Metasploit

DEF CON 29 Aerospace Village

DEF CON 29 Aerospace Village – Pearce Barry’s ‘Collecting CANs: A Bridge Less Travelled’

| | Aerospace Conferences, Aerospace Security, Aerospace Village, Application Security, cybersecurity education, DEF CON, DEF CON 29, education, Hardware Security, Industrial Security, Information Security, Infosec Education, Metasploit, Privacy Education, security, Security Education, Security Tooling
Our thanks to DEFCON for publishing their outstanding DEFCON 29 Aerospace Village videos on the organizations’ YouTube channel. Permalink ...
Infosecurity.US
What is TCP/IP?

Thinking of a Cybersecurity Career? Read This

| | Alan Paller, DEFCON Groups, How to Break Into Security, Kali Linux, Metasploit, Nessus, nikto, Nmap, OpenVAS, owasp, SANS Institute, Security BSides, TCP/IP, tcpdump, VirtualBox, Webgoat, Wireshark, Women's Society of Cyberjutsu
Thousand of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here's a look ...
Krebs on Security
EH-Net Book Review - Linux Basics for Hackers

Book Review – Linux Basics for Hackers

| | book review, Book Reviews, Hacking, highlight, Kali, Linux, Metasploit, pentest, python
With countless job openings and growth with no end in sight, InfoSec is the place to be. Many pose the question, “Where do I start?” Over his years of training hackers and ...
The Ethical Hacker Network
All your base

Data Exfiltration with XSS

| | database, Metasploit, Privilege Escalation, security, wordpress, XSS
We had an XSS vulnerability, we created a fake login page, we stole the WordPress admin’s credentials, now what? Over the following pages, I am going to walk you through the complete data exfiltration process ...
Rainbow and Unicorn
Splunk: With Great Power Comes Great Responsibility

Splunk: With Great Power Comes Great Responsibility

| | 7Elements, feature abuse, Metasploit, security, Splunk
Splunk backgroundSplunk is a fantastically powerful solution to "search, monitor and analyse machine-generated data by applications, systems and IT infrastructure" and it's no surprise that many businesses are turning to it in ...
Seven Elements
Abusing Splunk Functionality with Metasploit

Abusing Splunk Functionality with Metasploit

| | 7Elements, Metasploit, security, Splunk
In our post Splunk: With Great Power comes Great Responsibility we outlined how the sheer power and flexibility of Splunk can be abused to gain complete control of the server upon which Splunk ...
Seven Elements

ssh-agent: Abusing the trust – Part 2

| | 7Elements, keys, marc wickenden, Metasploit, Penetration Testing, SSH, ssh-agent
In part 1 of this blog post I discussed common issues with using ssh-agent forwarding in an untrusted environment. Despite the risks it remains prevalent and ripe for some exploitation.There are tools ...
Seven Elements

Scottish Ruby Conference & Breaking things with Ruby

| | Metasploit
Just had the first day of the Scottish Ruby Conference. The venue was awesome, there'll doubtless be lots of good pictures up on places like flickr in due course, but here's a ...
Rory.Blog