| Papers |
|
SOCK_RAW Demystified
SOCK_RAW Demystified is a paper I wrote about explaining the
implementation of the raw sockets mechanism in the kernels of
FreeBSD 7.0 and Linux 2.6. It delves into network internals
showing the details of this powerful socket type and how it
works behind the scene.
paper
|
|
Locating Stateless Firewalls
Locating Stateless Firewalls focuses on methods to discern
between stateful and stateless firewalls. It discusses about
how stateless firewalls can be further exploited due to
possible misconfigurations and the result of RFC ambiguites.
paper
|
|
Coding a Syn Scanner
Coding a Syn Scanner is a paper which explores the craft
of making a custom port scanner that takes advantage of
half-open connections. It explains in detail all the process
required to code such a tool from scratch. It uses the codebase
of Creeper - the simple syn scanner, which was actually written
in parallel to this guide.
paper
creeper.c.html
|
|
Hacking Bash History
Hacking Bash History discusses about why the history mechanism
of bash cannot be used as a monitoring/logging facility even
with the strictest measures applied to secure it. A section
of the text is dedicated to hacking the bash source code to
interface it with syslog.
paper
|