Blackhat 2008 Fantasy League picks. because I'm poor and my company is cheap i'm not making it to BH, but Wesley McGrew and I have ...

Scanning once you are on the LAN can pose a problem. Nmap requires installing pcap and usually an interactive install ( metacab is an opti...

got word I passed my CISA. ph33r me! I'll pass on the certification hating, see my posts on CEH != competent pentester and CISSP != com...

So last assessment I got caught on the first internal port scan. Seems that all the internal routing was done via static routes so when I t...

I'm confused about what all the debate is over HD and I)ruid releasing exploit code. Every time there is a new vulnerability WITHOUT cod...

g0ne has a horseshoe, I never get as lucky as he did/does on his pentests. You can read about his latest one here . I on the other hand alw...

Wrapping up a pentest this week and got to do a little "user awareness training" with the current and unpatched ActiveX Control f...

No not an exploit-dev 101 post but maybe an advanced tip for people new to using the Metasploit Framework. I see this question all the time...

Hopefully a useful day in the life of a pentest post... So there I was, trying to gather emails for our pentest. The only problem is that w...

you know i don't require my elected leaders to be a NOP or be able to write an 0day but to not be able to "get online" or rea...