Publications

ISGroup is a group of active and ethical researchers: we believe that it is necessary to act in harmony and to give the results of our research back to the community so that the evolutionary process, from which we all take benefit, will be never interrupted.

For this reason we have been committed for years in the publication of White Papers, articles and materials, without a defined periodicity, through our non-commercial personification, ush.it - a beautiful place.

We conducted presentations at the most important and innovative Italian and international conventions about themes of strong technical and innovative content. Part of the material can be consulted freely directly from the below sections.

White papers and presentations

• IT Security agency essentials: history of an imaginary Penetration Test.

Materials

• February 8, 2009: php-filesystem-attack-vectors.
• January 26, 2009: XSS Cheat Sheet: non repeating payloads.
• January 6, 2009: 25C3 (CCC Congress 2008) Tricks: makes you smile.
• December 16, 2008: Slides @System 2008 - Dipartimento di Informatica dell'Università di Pisa.
• September 9, 2008: Shared hosting "file" handler php session dumper.
• August 18, 2008: LFI2RCE (Local File Inclusion to Remote Code Execution) advanced exploitation: /proc shortcuts.
• July 9, 2008: Local File Inclusion (LFI) of session files to root escalation.
• July 2, 2008: Mod_negotiation: directory listing, filename bruteforcing.
• October 11, 2007: Detect NoScript POC.
• October 7, 2007: Skype 1.4.118 for Linux = Panacea.
• August 29, 2007: Scanning DMZ hosts with remote file opening.
• August 22, 2007: Architecture detection by php anomaly.
• August 18, 2007: Why the Skype 0day exploit is a fake.
• July 25, 2007: Clientside security: Hardening Mozilla Firefox.
• June 27, 2007: XSS Cheat Sheet: two stage payloads.
• June 11, 2007: XSS Cheat Sheet: the PLAINTEXT tag.
• June 10, 2007: Linuxpersec2 a Verona (16/17 Giugno).
• June 4, 2007: Install Firefox XPI without whitelist.
• May 1, 2007: Interview with Rain Forest Puppy.
• January 30, 2007: Bad url redirections (AKA: Many thanks to our partners!).
• January 27, 2007: Pseudo threading with BASH.
• December 22, 2006: HttpOnly Cookies Reference.
• December 20, 2007: IE7 ping back home, MS and your browsing history.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse Solution.
• May 9, 2006: LugVR Contest 01: Google Maps Reverse.
• April 14, 2006: Pratical XSS n1.
• January 29, 2006: Port scanning with online services.
• January 14, 2006: Port scanner with dnsstuff.
• October 6, 2005: Truffa ai sondaggi di mambo.

Presentations

• CameLug, GNU/Linux come punto di forza - Università degli studi di Camerino: Lollobox, hardened notebook system
• Chaos Computer Club (CCC) 2008 - Tricks: Makes you smile v4.
• Real life security (Università di Pisa) 2008 - IT Security agency essentials
• Web application security (Università di Pisa) 2008 - Bug Hunting e Code Review
• End Summer Camp (ESC) 2008 - Tricks: Makes you smile v3.
• LinuxDay Verona 2008 - Linux physical (in)security
• Metro Olografix Summer Camp (MOCA) 2008 - Tricks: Makes you smile v2.
• Metro Olografix Summer Camp (MOCA) 2008 - Lollobox: free and happy as a butterfly
• HAT - Relax underground is dead (HAT) 2008 - Tricks: Makes you smile v1.
• Linuxpersec 2 2007 - Get hacked: pericoli della navigazione
• End Summer Camp (ESC) 2006 - Secure MySQL Clusters
• End Summer Camp (ESC) 2006 - Exif phun
• LinuxDay Verona 2006 - Hardening di un ambiente LAMP