Post [7] HTTP PUT/WebDAV/SEARCH Man I love mis-configured WebDAV, I have put a foot in many a network's ass with a writable WebDAV s...

Post [6] SharePoint Misconfigured SharePoint  can be *really* useful. Examples of things you can do with it are: User/Domain Enumeratio...

Post [5] Honorable Mention: Null Sessions Null sessions are old school. they  used to be useful for pretty much every host in a domain.  ...

Post [4] Browsable Directories "Index of" can be your friend and the  same with "web mirroring". Unfortunately, and al...

This has been documented all over, but i like things to be on the blog so i can find them... You can gain a SYSTEM shell on an application...

Several (tm) months back I did my talk on "From LOW to PWNED" at  hashdays  and  BSides Atlanta . The slides were published  he...

Several (tm) months back I did my talk on "From LOW to PWNED" at  hashdays  and  BSides Atlanta . The slides were published  he...

Several (tm) months back I did my talk on "From LOW to PWNED" at  hashdays  and  BSides Atlanta . The slides were published  he...

Several (tm) months back I did my talk on "From LOW to PWNED" at hashdays and BSides Atlanta . The slides were published here ...

I'll be giving my ColdFusion for Pentesters talk at SOURCE Boston next week. Here is the info from the abstract: "ColdFusion i...