Jordan Wright

My daughter and I love listening to the Yoto Daily podcast on her Yoto player.

About a year ago, the Python Software Foundation opened a Request for Information (RFI) to discuss how we could detect malicious packages being uploaded to PyPI.

One of the questions I see most often from Gophish users is “how do I get past my spam filter?”

It’s been a while!

Back in March, Wikileaks released over 30,000 emails “sent to and from Hillary Clinton’s private email server while she was Secretary of State”.

San Antonio is a great city.

Being a Thought Leader is Hard @thought__leader - Thinking thoughts for you, so you don’t have to.

Introduction When looking at how Tor works, we’ve looked at the various types of nodes that make up the Tor network.

Introduction Every morning, the infosec field is greeted with an onslaught of freshly registered malicious domains.

Introduction I’m excited to announce that the gophish “alpha” release is almost complete!

For this challenge, we were given an HDD image and asked to find the flag on it.

This challenge starts off with the following hint: I was sniffing some web traffic for a while, I think i finally got something interesting.

Web 200 was a fun challenge that required us to chain together a few basic concepts to get the flag.

This one was surprisingly easy if you knew where to look.

Introduction This post is long overdue.

Introduction Welcome to the third post in my series on how Tor works!

Introduction Welcome back to my series on how Tor works!

Introduction Two months ago, one of my DigitalOcean instances started attacking another host with massive amounts of bogus traffic.

Introduction I recently wrote about an Elasticsearch RCE vulnerability that is being heavily exploited in the wild.

TL;DR If you have an elasticsearch instance that is publicly available, upgrade to 1.4.3 or later now.

Introduction Tor is an anonymity tool used by those who want to stay private and uncensored when browsing the Internet.

Introduction It’s been a busy couple of months!

Introduction During the process of planning a vacation, I came across a nice hotel I wanted to stay at.

Introduction Back in December, SANS released another installment of their annual holiday challenge.

So you accidentally committed a password or API key to Github.

Busy year.

Introduction The Tor Project has announced that they have received threats about possible upcoming attempts to disable the Tor network through the seizure of Directory Authority (DA) servers.

Friendly Reminder: Browser makers may track every key you type in the URL bar Introduction Technologies like Google Chrome’s Omnibox makes searching easier.

Introduction I’ve always been a proponent and contributor of open-source projects and information.

Introduction Tor is often used to protect the anonymity of someone who is trying to connect to a service.

Introduction Mobile applications are often viewed as black-box applications.

Introduction A while back, I came across the article from the The Washington Post describing We Heart It, a social network claiming over 30 million users.

Introduction Sites like phishtank and clean-mx act as crowdsourced phishing detection and validation.

Introduction It’s been a while!

Introduction I’ve been playing around with Go for about a month now, and I’ve really grown to like it.

Introduction Since the Simple Phishing Toolkit (SPT) was discontinued, I’ve wanted to create a simple, effective, and open-source phishing toolkit.

Introduction A while back, I published a post on the Raidersec blog demonstrating how to perform a deauthentication attack using Python and Scapy.

Introduction When looking at the functionality of mobile apps, it’s clear that they aren’t that different than web applications.

The Initial Post I recently published a blog post which showed a practical attack against Linkedin’s Intro.

Update 10/28/2013 6:30PM CDT - I have been in contact with Linkedin’s security team and a hotfix has recently been released to address the findings below.

Introduction When performing a social engineering engagement, recon is key.

``` #!