Don't Forget the Little Things!
On January 31st, Deusen disclosed what was described as a Same Origin Policy Bypass flaw called ...
Continue Reading
Adventures in LDAP Injection: Exploiting and Fixing
Every pentester looks forward to that next encounter that includes one of those uncommon ...
Continue Reading
SamuraiWTF 3.0 and into the future!
We are really excited to announce that SamuraiWTF 3.0 is now available publicly. This release is ...
Continue Reading
Burp CO2 now sports some Laudanum Scripts!
There have been a number of updates to the Burp CO2 extension suite over the past couple of months ...
Continue Reading
SQLite: the good, the bad, the embedded database
SQLite is an embedded, open-source, lightweight SQL database engine. The C-based library is ...
Continue Reading
Thumb Drives.. Can you tell the difference?
During a physical penetration test, it is not uncommon for the tester (attacker) to drop USB thumb ...
Continue Reading
CORS Global Policy
I recently noticed an uptick on Cross-Origin Resource Sharing (CORS) findings showing up in ...
Continue Reading
The ABC's of ASV's & PCI
Secure Ideas prides itself on providing the highest level of service to our customers. We are ...
Continue Reading
Logging Like a Lumber Jack
Turn on any news outlet or visit any news site and you will most likely see an announcement of yet ...
Continue Reading
Policy Gap Analysis: Filling the Gaps
In today's world, something never seems to be true unless it is written down, and even then it is a ...
Continue Reading
New Data Security Breach Laws in Florida
Since many organizations are collecting what many would consider personal, non-public information, ...
Continue Reading