Tags

Artificial Intelligence

AI in Practice: Early Adoption, ROI, & Data Privacy

Jan 25, 2024 | Max Sobell

Android

Android Hard Coded Secrets

Aug 30, 2019 | Danny Rosseau

Command Injection With USB Peripherals

Aug 22, 2019 | Danny Rosseau

Abusing WebViews To Steal Files via Email

Aug 19, 2019 | Jesson Soto Ventura

Android 7 Cellular MiTM

Oct 24, 2017 | Brad Dixon

Wear’s the MitM?

Oct 19, 2016 | Roman Faynberg

Binary Exploitation

Owning a Device With a Single Jump

Jan 13, 2020 | Danny Rosseau

Parsing Binaries With Kaitai Struct

Feb 01, 2019 | Ángel Suárez-Bárcena Martín

Patching BL/BLX instructions in ARM

Oct 15, 2015 | Jeremy Allen

Cloud Security

Three Most Common Security Mistakes Seen During AWS Application Assessments

May 27, 2021 | Ángel Suárez-Bárcena Martín

Intro to Inzure: New Security Tool for Azure Deployments

May 06, 2019 | Danny Rosseau

Defensive

Scanning SMB Shares Harder With smbls v2

Apr 24, 2024 | Austin Ralls

Common Misperceptions About Security Scanners

Jan 22, 2024 | Brad Dixon

The Adversarial Mindset

Jan 04, 2024 | Brad Dixon

If the Phish Won’t Go to You, You Can Surely Come to the Phish

Oct 06, 2023 | Roman Faynberg

Keeping an Eye on Your Public IP Space in Private

Jul 28, 2023 | Austin Ralls

Simplify Incident Response With CI/CD and Other Code Access Auditing

Aug 29, 2022 | Roman Faynberg

Security Assessment Color Palette

May 20, 2022 | Mike Zusman

Credentialed Windows Remote Code Execution Techniques

Feb 17, 2022 | Ángel Suárez-Bárcena Martín

How We Use BloodHound, and How It Can Help Defenders: 3 Ways IT Analysts Could Use BloodHound To Improve Windows Domain Security

Jan 10, 2022 | Austin Ralls

Inbox (1): Proper Email Authentication

Nov 18, 2021 | Austin Ralls

Scanning SMB Shares With smbls

Nov 03, 2021 | Austin Ralls

The Feeling Is Mutual: Elegant and Effective Authentication

Sep 21, 2021 | Jeff Ake

Be Careful With Your Testing Account Passwords

Jul 30, 2021 | Austin Ralls

In Praise of LAPS

Jun 30, 2021 | Austin Ralls

Three Most Common Security Mistakes Seen During AWS Application Assessments

May 27, 2021 | Ángel Suárez-Bárcena Martín

Unintentionally Exposing Your Organization to MFA bypasses on Azure Active Directory

Apr 19, 2021 | Ángel Suárez-Bárcena Martín

Secrets in Broad Daylight, or How $500,000/Year Software Can Help Hackers Compromise Your Network

Apr 12, 2021 | Roman Faynberg

Backend DDoS Protection

Jan 27, 2021 | Austin Ralls

Rule-Based Highlighter Plugin for BurpSuite

Feb 18, 2020 | Ángel Suárez-Bárcena Martín

Android Hard Coded Secrets

Aug 30, 2019 | Danny Rosseau

Intro to Inzure: New Security Tool for Azure Deployments

May 06, 2019 | Danny Rosseau

Implementing a Password Strength Indicator

Jun 22, 2018 | Jeremy Allen

Should GNSS Be a Threat Vector in Your Threat Model?

Apr 03, 2018 | Brad Dixon

JWT, OAuth, and Algorithm Choices

Feb 27, 2018 | Jeremy Allen

Securing M2M Gateways

Jun 10, 2016 | Jeremy Allen

NFC Edge Cases and Past Transgressions

Apr 15, 2016 | Max Sobell

Network Monitoring With nmap

Nov 04, 2013 | John Poch

Internet of Things

The Feeling Is Mutual: Elegant and Effective Authentication

Sep 21, 2021 | Jeff Ake

Owning a Device With a Single Jump

Jan 13, 2020 | Danny Rosseau

Command Injection With USB Peripherals

Aug 22, 2019 | Danny Rosseau

Writing a Simple ESP8266-Based Sniffer

Jul 26, 2018 | Ángel Suárez-Bárcena Martín

Should GNSS Be a Threat Vector in Your Threat Model?

