Back in the day, you could download a piece of software, reverse engineer / fuzz it, find bugs, notify the vendor, post on Full Disclosure, ...

Thomas Ptacek made an interesting tweet today about Nation States, and if the term has any meaning, which got me thinking. In light of the n...

Quick and dirty hack to export all your findings/host/services/etc and creds from your metasploit database Normally you'd do this with...

Security is a boomin’, and so there are many different appliances to protect your network. Some of them do very little to protect, some o...

It is very rare we post a public job ad.  Right now we have one position open with more on the way.   http://www.attackresearch.com/jobs....

BlackHat 2016 is quickly approaching!  Early registration ends on Friday.  So can save a few bucks and use that to go to Defcon 2016. Th...

So I put this out on twitter but failed to document it for historical reasons/find it when I need it. I was able to replace the PoC payloa...

I wanted to add a bit more context/info/explanation on Purple Teaming after publishing the Ruxcon slides as well as Facebook and Twitter int...

Yesterday this article came out from Reuters: http://www.reuters.com/article/us-china-ransomware-idUSKCN0WG2L5 . I thought it would be use...

Some quick notes for interesting stuff to keep for CCDC Quals/Notes Rapid Fire PSExec Use db_nmap to scan and populate the databse or d...