"Never let school get in the way of learning."
-- Mark Twain

[BL4CK] - Papers

Below is an unorganized repository of publicly available published papers and other informal texts.

Papers

Windows/Linux/Mac/BSD Rootkit Basics


This presentation covers some of the basic rootkit methodologies from both an administrative viewpoint as well as from a developer's eye view.  This presentation is a live document and will be updated as required.

SQL Injection Paper 


     By zeroday.		         
        zeroday [ at ] blacksecurity.org  

	1.Introduction.
	2.Testing for vulnerabilities.
	3.Gathering Information.
	4.Data types.
	5.Grabbing Passwords.
	6.Create DB accounts.
	7.MySQL OS Interaction.
	8.Server name and config.
	9.Retrieving VNC password from registry.
	10.IDS Signature Evasion.
	11.mySQL Input Validation Circumvention using Char().
	12.IDS Signature Evasion using comments.
	13.Strings without quotes.

Windows System Internals - Part II


This presentation was given to the local dc214.defcon.org group in March 2006. This second presentation covers several basics of windows including:

1. Windows Memory Management
2. Jobs, Processes, and Threads
3. The Windows Subsystems
4. Other Stuff

Windows System Internals - Part I


This presentation was given to the local dc214.defcon.org group in January 2006. This first presentation covers several basics of windows including:

1. Windows Startup/Shutdown Process
2. Unicode
3. Registry/Cells/Hives
4. Other Basics