Apr 03, 2018 | Brad Dixon

Linux

Dumping Keys From the Linux Key Retention Service — Part 2

Dec 02, 2024 | Jesson Soto Ventura

Dumping Keys From the Linux Key Retention Service — Part 1

Oct 25, 2024 | Jesson Soto Ventura

Shell Escapes

Mar 02, 2023 | Brad Dixon

IoT Hacking: Peeking in IPSEC tunnels With Wireshark

Oct 30, 2015 | Brad Dixon

Networking

MacGyver Networking

Jun 24, 2024 | Danny Rosseau

Man in the Middle: Viewing and Modifying Victim Traffic

Dec 19, 2023 | Dylan Ross

Keeping an Eye on Your Public IP Space in Private

Jul 28, 2023 | Austin Ralls

Decrypt TLS traffic With mitmproxy and Wireshark

Apr 06, 2023 | Brad Dixon

XSS Through DHCP: How Attackers Use Standards

Oct 26, 2022 | Dylan Ross

Android 7 Cellular MiTM

Oct 24, 2017 | Brad Dixon

Proxying WBXML Services

Sep 20, 2017 | Brad Dixon

MitM Using Golang, Meet Timmy

Nov 08, 2016 | Jeremy Allen

Wear’s the MitM?

Oct 19, 2016 | Roman Faynberg

IoT Hacking: Peeking in IPSEC tunnels With Wireshark

Oct 30, 2015 | Brad Dixon

Network Monitoring With nmap

Nov 04, 2013 | John Poch

Offensive

Working around unusual end-to-end cryptography with Burp and Burpscript

Dec 13, 2024 | Matthew Waddell

Dumping Keys From the Linux Key Retention Service — Part 2

Dec 02, 2024 | Jesson Soto Ventura

Signed, Sealed, Delivered… Secure? (Pre-) Signed AWS URL Hacks

Nov 22, 2024 | QiTong Han

Dumping Keys From the Linux Key Retention Service — Part 1

Oct 25, 2024 | Jesson Soto Ventura

OSINT: Subsidiary discovery

Sep 09, 2024 | John Poch

Taking the Offensive: Why Adversarial Testing is Key to a Strong Defense

Aug 23, 2024 | Brad Dixon

Burpscript, the multi-language scripting extension for Burp Suite

Jun 03, 2024 | Danny Rosseau

Request Mutation and Why WAFs Can’t (Always) Save You

May 24, 2024 | Dylan Ross

Scanning SMB Shares Harder With smbls v2

Apr 24, 2024 | Austin Ralls

Man in the Middle: Viewing and Modifying Victim Traffic

Dec 19, 2023 | Dylan Ross

Contest + Wargame: Exploiting Misconfigured Sudo

Sep 30, 2023 | Austin Ralls

Decrypt TLS traffic With mitmproxy and Wireshark

Apr 06, 2023 | Brad Dixon

Shell Escapes

Mar 02, 2023 | Brad Dixon

XSS Through DHCP: How Attackers Use Standards

Oct 26, 2022 | Dylan Ross

Credentialed Windows Remote Code Execution Techniques

Feb 17, 2022 | Ángel Suárez-Bárcena Martín

Scanning SMB Shares With smbls

Nov 03, 2021 | Austin Ralls

Three Most Common Security Mistakes Seen During AWS Application Assessments

May 27, 2021 | Ángel Suárez-Bárcena Martín

WASM Security Assessment Techniques

Aug 03, 2020 | Meador Inge

The 5 Most Common GraphQL Security Vulnerabilities

Apr 16, 2020 | Aidan Noll

Rule-Based Highlighter Plugin for BurpSuite

Feb 18, 2020 | Ángel Suárez-Bárcena Martín

Owning a Device With a Single Jump

Jan 13, 2020 | Danny Rosseau

Command Injection With USB Peripherals

