OpenRCE

The Open Reverse Code Engineering community - OpenRCE - was created to foster a shared learning environment among researchers interested in the field of reverse engineering. OpenRCE aims to serve as a centralized resource for reverse engineers (currently heavily win32/security/malcode biased) by hosting files, blogs, forums articles and more.

Nepenthes

Nepenthes is a versatile tool to collect malware. It is designed to emulate vulnerabilties worms use to spread, and to capture these worms.

Packet Analysis: TCP 1433 Traffic

SANS Handler's Diary has an interesting analysis of network traffic that is having a vulnerability signature of an attack against unpatched Microsoft SQL Server 2000 systems.
read more ...

Bugle : Google Source Code Bug Finder

-From cipher.org.uk
Bugle is a collection of google queries for searching software security bugs in source code available on the web. An example search query for finding a potential buffer overflow resulted by strcpy in C files is : "strcpy(buffer|buf,str)" filetype:c

read more ...

Become a Friend of Firefox

The Mozilla Corporation is celebrating "World Firefox Day" three years after the formation of the Mozilla Foundation. As part of the festivities, the company is encouraging its fans to get one person to switch to the alternate Web browser, in exchange for being immortalized in the Firefox 2.0 source code.

Starting from July 15, you can share Firefox with a friend. If your friend downloads Firefox before September 15, you'll both be immortalized in Firefox 2. Names will be displayed on a digital "Firefox Friends Wall" at Mozilla headquarters in Mountain View, Calif. In addition, the names will be accessible from within Firefox 2.0, due to launch in the fall, although the company has yet to decide the specifics.

Chinese Skype Hype

The Chinese Skype clone report is a media hype or a real is yet to be known as the real proof for the claim is still not available in public. But a detailed scientific study on the inner-workings of Skype and how to reverse engineer it ( Silver Needle in the Skype ) was already presented before at the Blackhat Europe conference a few months ago by Philippe Biondi and Fabrice Desclaux.

Another excellent analysis of the underlying cryptographic protocols by Tom Berson can be found here.

Skype Protocol Has Been Reverse Engineered?

From Charlie Paglee, voipwiki.com.
A company in China has successfully reverse engineered the Skype protocol. The unnamed company has created a client that is capable of communicating on the VOIP phone solution. They plan to create a 100% Skype-compatible client and release the source code for licensing.

The new client that they are going to release will not support Skype’s Super Node technology. Right now every computer with Skype installed on it can be used as a relay to carry data between two other computers when both of those computers are only allowed to make outgoing TCP calls. This means that very soon Skype users will have an alternative client which will not hijack their computer. This could eventually have a very negative effect on the Skype network if too many people choose not to act as Skype Super Nodes and the network starts to deteriorate.
read more ...