Webinar Recording and Laszlo's TNS hijack and downgrades Presentation
Also Laszlo emailed me to say he has translated his Hactivity presentation on TNS attacks such as protocol downgrades on the Java thin client and also TNS session hijacks. This is great material. The presentation itself is here and is a 67 page pdf file. Laszlo also has released his pytnsproxy code here and also the module for Squirtle. There are also three demo videos, how to hijack an Oracle session, how to downgrade an 11g authentication when a Java thin client is used and finally a demo on how to use the squirtle module. Nice work from Laszlo as usual.