<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>mishou.org</title>
	<atom:link href="http://mishou.org/feed/" rel="self" type="application/rss+xml" />
	<link>http://mishou.org</link>
	<description>A site about learning.</description>
	<lastBuildDate>Fri, 17 Feb 2012 14:00:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='mishou.org' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://s2.wp.com/i/buttonw-com.png</url>
		<title>mishou.org</title>
		<link>http://mishou.org</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://mishou.org/osd.xml" title="mishou.org" />
	<atom:link rel='hub' href='http://mishou.org/?pushpress=hub'/>
		<item>
		<title>Insecure Programming by Example: abo6/7/8 Ménage à trois</title>
		<link>http://mishou.org/2010/10/12/insecure-programming-by-example-abo678-menage-a-trois/</link>
		<comments>http://mishou.org/2010/10/12/insecure-programming-by-example-abo678-menage-a-trois/#comments</comments>
		<pubDate>Wed, 13 Oct 2010 02:22:16 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Insecure Programming by Example]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[gera]]></category>
		<category><![CDATA[wargames]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=264</guid>
		<description><![CDATA[This post will be pretty brief, as there are no significant differences in the solution for abo6.c from other previously covered exercises, while abo7.c and abo8.c are both not exploitable. The latter two exercises demonstrate important concepts regarding the placement of variously defined variables within memory for compiled C code which I&#8217;ll outline, but it [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=264&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/10/12/insecure-programming-by-example-abo678-menage-a-trois/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Insecure Programming by Example: abo5.c we GOT this&#8230;</title>
		<link>http://mishou.org/2010/09/10/insecure-programming-by-example-abo5-c-we-got-this/</link>
		<comments>http://mishou.org/2010/09/10/insecure-programming-by-example-abo5-c-we-got-this/#comments</comments>
		<pubDate>Sat, 11 Sep 2010 00:23:38 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Insecure Programming by Example]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[gera]]></category>
		<category><![CDATA[wargames]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=238</guid>
		<description><![CDATA[Introduction I actually solved this one a bit ago, while messing around at the GFIRST 2010 conference in San Antonio. Just now getting around to writing it up. Here is the code for abo5.c: Gera says: ch-ch-ch-changes Use your sixth sense, will you be able to gain control given the possibility of writing wherever you [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=238&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/09/10/insecure-programming-by-example-abo5-c-we-got-this/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Insecure Programming by Example: abo4.c POINTER MADNESS</title>
		<link>http://mishou.org/2010/08/09/insecure-programming-by-example-abo4-c-pointer-madness/</link>
		<comments>http://mishou.org/2010/08/09/insecure-programming-by-example-abo4-c-pointer-madness/#comments</comments>
		<pubDate>Tue, 10 Aug 2010 01:29:05 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Insecure Programming by Example]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[gera]]></category>
		<category><![CDATA[perl]]></category>
		<category><![CDATA[wargames]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=220</guid>
		<description><![CDATA[Introduction I love sensational titles. Here is abo4.c: Gera says: oh pointers, pointers! Do you remember when you had problems with * and &#38;? everybody has that kind of problems at least once when learning C, what about poiners to pointers? let&#8217;s see&#8230; There are a few elements of this that we should go over [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=220&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/08/09/insecure-programming-by-example-abo4-c-pointer-madness/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Passive DNS mining from PCAP with dpkt &amp; Python</title>
		<link>http://mishou.org/2010/04/13/passive-dns-mining-from-pcap-with-dpkt-python/</link>
		<comments>http://mishou.org/2010/04/13/passive-dns-mining-from-pcap-with-dpkt-python/#comments</comments>
		<pubDate>Wed, 14 Apr 2010 01:31:41 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Python]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[dns]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=210</guid>
		<description><![CDATA[Update 04/14: A friend pointed me to dnssnarf, a project that looks like it was written at a DojoSec meeting by Christopher McBee and then updated a bit later on by Grant Stavely. It uses Scapy (which I hear is really neat if you haven&#8217;t played with it). Check Grant&#8217;s blog post about dnssnarf out. [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=210&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/04/13/passive-dns-mining-from-pcap-with-dpkt-python/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Symantec Brightmail syslog message parser</title>
		<link>http://mishou.org/2010/04/09/symantec-brightmail-syslog-message-parser/</link>
		<comments>http://mishou.org/2010/04/09/symantec-brightmail-syslog-message-parser/#comments</comments>
		<pubDate>Sat, 10 Apr 2010 01:56:19 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[perl]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[syslog]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=206</guid>
		<description><![CDATA[Ok, this will not be interesting to most of you folks that are subscribed (all three of you [hi Mom!]) but I&#8217;m hoping Google will get it and then if anyone needs this script, it&#8217;ll be there to help them. This is just a simple log parser for the really, really annoying multi-line/multi-message format that [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=206&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/04/09/symantec-brightmail-syslog-message-parser/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Python Unescape 16-bit Unicode String to File</title>
