Ken Johnson and I gave a talk on going after Devops tools at Lascon in October.  Slides for the talk are below: LasCon 2014 DevOoops...

Here is a quick bash script to wrap sqlplus for some brute forcing if for whatever reason nmap is failing to get the job done...and thus met...

Its nice to see smart people in the industry like Dave Aitel (https://lists.immunityinc.com/pipermail/dailydave/2014-October/000769.html, ht...

Short update to talk about mostly performing the actions from Part 1 on Windows 8+ and Windows Server 2012 First issue was symbols in wi...

Pentesting is a funny thing. Someone will drop some new way of doing something and then you get to reflect on all those missed opportunities...

Just a note for me for later as other blogs have been tending to disappear lately and so I don't get unduly excited when I see a nagios ...

just sticking this here so i can find it later. thanks @mubix cat hosts.txt | xargs -t -I subdomain dig +noall subdomain.THEDOMAIN.com +an...

So i ran across a bunch of webmin boxes on a pentest. I went to just go try http_login or some other spiffy Metasploit auxiliary module but...

Colin and I were working on an memory image the other day and needed to find DLLs loaded by svchost.exe. We turned to everyone's default...

Well maybe not Gold...but Litecoins, hobonickels, dodgecoins, and other kinds of *coins* We've all heard about Bitcoins (BTC) and all ...