🔓 Unl0ckd

I planned a post covering the Manager Feedback Cycle, but this blog post at Effective Managers covers most of what I was going to communicate.

Apple gets a lot of flak in the InfoSec community, even though it’s an open secret that much of the InfoSec community has begun to use Apple products.

It’s early 2016, and there are a multitude of content management systems and blog platforms out there: Wikipedia’s List of Content Management Systems The security blog I contribute to, Penetrate.IO runs on the venerable Wordpress and requires constant upd…

I had the need to proxy traffic from Burpsuite to another proxy during web app testing this week.

This post was inspired by a client who came to me and said “I do not understand all of these findings, can you explain them to me?”

What I hope are some reasonable basic security practice recommendations

On a recent engagement I supported the lead by developing a PowerShell payload for a RubberDucky.

Inspired by Jack Daniel’s “Shoulders of InfoSec Project”, this post will be focused on the people and technologies behind one of the most prevalent attacks on web sites: SQL injection.

URL Syntax https://admin:pass123@www.example.com:80/bio.txt;pp=1&qp=2#Three URL Part URL Data Scheme https User admin Password pass123 Subdomain www Domain example.com Port 80 Path /bio.txt Path Parameter pp=1 Query Parameter qp=2 Fragment Three Safe Char…

Unfortunately, I didn’t arrive at the ballroom early enough to get seats, or even standing room, to see this talk in-person: Ed Skoudis: How To Give The Best Pen Test Of Your Life If you’re a Pen Tester, this talk is a must-see.

A mini-list reference for interesting LFI targets

NBNS still works!

Learn how to create a metasploit module

This is a topic I’ve had a love/hate relationship with my entire life.

Introductory methods for DNS reconnaissance.

Notes from BSides DC 2013

Techniques for performing subdomain enumeration information gathering.

Customize your working environment to your liking

Methods for obtaining reverse shells

An exploration of the ps command

Tips picked up from a red/blue infosec conference

How to determine Powershell environment variables