Here is a 1 hour youtube video explaining step-by-step the process of finding and exploiting buffer overflow vulnerabilities, how to exploit them, and finally how to write a metasploit module for it. Click Here.

I came across a great video series on rootkits today. The course is from opensecuritytraining.info and the link to the course details including download of the course materials is here.

The videos are here:

…and processing samples faster than ever. We’re up on the migrated server with a few gotchyas along the way, but the end result is Minotaur sped through over 3,000 samples yesterday while catching up from the downtime.

A while back I wrote a blog post on all the different virtualization technologies in us in Minotaur. This weekend, I’ve started consolidating the backend of Minotaur on Citrix’s XenServer. As you can guess, this is a large undertaking and while I expected the downtime to just last the weekend, it appears the controller may be down for several more days for conversion and migration. All the data on the frontend website should function as usual with the exception of the DNS system.

During the downtime I’ve taken the opportunity to simplify the system. I still had code running from the NUMAN days and still was running each sample through zerowine but not really doing anything with the results. The backend has been significantly reduced and optimized and should make my life of day-to-day administration (feeding the bull) much easier as well as make the system more reliable as a whole.