Hey all, We hired a new pair of co-op students recently. They're both in their last academic terms, and are looking for a good challenge and to learn a lot. So, for a challenge, I set up a scenario that forced them to use a series of netcat relays to compromise a target host and [...]
Read MoreFiled under: Hacking
Recently, I was given the opportunity to work with an embedded Linux OS that was locked down to prevent unauthorized access. I was able to obtain a shell fairly quickly, but then I ran into a number of security mechanisms. Fortunately, I found creative ways to overcome each of them. Here's the list of the [...]
Read MoreThis post was written by Matt Gardenghi This is just initial impressions of a beta product. I've been playing with this for about a week now in an internal network. I have a dedicated box running Ubuntu 10.04 and Metasploit Express. I've noticed that Express loves CPU time but is much less caring about RAM. [...]
Read MoreFiled under: Hacking
This is another special blog written by Matt Gardenghi! My boss passed around a document about database security in the cloud. It raised issues about proper monitoring of the DB, but offered no solutions. This got me thinking. I hate it when that happens. Its like an automatic "boss button" that I can't switch off. [...]
Read More