Print Edition

ptrace() function

Reading the article on XSS – Cross-site scripting will help you to learn about the ideology and the practical uses of such attacks,
The article Function Overwriting using ptrace() by Stefan Klaas sheds the light on the way ptrace() works and presents how to write your own backdoors,
Shellcodes Evolution article by Itzik Kotler presnts what are the obstacles waiting for the attackers trying to execute a shellcode on the attacked system as well as thetechniques to avoid these obstacles,
How to bypass kernel 2.6 stack randomness protection by Enrico Feresin shows how to bypass the randomness protection of Linux kernel 2.6 in order to exploit the stack based buffer overflow vulnerabilities,
I wish I could be the World Liberator - an interview with Richard Stallman.

+2 FREE CDs INSIDE
Must-have applications full versions, Cisco Certified Network Associate Course, tutorials, e-books and more...

Check it out @ Barnes&Noble!

Free article to download on hakin9 site!

hakin9 1/2007 (8)

Security Scanners Chart
Dear Readers - we present a new section in hakin9, consumers test. In this edition we asked users about their opinion on advantages and disadvantages of security scanners. You can find out if the prizes are adequate to the quality, what are the main problems that the users experienced and finally you will see the rating.

Introduction to XPath injection techniques
In this article, Jaime Blasco describes n XPath Injection attack which is one of the latest techniques employing manipulating XPath queries in order to extract information from an XML database. He will show you how to employ XPath injection method to bypass safeguards in certain applications.

hakin9 2/2006

Snort_inline as a solution
Pierpaolo Palazzoli, Matteo Valenza
Using Snort_inline in many different environments and scenarios has proved to be a winning strategy to secure internal networks, DMZ networks or home networks. In order to work properly in the drop mode, it should adapt to the features of the environment it is protecting. Therefore, we will not only present its configuration techniques but also the ways to add a dedicated device which is best suited for the environment we want to protect.

We're up against - Interview with Dr. Gary McGraw
Gary McGraw, Cigital, Inc.'s CTO, is a world authority on software security. Dr. McGraw is co-author of five best selling books. We asked him about IT security situation, carless private users, vulnerabilities in the system and many more...?