:: Home ::

Oct 13th 2014 - Changing Hosts

Things are temp down while moving hosts. ChicagoVPS can die in a fire.

Maybe I'll add some updates when we're on the new host!

June 13th 2013 - BIOS based rootkit research posted

Over on the research page I've posted a write-up of how to create a BIOS based rootkit, along with a PoC and source code. I originally completed this project several years ago, but it is still fairly relevant.

I've tried to structure the code and scripts so that they are easy to try out and modify, but there's also a sample patched BIOS that can be tried with most versions of VMware. Patching your motherboard's BIOS probably isn't for everyone, so it's nice that this can also be effectively tested in VMware.

In other news, the Internet Census service scan data is coming along, but it's a bit of a slow process. I hope to have an update regarding it sometime in the next week.

May 21th 2013 - Internet Census 2012 search update

The reverse DNS (rDNS) data is now available for searching as well. Currently only terms longer than 5 characters can be searched, and the number of results will be limited to a few thousand.

Fun queries that can be run now that hostname searching is available include:

Upcoming updates (in order):

I would really like to get the banner data online as soon as possible, however this website only gets updated in my spare time. Hopefully all of the above items will be done in less than a month though!

May 5th 2013 - Website online!

After much delay, this website is now online. The driving reason behind this website (initially) at least is to get the Internet Census 2012 data online in a searchable form. Over the next week I plan to post some updates with some of my past research, tools, etc, so please check back every so often! Going forwards I plan to host any new projects or research here as well.

I don't have any comment boxes or anything like that on this website, but I would love any feedback anyone has! Please send any thoughts, suggestions, or hate mail to my email on the contact page (I don't recommend hate mail, will get you on "the list").