Author: Secure Ideas

Using a Throwing Star to Capture Packets

Using a Throwing Star to Capture Packets

Mobile applications are a hot commodity these days. It seems like everyone and their brother/sister is writing them....
default

Brute Forcing the Change Password Feature

As a penetration tester, brute force attacks are something I test for on every application....
default

GSA Database May Have Leaked Information: Kevin Johnson was Interviewed

It was announced that there was a security flaw found in one of the GSA systems that could have allowed for vendors to see other...
default

Podcast Show Notes: Why are Passwords so Difficult

Kevin and James just finished up recording episode 2 of the Professionally Evil Perspective podcast....
default

The Watering Hole: Is it Safe to Drink?

How many times have you been told you have a vulnerability that you just don’t understand its relevancy?...
Admin Consoles, Default Creds, and Sweet Pwnage

Admin Consoles, Default Creds, and Sweet Pwnage

When performing internal network penetration tests, one thing that really gets us excited is finding administrative consoles....
default

Decoding F5 Cookie

There are different things you come across while performing a test like the cookies returned by the F5 BigIp Server....
default

Grab a CORS Light

Many of you already know that any cross-site HTTP requests invoked from scripts running within a browser are restricted by the Same-Origin-Policy....
default

Laudanum by Example: Shell

Uploading a shell command file and then start running shell commands against the target server....
default

Introduction to Laudanum

As a security consultant, there are so many scenarios that I run into every day that there is no one tool or script that solves...

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy