Archive for ‘web hacking’

9 results.
Oct06

Clickjacking

by Michael Farnum on October 6th, 2008 at 4:40 pm
Posted In: Application Security, Fun, Internet, OWASP, Security, web hacking

This post has no technical value.  Just experimenting with how much traffic I can get by putting the term “clickjacking” in a post. But seriously, if you want to know anything about it, go listen to Martin’s podcast interview with Jeremiah and Rsnake.  You can also go over to Computerworld and take a look at […] ↓ Read the rest of this entry…

└ Tags: , , ,
Comments Off
Feb05

Give yourself a little time with SQL Injection

by David Nester on February 5th, 2008 at 3:13 pm
Posted In: web hacking

I was recently involved in web application assessment and discovered something that I wanted to pass along. Keep in mind that this has probably been utilized before, but it is something that I just noticed so … I wanted to throw it out for your amusement. To set the stage, I had been looking at […] ↓ Read the rest of this entry…

2 Comments
Jan30

OWASP Books Released

by David Nester on January 30th, 2008 at 9:11 pm
Posted In: web hacking

An interesting download to come out of the OWASP camp — books are now available for your reading pleasure. The initial group of books are: OWASP CLASP v1.2 OWASP Top 10 – 2007 Edition OWASP Top 10 – Testing – Legal 07′ OWASP WebGoat and WebScarab OWASP Code Review – 2007 (RC1) OWASP Evaluation and […] ↓ Read the rest of this entry…

1 Comment
Jan30

XSS Framework?

by David Nester on January 30th, 2008 at 9:05 pm
Posted In: web hacking

So you don’t consider yourself to be XSS savy, but you would really like to do some free testing? Well look no farther…you just might have a solution.  Introducing the XSSDB by GNUCitizen.  The XSSDB (i’m assuming) is heading in the direction as the Metasploit Project, however, soley based on Cross-Site Scripting checks. A couple of […] ↓ Read the rest of this entry…

Comments Off
Jan30

ajax security (book release)

by David Nester on January 30th, 2008 at 8:46 pm
Posted In: web hacking

Billy Hoffman and Bryan Sullivan released a new book on AJAX Security this last month (or so). For those of you who aren’t familiar with Billy and Bryan, they are/were involved in the SPI Dynamics group before being acquired by HP Software in late 2007. I would highly recommend that you grab a copy of […] ↓ Read the rest of this entry…

Comments Off
Jan30

“Hacker Safe” Site Hacked, Data Stolen

by David Nester on January 30th, 2008 at 8:45 pm
Posted In: web hacking

It’s simply amazing to me that folks will fall for the marketing literature. Hacker Safe? I think not…. http://www.cioinsight.com/article2/0,1540,2246925,00.asp

Comments Off
Aug14

Winsnort.com defaced

by Michael Farnum on August 14th, 2006 at 5:22 pm
Posted In: Security, web hacking

It was just reported by SANS.  Be careful if you go there.   Vet

4 Comments
Aug14

Keyloggers on clients’ computers cause bank to get in trouble by press – HUH?!

by Michael Farnum on August 14th, 2006 at 10:44 am
Posted In: Crime, Security, Sheesh, web hacking

Martin McKeay posted a few days back about keylogging software on client’s of HSBC Bank.  Bruce Schneier pointed out this article this morning about the same issue.  Both came to roughly the same conclusion: this is ridiculous. Yes, there are things the bank can do to help with this, but come one, where is the personal responsibility for […] ↓ Read the rest of this entry…

Comments Off
Aug08

Senator Lieberman’s campaign website DDos’ed

by Michael Farnum on August 8th, 2006 at 9:23 pm
Posted In: DDos, Security, Sheesh, web hacking

Politics can be fun, and it can be real ugly, and often both at the same time.  And in this digital age, everyone has a chance to get involved, including script kiddies that have a political axe to grind.  Go read the story here.  But what got me about this whole deal was this quote […] ↓ Read the rest of this entry…

Comments Off