Blog
2015
2013
2012
- Early Results from X-Ray: Over 50% of Android Devices are Vulnerable
- Announcing X-Ray For Android
- Exploit Mitigations in Android Jelly Bean 4.1
- Dissecting the Android Bouncer
- Announcing VPN Hunter
- ASLR in Android Ice Cream Sandwich 4.0
2011
- CSAW CTF 2011 Kernel Exploitation Challenge
- Tool releases: ksymhunter and kstructhunter
- Stackjackin' 2: Electric Boogaloo
- RSA-Proofing Our Duo Push Two-Factor Authentication
- Duo Push: The Next Generation of Two-Factor Authentication
- When Angry Birds Attack: Android Edition
- Stackjacking Your Way to grsec/PaX Bypass
- How I Almost Won Pwn2Own via XSS
2010
- Exploiting Stack Overflows in the Linux Kernel
- CSAW CTF 2010 Kernel Exploitation Challenge
- Linux Kernel pktcdvd Memory Disclosure
- Linux Kernel CAN SLUB Overflow
- Dexcode Teardown of the Android SMS Trojan
- A Peek Inside the GTalkService Connection
- Remote Kill and Install on Google Android
- SummerCon 2010 Slides
- SOURCE Boston Slides
- ReiserFS .reiserfs_priv Vulnerability
2009
- Linux Kernel x86-64 Register Leak
- Disabling Green Dam with Dam Burst
- Linux Kernel getname() Stack Memory Disclosures
- PolyPack at USENIX WOOT '09
- Hijacking Tinychat Screencasts
- Analysis of a Trojaned ssh/sshd
- udev Local Privilege Escalation
- Panera Gift Card Security
- dpkt Tutorial #4: AS Paths from MRT/BGP
- ARBSEC 01 Wrap-Up
- ARBSEC Officially Launched
2008
- dpkt Tutorial #3: DNS Spoofing
- VirusTotal Python Submission Script
- dpkt Tutorial #2: Parsing a PCAP File
- Bash Brace Expansion Cleverness
- dpkt Tutorial #1: ICMP Echo
- Hardening DNS with IP TTLs
- HotSec 2008 and USENIX Security 2008
- WOOT 2008: The Good, The Bad, and The Ugly
- PDPT: Passive DNS Port Test
- UofM-Specific Phishing Campaign
- Beware of Google App Engine SDK
- Black Hat DC 2008 Briefings
- Exploiting Live Virtual Machine Migration
- Detecting and Evading CWSandbox
2007
- xkcd Malware Visualization
- Facebook XSS
- USENIX Security, HotSec, WOOT 2007
- DIMVA 2007
- pynids 0.5a Update Released
- Cosign SSO Vulnerability
- T-Mobile WiFi Hotspots
- RFID on Campus
2006
- Aimject 1.0 Released
- Google Safe Browsing
- pybgpdump 0.1 Released
- Mozilla Auto-Update Vulnerability
- mPrint Privacy Violations
- Honeyd Remote Fingerprinting