+44 (0)113 3280104 | Email Us

Industry News

News and updates from the ethical security testing industry...

RSS Aircrack-ng

RSS Armored Packets

  • Massive WordPress Brute-Force Botnet Attack April 15, 2013
    SUMMARY As of April 9, 2013, multiple web hosting companies began seeing brute force, dictionary attacks against their WordPress Content Management System. Approximately 140,000 IPs have been seen attacking these systems. After successful login, the actors are installing several PHP scripts which execute shell commands, download files from www.marinabybloshotel.com that establish connections with an IRC […]
  • Security Awareness – Hold The Line March 20, 2013
    Yesterday began like all others, a good morning to my Twitter followers and a quick scan through the topics of others I follow. The topic of discussion that stood out, dividing our industry more often than any others got started; the belief, or lack thereof, in Security Awareness Training Programs being a benefit to organizations. […]

RSS BeEF – The Browser Exploitation Framework Blog

  • Mapping your LAN from a web browser: Introducing the Network extension for BeEF June 8, 2016
    Today's blog post brought to you by Brendan Coles:How many tabs do you have open in your browser right now? For how long have they been open - more than 10 minutes? Any one of them could have mapped your local networks and launched exploits against your outdated or misconfigured software.From the BeEF laboratory comes […]
  • Kali (formerly Backtrack) Linux & BeEF January 22, 2016
    Today's post is contributed by Ben Waugh (@bw_z).BeEF is preinstalled on Kali linux distributions, allowing you to quickly use BeEF as part of your security testing toolkit. Running BeEF in KaliKali packages BeEF within the beef-xss service which can either be started from the command line, or the pre-populated menu item under Kali-Linux > Exploitation Tools […]

RSS Carnal0wnage & Attack Research Blog

  • Follow up to the vuln disclosure post June 29, 2017
    Summary of responses from this post: http://carnal0wnage.attackresearch.com/2017/06/vulnerability-disclosure-free-bug.htmlI wanted to document/summarize some of the responses I received and some of the insights I gained via self observation and my interactions with others on the topic.I received a few replies (less than I hoped for though). To summarize a few:-I'm not a greedy bastard for thinking it would […]
  • Vulnerability Disclosure, Free Bug Reports & Being a Greedy Bastard June 26, 2017
    Backstory:Most of my life I've been frustrated/intrigued that my Dad was constantly upset that he would "do the right thing" by people and in return people wouldn't show him gratitude... up to straight up fucking him over in return. Over and over the same cycle would repeat of him doing right by someone only to […]

RSS Command Line Kung Fu

  • Episode #180: Open for the Holidays! December 31, 2014
    Not-so-Tiny Tim checks in with the ghost of Christmas present: I know many of you have been sitting on Santa's lap wishing for more Command Line Kung Fu. Well, we've heard your pleas and are pushing one last Episode out before the New Year! We come bearing a solution for a problem we've all encountered. […]
  • Episode #179: The Check is in the Mail June 30, 2014
    Tim mails one in: Bob Meckle writes in: I have recently come across a situation where it would be greatly beneficial to build a script to check revocation dates on certificates issued using a certain template, and send an email to our certificate staff letting them know which certificates will expire within the next 6 […]