Breaking Client-Side Certificate Protection

Release Date: 2009-02
Hakin9_3_2009_en
Rating: 1 vote

Source files



Articles

  • Free Issue to download 03/2009

  • Brute Force Attack

    Probably you know what is a Brute Forcing attack. But probably you don’t know that now it’s becoming a real possible attack, using computational powers from graphic adapters and multi core processors.


  • Exporting Nonexportable Certificates

    Digital Certificates in Microsoft Windows can be set to have a non-exportable private key so that they cannot be copied from the key store and installed on another device. This is common practice in corporate WiFi installations with certificate based authentication.


  • User Enumeration with Burp Suite

    It seems like not a day passes without seeing a website that is vulnerable to user enumeration. No matter if the website is small or large, so many developers don’t seem to know the difference between good user feedback and providing too much information.


  • More Thoughts on Defeating AntiVirus

    Faced with the daunting task of detecting and quaranting thousands of new viruses, Trojans and other malware discovered every day, AntiVirus software vendors rely on AV signatures to protect their customers.


  • A New Era for Buffer Overflow

    This article describes a few modern techniques for buffer overflow exploitation. There are just as many ways to prevent BOF with defensive mechanisms as there are ways to bypass those defenses.


  • Automating Malware Analysis

    Malware infections are on the rise. Computer Incident Response Teams (CIRTs) need to utilize malware analysis skills to combat the infections within their organizations. However, malware analysis is a time consuming process.


  • Anatomy of Malicious PDF Documents

    The increased prevalence of malicious Portable Document Format (PDF) files has generated interest in techniques to perform malware analysis of such documents.


  • Analyzing Malware Packed Executables

    In part one of analyzing malware I provided an overview of the process we are going to follow to analyze malware. If you followed the process, depending on the malware, you may have realized that malware developers have plenty of tricks to prevent you from analyzing their malware.


  • Bootleggers and the Internet

    The 1920’s and 1930’s in the United States were a very turbulent time. Prohibition was in place for 13 of those years preventing the consumption of alcohol.


  • Interview with Nicholas J. Percoco

    Nicholas J. Percoco has more than 12 years of information security experience. He leads the SpiderLabs team at Trustwave with a focus on Penetration Testing, Application Security and Forensics.


  • Self exposure with...

    Self exposure with James Broad and Alexey Chilikov


Back

Comments

1 comment, Add comment
  • very bad

    5 months ago
    ajay
Add comment

Advertisement