|
Over the years I have invested heavily in product R&D building a wide
assortment of new skills, and fostering a diverse background and understanding.
These are some of the papers I have developed along my journey that I make freely available to help others along. |
Sandsprite Papers
Web Apps
Reverse Engineering / Binary Analysis
Understanding the Import table
Understanding IAT Hooking
Compressing the Import Section
Securing Business Apps
Understanding FAT
Modifying Compiled Code
Using an exe as a dll
Debugging P-Code Apps (VB6)
Understanding Peb Module Lists
Reversing VB6 Apps
Visual Basic 6
- Securing Business Apps - Rise of the White Collar Cracker
How secure are your business apps from internal threats? Is your proprietary and customer data vulnerable to disgruntled employees or other office staff?
Most of the internal business apps developed for industry were programmed with efficiency, not security in mind.
This is a 15 page paper aimed at informing developers, auditors, and IT Managers on how common software access schemes can be bypassed to allow unauthorized login, and manipulation of proprietary business applications.
Article includes sample business app, API manipulation utility, and a patch manager demo so that you can directly experiment and follow along with the article.