Posts:

Intro

I receive a lot of emails.  (Please don’t make it worse, thanks!)   Unfortunately I don’t have as much spare time as I used to, or would like to, so I often have no other choice than Read more

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The patch
•  
• Leveraging SQL Injection
• Cool! We got Admin, now what?
• Code Execution
•  
• Further Exploitation?

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The patch
• Read more

Introduction

About a month after releasing an ftp client fuzzer module for Metasploit, I decided to release yet another fuzzer module I have been working on over the last few weeks.

This new module can be used to audit Read more

Last week (oct 17 2010), Lincoln (one of the Corelan Team members) informed the other team members about an ongoing hacking challenge (HaXx.Me #03) organized and hosted by MaXe (@intern0t).

When I saw his message, it was already Sunday Read more

WATOBO is intended to enable security professionals to perform highly efficient (semi-automated) web application security audits. I am convinced that the semi-automated approach is the best way to perform an accurate audit and to identify most of the vulnerabilities.

Read more