ICMP Tunneling with Skeeve

- From gray-world.net
Skeeve is a POC tool you can use to simply create an ICMP tunnel between two computers, which may be located in different networks and separated by a firewall. Skeeve utilizes ICMP packets and IP address spoofing technology to create a data channel in order to redirect TCP connections inside this channel.

Skeeve creates an ICMP tunnel which is based on the use of a Bounce server.
read more ...

Basic journey of a packet

- From Don Parker, securityfocus.com
The purpose of this introductory article is to take a basic look at the journey of a packet across the Internet, from packet creation to switches, routers, NAT, and the packet's traverse across the Internet. This topic is recommended for those who are new to the networking and security field and may not have a basic understanding of the underlying process.
read more ...

Introduction to Reverse Engineering Software

Book: Authors - Mike Perry & Nasko Oskov
This book is an attempt to provide an introduction to reverse engineering software under both Linux and Microsoft Windows�. The goal of this book is not to cover how to reproduce an entire program from a binary, but instead how to use the Scientific Method to deduce specific behavior and to target, analyze, extract and modify specific operations of a program, usually for interoperability purposes. As such, the book takes a top-down approach, starting at the highest level (program behavior) and drilling down to assembly when it is needed.
read more ...

Blue Pill technology for creating undetectable malware

- From 'theinvisiblethings.com' blog
"Imagine a malware (e.g. a network backdoor, keylogger, etc...) whose capabilities to remain undetectable do not rely on obscurity of the concept. Malware, which could not be detected even though its algorithm (concept) is publicly known. Let's go further and imagine that even its code could be made public, but still there would be no way for detecting that this creature is running on our machines..."

A technology code-named Blue Pill, which is just about that - creating 100% undetectable malware, which is not based on an obscure concept, uses AMD's SVM/Pacifica virtualization technology to create an ultra-thin hypervisor that takes complete control of the underlying operating system.
read more ...

i) Introducing Blue Pillii) The Blue Pill Hype

Google Account Authentication

- From code.google.com
Google Accounts authentication for web-based applications allows the application to access a Google service protected by a user's Google account. To maintain a high level of security, the Authentication Proxy interface, AuthSub, enables the application to get an authentication token without ever handling the user's account login information. Using the proxy, the user of the web application logs into their account through a Google-supplied login page and consents to grant limited access to the web application.
read more ...

Search Engine for Open Source Code

Search engines like Krugle and Koders make it easy for developers to find existing source code and technical information that solves many common development problems from a variety of open source projects.

You can find code in C, C++, C#, Java, Perl, Python, PHP, SQL, Ruby, XML and more, view it syntax highlighted, locate the library in the structure of the program, save it and share it with others.

Month of Browser Bugs

HD Moore published a blog entry announcing the Month of Browser Bugs (MoBB) project, where he will publish a new browser hack, every day, for the entire month of July 2006. Three unpatched IE and one Firefox bugs are already out, the second one (HTML Help Control Memory Corruption in IE) is rated as highly critical vulnerability which could be exploited by remote attackers to crash a vulnerable browser or potentially take complete control of an affected system.
read more ...

Updated:
1. Complete list of bugs
2. Browser fuzzing for fun and profit
3. Browsers feel the fuzz