Recognize-Security http://www.rec-sec.com a non-profit information security web site authored by Moshe Ben Abu (Trancer), focusing on vulnerability research, exploit development (mainly for the Metasploit Framework), web application security, information security and hacking news from around the world. Tue, 22 Mar 2011 00:09:35 +0000 http://backend.userland.com/rss092 en Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution Exploit (meta) http://www.rec-sec.com/2010/09/28/trend-micro-internet-security-2010-rce-exploit/ Stuxnet http://www.rec-sec.com/2010/09/28/stuxnet/ Bruce Schneier: The Future of the Security Industry http://www.rec-sec.com/2010/09/27/bruce-schneier-security-industry/ Microsoft Windows Live Safety Scanner (OneCare) Download and Execute Exploit http://www.rec-sec.com/2010/09/21/windows-live-onecare-local-exploit/ Novell iPrint Client ActiveX Control call-back-url Stack-based Buffer Overflow exploit (meta) http://www.rec-sec.com/2010/09/21/novell-iprint-callbackurl-buffer-overflow-exploit/ Novell iPrint Client ActiveX Control ‘debug’ Stack-based Buffer Overflow exploit (meta) http://www.rec-sec.com/2010/09/21/novell-iprint-debug-buffer-overflow-exploit/ Advanced Heap Spraying Techniques http://www.rec-sec.com/2010/09/20/advanced-heap-spraying-techniques/ Microsoft Internet Explorer iepeers.dll use-after-free exploit (meta) http://www.rec-sec.com/2010/03/10/internet-explorer-iepeers-use-after-free-exploit/ South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation exploit (meta) http://www.rec-sec.com/2010/01/26/srt-webdrive-privilege-escalation/ AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow exploit (meta) http://www.rec-sec.com/2010/01/25/aol-playlist-class-buffer-overflow/ Peter Van Eeckhoutte’s Exploit Writing Tutorials http://www.rec-sec.com/2010/01/22/corelanc0d3r-exploit-tutorials/ Recognize-Security on Twitter http://www.rec-sec.com/2010/01/21/recognize-security-on-twitter/ cPanel HTTP Response Splitting Vulnerability http://www.rec-sec.com/2010/01/21/cpanel-http-response-splitting-vulnerability/ Nmap 5.20 released http://www.rec-sec.com/2010/01/21/nmap-5-20-released/ BackTrack Linux 4 released http://www.rec-sec.com/2010/01/21/backtrack-linux-4-released/