<?xml version="1.0" encoding="UTF-8"?><rss version="0.92">
<channel>
	<title>IT Security Lab</title>
	<link>http://itsecuritylab.eu</link>
	<description>The Playground for IT Security Specialists and Pentesters</description>
	<lastBuildDate>Wed, 13 Apr 2011 11:06:09 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<!-- generator="WordPress" -->

	<item>
		<title>Knowledge sharing event: Risk-based approaches to protecting your data &#8211; London, Tuesday 19th April</title>
		<description><![CDATA[I would like to invite everyone to the knowledge sharing event which my company (7Safe) is arranging in London next week. This will be about risk-based approaches to protecting data. This suppose to be much bigger event (joined with Core Security Technologies), especially comparing to the one we did last year. Interesting (and very much [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2011/04/13/knowledge-sharing-event-risk-based-approaches-to-protecting-your-data-london-tuesday-19th-april/</link>
			</item>
	<item>
		<title>Training &#8211; Hacking and Securing Oracle Database (11g)</title>
		<description><![CDATA[My company (7Safe) will be delivering the training at the nearest Blackhat 2011 conference (Las Vegas). This will be about hacking and securing Oracle Database (11g), so highly recommended to be there! I took a liberty to prepare a small promotional video about it. So take a look and well... SEE YOU IN VEGAS! :-) [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2011/04/12/hacking-and-securing-oracle-database-11g/</link>
			</item>
	<item>
		<title>Changed language does not persist when Skype is restarted: how to solve the annoying issue</title>
		<description><![CDATA[You know, I like intelligent and handy software. I really do. But I hate with my all heart when the application (or the application's author?) is eee... "too smart". ;-) And what especially makes me nervous is when author calls some idiotic application's behavior "a  feature". I think Skype is a nice example of it. [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2011/01/03/changed-language-does-not-persist-when-skype-is-restarted-how-to-solve-the-annoying-issue/</link>
			</item>
	<item>
		<title>More 3D Fun with Kinect and Delphi. You can grab and save still 3D frames!</title>
		<description><![CDATA[Foreword: I am still in a Christmas mood. ;-) And considering  a really huge interest in such "sparkling marriage" (Delphi and Kinect) and a very positive feedback from you guys, - I made some quick changes in the 3D demo, (which you should already know well), and added even more cool features. This is what [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2010/12/29/more-3d-fun-with-kinect-and-delphi-you-can-grab-and-save-still-3d-frames/</link>
			</item>
	<item>
		<title>Having Fun with Kinect and Delphi (examples of 2D and 3D visualization)</title>
		<description><![CDATA[Well well well... All signs in the Sky and on the Earth clearly say: it's a Christmas time! So it's time to have some rest and fun, and definitely nothing can be better then to spend some time with family and a new toy. ;-) Actually it's my son who got the XBox with the [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2010/12/27/kinect-and-delphi/</link>
			</item>
	<item>
		<title>Smuggling .NET code inside batch files. Impossible? Who said that?</title>
		<description><![CDATA[This will be rather a quick one. :-) Just check this out: Create a batch (.bat) file with the following content and execute!: /* @echo off &#38;&#38; cls set WinDirNet=%WinDir%\Microsoft.NET\Framework IF EXIST "%WinDirNet%\v2.0.50727\csc.exe" set csc="%WinDirNet%\v2.0.50727\csc.exe" IF EXIST "%WinDirNet%\v3.5\csc.exe" set csc="%WinDirNet%\v3.5\csc.exe" IF EXIST "%WinDirNet%\v4.0.30319\csc.exe" set csc="%WinDirNet%\v4.0.30319\csc.exe" %csc% /nologo /out:"%~0.exe" %0 "%~0.exe" del "%~0.exe" exit */ class [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2010/12/14/smuggling-net-inside-batch-files-impossible-who-said-that/</link>
			</item>
	<item>
		<title>Cross-site scripting explained (video)</title>
		<description><![CDATA[Maybe you noticed that recently I was not being writing too much here. But I have an excuse (of course I do have one!): in a meantime I was quite busy by doing different things (e.g. relocating) and also preparing "this-and-that" to the corporate event which took place in London couple of days ago. So [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2010/10/20/cross-site-scripting-explained/</link>
			</item>
	<item>
		<title>Innocent comment regarding sensitive information disclosure…</title>
		<description><![CDATA[I don't know really how to comment it... This is what I found recently in my web server logs in the "Referrers" table: http://10.10.1.1/login?user=0045f2&#38;password=806361&#38;popup=false &#38;dst=http://hcrservermirror.ecnex.com/hccrs/fitio/clogin.php?nasIp=10.10.1.1 &#38;nasId=fitio&#38;loginIp=10.10.1.1:80&#38;vlan=bridge1&#38;macAddress=00:21:6B:15:E3:70 &#38;ipAddress=10.10.1.95&#38;loginPort=&#38;urlPostLogin=http://itsecuritylab.eu/index.php/2010/09/26/pentesting-privilege-escalation-in-web-applications/ So what can I find here? Oh God... URL to the Network provider: http://hcrservermirror.ecnex.com/hccrs/fitio/clogin.php Someone's internal IPs disclosure: 10.10.1.1, 10.10.1.95 Login IP and port: 10.10.1.1:80 MAC address: 00:21:6B:15:E3:70 [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2010/09/27/crazy-information-disclosure/</link>
			</item>
	<item>
		<title>Pentesting privilege escalation in web applications</title>
		<description><![CDATA[Quick tip from my pentesting practice about how you can make your life easier when testing for privilege escalation in web applications. Background of the problem Let's imagine that we have a web application to test, so have (at least) two sets of credentials: for a high-privileged user and low-privilege one. When we log-in as [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2010/09/26/pentesting-privilege-escalation-in-web-applications/</link>
			</item>
	<item>
		<title>TinyWeb: Pocket-size Portable Web Server With CGI And PHP Support (!)</title>
		<description><![CDATA[You know, each of us has some tools we really like to use. Tools which are not "just good". We simply love them. They are nice-looking, reliable, and (this is especially important) - simple and easy to use. One of such little toys I use quite often in exploitation practice (and obviously, in many other [...]]]></description>
		<link>http://itsecuritylab.eu/index.php/2010/09/24/tinyweb-pocket-size-portable-web-server-with-cgi-and-php-support/</link>
			</item>
</channel>
</rss>

