michael.ligh@mnin.org Technical Suspense and Forensic Horror Stories http://www.mnin.org This RSS will not be updated any longer. Please point to mnin.blogspot.com. http://mnin.blogspot.com Literature Sun, 08 July 2007 22:50 -0400 Analysis of ANI "anih" Stack Overflow. Email me for a video/audio. http://www.mnin.org/write/ani-notes.pdf Literature Fri, 30 Mar 2007 04:39 -0400 Analysis of CVE-2007-0211 http://www.mnin.org/write/2007_Shell.pdf Literature Wed, 14 Mar 2007 21:11 -0400 Analysis of CVE-2007-0024 http://www.mnin.org/write/2007_VML2.pdf Literature Wed, 17 Jan 2007 18:31 -0400 Analysis of CVE-2006-5994 http://www.mnin.org/write/2006_WordMso.pdf Literature Wed, 17 Jan 2007 18:31 -0400 Analysis of CVE-2006-3730 http://www.mnin.org/write/2006_setSlice.pdf Literature Wed, 17 Jan 2007 18:31 -0400 Multiple Vulns in F5 Firepass SSL VPN http://www.mnin.org/advisories/2007_firepass.pdf Literature Thr, 16 Nov 2006 12:00 -0400 SSC and MNIN Malware Case Study http://ip.securescience.net/advisories/pubMalwareCaseStudy.pdf Literature Thr, 16 Nov 2006 12:00 -0400 eDirectory Stack Overflow http://mnin.org/advisories/2006_novell_httpstk.pdf Advisories Fri, 20 Oct 2006 17:12 -0400 ZERT and MS VML Patch http://mnin.org/write/2006_vmlpatch.pdf Literature Thr, 05 Oct 2006 17:12 -0400 Python To Extract Malware http://mnin.org/write/2006_extract_xor.pdf Literature Sun, 10 Sep 2006 19:43 -0400 Torpig VMM/IDT Signatures http://mnin.org/write/2006_torpigsigs.pdf Literature Sun, 10 Sep 2006 16:59 -0400 Tumbelweed Remote Code Exec Vuln http://mnin.org/advisories/2006_cp5_tweed.pdf Advisories Thr, 31 Aug 2006 01:26 -0400 Vmware Shellcode Injection http://mnin.org/write/2006_vmshell_injection.pdf Literature Wed, 30 Aug 2006 01:26 -0400 Unpacking FSG http://mnin.org/write/2006_unpacking_fsg.pdf Literature Thu, 17 Aug 2006 19:08 -0400 Hacking the Packer http://mnin.org/write/2006_hacking_the_packer.pdf Literature Thu, 17 Aug 2006 19:08 -0400 User-Agent XSS and Cookie Overflow http://mnin.org/write/2006_access_analytics.html Literature Thu, 13 Jul 2006 20:16 -0400 Life and Times of Ddabx http://mnin.org/write/2006_ddabx_lifetimes.pdf Literature Tue, 11 Jul 2006 20:49 -0400 Leo Stoller - Trademark Troll http://mnin.org/leo_stoller.php Articles Wed, 28 Jun 2006 02:46 -0400 Using IDT for VMM Detection http://mnin.org/?page=vmmdetect&left=off Articles Sun, 25 Jun 2006 01:12 -0400 Word 0-day Dissassembly http://mnin.org/write/2006_w0rd.html Literature Sun, 04 Jun 2006 13:40 -0400 Anatomy of a Phish IV http://mnin.org/write/2006_phish_4.pdf Literature Sun, 04 Jun 2006 13:10 -0400 PE Local DoS Vulnerability http://mnin.org/write/2006_pe_local_dos.pdf Literature Sat, 13 May 2006 21:41 -0400 Google Hacking osCommerce http://mnin.org/?page=oscomm&left=off Articles Sat, 13 May 2006 21:07 -0400 Example of a Non-Connect Back Shell http://mnin.org/write/2006_access_analytics.html#vi Literature Sat, 13 May 2006 20:32 -0400 Self-Incriminating Anti-Spyware http://mnin.org/?page=antispy&left=off Articles Sat, 13 May 2006 18:12 -0400 Mass Forum-registration Scripts http://www.mnin.org/write/2006_access_analytics.html#iv Literature Sat, 13 May 2006 17:05 -0400 Contact Page Spam Attempts http://www.mnin.org/write/2006_access_analytics.html#v Literature Sat, 13 May 2006 17:53 -0400 Published PGP-GPG Keys http://www.mnin.org/?page=blog Blog Sun, 23 Apr 2006 02:10 -0400 No, I can't spell http://www.mnin.org/?page=blog Blog Sun, 23 Apr 2006 02:10 -0400 Back into the swing http://www.mnin.org/?page=blog Blog Sun, 23 Apr 2006 02:10 -0400 XSS - University Online Bookstore http://www.mnin.org/?page=vulns&topic=xss2 Vulns Fri, 10 Feb 2006 16:24:00 -0500 SQLi - Bank Maintenance Login Form http://www.mnin.org/?page=vulns&topic=sql1 Vulns Sat, 04 Feb 2006 14:15:00 -0500 XSS - Bank Contact Page