Archive for December, 2008

CGNSec - Third Meeting in Cologne

Wednesday, December 31st, 2008

I just wanted to announce that next wednesday (7th of January 2009) at 19:30 there will be the third CGNSec meetup in Cologne/Germany. The meeting takes place at Hallmackenreuther, Brüsseler Platz 9, 50674 Köln (Google Maps) Everyone working in the field of information security is invited to attend. To find us, just ...

Slides for “Vulnerability Discovery in Closed Source/Encrypted PHP Applications”

Tuesday, December 30th, 2008

Two days ago I presented my session about bytecode encrypted PHP applications and how to find vulnerabilities in them at 25C3. I didn't upload the slides until now, because I got ill during the night after my talk and therefore spent most of yesterday in my hotelroom. But here are ...

ext/usim - The PHP Upgrade Simulator

Tuesday, December 9th, 2008

For half a year now I was working on a secret project called "PHP Upgrade Simulator" or short ext/usim which is a PHP extension that allows people to evaluate how robust their PHP code base is when it comes to upgrading to future PHP versions. I am happy to announce ...

PHP 5.2.7 *BEWARE* magic_quotes_gpc broken

Sunday, December 7th, 2008

Two days ago I blogged about the release of PHP 5.2.7 and how it fixes several security bugs. Because some are mentioned and some are not mentioned in the Changelog, it is usally advised to upgrade to new PHP versions instead of using distribution packages with security backports. The problem ...

Job opportunities @ SektionEins

Saturday, December 6th, 2008

SektionEins is an emerging IT security company with a clear focus on web application security. We're constantly looking to hire new and talented people for our team. Required qualifications: well-founded understanding of HTTP good knowledge of state of the art web technology experience with web application security audits knowledge of PHP experience with Ruby, Python, Perl, ...

PHP 5.2.7 and ZipArchive::extractTo()

Friday, December 5th, 2008

165 days ago I was sitting at a customer's place and were auditing a large scale web application. The audit was mainly a blackbox penetration test to check if an attacker could attack the application with zero knowledge. However when we found something interesting we were also able to look ...