Pues eso, ¿Cuánto sabes de C++11? Si quieres poner a prueba tus conocimientos, en cppquiz.org tienes un buen número de preguntas o quizzes que te pondrán a prueba.

Las preguntas se presentan como pequeños fragmentos de código, en los que tienes averiguar cual es la salida de los mismos o si hay algún tipo de error. Idealmente debes responder de memoria, es decir, sin copiar, compilar y ejecutar el código en tu sistema. Esto te dará una buena idea de la solidez de tus conocimientos.

Este viernes, día después de acción de gracias, es el día de las rebajas (al menos uno de ellos y quizás el más importante) en los EEUU, conocido como Black Friday. Este día se lanzan ofertas de todo tipo, pero las verdaderas gangas se consiguen en la tienda física.

Hoy hablando con mi compañero Cybercaronte, le comentaba sobre la que se lía ese día y como la gente duerme en la calle para hacer cola. Sí, más o menos como en los tiempos de Steve Jobs y el iPhone/iPad, pero con una sutil diferencia, los que hacen cola este viernes van a por todas y algunos incluso van armados y no tienen la menor duda en usar la violencia si hace falta.

• Spy-jacking the Booters
• Hacking, Surveiling, and Deceiving Victims on Smart TV
• Tribute to Barnaby Jack
• Stepping p3wns: Adventures in Full Spectrum Embedded Exploitation
• The Factoring Dead: Preparing for Cyptopocalypse
• Mactans: Injecting Malware Into iOS Devices via Malicious Chargers
• Let's Get Physical: Breaking Home Security Systems and Bypassing Building Controls
• Million Browser Botnet
• Evading Deep Inspection for Fun and Shell
• Exploiting Network Surveillance Cameras Like a Hollywood Hacker
• Owning the Routing Table - Part II
• How to Build a SpyPhone
• What's on the Wire? - Physical Layer Tapping with Project Daisho
• Just-In-Time Code Reuse: The More Things Change, the More They Stay the Same
• BIOS Security
• TOR... ALL-THE-THINGS!
• Truncating TLS Connections to Violate Beliefs in Web Applications
• Rooting SIM Cards
• Fully Arbitrary 802.3 Packet Injection: Maximizing Ethernet Attack Surface
• Revealing Embedded Fingerprints: Deriving intelligence from USB stack interactions
• Funderbolt: Adventures in Thunderbolt DMA Attacks
• RFID Hacking: Live Free or RFID Hard
• Home Invasion v2.0 - Attacking Network-Controlled Hardware
• Beyond the Application: Cellular Privacy Regulatory Space
• Legal Considerations for Cellular Research
• A Tale of One Software Bypass of Windows 8 Secure Boot
• I Can Hear You Now: Traffic Interception and Remote Mobile Phone Cloning...
• Buying into the Bias: Why Vulnerability Statistics Suck
• How CVSS is DOSsing Your Patching Policy (and wasting your money)
• Bluetooth Smart: The Good, the Bad, the Ugly, and the Fix!
• UART THOU MAD?
• Press ROOT to Continue: Detecting OSX and Windows Bootkits with RDFU
• SSL, Gone in 30 Seconds - A BREACH beyond CRIME
• Multiplexed Wired Attack Surfaces
• Java Every-Days: Exploiting Software Running on Three Billion Devices
• TLS 'SECRETS'
• Lawful Access Panel
• Clickjacking Revisted: A Perceptual View of UI Security
• OPSEC Failures of Spies
