The Truth About Identity Theft Book Review by Jim Stickley 4 stars Witty (Hopefully) Amazon Title: Digestible Truths to Protect Yourself fro...

In some of the past posts I covered finding a user default user account or account with an easy to guess username/password for Oracle and ta...

Not really security related but notes for me if it comes up again... Was doing some incident response on a Windows 2003 server, I needed to ...

So this has been an interesting week. Lots of new botnets to dig around in, a bunch of new malware sites making a new effort to obfuscate th...

Just wanted to give a big congrats to my Aura Software Security friends over in New Zealand for the good things I'm hearing about thei...

What is WMAP "WMAP is a general purpose web application scanning framework for Metasploit 3. The architecture is simple and its simplic...

The big bummer of Common Access Cards (CAC) is that there hasnt been a real good solution to get it working in Linux. I've seen it done...

Thanks to dentonj for pointing out to me their was an Oracle patch for John the Ripper. I used the john from this site: http://www.banquise....

Thank MC for this one... http://metasploit.com/users/mc/oracle9i/brute_login.rb msf > use auxiliary/admin/oracle/brute_login msf auxiliar...

A little video on using the fileformat mixin to exploit the adobe util.printf() vulnerability. Sorry, no audio. You'll just have to fo...