OpenRCE

📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Users What's New

Customize Theme

Flag: Tornado! Hurricane!

Created: Wednesday, June 20 2007 16:42.26 CDT

Direct Link, View / Make / Edit Comments

Whoops ;]

Author:

sapheal

# Views: 2541

Nothing about Eleytt this time. Currently working on a few projects concerning automated exploitation, but - this time - I wanted to show you my second 'me'. This is the poem I wrote recently:

The other comprehension level, the other understanding
Sitting on the grass, watching the sky, listening to the wind
Listening to people babbling, so many words are spoken
Being naive to think they realise it someday, time travel and smile

Toxic uncertainty, absolute reality and the only way to follow
The only beautiful illusion Sidharta would never tell you BELIEVE
The empitness of pure logic, and the weaknesses of decisions
True comparisons, and false listening

You speak only with the Godness of the Centuries
Denethgilne is the only word you are looking for
The only thing that still keeps you awake
Ready to die, and to time travel, and smile

You did your work, and smiled to those who still failed to understand
You stopped playing when you were a child – now you have nothing
In your head, you simply don't understand , Genius has never so much meant seeker
Skepticism of the right speech, Christ is still alive in you and me

You do not watch TV, You do not play with friends anymore
You fail to translate yourself into humane
You dream of time travel, flying, understanding the mathematics of the world
You dream of building a better mathematics

and you are going to do it, die forgotten in the trash

As in the mild winds, the only beauty is hidden in no countries, no boundaries
No police, and no rules – tree and human decide what to do
The only solution, the only understanding
Standing sad, between the trees, laying on the bench in the park

no one wants to listen, you nearly smile

And the mathematics of the centuries, the fractals and beauty glazing
right before your eyes

you fail to react, you watch

one moment, one concentration, will and strength in the weaknesses
and you are free, lost for the world

where the place for mathematics of the world? For the mathematicians
who fail to understand the Zero Module

Abel and Cubic theories, Ass and Mule problems, Gauss's Lemma
Lagrange Spectrums, Liouville's approximation or Euler's beauty

They mean nothing when you fail to understand why.
And you fail to live, as you fail to smile
and you fail to die.

Created: Tuesday, May 29 2007 15:01.59 CDT

Modified: Tuesday, May 29 2007 21:35.11 CDT

Direct Link, View / Make / Edit Comments

Eleytt.com

Author:

sapheal

# Views: 2587

Ok, guys. I started (with my friend) a new company in Poland. This time it is going to be a security-related one - Eleytt (www.eleytt.com). We've already gathered many people but still need more. Eleytt Pentesting & Security Solutions is going to be the one (and the only) such a security company in Poland. We strive for the diamonds to gather the stars, don't we?

We already started various projects with people from around the world - I run much of this stuff.

What is Eleytt?

It is advanced reverse engineering.
It is penetration testing (many achievements in Poland!)
It is vulnerability assessment, development and exploitation.
It is 3rd-party hotpatching.
It is risk management (Eleytt provides Business Continuity Program)

We are also going to develop other functionalities, but we need more time ;-)

BTW, I wrote an open letter about the Polish system of eduction with a view of changing the way of thinking - to the way of John Nash'es or Ramanjuan's. I receive plenty of letters with "you son of a #%@%#", but I also receive (thanks Nature!) letters of support (staunch-supporter couch-potato lifestyle or so). I want to concentrate on those who really want eduction; education that does not necessarily mean going to school. Education system that support genius-lifestyle ;-)

Created: Thursday, May 24 2007 18:29.08 CDT

Modified: Sunday, May 27 2007 10:25.09 CDT

Direct Link, View / Make / Edit Comments

Microcontrollers

Author:

sapheal

# Views: 2365

I cannot move away from books(read: google) when each time I look at what people do with microcontrollers. Very interesting link can be found here:

http://instruct1.cit.cornell.edu/courses/ee476/FinalProjects/

Very interesting projects - currently I am spending much of my time on microcontrollers. Hope you find this link interesting ;-)

Created: Wednesday, March 7 2007 18:17.01 CST

Modified: Wednesday, March 7 2007 18:51.25 CST

Direct Link, View / Make / Edit Comments

A Few Questions

Author:

sapheal

# Views: 2684

This entry is not an in-depth security analysis. It is just asking questions.

Being logged in as Administrator does not mean You have Administrator rights. This can be changed using gpEdit.msc tool - we have to open security options and disable: UAC - Run all users including Administrators as standard users.

We should also set UAC: Behavior of the elevation prompt - No prompt. Ok, but are all the important applications blocked from being accessed using standard users privileges? (for example: "at" command is blocked).

I guess, not all the important facilities are blocked. We are granted access to cmdkey, we can list available stored credentials without being asked to become Administrator, we can also delete RAS credentials or delete all existing credentials. LSM (Local Session Manager Service) simply crashes when it is invoked. Is this really what was meant to be? I could say three times more examples of this.

Created: Sunday, March 4 2007 12:49.19 CST

Modified: Sunday, March 4 2007 12:50.51 CST

Direct Link, View / Make / Edit Comments

New lectures in Poland

Author:

sapheal

# Views: 2799

A few universities came to me with a proposal to give a malware-labs-lecture. Here are the current slides I have
already prepared.

Here are the slides:
sapheal.cybersecurity.pl/lecs/lec01.ppt

Currently, I am working on the second part of the lectures - the part that focuses on advanced malware analysis. I hope it
is going to be nice.

Archived Entries for sapheal

Subject	# Views	Created On
No archived blog entries found.

There are 31,328 total registered users.

Recently Created Topics
[help] Unpacking VMP...	Mar/12
Reverse Engineering ...	Jul/06
let 'IDAPython' impo...	Sep/24
set 'IDAPython' as t...	Sep/24
GuessType return une...	Sep/20
About retrieving the...	Sep/07
How to find specific...	Aug/15
How to get data depe...	Jul/07
Identify RVA data in...	May/06
Question about memor...	Dec/12

Recent Forum Posts
Finding the procedur...	rolEYder
Question about debbu...	rolEYder
Identify RVA data in...	sohlow
let 'IDAPython' impo...	sohlow
How to find specific...	hackgreti
Problem with ollydbg	sh3dow
How can I write olly...	sh3dow
New LoadMAP plugin v...	mefisto...
Intel pin in loaded ...	djnemo
OOP_RE tool available?	Bl4ckm4n

Recent Blog Entries
	halsten	Mar/14
Breaking IonCUBE VM
	oleavr	Oct/24
Anatomy of a code tracer
	hasherezade	Sep/24
IAT Patcher - new tool for ...
	oleavr	Aug/27
CryptoShark: code tracer ba...
	oleavr	Jun/25
Build a debugger in 5 minutes
More ...

Recent Blog Comments
	nieo on:	Mar/22
IAT Patcher - new tool for ...
	djnemo on:	Nov/17
Kernel debugger vs user mod...
	acel on:	Nov/14
Kernel debugger vs user mod...
	pedram on:	Dec/21
frida.github.io: scriptable...
	capadleman on:	Jun/19
Using NtCreateThreadEx for ...
More ...

Imagery

SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit