Our Blog
ActiveX Repurposing.. (aka: Other bugs your static analyzer will never find..) (aka 0day^H^H 485day bug!)
Reading time:
~5 min
Posted
by Haroon Meer
on
22 May 2008
Earlier this week we had an internal presentation on Attacking ActiveX Controls. The main reason we had it is because...
DNS Tunnels (RE-REDUX)
Reading time:
~3 min
Posted
by glenn
on
28 February 2008
On a recent assessment we came across the following scenario: 1) We have command execution through a web command interpreter...
In Defense of Testing Pens… (aka how to keep your soul while being a pen-tester)
Reading time:
~7 min
Posted
by Haroon Meer
on
04 July 2007
A short while back, a discussion broke out on a mailing list about the nature of being a pen-tester. The...