Publications

ISGroup est un groupe de chercheurs actifs et éthiques: nous croyons qu'il soit nécéssaire d'agir en harmonie, et rendre à la communauté le fruit de notre recherche, de façon à ne jamais interrompre le processus évolutif duquel nous sommes tous bénéficiaires.

C'est pour cela que nous travaillons depuis des années sur l'écriture de White Papers, publication d'articles et matériel, sans une cadence fixe, à travers notre incarnation non commerciale, ush.it - a beautiful place.

Nous avons porté nos présentations aux conférences italiennes plus importantes et innovatrices, sur des thèmes avec un fort contenu technique et innovateur. Une partie du matériel peut être consultée librement dans les sections ci-dessous.

White papers e présentations

• IT Security agency essentials: history of an imaginary Penetration Test.

Matériel

• February 8, 2009: php-filesystem-attack-vectors.
• January 26, 2009: XSS Cheat Sheet: non repeating payloads.
• January 6, 2009: 25C3 (CCC Congress 2008) Tricks: makes you smile.
• December 16, 2008: Slides @System 2008 - Dipartimento di Informatica dell'Università di Pisa.
• September 9, 2008: Shared hosting "file" handler php session dumper.
• August 18, 2008: LFI2RCE (Local File Inclusion to Remote Code Execution) advanced exploitation: /proc shortcuts.
• July 9, 2008: Local File Inclusion (LFI) of session files to root escalation.
• July 2, 2008: Mod_negotiation: directory listing, filename bruteforcing.
• October 11, 2007: Detect NoScript POC.
• October 7, 2007: Skype 1.4.118 for Linux = Panacea.
• August 29, 2007: Scanning DMZ hosts with remote file opening.
• August 22, 2007: Architecture detection by php anomaly.
• August 18, 2007: Why the Skype 0day exploit is a fake.
• July 25, 2007: Clientside security: Hardening Mozilla Firefox.
• June 27, 2007: XSS Cheat Sheet: two stage payloads.
• June 11, 2007: XSS Cheat Sheet: the PLAINTEXT tag.
• June 10, 2007: Linuxpersec2 a Verona (16/17 Giugno).
• June 4, 2007: Install Firefox XPI without whitelist.
• May 1, 2007: Interview with Rain Forest Puppy.
• January 30, 2007: Bad url redirections (AKA: Many thanks to our partners!).
• January 27, 2007: Pseudo threading with BASH.
• December 22, 2006: HttpOnly Cookies Reference.
• December 20, 2007: IE7 ping back home, MS and your browsing history.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse Solution.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse.
• April 14, 2006: Pratical XSS n1.
• January 29, 2006: Port scanning with online services.
• January 14, 2006: Port scanner with dnsstuff.
• October 6, 2005: Truffa ai sondaggi di mambo.

Presentations

• CameLug, GNU/Linux come punto di forza - Università degli studi di Camerino: Lollobox, hardened notebook system
• Chaos Computer Club (CCC) 2008 - Tricks: Makes you smile v4.
• Real life security (Università di Pisa) 2008 - IT Security agency essentials
• Web application security (Università di Pisa) 2008 - Bug Hunting e Code Review
• End Summer Camp (ESC) 2008 - Tricks: Makes you smile v3.
• LinuxDay Verona 2008 - Linux physical (in)security
• Metro Olografix Summer Camp (MOCA) 2008 - Tricks: Makes you smile v2.
• Metro Olografix Summer Camp (MOCA) 2008 - Lollobox: free and happy as a butterfly
• HAT - Relax underground is dead (HAT) 2008 - Tricks: Makes you smile v1.
• Linuxpersec 2 2007 - Get hacked: pericoli della navigazione
• End Summer Camp (ESC) 2006 - Secure MySQL Clusters
• End Summer Camp (ESC) 2006 - Exif phun
• LinuxDay Verona 2006 - Hardening di un ambiente LAMP