Thanks to the efforts of Justin Collins ( @presidentbeef - Brakeman )  and Hal Brodigan ( @postmodern_mod3 - Bundler-Audit) , Rails develo...

Ruby applications that utilize a Gemfile/Gemfile.lock, file(s) that contain the list of ruby gems an application should use along with their...

This post is a very short and very simple tip for easily opening a ruby gem up for closer inspection. When reviewing a Rails or Sinatra a...

We've been having a good time doing intensive, month long or longer APT simulation tests for people, acting like malicious insiders, usi...

One of the modules in our new Rapid Reverse Engineering class is artifact extraction.  For this section of the class the students use a pyth...

We have finalized our training schedule for Attack Research for the year. Below is the schedule for our training's for the rest of the y...

We are hosting two training's at the Attack Research Headquarters over the next few months. The first training is our Operational Post E...

Problem: How can we brute force MSSQL servers that listen on several different ports without having to manually change the RPORT? *MSF Pr...

If you'd like to skip coding this up or are having issues, you can find the application source code here . To start at the code which ...

People often try to draw analogies between computer security and the military or warfare. Lets put aside for a moment the fact that I don...