Aug 22, 2019 | Danny Rosseau

Reverse Engineering Go binaries Using Radare 2 and Python

Aug 21, 2019 | Jonathan Wrightsell

Abusing WebViews To Steal Files via Email

Aug 19, 2019 | Jesson Soto Ventura

Cheating in eSports: How to Cheat at Virtual Cycling Using USB Hacks

Aug 09, 2019 | Brad Dixon

Web Cache Session Hijacking

Aug 07, 2019 | Meador Inge

Intro to Inzure: New Security Tool for Azure Deployments

May 06, 2019 | Danny Rosseau

Parsing Binaries With Kaitai Struct

Feb 01, 2019 | Ángel Suárez-Bárcena Martín

Writing a Simple ESP8266-Based Sniffer

Jul 26, 2018 | Ángel Suárez-Bárcena Martín

Meltdown and Spectre. Oh My!

Jan 05, 2018 | Meador Inge

Android 7 Cellular MiTM

Oct 24, 2017 | Brad Dixon

Proxying WBXML Services

Sep 20, 2017 | Brad Dixon

MitM Using Golang, Meet Timmy

Nov 08, 2016 | Jeremy Allen

Wear’s the MitM?

Oct 19, 2016 | Roman Faynberg

pin2pwn: How to Root an Embedded Linux Box With a Sewing Needle

Aug 06, 2016 | Brad Dixon

NFC Edge Cases and Past Transgressions

Apr 15, 2016 | Max Sobell

IoT Hacking: Peeking in IPSEC tunnels With Wireshark

Oct 30, 2015 | Brad Dixon

Patching BL/BLX instructions in ARM

Oct 15, 2015 | Jeremy Allen

Look Ma! Dotless Domain Names!

Aug 06, 2013 | Mike Zusman

Publications

Scanning SMB Shares With smbls

Nov 03, 2021 | Austin Ralls

WASM Security Assessment Techniques

Aug 03, 2020 | Meador Inge

The 5 Most Common GraphQL Security Vulnerabilities

Apr 16, 2020 | Aidan Noll

Rule-Based Highlighter Plugin for BurpSuite

Feb 18, 2020 | Ángel Suárez-Bárcena Martín

Reverse Engineering Go binaries Using Radare 2 and Python

Aug 21, 2019 | Jonathan Wrightsell

Abusing WebViews To Steal Files via Email

Aug 19, 2019 | Jesson Soto Ventura

Cheating in eSports: How to Cheat at Virtual Cycling Using USB Hacks

Aug 09, 2019 | Brad Dixon

Intro to Inzure: New Security Tool for Azure Deployments

May 06, 2019 | Danny Rosseau

MitM Using Golang, Meet Timmy

Nov 08, 2016 | Jeremy Allen

pin2pwn: How to Root an Embedded Linux Box With a Sewing Needle

Aug 06, 2016 | Brad Dixon

NFC Edge Cases and Past Transgressions

Apr 15, 2016 | Max Sobell

Look Ma! Dotless Domain Names!

Aug 06, 2013 | Mike Zusman

Quick Tips

MacGyver Networking

Jun 24, 2024 | Danny Rosseau

Keeping an Eye on Your Public IP Space in Private

Jul 28, 2023 | Austin Ralls

Decrypt TLS traffic With mitmproxy and Wireshark

Apr 06, 2023 | Brad Dixon

Inbox (1): Proper Email Authentication

Nov 18, 2021 | Austin Ralls

Be Careful With Your Testing Account Passwords

Jul 30, 2021 | Austin Ralls

In Praise of LAPS

Jun 30, 2021 | Austin Ralls

Unintentionally Exposing Your Organization to MFA bypasses on Azure Active Directory

Apr 19, 2021 | Ángel Suárez-Bárcena Martín

Secrets in Broad Daylight, or How $500,000/Year Software Can Help Hackers Compromise Your Network

