<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>blog.sat0ri.com</title>
	<atom:link href="http://blog.sat0ri.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.sat0ri.com</link>
	<description>sat0ri - sudden enlightenment</description>
	<lastBuildDate>Sun, 08 Jan 2012 15:03:39 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>sat0ri RCE challenge/crackme &#8211; one/two</title>
		<link>http://blog.sat0ri.com/challenges/2012/01/sat0ri-rce-challengecrackme-onetwo/</link>
		<comments>http://blog.sat0ri.com/challenges/2012/01/sat0ri-rce-challengecrackme-onetwo/#comments</comments>
		<pubDate>Sun, 08 Jan 2012 14:55:40 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Challenges]]></category>
		<category><![CDATA[Crackme]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=897</guid>
		<description><![CDATA[I just added challenges one &#38; two, as I&#8217;ve had a few requests for these. Additionally, I have included the solutions for them as a separate download just to help you out, should this be necessary. The two challenges can be downloaded here: MD5 (one-and-two.zip) = 5f916c6459ffe8c4ca318c76bd368665 The solutions can be downloaded here:  MD5 (solutions-one-and-two.zip) [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/challenges/2012/01/sat0ri-rce-challengecrackme-onetwo/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>sat0ri RCE challenge/crackme – eleven</title>
		<link>http://blog.sat0ri.com/challenges/2011/09/sat0ri-rce-challenge-crackme-eleven/</link>
		<comments>http://blog.sat0ri.com/challenges/2011/09/sat0ri-rce-challenge-crackme-eleven/#comments</comments>
		<pubDate>Wed, 31 Aug 2011 23:34:53 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Challenges]]></category>
		<category><![CDATA[Crackme]]></category>
		<category><![CDATA[Crypto]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=817</guid>
		<description><![CDATA[Welcome back and thanks for considering challenge number 11. Inspired by my last challenge, I made this one simpler yet more difficult. More of an effort has gone into the encryption, which now uses 4 rotating DWORD keys instead of 1 static DWORD key. It should be more of a challenge. I removed all garbage [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/challenges/2011/09/sat0ri-rce-challenge-crackme-eleven/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>European Nopsled Team win DEFCON 19 CTF</title>
		<link>http://blog.sat0ri.com/ctf/2011/08/european-nopsled-team-win-defcon-2011/</link>
		<comments>http://blog.sat0ri.com/ctf/2011/08/european-nopsled-team-win-defcon-2011/#comments</comments>
		<pubDate>Wed, 17 Aug 2011 14:24:15 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[CTF]]></category>
		<category><![CDATA[DEFCON]]></category>
		<category><![CDATA[European Nopsled Team]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=712</guid>
		<description><![CDATA[The annual DEFCON Capture The Flag (CTF) competition is over and the winning team has been crowned, Men of 0&#215;90, The European Nopsled Team. Team members Rasmus Petersen (RP) (right). Photograph by Sarid Harper, CSIS What was the best part about winning the DEFCON CTF? RP: Doing something you love with the awesome guys from [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/ctf/2011/08/european-nopsled-team-win-defcon-2011/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>sat0ri RCE challenge/crackme &#8211; ten</title>
		<link>http://blog.sat0ri.com/challenges/2011/08/sat0ri-rce-challenge-crackme-ten/</link>
		<comments>http://blog.sat0ri.com/challenges/2011/08/sat0ri-rce-challenge-crackme-ten/#comments</comments>
		<pubDate>Tue, 09 Aug 2011 20:45:14 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Challenges]]></category>
		<category><![CDATA[CERN]]></category>
		<category><![CDATA[Crackme]]></category>
		<category><![CDATA[Superstring]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=714</guid>
		<description><![CDATA[OK, here we are again with a new series of challenges, which will start with number 10. This one isn&#8217;t that difficult but it requires that you consider new options. I left half of this challenge easy to help you along, so you can solve this one two ways, the tough way and the easier [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/challenges/2011/08/sat0ri-rce-challenge-crackme-ten/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>File Expert &#8220;path&#8221; Directory Traversal Vulnerability</title>
		<link>http://blog.sat0ri.com/vulnerabilities/2011/07/file-expert-path-parameter-directory-traversal-vulnerability/</link>
		<comments>http://blog.sat0ri.com/vulnerabilities/2011/07/file-expert-path-parameter-directory-traversal-vulnerability/#comments</comments>
		<pubDate>Sat, 16 Jul 2011 09:50:47 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Vulnerabilities]]></category>
		<category><![CDATA[Android]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=589</guid>
		<description><![CDATA[Summary Sarid Harper has discovered a vulnerability in File Expert for Android, which can be exploited by malicious users to gain knowledge of sensitive information. Input passed to the &#8220;path&#8221; parameter in &#8220;/webapps/file/listing&#8221; is not properly sanitised before being used to display files and directories. This can be exploited to list arbitrary directories and files [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/vulnerabilities/2011/07/file-expert-path-parameter-directory-traversal-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>File Expert File Deletion Vulnerability</title>
