1st off, Hi. I'm @jhaddix the newest guy on this blog... Android App testing requires some diverse skills depending on what you'r...

I tweeted about this blog post a few weeks ago and got to use it on a PT, so its no secret... also mubix beat me to this post , but i'...

So i ran across this little gem from 2008! http://blogs.technet.com/b/askds/archive/2008/10/22/getting-a-cmd-prompt-as-system-in-windows-v...

     It is well known in the Rails world, how big of an issue mass-assignment is. It is the vulnerability that led to the  hack  of Githu...

If you've ever tested any clients that have Juniper VPNs you've probable seen the ol:  http://[target]/dana-na/auth/url_default/we...

Thanks to the efforts of Justin Collins ( @presidentbeef - Brakeman )  and Hal Brodigan ( @postmodern_mod3 - Bundler-Audit) , Rails develo...

Ruby applications that utilize a Gemfile/Gemfile.lock, file(s) that contain the list of ruby gems an application should use along with their...

This post is a very short and very simple tip for easily opening a ruby gem up for closer inspection. When reviewing a Rails or Sinatra a...

We've been having a good time doing intensive, month long or longer APT simulation tests for people, acting like malicious insiders, usi...

One of the modules in our new Rapid Reverse Engineering class is artifact extraction.  For this section of the class the students use a pyth...