OpenRCE: Blog

Hack In The Box '08

Mon, 20 Oct 2008 19:52:52 -0500

For anyone heading to Hack In The box this year I will be there giving a talk entitled "Full Process Reconstitution from Memory" http://conference.hackinthebox.org/hitbsecconf2008kl/?page_id=175

If your curious about it and don't want to wait for my talk or you just want to meet up for drinks, drop me a line peter.silberman@gmail.com

Debug Strings

Tue, 10 Jul 2007 11:11:46 -0500

Here is a fun debug string:
.text:00404396 push offset aConnectionSlow ; "connection slow. Attempted DOS?"
.text:0040439B call sub_404C50

You can get this debug message if you fragment a packet... =/

RAIDE - Blackhat

Sun, 06 Aug 2006 12:28:30 -0500

Well i'm still recovering from Vegas. It was a blast i don't think even blackhat thought that many people would be there. I've posted the slides from our talk as well as the binaries. Enjoy.
Peter~

PAIMEIdiff

Sat, 24 Jun 2006 17:08:46 -0500

Since we're on the heels of the PAIMEI release. I thought i'd post some screen shots (a teaser if you will) of the module I've been working for some time. Its called PAIMEIdiff I think the name sorta helps explain what it does. You can see the slides from pedram's talk for some more info on PAIMEIdiff. PAIMEIdiff went out as a beta today so hopefully with all the testing i can get a public version out in a week or two. Check out my repository for the screen shots.
Later'
Peter~

Sony Video

Thu, 03 Nov 2005 21:45:35 -0600

Hey guys,

I've posted to my file repository a video of a BSOD in the Sony rootkit. This is such a minor vuln not sure I'll bother posting it to any lists and such but for your own amusement enjoy it. There maybe a root to come as well. We'll see what I got left in the gas tank.

I would like to thank:
Pedram, Greg, Ero, Jamie, and BB,TO,AC,CD,CL,MP (Initials to protect the innocent).