Here's the video from the Notacon talk. Audio sucks, sorry...blame the video guy. Full Scope Security Attacking Layer 8: Client-Side Pen...

There is an interesting thread over on DailyDave about 0day and what you can do about it. Its far from complete, so go read the thread and c...

g0ne and I just got back from presenting on Client-Side Attacks at Notacon . You can check out his write up here . I have pretty much the ...

Here's the video from our Client-Side talk at SOURCE Boston 2009 Full Scope Security Attacking Layer 8: Client-Side Penetration Testing ...

So right after the latest Adobe 0-day was found in the wild and it was seen to be using heapspraying as part of the exploit and payload deli...

Alright its time for SOURCE Boston ! I'm happy to announce that g0ne and I will be there presenting on: Attacking Layer 8: Client-Side ...

CG just pushed the code to the Metasploit trunk so go run 'svn update' and enjoy. Any feedback would be good. I'll writeup a lit...

Details to follow. :-) msf > use exploit/windows/browser/ms09_002 msf exploit(ms09_002) > set PAYLOAD windows/shell_reverse_tcp PAYLOA...

So nothing new to serve up exploits via ad networks but I thought it was cool that someone was serving up a pdf exploit via the Ad Network F...

It's not new at all [ CVE-2006-5198 ] but I noticed that MSF did not have any coverage for Winzip's vulnerable ActiveX methods and t...

mc committed 5 exploit modules, 2 browser & 3 fileformat, I'd put together to the metasploit trunk the other day. Just run 'svn ...

all kinds of things for your client side attack http://blog.didierstevens.com/2009/01/05/howto-add-a-digital-signature-to-an-office-document...

Pretty good demo by Mark Baggett using the MSF Payload with VBA output and creating a malicious word document. http://markremark.blogspot.co...

So this has been an interesting week. Lots of new botnets to dig around in, a bunch of new malware sites making a new effort to obfuscate th...

A little video on using the fileformat mixin to exploit the adobe util.printf() vulnerability. Sorry, no audio. You'll just have to fo...

Good blog post over at securiteam on using the exe2vba portion of metasploit to embed malicious code into office documents. Fun! http://bl...

So this morning I was doing my usual malware roundup and looking for anything new or vaguely interesting. Lots of the usual sites all servin...

So after a long hiatus of no posts I figured it was time to step up and post something that may be of interest to pentesters. In the spirit ...

Client-side attacks are where its at and being able to send a legitimate looking file to a user to do their double-clicky thing on is the bo...

HD Moore released some documentation to get karmetasploit working with the framework. First you'll have to get an updated version of ai...