Apr 12, 2021 | Roman Faynberg

Backend DDoS Protection

Jan 27, 2021 | Austin Ralls

Reverse Engineering

Patching BL/BLX instructions in ARM

Oct 15, 2015 | Jeremy Allen

Strategic

Taking the Offensive: Why Adversarial Testing is Key to a Strong Defense

Aug 23, 2024 | Brad Dixon

Q2 CIO Survey Results: A Battle on All Fronts

Apr 29, 2024 | Max Sobell

Guidance on Running a Bug Bounty Program

Apr 18, 2024 | Max Sobell

How To Save Time and Money in Your Remediation Process

Mar 13, 2024 | Max Sobell

AI in Practice: Early Adoption, ROI, & Data Privacy

Jan 25, 2024 | Max Sobell

Common Misperceptions About Security Scanners

Jan 22, 2024 | Brad Dixon

The Adversarial Mindset

Jan 04, 2024 | Brad Dixon

If the Phish Won’t Go to You, You Can Surely Come to the Phish

Oct 06, 2023 | Roman Faynberg

Keeping an Eye on Your Public IP Space in Private

Jul 28, 2023 | Austin Ralls

Security Assessment Color Palette

May 20, 2022 | Mike Zusman

Should GNSS Be a Threat Vector in Your Threat Model?

Apr 03, 2018 | Brad Dixon

Securing M2M Gateways

Jun 10, 2016 | Jeremy Allen

NFC Edge Cases and Past Transgressions

Apr 15, 2016 | Max Sobell

Technical

Working around unusual end-to-end cryptography with Burp and Burpscript

Dec 13, 2024 | Matthew Waddell

Dumping Keys From the Linux Key Retention Service — Part 2

Dec 02, 2024 | Jesson Soto Ventura

Signed, Sealed, Delivered… Secure? (Pre-) Signed AWS URL Hacks

Nov 22, 2024 | QiTong Han

Dumping Keys From the Linux Key Retention Service — Part 1

Oct 25, 2024 | Jesson Soto Ventura

AppArmor and Danger Daemon

Oct 09, 2024 | Danny Rosseau

SELinux: Danger Daemon

Sep 16, 2024 | Danny Rosseau

OSINT: Subsidiary discovery

Sep 09, 2024 | John Poch

MacGyver Networking

Jun 24, 2024 | Danny Rosseau

Burpscript, the multi-language scripting extension for Burp Suite

Jun 03, 2024 | Danny Rosseau

Request Mutation and Why WAFs Can’t (Always) Save You

May 24, 2024 | Dylan Ross

Why Using Encryption To Hide Resource Identifiers Could Be a Bad Idea

Apr 28, 2024 | Brad Dixon

Scanning SMB Shares Harder With smbls v2

Apr 24, 2024 | Austin Ralls

Man in the Middle: Viewing and Modifying Victim Traffic

Dec 19, 2023 | Dylan Ross

Contest + Wargame: Exploiting Misconfigured Sudo

Sep 30, 2023 | Austin Ralls

Decrypt TLS traffic With mitmproxy and Wireshark

Apr 06, 2023 | Brad Dixon

Shell Escapes

Mar 02, 2023 | Brad Dixon

XSS Through DHCP: How Attackers Use Standards

Oct 26, 2022 | Dylan Ross

Simplify Incident Response With CI/CD and Other Code Access Auditing

Aug 29, 2022 | Roman Faynberg

Credentialed Windows Remote Code Execution Techniques

Feb 17, 2022 | Ángel Suárez-Bárcena Martín

How We Use BloodHound, and How It Can Help Defenders: 3 Ways IT Analysts Could Use BloodHound To Improve Windows Domain Security

Jan 10, 2022 | Austin Ralls

Inbox (1): Proper Email Authentication

Nov 18, 2021 | Austin Ralls

Scanning SMB Shares With smbls

Nov 03, 2021 | Austin Ralls

The Feeling Is Mutual: Elegant and Effective Authentication

Sep 21, 2021 | Jeff Ake

Be Careful With Your Testing Account Passwords

Jul 30, 2021 | Austin Ralls

In Praise of LAPS

Jun 30, 2021 | Austin Ralls

Three Most Common Security Mistakes Seen During AWS Application Assessments

May 27, 2021 | Ángel Suárez-Bárcena Martín

Unintentionally Exposing Your Organization to MFA bypasses on Azure Active Directory

Apr 19, 2021 | Ángel Suárez-Bárcena Martín

Secrets in Broad Daylight, or How $500,000/Year Software Can Help Hackers Compromise Your Network

