Recognize-Security http://www.rec-sec.com a non-profit information security web site authored by Moshe Ben Abu (Trancer), focusing on vulnerability research, exploit development (mainly for the Metasploit Framework), web application security, information security and hacking news from around the world. Thu, 11 Mar 2010 13:48:09 +0000 http://backend.userland.com/rss092 en Microsoft Internet Explorer iepeers.dll use-after-free exploit (meta) http://www.rec-sec.com/2010/03/10/internet-explorer-iepeers-use-after-free-exploit/ South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation exploit (meta) http://www.rec-sec.com/2010/01/26/srt-webdrive-privilege-escalation/ AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow exploit (meta) http://www.rec-sec.com/2010/01/25/aol-playlist-class-buffer-overflow/ Peter Van Eeckhoutte’s Exploit Writing Tutorials http://www.rec-sec.com/2010/01/22/corelanc0d3r-exploit-tutorials/ Recognize-Security on Twitter http://www.rec-sec.com/2010/01/21/recognize-security-on-twitter/ cPanel HTTP Response Splitting Vulnerability http://www.rec-sec.com/2010/01/21/cpanel-http-response-splitting-vulnerability/ Nmap 5.20 released http://www.rec-sec.com/2010/01/21/nmap-5-20-released/ BackTrack Linux 4 released http://www.rec-sec.com/2010/01/21/backtrack-linux-4-released/ Metasploit Unleashed – Mastering the Framework http://www.rec-sec.com/2009/12/17/metasploit-unleashed/ Metasploit Framework 3.3 released http://www.rec-sec.com/2009/11/18/metasploit-framework-3-3/ Microsoft Security Intelligence Report volume 7 http://www.rec-sec.com/2009/11/02/microsoft-security-intelligence-report-volume-7/ Rapid7 Acquires the Metasploit Project http://www.rec-sec.com/2009/11/01/rapid7-acquires-metasploit/ Digital Whisper #2 released http://www.rec-sec.com/2009/10/31/digitalwhisper-2-released/ Why Bezeq Int SafeNet Service is Useless http://www.rec-sec.com/2009/10/16/bezeq-int-safenet-sucks/ HTTPDX h_handlepeer() Function Buffer Overflow exploit (meta) http://www.rec-sec.com/2009/10/16/httpdx-buffer-overflow-exploit/