OpenRCE: Blog

Whoops ;]

Wed, 20 Jun 2007 16:42:26 -0500

Nothing about Eleytt this time. Currently working on a few projects concerning automated exploitation, but - this time - I wanted to show you my second 'me'. This is the poem I wrote recently:

The other comprehension level, the other understanding
Sitting on the grass, watching the sky, listening to the wind
Listening to people babbling, so many words are spoken
Being naive to think they realise it someday, time travel and smile

Toxic uncertainty, absolute reality and the only way to follow
The only beautiful illusion Sidharta would never tell you BELIEVE
The empitness of pure logic, and the weaknesses of decisions
True comparisons, and false listening

You speak only with the Godness of the Centuries
Denethgilne is the only word you are looking for
The only thing that still keeps you awake
Ready to die, and to time travel, and smile

You did your work, and smiled to those who still failed to understand
You stopped playing when you were a child – now you have nothing
In your head, you simply don't understand , Genius has never so much meant seeker
Skepticism of the right speech, Christ is still alive in you and me

You do not watch TV, You do not play with friends anymore
You fail to translate yourself into humane
You dream of time travel, flying, understanding the mathematics of the world
You dream of building a better mathematics

and you are going to do it, die forgotten in the trash

As in the mild winds, the only beauty is hidden in no countries, no boundaries
No police, and no rules – tree and human decide what to do
The only solution, the only understanding
Standing sad, between the trees, laying on the bench in the park

no one wants to listen, you nearly smile

And the mathematics of the centuries, the fractals and beauty glazing
right before your eyes

you fail to react, you watch

one moment, one concentration, will and strength in the weaknesses
and you are free, lost for the world

where the place for mathematics of the world? For the mathematicians
who fail to understand the Zero Module

Abel and Cubic theories, Ass and Mule problems, Gauss's Lemma
Lagrange Spectrums, Liouville's approximation or Euler's beauty

They mean nothing when you fail to understand why.
And you fail to live, as you fail to smile
and you fail to die.

Eleytt.com

Tue, 29 May 2007 15:01:59 -0500

Ok, guys. I started (with my friend) a new company in Poland. This time it is going to be a security-related one - Eleytt (www.eleytt.com). We've already gathered many people but still need more. Eleytt Pentesting & Security Solutions is going to be the one (and the only) such a security company in Poland. We strive for the diamonds to gather the stars, don't we?

We already started various projects with people from around the world - I run much of this stuff.

What is Eleytt?

It is advanced reverse engineering.
It is penetration testing (many achievements in Poland!)
It is vulnerability assessment, development and exploitation.
It is 3rd-party hotpatching.
It is risk management (Eleytt provides Business Continuity Program)

We are also going to develop other functionalities, but we need more time ;-)

BTW, I wrote an open letter about the Polish system of eduction with a view of changing the way of thinking - to the way of John Nash'es or Ramanjuan's. I receive plenty of letters with "you son of a #%@%#", but I also receive (thanks Nature!) letters of support (staunch-supporter couch-potato lifestyle or so). I want to concentrate on those who really want eduction; education that does not necessarily mean going to school. Education system that support genius-lifestyle ;-)

Microcontrollers

Thu, 24 May 2007 18:29:08 -0500

I cannot move away from books(read: google) when each time I look at what people do with microcontrollers. Very interesting link can be found here:

http://instruct1.cit.cornell.edu/courses/ee476/FinalProjects/

Very interesting projects - currently I am spending much of my time on microcontrollers. Hope you find this link interesting ;-)

A Few Questions

Wed, 07 Mar 2007 18:17:01 -0600

This entry is not an in-depth security analysis. It is just asking questions.

Being logged in as Administrator does not mean You have Administrator rights. This can be changed using gpEdit.msc tool - we have to open security options and disable: UAC - Run all users including Administrators as standard users.

We should also set UAC: Behavior of the elevation prompt - No prompt. Ok, but are all the important applications blocked from being accessed using standard users privileges? (for example: "at" command is blocked).

I guess, not all the important facilities are blocked. We are granted access to cmdkey, we can list available stored credentials without being asked to become Administrator, we can also delete RAS credentials or delete all existing credentials. LSM (Local Session Manager Service) simply crashes when it is invoked. Is this really what was meant to be? I could say three times more examples of this.

New lectures in Poland

Sun, 04 Mar 2007 12:49:19 -0600

A few universities came to me with a proposal to give a malware-labs-lecture. Here are the current slides I have
already prepared.

Here are the slides:
sapheal.cybersecurity.pl/lecs/lec01.ppt

Currently, I am working on the second part of the lectures - the part that focuses on advanced malware analysis. I hope it
is going to be nice.