http://www.mnin.org/?page=vulns&topic=xss1 Vulns Sat, 04 Feb 2006 14:10:00 -0500 XSS Primer http://www.mnin.org/?page=xss&left=off Articles Sat, 25 Feb 2006 19:04:00 -0500 Cryptography of SSH2 http://www.mnin.org/write/2006_sshcrypto.html Literature Thu, 23 Feb 2006 22:00:00 -0500 SSH Quiz! http://www.mnin.org/challenge/ssh/ssh.html Challenge Thu, 23 Feb 2006 21:59:00 -0500 Anatomy II culprits still active http://www.mnin.org/?page=blog Blog Sun, 05 Feb 2006 23:25:00 -0500 Multi-phish with Yahoo dropsite http://www.mnin.org/?page=blog Blog Sun, 05 Feb 2006 13:44:00 -0500 Holy New Stuff! http://www.mnin.org/?page=blog Blog Mon, 23 Jan 2006 23:55:00 -0500 Anatomy of a Phish III http://www.mnin.org/write/2006_phish_3.pdf Literature Mon, 23 Jan 2006 16:02:00 -0500 Upload Scripts And Toolkits http://www.mnin.org/write/2006_uploadscripts.html Literature Mon, 01 Jan 2006 19:33:00 -0500 Red Headed Browsers http://www.mnin.org/write/2005_redheaded_browsers.html Literature Sat, 31 Dec 2005 19:20:00 -0500 Classic Trimode http://www.mnin.org/write/2005_classic_trimode.html Literature Fri, 30 Dec 2005 12:35:00 -0500 Artifacts of a Mambo Exploit http://www.mnin.org/write/2005_incidentals.html#txxviv Literature Sun, 25 Dec 2005 23:58:00 -0500 Qmail (EnergyMech) IRC Toolkit http://www.mnin.org/write/2005_incidentals.html#txxviii Literature Sun, 25 Dec 2005 20:15:00 -0500 PHP/Web Shell Offenders http://www.mnin.org/write/2005_incidentals.html#txxvii Literature Sun, 25 Dec 2005 18:30:00 -0500 sirth0t Wanabees: PHPBB Perl Bot http://www.mnin.org/write/2006_access_analytics.html#iii Literature Sun, 25 Dec 2005 17:55:00 -0500 Hidden Malware In NTFS ADS http://www.mnin.org/?page=ntfsads&left=off Articles Sun, 22 Dec 2005 20:22:00 -0500 Unpacking The Dumpster http://www.mnin.org/?page=unpack&left=off Articles Sun, 22 Dec 2005 13:45:00 -0500 Pedro Bueno's Malware Quiz 5 http://www.mnin.org/write/2005_malware_quiz5.pdf Literature Sun, 18 Dec 2005 13:55:00 -0500 This item has been updated with a new log file entry. http://www.mnin.org/?page=humor&topic=lovespam Humor Sun, 11 Dec 2005 15:22:00 -0500 Another complete dissection of a phishing attack that took place in November. http://www.mnin.org/2005_phish_2.pdf Literature Sun, 11 Dec 2005 13:27:00 -0500 Click on some links, search my web site, or go download Firefox with Google's toolbar. http://www.mnin.org General Sun, 11 Dec 2005 10:39:00 -0500 If you had a packet crafting tool and suspected a machine on the network was running in promiscuous mode - how would you detect it? http://www.mnin.org/?page=promisc&left=off Articles Fri, 09 Dec 2005 21:29:53 -0500 Checking out the contents of an unknown compressed archive found on a hacked Red Hat web server. http://www.mnin.org/write/2005_incidentals.html#txxvi Literature Sun, 04 Dec 2005 18:19:16 -0500 Artifacts found in a compromised server's access logs. http://www.mnin.org/write/2006_access_analytics.html#i Literature Sun, 04 Dec 2005 16:59:00 -0500 The presentation of several scans for open source web application vulnerabilities. http://www.mnin.org/write/2006_access_analytics.html#ii Sun, 04 Dec 2005 15:43:00 -0500 Literature How neat, I'm announcing the new RSS using RSS. http://www.mnin.org/mnin.xml Misc Sat, 03 Dec 2005 11:45:00 -0500 Everyone else has a links page, so I should finally add one. http://www.mnin.org/?page=links Links Wed, 30 Nov 2005 18:41:56 -0500 A general purpose input form for contacts. http://www.mnin.org/?page=dybl#contact Links Wed, 30 Nov 2005 18:41:56 -0500 You can now request to make love to thousands of your peers... http://www.mnin.org/?page=humor&topic=lovespam Humor Wed, 30 Nov 2005 18:41:56 -0500 This request preceded an entourage of Awstats scans... http://www.mnin.org/?page=humor&topic=notexist Humor Wed, 30 Nov 2005 18:41:56 -0500