More info from the DevOoops talk Remote Code Execution in GitList background blog post here:  http://hatriot.github.io/blog/2014/06/29/g...

Notes from the conf for later Userland Persistence on Mac OS X by Josh Pitts @ midnite_runr   Video https://archive.org/details/josh...

Quick post/notes on Enigma0x3's Generate Macro payload since it got hot on twitter and reddit last week. code is here: https://githu...

The user information that gets loaded with a commit is locally controlled metadata. What this means is that you can submit a commit as any...

GitHub supports advanced search operators much like Google References: http://seclists.org/fulldisclosure/2013/Jun/15 --> https://git...

Ken Johnson and I gave a talk on going after Devops tools at Lascon in October.  Slides for the talk are below: LasCon 2014 DevOoops...

Here is a quick bash script to wrap sqlplus for some brute forcing if for whatever reason nmap is failing to get the job done...and thus met...

Its nice to see smart people in the industry like Dave Aitel (https://lists.immunityinc.com/pipermail/dailydave/2014-October/000769.html, ht...

Short update to talk about mostly performing the actions from Part 1 on Windows 8+ and Windows Server 2012 First issue was symbols in wi...

Pentesting is a funny thing. Someone will drop some new way of doing something and then you get to reflect on all those missed opportunities...