Sudo make me a sandwich redux: http://t.co/Gw5bk2Pv

Very detailed writeup of MITM attack on IPv6 network: http://resources.infosecinstitute.com/slaac-attack/ (via @securityshell)

Great tutorials on exploit dev fundamentals (http://goo.gl/Y6U9T) and SEH exploitation (http://goo.gl/r5xUA).

This is how honest incident report looks like: http://goo.gl/Qj3XC No APT or "extremely sophisticated attackers" involved.

"Adventures in analyzing stuxnet" by @brucedang: http://www.vimeo.com/18225315 (thanks @sifumoraga) #27c3

Executing EXE in data stream via symlink: http://pauldotcom.com/2010/10/windows-7-symbolic-links-and-h.html. Thanks to @markbaggett.

DLL-load hijacking at its best: https://t.co/eOfhr6KH And it's even documented: http://t.co/aNb7MZZG

Matt Miller (skape) explores the technical details of exploit prevention mechanisms like GS, DEP & ASLR: http://goo.gl/JF2sk (via @shp_box)

I knew that Code Project site with new Win EoP 0-day will be removed. That's why I saved it: http://users.volja.net/database/Bypass_UAC.pdf

Assessing the exploitability of MS11-083: http://t.co/xtRJWe7H

Become a programmer, mofo: http://t.co/TZYJMsIX :D (via @tomaszmiklas)

Somebody is really pissed: http://pastebin.com/Q6p4CEbg (IDA 6.1 Leaked NFO)

Ivan Frantric writes about memory disclosure technique for IE7/8: http://ifsec.blogspot.com/2011/06/memory-disclosure-technique-for.html

Online ROP gadgets: http://gorope.me | http://www.corelan.be/index.php/security/rop-gadgets/

Microsoft releases portable AV scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

Researcher @haifeili defeats DEP/ASLR on Windows 7 with ActionScript type confusion bug: http://goo.gl/ruv7Y

Net-ninja.net archive: http://bit.ly/ggKLhq Rename to PDF. Some cool papers on heap overflows, format strings, etc. (Thanks to @ax330d)

AFAIK StreamArmor (http://goo.gl/SPLRd) is the only tool capable of executing EXE's in ADS on Vista/Win7. Apparently it uses ShellExecute().

DotNetNuke response on ASP.NET padding oracle disclosure: http://tinyurl.com/39mt9k2

MS10-025 from @metasploit works like a cham: http://users.volja.net/database/ms10_025.PNG