So new job gets me new fun toys. Figured i'd try the fancy shmancy tools and do a phish campaign with metasploit pro. 1. Go click on ca...

This is one of those things that is super simple and I figure most folks have already done or know how to do. There may be a few people out ...

Here are some of the videos from AppSec DC 2010 and our presentation (Seth Law, Chris Gates and I) on wXf (Web Exploitation Framework). Back...

Image my happiness with i got the droid update and saw usb tethering available. Then image my sadness-->rage that VendorX wants to charge...

I just pushed out code coverage for the Adobe XML External Entity Injection vulnerability in multiple adobe products including: BlazeDS 3.2...

Ben Tomhave has a good post over on his blog http://www.secureconsulting.net/2010/10/there_is_no_win.html go read it. its short...wont take ...

Hacking: The Next Generation Book Review Nitesh Dhanjani, Billy Rios, & Brett Hardin 5 stars Good Intro to Next Gen Attacks First Impres...

Back in March, I spoke of inactivity on this blog because of time being devoted to a new tool. The post can be found Here : The tool is ac...

Grabbing the index pages of web servers seems like a no brainer and something every pentester is going to perform on a test. The problem I ...

Nmap will scan IPv6 enabled hosts if you pass it the -6 switch, but only does TCP Connect scans and no OS identification, which makes sense ...