Entries by SecurityOrb_Staff

Metasploit Tutorial – Simple Icecast Exploit

This module exploits a buffer overflow in the header parsing of icecast, discovered by Luigi Auriemma. Sending 32 HTTP headers will cause a write one past the end of a pointer array. On win32 this happens to overwrite the saved instruction pointer, and on linux (depending on compiler, etc) this seems to generally overwrite nothing crucial (read not exploitable).

Securing the Cloud eConference!

Apple and Google are ramping up their server farms to prepare for massive increases in the use of cloud platforms. Road warriors and consumers the world over are already accessing music, film and data via cloud implementations, like iTunes and Google Docs, and reliance on these systems will only increase.