posted in Tools & sources on Apr 30th, 2009
Tool name : IEBrowserHistory version 0.2 Description : Internet Explorer maintains a history file where it stores every URL you visited. The entries in this history file have a specific structure and are only partially saved in a human readable form. The tool IEBrowserHistory locates browser history files, parses them and prints out the [...]
read full post »
posted in Stuff on Apr 29th, 2009
I’ve decided not to release another article this week but to kee the focus on the source code section instead. I think it was a little unorganized from the beginning on and was actually only created not to forget to stuff it with code one day. This day arrived and I restructured the section a [...]
read full post »
posted in Articles on Apr 21st, 2009
In the first part of this series we had a closer look at the basic precondition how an attacker prepares his own computer to eliminate telltale traces when surfing the Internet. In this second part we will go into the details how they connect to the Internet anonymously without leaving a betraying IP address which [...]
read full post »
posted in Articles on Apr 15th, 2009
When analyzing the code of a Trojan horse it often contains methods and functions that can be assigned to typical function groups and modules. Even if the code and inner organisation seems to be chaotic and hard to understand because of its structureless appearance you can assign a function to at least one of these [...]
read full post »
posted in Tools & sources on Apr 11th, 2009
Below, you can find a link to the source code to a simple HTTP proxy server script. It’s written in PERL and requires a connection to a database to store the intresting data. But you can easily comment the lines in the code where the functions newConnRec() and connectDB() are called. This is the script [...]
read full post »