Good morning friends,  welcome to Hack In The Box 2014, hosted at "De Beurs van Berlage" in the beautiful city of Amsterdam.   This year's edition starts with a keynote by Katie Moussouris, previous lead at Microsoft Security Read more

Dear friends,

I'm getting ready for a short trip to Amsterdam, to attend the 5th Hack In The Box conference tomorrow ... and I'm "hashtag" excited about it. HITB Haxpo and HITB2014AMS feature and amazing schedule of talks, Read more

Hi all,

I have received a ton of questions regarding a recently published ZDI advisory, which provides some details about a bug I discovered and reported to Microsoft (via ZDI), affecting Internet Explorer 8.  I wanted to take Read more

Table of Contents

• Introduction
• Discounts (in alphabetical order):
  • Hak5
  • Hex-Rays
  • Malformity Labs
  • Netsparker
  • No Starch Press
  • Paterva
  • Rapid7
  • SANS
  • Security Roots
  • Syngress
  • Your name here ?

Introduction

Corelan Team was founded in September of 2009. Over the last few Read more

Hi,

A few moments ago, I was informed about an article on www.securelist.com and the fact that Corelan Team was mentioned in that post.  Apparently a researcher at Kaspersky Labs found a piece of text ("You have been owned Read more

Professional pentesters typically use a host that is connected directly to the internet, has a public IP address, and is not hindered by any firewalls or NAT devices to perform their audit. Hacking "naked" is considered to be the Read more

It doesn't really matter how much time your developers have spent writing secure code and how many layers of security you have implemented to protect your website from being hacked and defaced.  Recent incidents have demonstrated that the bad Read more

Introduction

Last weekend I had some time so I wanted to have a look at a reversing challenge which you can find here:

https://www.ethicalhacker.net/features/special-events/reverse-engineering-101-newbie-contest-webcast-elearnsecurity

Reverse Engineering 101 Contest Steps

1. Get the exe to be hacked
2. Break it open and Read more

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The patch
•  
• Leveraging SQL Injection
• Cool! We got Admin, now what?
• Code Execution
•  
• Further Exploitation?

Introduction

Table of Contents

• Introduction
• Disclosure Timeline:
• Vendor Details
• Vulnerability Details
• The Read more

Hi all,

As announced a couple of weeks ago, the Corelan Logo contest is now closed, which means we are no longer accepting new submissions.

3 people have submitted one or more designs:

Design 1

Design 2

Read more