• Hiding @ Depth - Exploring, Subverting, and Breaking NAND Flash Memory
• Honey, I'm Home!! - Hacking Z-Wave Home Automation Systems
• Android: One Root to Own them All
• Abusing Web APIs Through Scripted Android Applications
• Big Data for Web Application Security
• Dissecting CSRF Attacks and Countermeasures
• Above My Pay Grade: Cyber Response at the National Level
• Virtual Deobfuscator - A DARPA Cyber Fast Track Funded Effort
• Teridian SoC Exploitation: Exploration of Harvard Architecture Smart Grid Systems
• New Trends in FastFlux Networks
• CrowdSource: Open Source Crowd Trained Machine Learning Model for Malware Detection
• Denying Service to DDoS Protection Services
• Denial of Service as a Service - Asymmetrical Warfare at its Finest
• Universal DDoS Mitigation Bypass
• Untwining Twine
• Detecting Vulnerabilities in Virtual Devices with Conformance Testing
• Smashing the Font Scaler Engine in Windows Kernel
• The SCADA That Didn't Cry Wolf - Who's Really Attacking Your ICS Devices - 2/2
• Hunting the Shadows: In-Depth Analysis of Escalated APT Attacks
• The Outer Limits: Hacking The Samsung Smart TV
• Out of Control: Demonstrating SCADA Device Exploitation
• Compromising Industrial Facilities from 40 Miles Away
• Hacking Like in the Movies: Visualizing Page Tables for Local Exploitation
• PWNIE AWARDS
• Welcome & Introduction to Black Hat USA 2013
• Mainframes: The Past Will Come to Haunt You
• Black-box Assessment of Pseudorandom Algorithms
• End-to-end Analysis of Domain Generating Algorithm Malware Family
• Javascript Static Security Analysis Made Easy with JSPrime
• The Web IS Vulnerable: XSS Defense on the BattleFront
• Malicious File for Exploiting Forensic Software
• CMX: IEEE Clean File Metadata Exchange
• Mobile Malware: Why the Traditional AV Paradigm is Doomed
• Bochspwn: Identifying 0-Days via System-Wide Memory Access Pattern Analysis
• Using Online Activity as Digital DNA to Create a Better Spear Phisher
• CreepyDOL: Cheap, Distributed Stalking
• OptiROP: The Art of Hunting ROP Gadgets
• BlackberryOS 10 From a Security Perspective
• Shattering Illusions in Lock-Free Worlds: Compiler/Hardware Behaviors in OS and VMs
• Password Hashing: The Future is Now
• Pass the Hash and other credential theft and reuse: Preventing Lateral Movement...
• How to grow a TREE (Taint-Enabled Reverse Engineering Environment) from a CBASS...
• Predicting Susceptibility to Socialbots on Twitter
• Pass-the-Hash 2: The Admin's Revenge
• Energy Fraud and Orchestrated Blackouts: Issues with Wireless Metering Protocols...
• Hot Knives Through Butter: Bypassing Automated Analysis Systems
• Post Eploitation Operations with Cloud Synchronization
• Defending Networks With Incomplete Information: A Machine Learning Approach
• With BIGDATA comes BIG responsibility: Practical exploiting of MDX injections
• Power Analysis Attacks for Cheapskates
• Fact and Fiction: Defending Medical Device
• Maltego Tungsten As a Collaborative Attack Platform
• BinaryPig - Scalable Malware Analytics in Hadoop

Ya están disponibles a través de Youtube los vídeos de la pasada edición de Defcon.

