OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Exploit Next Generation® Methodology

From: Nelson Brito (nbritosekure.org)
Date: Sun Sep 19 2010 - 09:42:14 CDT

Some of you already heard about the Exploit Next Generation® Methodology - or ENG++ (pronounced /ěn'jĭn/ incremented)... And some of you were in its very first appearance:
        - The Departed: Exploit Next Generation H2HC 6th Edition

The ENG++ helps to create new exploit variants, maintaining the reliability and can be applied to:
        1. Penetration test;
        2. Exploit Development;
        3. Security Solution Evasion Test;
        4. Security Solution Quality Assurance;
        5. Etc...

That is the very first definition of "Z-Day Attacks" concept: any new attack exploitation variant that cannot be detected by regular security solutions and/or products.

Find further details http://fnstenv.blogspot.com/2010/09/exploit-next-generation.html

Regards.

Nelson Brito
Security Researcher
http://fnstenv.blogspot.com/