Changing Directions

| | Uncategorized
This blog has served me well over the last few years.  However, for reasons of my own sanity, I’ve decided to consolidate my blogging efforts on blogger. Furthermore, this name and title is no longer the best representation of who I am and where I am at.  This started as ... Read More

Crossfit: Forever Strong

| | Uncategorized
Let me first start this post off with an assurance I haven’t forgotten the series.  I’ve been working on a few articles, however I keep finding vulnerabilities in things I wanted to show, so I have to wait till i can find something I can. However, since those articles aren’t ready for ... Read More

Causalities of Errata

| | Uncategorized
To preface the rest of this article, I am aware that I am upset right now.  I try not to write when I am like this, however the BSides drama has already caused a potential sponsor to back out.  This might leave me and some others with large bills to ... Read More

Grammar: The Stuff of Exploits

| | Uncategorized
Communicating clearly can be difficult.  Consider the following sentence: The police officer and bandit pulled their triggers.  Shots were fired, and he went down.  He breathed his last breath.* This sentence is a legitimate use of language– however it is awkward because of an unclear antecedent.  Who shot who in this ... Read More

Reverse Engineering Web Apps: Architectural Composition

| | Uncategorized
Don’t worry, give it 10 years and you will be an overnight success.  – K. Slatoff Since our process of reverse engineering relies heavily on pattern matching, being capable of identifying and decomposing architecture is a critical skill.  Unfortunately, there aren’t very many short cuts here.  I personally feel as though this ... Read More
🙂

Reversing Web Apps: The Caveats

| | Uncategorized
Because our process if reversing is not a direct 1:1 mapping to compiled reversing, we have to clarify a bit on how we can be successful.  Although some frameworks generate HTML based on the underlying code, HTML cannot always be reversed to a state of source.  People do weird stuff ... Read More

Reverse Engineering Web Applications: The Series

| | Uncategorized
There is only so much you can share in a talk, and so I’ve decided to turn a short 50 minutes into a rightfully lengthy series.  I know this post is long, but I kindly ask you bear with me.  We will revisit the topics discussed in this post repeatedly ... Read More

Giving in.

| | Uncategorized
I am somewhat bummed out to announce that I am now an owner of an iphone 4s.  I recognize that’s not something normally worth of grief– so I should explain.  If you’ve ever met me, one of the things I don’t pull any punches with is my disdain of Apple ... Read More

Breaking Non-Existant Code

| | Uncategorized
I recently ran into a fun problem that stumped me for about 1/2 hour.  I had found a value that I could control in the query string, which would put data inside a “onmouseover” attribute on an href tag.  So something like: url:          ?myvalue=”xxxx” html:     ... Read More

Of all the things I’ve lost…

| | Uncategorized
A funny thing has dawned on me recently.  During the course of an average day, I read code at least 2 to 3 times.  Sometimes it’s to quickly evaluate read a plugin I’ve downloaded, sometimes it’s to do a thorough review, and sometime’s it’s just because I want to know ... Read More