As of the release of Burp 1.3.5 the same methodology shown in a previous post video (using Android SSL enforced apps with Burp) is a bit dif...

Thanks to a tip from a friend it turns out I've had the wrong version of DirSnatch posted all along. Nobody complained so I had no clue....

Metasploit has a nifty PHP Remote File Include module that allows you to get a command shell from a RFI. Not too complicated to use, set you...

Back in 09 there was a buzz about token kidnapping by Argeniss http://www.argeniss.com/research.html http://www.argeniss.com/research/TokenK...

MC pushed out a new exploit today ( jboss_deploymentfilerrepository ) so while it lists 4.x as vuln, actually several other versions are vul...

Layer Four Traceroute (lft) http://pwhois.org/lft If you are using the one bundled with your distro you are probably missing out some of the...

As a follow up to the post  regarding intercepting Android applications on the emulator using Burp, I wanted to give a solution for intercep...

I pushed out the first of a few Lotus Domino modules I've been working on to the metasploit trunk last nite. The first one is a Lotus Do...

intro..webdav stuff...lazy... To get yourself a test environment you can follow this tutorial, its not bad. You'll want to make sure y...

Quick post, I just wanted to give some instructions on using BurpSuite when attempting to proxy traffic coming from the Android Emulator. In...