Publicaciones

ISGroup es un grupo de investigadores activos y éticos: creemos que es necesario actuar en armonía y devolver los resultados de nuestras investigaciones a la comunidad para que el proceso evolutivo, del que todos nos beneficiamos, no se interrumpa nunca.

Por eso llevamos años comprometidos en la publicación de White Papers, artículos y materiales, sin una periodicidad definida, a través de nuestra personificación no comercial, ush.it - a beautiful place.

Hemos realizado presentaciones en los congresos italianos e internacionales más importantes e innovadores sobre temas de fuerte contenido técnico e innovador. Parte del material puede consultarse libremente directamente desde las secciones que se indican a continuación.

White papers y presentaciones

• IT Security agency essentials: history of an imaginary Penetration Test.

Materiales

• February 8, 2009: php-filesystem-attack-vectors.
• January 26, 2009: XSS Cheat Sheet: non repeating payloads.
• January 6, 2009: 25C3 (CCC Congress 2008) Tricks: makes you smile.
• December 16, 2008: Slides @System 2008 - Dipartimento di Informatica dell'Università di Pisa.
• September 9, 2008: Shared hosting "file" handler php session dumper.
• August 18, 2008: LFI2RCE (Local File Inclusion to Remote Code Execution) advanced exploitation: /proc shortcuts.
• July 9, 2008: Local File Inclusion (LFI) of session files to root escalation.
• July 2, 2008: Mod_negotiation: directory listing, filename bruteforcing.
• October 11, 2007: Detect NoScript POC.
• October 7, 2007: Skype 1.4.118 for Linux = Panacea.
• August 29, 2007: Scanning DMZ hosts with remote file opening.
• August 22, 2007: Architecture detection by php anomaly.
• August 18, 2007: Why the Skype 0day exploit is a fake.
• July 25, 2007: Clientside security: Hardening Mozilla Firefox.
• June 27, 2007: XSS Cheat Sheet: two stage payloads.
• June 11, 2007: XSS Cheat Sheet: the PLAINTEXT tag.
• June 10, 2007: Linuxpersec2 a Verona (16/17 Giugno).
• June 4, 2007: Install Firefox XPI without whitelist.
• May 1, 2007: Interview with Rain Forest Puppy.
• January 30, 2007: Bad url redirections (AKA: Many thanks to our partners!).
• January 27, 2007: Pseudo threading with BASH.
• December 22, 2006: HttpOnly Cookies Reference.
• December 20, 2007: IE7 ping back home, MS and your browsing history.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse Solution.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse.
• April 14, 2006: Pratical XSS n1.
• January 29, 2006: Port scanning with online services.
• January 14, 2006: Port scanner with dnsstuff.
• October 6, 2005: Truffa ai sondaggi di mambo.

Presentaciones

• CameLug, GNU/Linux come punto di forza - Università degli studi di Camerino: Lollobox, hardened notebook system
• Chaos Computer Club (CCC) 2008 - Tricks: Makes you smile v4.
• Real life security (Università di Pisa) 2008 - IT Security agency essentials
• Web application security (Università di Pisa) 2008 - Bug Hunting e Code Review
• End Summer Camp (ESC) 2008 - Tricks: Makes you smile v3.
• LinuxDay Verona 2008 - Linux physical (in)security
• Metro Olografix Summer Camp (MOCA) 2008 - Tricks: Makes you smile v2.
• Metro Olografix Summer Camp (MOCA) 2008 - Lollobox: free and happy as a butterfly
• HAT - Relax underground is dead (HAT) 2008 - Tricks: Makes you smile v1.
• Linuxpersec 2 2007 - Get hacked: pericoli della navigazione
• End Summer Camp (ESC) 2006 - Secure MySQL Clusters
• End Summer Camp (ESC) 2006 - Exif phun
• LinuxDay Verona 2006 - Hardening di un ambiente LAMP