• Proliferation
• Torturing Open Government Systems for Fun, Profit and Time Travel
• Backdoors, Government Hacking and The Next Crypto Wars
• ACL Steganography - Permissions to Hide Your Porn
• Protecting Data with Short-Lived Encryption Keys and Hardware Root of Trust
• Google TV or: How I Learned to Stop Worrying and Exploit Secure Boot
• A Password is Not Enough: Why Disk Encryption is Broken and How We Might Fix It
• From Nukes to Cyber— Alternative Approaches for Proactive Defense and Mission Assurance
• The Politics of Privacy and Technology: Fighting an Uphill Battle
• Defeating Internet Censorship with Dust, the Polymorphic Protocol Engine
• Privacy In DSRC Connected Vehicles
• Phantom Network Surveillance UAV / Drone
• Safety of Tor Network Look at Network Diversity, Relay Operators & Malicious Relays
• De-Anonymizing Alt.Anonymous. Messages
• The DEF CON 21 Badge
• The Growing Irrelevance of US Government Cybersecurity Intelligence Information
• The Dirty South - Getting Justified with Technology
• Prowling Peer-to-Peer Botnets After Dark
• Evil DoS Attacks and Strong Defenses
• Kill 'em All— DDoS Protection Total Annihilation!
• VoIP Wars: Return of the SIP
• Unexpected Stories - From a Hacker Who Made It Inside the Government
• Dude, WTF in my car?
• The Road Less Surreptitiously Traveled
• Home Invasion 2.0 - Attacking Network-Controlled Consumer Devices
• RFID Hacking: Live Free or RFID Hard
• Stalking a City for Fun and Frivolity
• Hacking Wireless Networks of the Future: Security in Cognitive Radio Networks
• BYO-Disaster and Why Corporate Wireless Security Still Sucks
• The Cavalry Isn't Coming: Starting the Revolution to Fsck it All!
• The Dark Arts of OSINT
• EMET 4.0 PKI Mitigation
• Stepping P3wns: Adventures in Full Spectrum Embedded Exploitation (and defense!)
• EDS: Exploitation Detection System
• Conducting Massive Attacks with Open Source Distributed Computing
• Revealing Embedded Fingerprints: Deriving Intelligence from USB Stack Interactions
• Traffic Interception and Remote Mobile Phone Cloning with a Compromised CDMA Femtocell
• The Secret Life of SIM Cards
• DragonLady: An Investigation of SMS Fraud Operations in Russia
• Offensive Forensics: CSI for the Bad Guy
• Pwn'ing Your® Cyber Offenders
• MITM All The IPv6 Things
• HTTP Time Bandit
• How to use CSP to Stop XSS
• So You think Your Domain Controller is Secure?
• Getting The Goods With smbexec
• Abusing NoSQL Databases
• Examining the Bitsquatting Attack Surface
• Please Insert Inject More Coins
• Do-It-Yourself Cellular IDS
• BoutiqueKit: Playing WarGames with Expensive Rootkits and Malware
• Android WebLogin: Google's Skeleton Key
• Building an Android IDS on Network Level
• Defeating SEAndroid
• Doing Bad Things to "Good" Security Appliances
• Electromechanical PIN Cracking with Robotic Reconfigurable Button Basher (and C3BO)
• Data Evaporation from SSDs
• GoPro or GTFO: A Tale of Reversing an Embedded System
• JTAGulator: Assisted Discovery of On-Chip Debug Interfaces
• gitDigger: Creating useful wordlists from public GitHub repositories
• Made Open: Hacking Capitalism
• The Dawn of Web 3.0: Website Mapping and Vulnerability Scanning in 3D
• Combatting Mac OSX/iOS Malware with Data Visualization
• A Thorny Piece of Malware (And Me): The Nastiness of SHE, VFTables & Multi-Threading
• Transcending Cloud Limitations by Obtaining Inner Piece
• Utilizing Popular Websites for Malicious Purposes Using RDI
• Open Public Sensors, Trend Monitoring and Data Fusion
• Collaborative Penetration Testing With Lair
• PowerPwning: Post-Exploiting By Overpowering PowerShell
• Evolving Exploits Through Genetic Algorithms
• Adventures in Automotive Networks and Control Units
• Hacking Driverless Vehicles
• 10000 Yen into the Sea
• Business Logic Flaws In Mobile Operators Services
• Meet the VCs
• The ACLU Presents: NSA Surveillance and More
• The Government and UFOs: A Historical Analysis
• How my Botnet Purchased Millions of Dollars in Cars and Defeated the Russian Hackers
• Fear the Evil FOCA: IPv6 attacks in Internet Connections
• Legal Aspects of Full Spectrum Computer Network (Active) Defense
• We are Legion: Pentesting with an Army of Low-power Low-cost Devices
• Pwn The Pwn Plug: Analyzing and Counter-Attacking Attacker-Implanted Devices
• DC Awards
• PowerPreter: Post Exploitation Like a Boss
• DNS May Be Hazardous to Your Health
• Exploiting Music Streaming with JavaScript
• Java Every-Days: Exploiting Software Running on 3 Billion Devices
• HiveMind: Distributed File Storage Using JavaScript Bonets
• Defending Networks with Incomplete Information: A Machine Learning Approach
• Blucat: Netcat For Bluetooth
• BYOD PEAP Show
• Closing Ceremonies
• All Your RFz Are Belong to Me - Hacking the Wireless World with Software Defined Radio
• Making Of The DEF CON Documentary
• Ask the EFF: The Year in Digital Civil Liberties
• Decapping Chips The Strike Easy Hard Way
• Insecurity - A Failure of Imagination
• Key Decoding and Duplication Attacks for the Schlage Primus High-Security Lock
• DEF CON Comedy Jam Part VI, Return of the Fail
• Hardware Hacking with Microcontrollers: A Panel Discussion
• An Open Letter The White Hat's Dilemma
• Suicide Risk Assessment and Intervention Tactics
• OTP, It won't save you from free rides!
• How to Disclose or Sell an Exploit Without Getting in Trouble
• Defense by numbers: Making Problems for Script Kiddies and Scanner Monkeys
• Social Engineering: The Gentleman Thief
• This Presentation Will Self-Destruct in 45 Minutes
• Fast Forensics Using Simple Statistics and Cool Tools
• Forensic Fails - Shift + Delete Won't Help You Here
• C.R.E.A.M. Cache Rules Evidently Ambiguous, Misunderstood

