In cktricky's last post he provided a great outline on the ins and outs of leveraging burp's built in support for directory traver...

Often, I'll use Burp Suite's directory traversal Intruder payload list. A step exists that must be performed in order to effectively...

scriptjunkie recently had a post on Direct shellcode execution in MS Office macros  I didnt see it go into the metasploit trunk, but its the...

I ended up having to use the smb/upload_file module on a pentest.  I was able to get the local admin hashes but for some reason the psexec ...

When application security was still in it’s infancy, there were discussions on how to protect applications from newly discovered injection...

Over the last two cycles of OWASP top 10, insecure direct object reference has been included as major security risk. An object reference is ...

Stephen, @averagesecguy , wrote a post on owning a ColdFusion server. its pretty good and he wrote some code to help things along. Code: ht...

Rooting the Xoom and putting BT5 on it... Check out http://wiki.rootzwiki.com/Motorola_Xoom For instructions to get android sdk (adb/fastboo...

So assuming we have some sort of SQL Injection in the application (Blind in this case) and we've previously dumped all the available dat...

There hasnt been much in the way of updates on breaking into VPN servers that have aggressive mode enabled. ike-scan is probably still your...