Interesting Reads - Week 12 / 2013

• Binary Instrumentation for Exploit Analysis Purposes (part 1)
• Binary Instrumentation for Exploit Analysis Purposes (part 2)
  Using the PIN instrumentalisation framework to analyse exploits
• Randomly failed! Weaknesses in Java Pseudo Random Number Generators (PRNGs)
• FBI Secretly Spying on Cloud Computer Users FISMA/PATRIOTACT - "National Security Letters"
• New collision attacks on SHA-1 - based on optimal joint local-collision analysis [PDF]
• Port scanning /0 using insecure embedded devices
  How a group of poeple compromised thousand of devices and then used them to scan the whole internet. Beware : Ethical boundaries scratched
• "APT PDFs and metadata extraction"
• Research Data to Help Understand the ROI of Your Security Investments - Cloud Computing
  Let's say we welcome the attempt to get us data...
• Two new attacks on SSL decrypt authentication cookies | Ars Technica 

Food for thought 

I have updated my little TLS/SSL Scanner called "SSL Audit" to version 0.8. I tweaked it slightly but the tool is still based on it's own rudimentary SSL Engine and hence is not limited by the number of ciphersuites and protocols available to OpenSSL or NSS.

By the way I am still a little bit proud of the SSL Stack fingerprinting feature. I haven't updated it recently but it still seems to work out nicely. Try it out and let me know, especially if you have access to less known ssl stacks.

Changes

• Added support for TLS 1.2 CAMELIA ciphersuites;
• Speed up SSLv2 enumeration;
• Added the complete range of ARIA ciphersuites (http://tools.ietf.org/html/draft-nsri-tls-aria-00)

SSL Audit v.08

Download

You can download the tool here | VT scan