Pubblicazioni

ISGroup è un gruppo di ricercatori attivi ed etici: crediamo sia necessario agire in armonia e ridare alla comunità il frutto della nostra ricerca di modo che il processo evolutivo di cui tutti beneficiamo non si interrompa mai.

Per questo da anni ci impegnamo nella stesura di White Papers, pubblicazione di articoli e materiali, senza una precisa periodicità, tramite la nostra incarnazione non commerciale, ush.it - a beautiful place.

Abbiamo tenuto presentazioni presso le più importanti ed innovative conferenze italiane ed internazionali su temi dal forte contenuto tecnico ed innovativo. Parte del materiale è liberamente consultabile direttamente tramite le sezioni sottostanti.

White papers e presentazioni

• IT Security agency essentials: history of an imaginary Penetration Test.

Materiali

• February 8, 2009: php-filesystem-attack-vectors.
• January 26, 2009: XSS Cheat Sheet: non repeating payloads.
• January 6, 2009: 25C3 (CCC Congress 2008) Tricks: makes you smile.
• December 16, 2008: Slides @System 2008 - Dipartimento di Informatica dell'Università di Pisa.
• September 9, 2008: Shared hosting "file" handler php session dumper.
• August 18, 2008: LFI2RCE (Local File Inclusion to Remote Code Execution) advanced exploitation: /proc shortcuts.
• July 9, 2008: Local File Inclusion (LFI) of session files to root escalation.
• July 2, 2008: Mod_negotiation: directory listing, filename bruteforcing.
• October 11, 2007: Detect NoScript POC.
• October 7, 2007: Skype 1.4.118 for Linux = Panacea.
• August 29, 2007: Scanning DMZ hosts with remote file opening.
• August 22, 2007: Architecture detection by php anomaly.
• August 18, 2007: Why the Skype 0day exploit is a fake.
• July 25, 2007: Clientside security: Hardening Mozilla Firefox.
• June 27, 2007: XSS Cheat Sheet: two stage payloads.
• June 11, 2007: XSS Cheat Sheet: the PLAINTEXT tag.
• June 10, 2007: Linuxpersec2 a Verona (16/17 Giugno).
• June 4, 2007: Install Firefox XPI without whitelist.
• May 1, 2007: Interview with Rain Forest Puppy.
• January 30, 2007: Bad url redirections (AKA: Many thanks to our partners!).
• January 27, 2007: Pseudo threading with BASH.
• December 22, 2006: HttpOnly Cookies Reference.
• December 20, 2007: IE7 ping back home, MS and your browsing history.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse Solution.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse.
• April 14, 2006: Pratical XSS n1.
• January 29, 2006: Port scanning with online services.
• January 14, 2006: Port scanner with dnsstuff.
• October 6, 2005: Truffa ai sondaggi di mambo.

Presentations

• CameLug, GNU/Linux come punto di forza - Università degli studi di Camerino: Lollobox, hardened notebook system
• Chaos Computer Club (CCC) 2008 - Tricks: Makes you smile v4.
• Real life security (Università di Pisa) 2008 - IT Security agency essentials
• Web application security (Università di Pisa) 2008 - Bug Hunting e Code Review
• End Summer Camp (ESC) 2008 - Tricks: Makes you smile v3.
• LinuxDay Verona 2008 - Linux physical (in)security
• Metro Olografix Summer Camp (MOCA) 2008 - Tricks: Makes you smile v2.
• Metro Olografix Summer Camp (MOCA) 2008 - Lollobox: free and happy as a butterfly
• HAT - Relax underground is dead (HAT) 2008 - Tricks: Makes you smile v1.
• Linuxpersec 2 2007 - Get hacked: pericoli della navigazione
• End Summer Camp (ESC) 2006 - Secure MySQL Clusters
• End Summer Camp (ESC) 2006 - Exif phun
• LinuxDay Verona 2006 - Hardening di un ambiente LAMP