Fun Engineering Group
Visitor,
welcome to engineeringforfun.com We're a group of people who are passionate about information technology in general.
We (engineeringforfun.com) use this website as a portal to publish some of our work we'd like to share with you.
We hope you will find some things of interest.
Projects
Browser Rider - a testing tool for browser exploitation
BrowserRider is a framework built to exploit the cross site scripting vulnerability. Its purpuse is to prove the impact of this
vulnerability during a vulnerability assessment. Visit the project's page to learn more about it.
Articles and presentations
Browser Rider: what you never thought your browser could do to you
Similar presentation then at Ruxcon.
OWASP AppSec 2009, 28th of February 2009 - slides
OWASP Melbourne Chapter, 4th of February 2009 - slides
OWASP AppSec 2009, 28th of February 2009 - slides
OWASP Melbourne Chapter, 4th of February 2009 - slides
Browser Rider: Your way to Fun Browsing (Ruxcon 2k8)
Browser exploitation is in fashion but it doesn't seem that there's a popular tool to build and run attacks. Browser Rider will
try to fill the gap by providing a framework to build, deploy and manage payloads that exploit the browser. This project aims
on the long term to provide a powerful, simple and flexible interface to any client side attack for hackers.
(download)
The blog 
November 26, 2009 - Durzosploit presented in a Core Impact webcast!
August 18, 2009 - Microsoft Windows Media File Handling Code Execution (MS09-038)
August 16, 2009 - Linux kernel: uninit op in SOCKOPS_WRAP() leads to privesc
August 11, 2009 - Bypassing PHP empty() function
August 18, 2009 - Microsoft Windows Media File Handling Code Execution (MS09-038)
August 16, 2009 - Linux kernel: uninit op in SOCKOPS_WRAP() leads to privesc
August 11, 2009 - Bypassing PHP empty() function
Our guests
FRET is a well known french group focusing on reverse engineering willing to share their passion,
work and knowledge. Check out their web space.