Apr 12, 2021 | Roman Faynberg

Backend DDoS Protection

Jan 27, 2021 | Austin Ralls

WASM Security Assessment Techniques

Aug 03, 2020 | Meador Inge

The 5 Most Common GraphQL Security Vulnerabilities

Apr 16, 2020 | Aidan Noll

Owning a Device With a Single Jump

Jan 13, 2020 | Danny Rosseau

Android Hard Coded Secrets

Aug 30, 2019 | Danny Rosseau

Command Injection With USB Peripherals

Aug 22, 2019 | Danny Rosseau

Reverse Engineering Go binaries Using Radare 2 and Python

Aug 21, 2019 | Jonathan Wrightsell

Abusing WebViews To Steal Files via Email

Aug 19, 2019 | Jesson Soto Ventura

Cheating in eSports: How to Cheat at Virtual Cycling Using USB Hacks

Aug 09, 2019 | Brad Dixon

Web Cache Session Hijacking

Aug 07, 2019 | Meador Inge

Parsing Binaries With Kaitai Struct

Feb 01, 2019 | Ángel Suárez-Bárcena Martín

Writing a Simple ESP8266-Based Sniffer

Jul 26, 2018 | Ángel Suárez-Bárcena Martín

Implementing a Password Strength Indicator

Jun 22, 2018 | Jeremy Allen

JWT, OAuth, and Algorithm Choices

Feb 27, 2018 | Jeremy Allen

Meltdown and Spectre. Oh My!

Jan 05, 2018 | Meador Inge

Android 7 Cellular MiTM

Oct 24, 2017 | Brad Dixon

Proxying WBXML Services

Sep 20, 2017 | Brad Dixon

MitM Using Golang, Meet Timmy

Nov 08, 2016 | Jeremy Allen

Wear’s the MitM?

Oct 19, 2016 | Roman Faynberg

pin2pwn: How to Root an Embedded Linux Box With a Sewing Needle

Aug 06, 2016 | Brad Dixon

IoT Hacking: Peeking in IPSEC tunnels With Wireshark

Oct 30, 2015 | Brad Dixon

Patching BL/BLX instructions in ARM

Oct 15, 2015 | Jeremy Allen

Network Monitoring With nmap

Nov 04, 2013 | John Poch

Look Ma! Dotless Domain Names!

Aug 06, 2013 | Mike Zusman

Techniques

Signed, Sealed, Delivered… Secure? (Pre-) Signed AWS URL Hacks

Nov 22, 2024 | QiTong Han

Request Mutation and Why WAFs Can’t (Always) Save You

May 24, 2024 | Dylan Ross

Man in the Middle: Viewing and Modifying Victim Traffic

Dec 19, 2023 | Dylan Ross

Contest + Wargame: Exploiting Misconfigured Sudo

Sep 30, 2023 | Austin Ralls

Shell Escapes

Mar 02, 2023 | Brad Dixon

XSS Through DHCP: How Attackers Use Standards

Oct 26, 2022 | Dylan Ross

Credentialed Windows Remote Code Execution Techniques

Feb 17, 2022 | Ángel Suárez-Bárcena Martín

How We Use BloodHound, and How It Can Help Defenders: 3 Ways IT Analysts Could Use BloodHound To Improve Windows Domain Security

Jan 10, 2022 | Austin Ralls

WASM Security Assessment Techniques

Aug 03, 2020 | Meador Inge

The 5 Most Common GraphQL Security Vulnerabilities

Apr 16, 2020 | Aidan Noll

Owning a Device With a Single Jump

Jan 13, 2020 | Danny Rosseau

Android Hard Coded Secrets

Aug 30, 2019 | Danny Rosseau

Command Injection With USB Peripherals

Aug 22, 2019 | Danny Rosseau

Reverse Engineering Go binaries Using Radare 2 and Python

Aug 21, 2019 | Jonathan Wrightsell

Web Cache Session Hijacking

Aug 07, 2019 | Meador Inge

Parsing Binaries With Kaitai Struct

Feb 01, 2019 | Ángel Suárez-Bárcena Martín

Writing a Simple ESP8266-Based Sniffer

Jul 26, 2018 | Ángel Suárez-Bárcena Martín

Implementing a Password Strength Indicator

Jun 22, 2018 | Jeremy Allen

Android 7 Cellular MiTM

Oct 24, 2017 | Brad Dixon

Proxying WBXML Services

Sep 20, 2017 | Brad Dixon

Wear’s the MitM?