		<link>http://blog.sat0ri.com/vulnerabilities/2011/07/file-expert-file-deletion-vulnerability/</link>
		<comments>http://blog.sat0ri.com/vulnerabilities/2011/07/file-expert-file-deletion-vulnerability/#comments</comments>
		<pubDate>Sat, 16 Jul 2011 09:21:40 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Vulnerabilities]]></category>
		<category><![CDATA[Android]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=616</guid>
		<description><![CDATA[Summary Sarid Harper has discovered a vulnerability in File Expert for Android, which can be exploited by malicious users to delete files residing outside the FTP root. The vulnerability is caused by an error in the way FTP “DELE” requests are handled. This can be exploited to escape the FTP root and delete arbitrary files [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/vulnerabilities/2011/07/file-expert-file-deletion-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Outlook Email File Attachment Denial of Service Vulnerability</title>
		<link>http://blog.sat0ri.com/vulnerabilities/2010/11/outlook-email-file-attachment-denial-of-service-vulnerability/</link>
		<comments>http://blog.sat0ri.com/vulnerabilities/2010/11/outlook-email-file-attachment-denial-of-service-vulnerability/#comments</comments>
		<pubDate>Fri, 26 Nov 2010 11:56:35 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Vulnerabilities]]></category>
		<category><![CDATA[Outlook]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=543</guid>
		<description><![CDATA[Summary Sarid Harper has discovered a vulnerability in Outlook, which can be exploited by malicious, anonymous individuals to cause a DoS (Denial of Service). The vulnerability is caused as a result of the improper handling of email file attachments with no extension. This can be exploited to cause a DoS by tricking a user into [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/vulnerabilities/2010/11/outlook-email-file-attachment-denial-of-service-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Undocumented machine-specific registers (AMD)</title>
		<link>http://blog.sat0ri.com/reverse-code-engineering/2010/11/undocumented-machine-specific-registers/</link>
		<comments>http://blog.sat0ri.com/reverse-code-engineering/2010/11/undocumented-machine-specific-registers/#comments</comments>
		<pubDate>Mon, 15 Nov 2010 08:40:51 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Reverse Code Engineering]]></category>
		<category><![CDATA[AMD]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=536</guid>
		<description><![CDATA[I was recently turned on to a couple of interesting write-ups regarding some of the secret debugging capabilities (..included firmware-based debugging features that expand greatly over standard, architecturally defined capabilities of x86.) of AMD processors, &#62;= Athlon XP. For further information, please consult the following articles: woodmann CBID Enjoy!]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/reverse-code-engineering/2010/11/undocumented-machine-specific-registers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Acrobat Reader *.PDF file Integer Overflow Vulnerability</title>
		<link>http://blog.sat0ri.com/vulnerabilities/2010/09/cve-2010-2862-integer-overflow-vulnerability-exploit/</link>
		<comments>http://blog.sat0ri.com/vulnerabilities/2010/09/cve-2010-2862-integer-overflow-vulnerability-exploit/#comments</comments>
		<pubDate>Wed, 01 Sep 2010 06:46:51 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Vulnerabilities]]></category>
		<category><![CDATA[CVE-2010-2862]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=531</guid>
		<description><![CDATA[Summary A vulnerability has been discovered in Acrobat Reader, which can be exploited by malicious, anonymous individuals to compromise a vulnerable system. The integer overflow in the CoolType.dll module is caused when parsing the &#8220;maxCompositePoints&#8221; field value in the TrueType font&#8217;s Maximum Profile table (maxp), and can be exploited to corrupt memory via a maliciously [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/vulnerabilities/2010/09/cve-2010-2862-integer-overflow-vulnerability-exploit/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Command-line Argument Handling in Standard Windows Binaries</title>
		<link>http://blog.sat0ri.com/vulnerabilities/2010/06/command-line-argument-handling-in-standard-windows-binaries/</link>
		<comments>http://blog.sat0ri.com/vulnerabilities/2010/06/command-line-argument-handling-in-standard-windows-binaries/#comments</comments>
		<pubDate>Wed, 02 Jun 2010 20:06:40 +0000</pubDate>
		<dc:creator>sharpe</dc:creator>
				<category><![CDATA[Vulnerabilities]]></category>

		<guid isPermaLink="false">http://blog.sat0ri.com/?p=505</guid>
		<description><![CDATA[Looking at some of the components present within the %systemroot%\system32 directory can be fun when attempting to identify low-hanging-fruit-vulnerabilities. I made a simple fuzzer that enumerated all executables within a given directory and attempted to execute them with user-defined arguments. A more advanced method also supported by the tool, is to specify the arguments for [...]]]></description>
		<wfw:commentRss>http://blog.sat0ri.com/vulnerabilities/2010/06/command-line-argument-handling-in-standard-windows-binaries/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

