003 R2 with DEP disabled running a vulnerable software called vserver. Basically the vulnerable software is listening on TCP port 15000 waiting for some input and if you provide a string bigger than 15 characters it will crash. Thanks to corelan.

This is a highly demo oriented talk covering following major areas - evolution of DOM XSS, root cause, taint sources and sinks, detection and analysis (covers DOMinator), mitigation techniques leveraging defensive coding and output encoding,covers issues and precautions needed with jQuery and YUI, the most popular JS libraries. ClubHack 2011 Hacking and Security Conference (http://clubhack.com/2011) Speaker: Bishan Singh Kochher Presentation: http://www.slideshare.net/clubhack/domxss-club-hack2011clubhack2011

This is a highly demo oriented talk covering following major areas - evolution of DOM XSS, root cause, taint sources and sinks, detection and analysis (covers DOMinator), mitigation techniques leveraging defensive coding and output encoding,covers issues and precautions needed with jQuery and YUI, the most popular JS libraries. ClubHack 2011 Hacking and Security Conference (http://clubhack.com/2011) Speaker: Bishan Singh Kochher Presentation: http://www.slideshare.net/clubhack/domxss-club-hack2011clubhack2011

This is a highly demo oriented talk covering following major areas - evolution of DOM XSS, root cause, taint sources and sinks, detection and analysis (covers DOMinator), mitigation techniques leveraging defensive coding and output encoding,covers issues and precautions needed with jQuery and YUI, the most popular JS libraries. ClubHack 2011 Hacking and Security Conference (http://clubhack.com/2011) Speaker: Bishan Singh Kochher Presentation: http://www.slideshare.net/clubhack/domxss-club-hack2011clubhack2011