There were a lot of really great talks at Toorcon and two of my best friends, David Shaw of Redspin and Nate Drier of Spiderlabs were kind enough to send me their video and slides. An introduction to the Nmap Scripting Engine by David Shaw: Intro to Nmap Scripting from Securityaegis on Vimeo. Slides: http://www.securityaegis.com/nse.pdf [...]
Hey Guys, Just a note I have joined a new project, Pentester Scripting. The purpose is to share information, scripts, and one-liners for all your pentests, audits, assessments, etc. Check out and submit scripts and see what others are using on day-to-day engagements. Check out some that the Redspin crew have sumbitted: Directory Brute Forcing [...]
One thing you learn when you start a career pentesting is: Never assume anything. In my experience hacks aren’t always elegant and elaborate. Sometimes something simple and effective is your avenue of penetration. Which brings us to today’s topic: directory bruteforcing. Directory bruteforcing is a favorite of mine. I can’t tell you how many times [...]