http://phed.org The Rantings of Michael Eddington Thu, 20 May 2010 16:02:56 +0000 http://backend.userland.com/rss092 en Another fun fuzzing target are SQL Stored Procedures.  This was a hotbed for exploits a number of years ago and remains a hot topic thanks to the plethora of web applications providing a target rich environment.  Oddly, there are few tools available for fuzzing stored procedure, most of which are ... http://phed.org/2009/07/15/fuzzing-sql-stored-procedures/ One feature that has been much requested for Peach is the ability to change data element defaults, for example the default byte order for numbers, or string type (wchar, char, utf8, etc).  Now in Peach 2.3 this is possible by using the top level <Defaults> element. ?????? ????? ???? ????? ... http://phed.org/2009/07/11/changing-defaults-for-data-elements/ Fuzzing shared libraries is not the most common of tasks, but is a useful tool to have available.  Many times methods exposed by scripting languages such as JavaScript, PHP, etc are simply methods exposed by a shared library (DLL for you windows peeps). Sadly most fuzzers do not support fuzzing shared ... http://phed.org/2009/07/10/fuzzing-shared-libraries/ Lilo & Stitch 2: Stitch Has a Glitch movie A Merchants of Venus (aka Dirty Little Business) ipod Rambo trailer ????????? ??????? ?????? ????? Devil Times Five aka People Toys ipod They Live divx Rob Roy movie Road Trip: Beer Pong video Frankenstein full movie True Lies buy Race to Witch Mountain divx Blood ... http://phed.org/2009/01/29/peach-dojo-cansecwest-2009/ Yes, even though there has been much silence recently, this blog is still alive and kicking.  I've been spending all my time working on Peach 2.3 and related things. The Contract Killer film The first beta of Peach 2.3 should hit sourceforge this week, it's currently undergoing it's first ... http://phed.org/2009/01/29/still-alive/ The Enforcer The past ph-neutral security conferences in Berlin I have attended were all very fun, laid back, and informative.  The European security "underground" scene is highly refreshing after so many high cost US conferences.  Additionally the people are excellent and provide for good conversations.  This ... http://phed.org/2008/05/25/peach-ph-neutral-0x7d8/ The Microsoft .NET Framework provides the developer with a number of advanced features such as P/Invoke and unsafe code blocks.  This article will take a look at unsafe code blocks and some of the security issues that should be looked for when reviewing or writing such code. The Spider Woman movie ... http://phed.org/2008/05/22/net-unsafe-security-issues-part-1/ Shut Up and Sing aka Wedding Weekend ipod Head of State rip ????????? ????? ????? Caddyshack full Blow divx Tenderness ipod Once Upon A Time In The West trailer ??????????? ??? I'm currently running around Europe dropping in on a few security conferences.  ... http://phed.org/2008/05/22/owasp-appsec-08-belgium/ Encoding output to prevent cross site scripting (XSS) is old news to most in the web security community, but it's still an area that is done incorrectly, or with out thought to future issues that might arise.  Additionally, with the explosion of AJAX based applications there is a lack ... http://phed.org/2008/05/19/preventing-xss-with-correct-output-encoding/ Silly bug got into the 2.1 release that caused the <Number> type to stop working (oops!), fixed and a new release pushed up. Desperate Hours the movie The Postman buy ??????????? ???????? ??? Pokemon: Mewtwo Returns trailer Shanghai Kiss film P2 film Until the End of the World move d ... http://phed.org/2008/05/19/peach-21-beta2a/