+44 (0)113 3280104 | Email Us

Industry News

News and updates from the ethical security testing industry...

RSS Aircrack-ng

  • Aircrack-ng 1.5.2
    This is a smaller release than the previous one but we did want to release the fixes and improvements before the holidays so it will be available for Shmoocon next month in your favorite distro.Small issues were found in 1.5 and then in 1.5.1, which is why we ended up with 1.5.2. Respectively, a crash […]
  • Continuous Integration/Contious Delivery
    As mentioned a few times in the changelog and quite a bit in the commits, we have been using a bunch of tools to improve our code quality. And fine tuning them to do more and give us better information. We also use static analysis tools but that step is often done manually.GitHub has been […]

RSS Armored Packets

  • Massive WordPress Brute-Force Botnet Attack April 15, 2013
    SUMMARY As of April 9, 2013, multiple web hosting companies began seeing brute force, dictionary attacks against their WordPress Content Management System. Approximately 140,000 IPs have been seen attacking these systems. After successful login, the actors are installing several PHP scripts which execute shell commands, download files from www.marinabybloshotel.com that establish connections with an IRC […]
  • Security Awareness – Hold The Line March 20, 2013
    Yesterday began like all others, a good morning to my Twitter followers and a quick scan through the topics of others I follow. The topic of discussion that stood out, dividing our industry more often than any others got started; the belief, or lack thereof, in Security Awareness Training Programs being a benefit to organizations. […]

RSS BeEF – The Browser Exploitation Framework Blog

  • Mapping your LAN from a web browser: Introducing the Network extension for BeEF June 8, 2016
    Today's blog post brought to you by Brendan Coles:How many tabs do you have open in your browser right now? For how long have they been open - more than 10 minutes? Any one of them could have mapped your local networks and launched exploits against your outdated or misconfigured software.From the BeEF laboratory comes […]
  • Kali (formerly Backtrack) Linux & BeEF January 22, 2016
    Today's post is contributed by Ben Waugh (@bw_z).BeEF is preinstalled on Kali linux distributions, allowing you to quickly use BeEF as part of your security testing toolkit. Running BeEF in KaliKali packages BeEF within the beef-xss service which can either be started from the command line, or the pre-populated menu item under Kali-Linux > Exploitation Tools […]

RSS Shell is Only the Beginning

  • Being Grateful at Heilderburg March 25, 2019
    Recently while in the bar of the Crown Plaza in Heidelberg for the Troopers conference I became aware of the number of how grateful I should be for what I have in this industry. For what I’m grateful for is not technical or recognition but of the group of people in the industry, I have […]
    Carlos Perez
  • Operating Offensively Against Sysmon October 8, 2018
    Sysmon is a tool written by Mark Russinovich that I have covered in multiple blog post and even wrote a PowerShell module called Posh-Sysmon to help with the generation of configuration files for it. Its main purpose is for the tracking of potentially malicious activity on individual hosts and it is based on the same […]
    Carlos Perez

RSS Carnal0wnage & Attack Research Blog

  • Jenkins - decrypting credentials.xml April 8, 2019
    If you find yourself on a Jenkins box with script console access you can decrypt the saved passwords in credentials.xml in the following way:hashed_pw='$PASSWORDHASH'passwd = hudson.util.Secret.decrypt(hashed_pw)println(passwd)You need to perform this on the the Jenkins system itself as it's using the local master.key and hudson.util.SecretScreenshot belowCode to get the credentials.xml from the script consoleWindowsdef sout = new […]
  • Jenkins Master Post March 5, 2019
    A collection of posts on attacking Jenkinshttp://www.labofapenetrationtester.com/2014/08/script-execution-and-privilege-esc-jenkins.htmlManipulating build steps to get RCEhttps://medium.com/@uranium238/shodan-jenkins-to-get-rces-on-servers-6b6ec7c960e2Using the terminal plugin to get RCEhttps://sharadchhetri.com/2018/12/02/managing-jenkins-plugins/Getting started with Jenkins Pluginshttps://blog.orange.tw/2019/01/hacking-jenkins-part-1-play-with-dynamic-routing.htmlVulns inPipeline: Declarative Plugin up to and including 1.3.4Pipeline: Groovy Plugin up to and including 2.61Script Security Plugin up to and including 1.49Blog post says: This issue has been fixed in Jenkins version 2.121.1 […]

RSS Command Line Kung Fu

  • Episode #181: Making Contact October 3, 2017
    Hal wanders back on stage Whew! Sure is dusty in here!Man, those were the days! It started with Ed jamming on Twitter and me heckling from the audience. Then Ed invited me up on stage (once we built the stage), and that was some pretty sweet kung fu. Then Tim joined the band, Ed left, […]
  • Episode #180: Open for the Holidays! December 31, 2014
    Not-so-Tiny Tim checks in with the ghost of Christmas present: I know many of you have been sitting on Santa's lap wishing for more Command Line Kung Fu. Well, we've heard your pleas and are pushing one last Episode out before the New Year! We come bearing a solution for a problem we've all encountered. […]