As I mentioned in my intro post, I have started with the vulnerability-analysis modules and just wen...

It's true, ftp isn't something that you think of first when conducting an assessment We look at web...

Some of you know that I am the curator of the Information Security desk at Wikistrat, a virtual stra...

There are a few vulnerabilities that are so complex that it is best to use a special tool to test fo...

I have a confession: nikto is one of my favorite tools. It is a web server scanner that checks for n...

The Pentesters Framework is a set of tools designed to make testing of web applications easier....

I just finished giving my new talk on the care and feeding of your developers in a security culture...

This  has been quite a year of community. I have been honored to present at a load of user grou...

Yesterday, Troy Hunt posted a very well written article showing how account enumeration can cause in...

I'm so proud to announce that you can now find my application security training on Wintellect Now!My...