checking web logs... 71.191.45.109 - - [30/Aug/2008:19:06:39 +0000] "GET /hack/brutessh2.c?';DECLARE% 20@S%20CHAR(4000);SET%20@S=CA...

If you are looking to have your own box and get your hands dirty with Linux administration then slicehost is a great option for you. My las...

So after a long hiatus of no posts I figured it was time to step up and post something that may be of interest to pentesters. In the spirit ...

From Wired: Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presu...

I was able to pick up a pre-released copy of The IDA Pro book at Defcon in the vendor area, thanks to Adam from No Starch. This book is not ...

Finally! I've been waiting to play with this tool since the presentation at Defcon. Tunneling TCP through well formed HTTP which decod...

Client-side attacks are where its at and being able to send a legitimate looking file to a user to do their double-clicky thing on is the bo...

Shared passwords, especially shared VNC password remind me of the straw house from the three little pigs... In addition to the previous post...

Ok, so we have everything up and running ( first post ) and waiting for some random person...err your lab wifi box to connect to Karmetasplo...

Day in the life of a pentester. This one is short and sweet. Some things you probably shouldn't do. 1. fail use clear text protocols 2....