It was just a matter of time before we started to see this pop up but “drive-by pharming” is now just starting to be discovered. In this case a user received an email from a spoofed “e-greeting card” company with an embedded HTML image tag. Once the code is launched, it manipulates the DSL router […]
First case of “drive-by pharming” identified Read More »
Good blog posts over at Episteme and Andy’s blog about employee awareness and social engineering. Teaching your employees not to trust people is a tall request that’s for sure! Most businesses are built by having employees trust each other…like Andy mentions, you have to teach them to “trust, but verify”. I conduct social engineering tests
Awareness and Social Engineering Read More »
The following is the continuation for “The Wardriving Experiment – Part 1“. To recap…I decided to setup a little wardriving experiment to really get an idea on how many people are still using WEP to secure their wireless access points. I also wanted to find out if people still setup a wireless network without encryption.
The Wardriving Experiment – Part 2 Read More »
Just put a new theme in for the site..so far so good. I also removed the forums since they were not used (at all actually) and re-enabled the comments. Enjoy!
Found this post over at the Defcon forums…RenderMan did a wireless audit of West Edmonton Mall (located in Canada) which is one of the largest malls in the world. RenderMan details his assessment of the 200+ wireless networks and devices…including a separate review of Bluetooth devices found.
Hacking West Edmonton Mall Read More »
Looking to enhance your pen testing skills and take it to the next level? Thomas over at De-ICE.net has just released the first disk in the more advanced “Level 2” set of Live PenTest LiveCD scenarios.
De-ICE.net Releases Level 2 Pen Test LiveCD’s Read More »
GNUCITIZEN posted more information and a good FAQ about the dangers of UPnP and the Flash UPnP attack that they describe.
I was in total dismay when I read the recent commentary by known security expert Bruce Schneier about how he leaves his home wireless network open..yes, meaning no encryption..wide open free wifi generously donated to the neighborhood by Bruce. While I understand some of the points he was trying to make I started to really
Steal Schneier’s Wifi Read More »
Very good article over at GNUCITIZEN (as always) about what UPnP (Universal Plug and Play) is and how hackable it can be (some quite scary stuff actually). More and more devices are UPnP compatible nowadays, for example, the PS3 and Xbox 360 can be a media server client and use UPnP. Also, most home wireless
Hacking UPnP Devices Read More »
I wanted to provide everyone with an update on how things are going with Password Safe. While Password Safe is a great program, I have found that the “Gorilla” is the bigger, badder animal…
Password Safe, Good – Password Gorilla, Better Read More »