Oct 19, 2016 | Roman Faynberg

pin2pwn: How to Root an Embedded Linux Box With a Sewing Needle

Aug 06, 2016 | Brad Dixon

IoT Hacking: Peeking in IPSEC tunnels With Wireshark

Oct 30, 2015 | Brad Dixon

Patching BL/BLX instructions in ARM

Oct 15, 2015 | Jeremy Allen

Network Monitoring With nmap

Nov 04, 2013 | John Poch

Tools

Working around unusual end-to-end cryptography with Burp and Burpscript

Dec 13, 2024 | Matthew Waddell

Dumping Keys From the Linux Key Retention Service — Part 2

Dec 02, 2024 | Jesson Soto Ventura

Burpscript, the multi-language scripting extension for Burp Suite

Jun 03, 2024 | Danny Rosseau

Scanning SMB Shares Harder With smbls v2

Apr 24, 2024 | Austin Ralls

How We Use BloodHound, and How It Can Help Defenders: 3 Ways IT Analysts Could Use BloodHound To Improve Windows Domain Security

Jan 10, 2022 | Austin Ralls

Scanning SMB Shares With smbls

Nov 03, 2021 | Austin Ralls

WASM Security Assessment Techniques

Aug 03, 2020 | Meador Inge

Rule-Based Highlighter Plugin for BurpSuite

Feb 18, 2020 | Ángel Suárez-Bárcena Martín

Reverse Engineering Go binaries Using Radare 2 and Python

Aug 21, 2019 | Jonathan Wrightsell

Intro to Inzure: New Security Tool for Azure Deployments

May 06, 2019 | Danny Rosseau

Writing a Simple ESP8266-Based Sniffer

Jul 26, 2018 | Ángel Suárez-Bárcena Martín

Implementing a Password Strength Indicator

Jun 22, 2018 | Jeremy Allen

Proxying WBXML Services

Sep 20, 2017 | Brad Dixon

MitM Using Golang, Meet Timmy

Nov 08, 2016 | Jeremy Allen

pin2pwn: How to Root an Embedded Linux Box With a Sewing Needle

Aug 06, 2016 | Brad Dixon

Patching BL/BLX instructions in ARM

Oct 15, 2015 | Jeremy Allen

Network Monitoring With nmap

Nov 04, 2013 | John Poch

Wargames

Contest + Wargame: Exploiting Misconfigured Sudo

Sep 30, 2023 | Austin Ralls

Web Security

Working around unusual end-to-end cryptography with Burp and Burpscript

Dec 13, 2024 | Matthew Waddell

Signed, Sealed, Delivered… Secure? (Pre-) Signed AWS URL Hacks

Nov 22, 2024 | QiTong Han

Burpscript, the multi-language scripting extension for Burp Suite

Jun 03, 2024 | Danny Rosseau

Request Mutation and Why WAFs Can’t (Always) Save You

May 24, 2024 | Dylan Ross

Man in the Middle: Viewing and Modifying Victim Traffic

Dec 19, 2023 | Dylan Ross

Decrypt TLS traffic With mitmproxy and Wireshark

Apr 06, 2023 | Brad Dixon

XSS Through DHCP: How Attackers Use Standards

Oct 26, 2022 | Dylan Ross

Backend DDoS Protection

Jan 27, 2021 | Austin Ralls

The 5 Most Common GraphQL Security Vulnerabilities

Apr 16, 2020 | Aidan Noll

Rule-Based Highlighter Plugin for BurpSuite

Feb 18, 2020 | Ángel Suárez-Bárcena Martín

Web Cache Session Hijacking

Aug 07, 2019 | Meador Inge

Implementing a Password Strength Indicator

Jun 22, 2018 | Jeremy Allen

JWT, OAuth, and Algorithm Choices

Feb 27, 2018 | Jeremy Allen