		<link>http://mishou.org/2010/04/02/python-unescape-16-bit-unicode-string-to-file/</link>
		<comments>http://mishou.org/2010/04/02/python-unescape-16-bit-unicode-string-to-file/#comments</comments>
		<pubDate>Fri, 02 Apr 2010 23:03:36 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Python]]></category>
		<category><![CDATA[Software Hacking]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=203</guid>
		<description><![CDATA[Archived here for me, maybe someone else will need it. Frequently when our analysts are doing malcode analysis, particularly on malicious PDF documents, they see shellcode in the form of 16-bit Unicode values that are then unescaped into the heap calling the Javascript unescape() function. Problem is, we do most of our malicious Javascript analysis [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=203&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/04/02/python-unescape-16-bit-unicode-string-to-file/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Bluecoat ProxySG Cache Retrieval Script in Python</title>
		<link>http://mishou.org/2010/03/19/bluecoat-proxysg-cache-retrieval-script-in-python/</link>
		<comments>http://mishou.org/2010/03/19/bluecoat-proxysg-cache-retrieval-script-in-python/#comments</comments>
		<pubDate>Fri, 19 Mar 2010 17:44:45 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Python]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[urllib]]></category>
		<category><![CDATA[web]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=186</guid>
		<description><![CDATA[So, I was actually looking at this script today and thought folks who use Bluecoat as proxies at their jobs (I get the impression that they are pretty popular) might be interested in checking it out. It&#8217;s kind of like a poor-man&#8217;s pcap solution for sites that use a robust Bluecoat proxy but don&#8217;t have [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=186&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/03/19/bluecoat-proxysg-cache-retrieval-script-in-python/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Insecure Programming by Example: abo3.c</title>
		<link>http://mishou.org/2010/03/14/insecure-programming-by-example-abo3-c/</link>
		<comments>http://mishou.org/2010/03/14/insecure-programming-by-example-abo3-c/#comments</comments>
		<pubDate>Sun, 14 Mar 2010 19:39:12 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Insecure Programming by Example]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[gera]]></category>
		<category><![CDATA[wargames]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=157</guid>
		<description><![CDATA[Updated 03/20/2010 to add an excellent introduction to pointers in C and C++. The theme for this exercise was provided by one of the folks I follow on Twitter. @kpyke: And so sayeth the @pusscat: &#8220;If you gave me the source code, I&#8217;d just compile it and look at it in a debugger anyways&#8230;&#8221; This [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=157&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/03/14/insecure-programming-by-example-abo3-c/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Insecure Programming by Example: abo2.c, not vulnerable&#8230;o rly?</title>
		<link>http://mishou.org/2010/02/13/insecure-programming-by-example-abo2-c-not-vulnerable-o-rly/</link>
		<comments>http://mishou.org/2010/02/13/insecure-programming-by-example-abo2-c-not-vulnerable-o-rly/#comments</comments>
		<pubDate>Sat, 13 Feb 2010 16:32:12 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Insecure Programming by Example]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[gera]]></category>
		<category><![CDATA[wargames]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=148</guid>
		<description><![CDATA[Introduction Note 02/13/2010: This post has been a long time coming (started on 01/15 I think), I&#8217;m sorry for the delay. At first, it took me a while to (SPOILER, YOU WILL DIE ALONE) find out that abo2.c was not exploitable under x86 due to the exit() call&#8230;I saw this immediately, but it took me [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=148&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2010/02/13/insecure-programming-by-example-abo2-c-not-vulnerable-o-rly/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
		<item>
		<title>Insecure Programming by Example: Advanced Buffer Overflows 1</title>
		<link>http://mishou.org/2009/12/23/insecure-programming-by-example-advanced-buffer-overflows-1/</link>
		<comments>http://mishou.org/2009/12/23/insecure-programming-by-example-advanced-buffer-overflows-1/#comments</comments>
		<pubDate>Thu, 24 Dec 2009 01:12:22 +0000</pubDate>
		<dc:creator>mmishou</dc:creator>
				<category><![CDATA[Insecure Programming by Example]]></category>
		<category><![CDATA[Software Hacking]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[gera]]></category>
		<category><![CDATA[wargames]]></category>

		<guid isPermaLink="false">http://mishou.org/?p=122</guid>
		<description><![CDATA[Introexecuduction Ok, after a nice break, I&#8217;m ready to&#8230;break . I have a couple of Python related posts in my docket, but today we&#8217;re going to start work on the next exploit exercises by Gera in his Insecure Programming by Example series, Advanced Buffer Overflows! I hope they aren&#8217;t too advanced. This should be refreshing [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=mishou.org&amp;blog=10822010&amp;post=122&amp;subd=mmishou&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<wfw:commentRss>http://mishou.org/2009/12/23/insecure-programming-by-example-advanced-buffer-overflows-1/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/edc5350879d1553dbfd29f085e4f198c?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">mmishou</media:title>
		</media:content>
	</item>
	</channel>
</rss>
