bugtraq - Exploit Next Generation® Methodology

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 19 Sep 2010 11:42:14 -0300
From: "Nelson Brito" <nbrito@...ure.org>
To: <bugtraq@...urityfocus.com>, <pen-test@...urityfocus.com>,
	<focus-ids@...urityfocus.com>
Subject: Exploit Next Generation® Methodology

Some of you already heard about the Exploit Next Generation® Methodology - or ENG++ (pronounced /ěn'jĭn/ incremented)... And some of you were in its very first appearance:
	- The Departed: Exploit Next Generation @ H2HC 6th Edition

The ENG++ helps to create new exploit variants, maintaining the reliability and can be applied to:
	1. Penetration test;
	2. Exploit Development;
	3. Security Solution Evasion Test;
	4. Security Solution Quality Assurance;
	5. Etc...

That is the very first definition of "Z-Day Attacks" concept: any new attack exploitation variant that cannot be detected by regular security solutions and/or products.

Find further details @ http://fnstenv.blogspot.com/2010/09/exploit-next-generation.html

Regards.

Nelson Brito
Security Researcher
http://fnstenv.blogspot.com/