Fuzzing
Fuzzing is a technology that can be used to automatically find security vulnerabilities in applications. I am developing a fuzzer called FuzzIT which when the project started was a file format fuzzer. Now it became a general purpose fuzzer with lots of capabilities in the form of plugins. The program is written in python and can be downloaded here.Rootkit technology
I am developing a new version of the FUTo rootkit. The original version supports OSs until Windows Server 2003 SP0. The new version supports the most recent versions of Microsoft's OSs including Windows Server 2008 SP1. A lot of modification was done in the original code in order to support the latest windows versions. A new functionality called "token stealing" developed by me is included in the latest version. With this technique a process is capable to use the access token of another token. It is usefull under Windows Server 2008, because modifying an access token is not trivial any more. The research paper about toke stealing can be downloaded here. The current version supports the following versions of Windows: * Windows XP SP0, SP1, SP2, SP3 * Windows Server 2003 SP0, SP2 * Windows Server 2008 SP1, SP2 * Windows 7 Beta (build 7000) * Windows 7 SP0Computer Forensic
Andreas Schuster developed a technique for finding processes in memory images of Windows OSs. The software that is using this technique is called ptfinder. The ptfinder versions for Windows Server 2008 SP1, 2003 SP2 and Windows 7 beta are developed by me, and can be downloaded here. The details of the technique can be found here. A presentation delivered by me (in hungarian) can be downloaded here.