Autocomplete and actual risk: Why do we look at it?

Autocomplete is always a fun topic to discuss…. ok maybe my idea of fun is not the normal idea. 🙂

Decoding F5 Cookie

There are different things you come across while performing a test like the cookies returned by the F5 BigIp Server.

Grab a CORS Light

Many of you already know that any cross-site HTTP requests invoked from scripts running within a browser are restricted by the Same-Origin-Policy.

SH5ARK: Taking a Byte out of HTML5

The new features in HTML5 have opened a whole new world of opportunities for developers and for attackers.  Secure Ideas recognized this and with the help

ViewState XSS: What’s the Deal?

As penetration testers, there are many different technologies that we have to be familiar with. The more we know and understand, the better…

Testing ASP.Net WebForms: Request Method Validation

As a professional penetration tester, there are many features of an application that are similar across all languages.

How to install BeEF on Ubuntu 10.04 LTS

The Browser Exploitation Framework (BeEF) is a wonderful tool to have in your pen test arsenal.