Desde securityxploded.com podemos acceder al meterial de dos clases sobre ingeniería inversa y análisis de malware. La primera es de iniciación y la segunda sobre temas más avanzados.

En el material de las mismas podrás encontrar vídeos, diapositivas, referencias a libros, herramientas, etc. La clase de iniciación está completa y te puedes descargar todo el material desde aquí. En la avanzada, como podemos ver más abajo, faltan algunas de las sesiones, que supongo publicarán en un futuro. Mientras tantos hay material para entretenerse un rato.

Perfecta para un día de invierno …

Ólafur Arnalds

Si la criptografía ya es complicada entenderla de por sí, aún más complicado es explicarla. Por lo que cuantos más herramientas de “uso común” podamos usar para su estudio mejor que mejor.

Nayuki Minase, usando una hoja de cálculo ha sido capaz de implementar el algoritmo de cifrado AES.

Dicha implementación soporta claves de 128, 192 y 256 bit. En la hoja de cálculo podemos ver los cálculos realizados en cada pasada (fases). Modificando las celdas de la cadena y clave, vemos como la hoja se actualiza mostrando el resultado final, así como los valores en cada fase.

Para los que se quieran iniciar en el mundo de la programación, en especial en el mundo de los juegos web o basados en HTML y Javascript, en Project Code, Dave Kerr ha iniciado un tutorial de como crear un juego estilo Space Invaders.

Ahora mismo sólo hay 2 entradas sobre dicho tutorial:

• Learn JavaScript: Part 1 - Create a Starfield
• Learn JavaScript Part 2 - Space Invaders

El código fuente del proyecto se encuentra alojado en Github, para los que quieran echar un vistazo directamente al código fuente.

ECB (Electronic codebook) es otro de los magníficos ejercicios de PentesterLab en el que podemos aprender a robar cookies que usan cifrado ECB o por bloques, de forma débil, del cual nos podríamos a provechar para suplantar la identidad de otro usuario.El ejercicio es de iniciación y todo lo que se requieren son conocimientos básicos de PHP y HTTP, además de un software de virtualización (VirtaulBox o VMPlayer por ejemplo).Como de costumbre te puedes descargar la máquina virtual para 32 ó 64 bits además del PDF que nos guía a través del ejercicio.