Some days I love Ubuntu, some I friggin hate it. today I hate it. WebGoat comes with a nifty little .sh script to check to make sure you ha...

Andrew Hay recommended reading my TEMPEST paper....way cool http://www.andrewhay.ca/archives/218

This interview was originally published over on LearnSecurityOnline.com . ============================== Interview with Andres Riancho =====...

In case you missed reading the article in HTML format over at EthicalHacker.net , you can take a look at my TEMPEST article at infosecwrite...

"Fierce is a reconnaissance tool. Fierce is a PERL script that quickly scans domains (usually in just a few minutes, assuming no networ...

So BT3 beta is out, i wanted to see what all the fuss was about... here are some screenshots, looks and acts pretty much the same. I like t...

So while helping a buddy out with an audit we came across a mis-configured DNS server that allows zone transfers (I know, we couldn't be...

If you haven't heard of Paterva's Maltego (formally Evolution) then you've been missing out! HD Moore and Valsmith first mentio...

So we have a new look for carnal blog for '08, its a bit early but after looking at the new look and then looking at the old one I could...

So how do you go about performing a phishing attack during a pentest? Well, it depends on the scope of the pentest and whether or not you ar...