THP USH Wisec DigitalBullets TheHackersPlace ISGroup network

Francesco 'ascii' Ongaro
Independent Security Researcher
(ush.it - a beautiful place)

Papers

• IT Security agency essentials: storia di un Penetration Test immaginario

Conferences

• End Summer Camp (ESC) 2009 - Terminal Madness: High level of ownage coming from the terminal.
• Security Date - Università degli studi di Camerino: Bypassing Web Application Firewalls (WAF)
• CameLug, GNU/Linux come punto di forza - Università degli studi di Camerino: Lollobox, hardened notebook system
• Chaos Computer Club (CCC) 2008 - Tricks: Makes you smile v4.
• Real life security (Universita' di Pisa) 2008 - IT Security agency essentials
• End Summer Camp (ESC) 2008 - Tricks: Makes you smile v3.
• LinuxDay Verona 2008 - Linux physical (in)security
• Metro Olografix Summer Camp (MOCA) 2008 - Tricks: Makes you smile v2.
• Metro Olografix Summer Camp (MOCA) 2008 - Lollobox: free and happy as a butterfly
• HAT - Relax underground is dead (HAT) 2008 - Tricks: Makes you smile v1.
• Linuxpersec 2 2007 - Get hacked: pericoli della navigazione
• End Summer Camp (ESC) 2006 - Secure MySQL Clusters
• End Summer Camp (ESC) 2006 - Exif phun
• LinuxDay Verona 2006 - Hardening di un ambiente LAMP

Advisories

• Jetty 6.x and 7.x Multiple Vulnerabilities
• Vtiger CRM 5.0.4 Multiple Vulnerabilities
• SugarCRM 5.2.0e Remote Code Execution
• FormMail 1.92 Multiple Vulnerabilities
• Zabbix 1.6.2 Frontend Multiple Vulnerabilities
• Remote Command Execution in Moodle
• Collabtive 0.4.8 Multiple Vulnerabilities
• Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities
• WiKID wClient-PHP <= 3.0-2 Multiple XSS Vulnerabilities
• Cacti 0.8.7a Multiple Vulnerabilities
• GreenSQL, a MySQL firewall, bypassed
• Original Photo Gallery Remote Command Execution
• Firefox <= 2.0.0.3 DOM Keylogger (bypass same-origin policy)
• Shadowpage vulnerability: the page that doesn't exists (Multiple browsers affected)
• PHP import_request_variables() arbitrary variable overwrite
• Php Nuke wild POST XSS
• Milkeyway Captive Portal Multiple Vulnerabilities
• PmWiki remote file inclusion exploit
• PHP5 Globals Vulnerability
• PmWiki Multiple Vulnerabilities
• PHP iCalendar Remote File Inclusion
• PHP Web Statistik Multiple Vulnerabilities
• FreeWebStat Multiple XSS Vulnerabilities
• Multiple Vulnerabilities in WebCalendar

Security research

• PHP filesystem attack vectors - Take Two
• PHP filesystem attack vectors
• XSS Cheat Sheet: non repeating payloads
• 25C3 (CCC Congress 2008) Tricks: makes you smile
• Slides @System 2008 - Dipartimento di Informatica dell'Universita' di Pisa
• Shared hosting "file" handler PHP session dumper
• LFI2RCE (Local File Inclusion to Remote Code Execution) advanced exploitation: /proc shortcuts
• Local File Inclusion (LFI) of session files to root escalation
• mod_negotiation: directory listing, filename bruteforcing
• Detect NoScript POC
• Skype 1.4.118 for Linux = Panacea
• Scanning DMZ hosts with remote file opening
• Architecture detection by PHP anomaly
• Why the Skype 0day exploit is a fake
• Clientside security: Hardening Mozilla Firefox
• XSS Cheat Sheet: two stage payloads
• XSS Cheat Sheet: the PLAINTEXT tag
• Linuxpersec2 a Verona (16/17 Giugno)
• Install Firefox XPI without whitelist
• Interview with Rain Forest Puppy
• Bad url redirections (AKA: Many thanks to our partners!)
• Pseudo threading with BASH
• HttpOnly Cookies Reference
• IE7 ping back home, MS and your browsing history
• LugVR Contest 01: Google Maps Reverse Solution
• LugVR Contest 01: Google Maps Reverse
• Pratical XSS n1
• Port scanning with online services
• Port scanner with dnsstuff
• Truffa ai sondaggi di mambo
• HttpOnly Cookies and Mozilla Firefox
• EXIF Phun
• Arin.net XSS
• Windows software

Primary web resources

• ush.it - a beautiful place, the home of ush team
• ISGroup - Information Security Group, my very own security company!
• thp - the hackers place, services
• Wisec - The WIse SECurity, my friend Stefano Di Paola
• Digital Bullets, my friend Giorgio Fedon
• Fanthome, "Make the future now, yesterday!"
• aghers.org, hackers ephimerus group

Other links

• My profile on www.ush.it
• My profile on linkedin
• My curriculum vitae in pdf format
• My friend and colleague Saidone’ repository

Site administrator: ascii AT katamail DOT com