Security Testing Tools – Sysinternals

One of the goals of this blog is post helpful tools and tips regarding software security testing and writing secure code.  Hopefully someone will read one of these posts and it will help them write safer, and better code. 

Over the next few months I will be posting different tools that can be used to discover faults in applications, and potential security problems.  These tools will include process and handle enumerators, web proxies, fuzzers, and any other tool I consider useful and important.

For starters, I have added a link to Sysinternals on my Blog Roll to the right.  Sysinternals was a company started by Mark Russinovich and Bryce Cogswell in 1996.  They created numerous tools for application debugging and analysis.  These tools are offered for free and are essential to a security tester.  Give a look around at them on your own if you’d like.  I will be revisiting many of them individually in the coming months.

Easy Blogging – Windows Only

Windows Live Writer is easy to use application that allows you to publish rich content to any web blog.  Designed specifically for Windows Spaces blogs, it works flawlessly with almost any other blogger service.  It provides WYSIWYG formatting, images uploading, Live Maps, and an open SDK.  Its design allows for plug-ins and there are already three available.

Of course, it is not without it’s problems.  Currently, the program is still in beta, so you will encounter some strange errors from time to time.  That being said, I have never lost a post, or encountered an error that had an sort of adverse affect on my blog.  Also, the program allows for images to be uploaded directly your blog of choice, provided they support the newMediaObject API.  Apparently, Blogger.com does not support this, which is unfortunate.  Thankfully the writers of this application have included FTP image uploading. 

I’ve giving this a test run, and so far it’s been good.  Simple, strait forward, and no horrific bugs.

Windows Live Writer – Beta

The Beginning

This blog is a new venture for me.  I plan on using it as a place to post information about my projects, helpful samples of code, unsolicited opinions, and any other interesting pieces of information I can find regarding software development.

I really don’t have a solid plan for this blog, so it will probably take on different personalities over time.  Keep checking back with me and maybe there will be something interesting posted here.