Debugging Android Libraries using IDA

June 22, 2013 | Neal Hindocha

During a recent test, I encountered a native JNI library used by an Android ...

SpiderLabs Radio June 21, 2013 w/ Space Rogue

June 21, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

The Problem With Networks .....

June 21, 2013 | David Kirkpatrick

Where do I start with this open-ended statement? I guess from a pen testing ...

CBC-R: It's not just for padding oracles!

June 20, 2013

This is the short, technical version of a technique that I'll be writing more ...

Wendel's Small Hacking Tricks - Microsoft SQL Server Edition

June 20, 2013 | Wendel Guglielmetti Henrique

Since 2003 a large part of my workday has been devoted solely to hacking ...

[Honeypot Alert] Inside the Attacker's Toolbox: Webshell Usage Logging

June 19, 2013 | Ryan Barnett

In a previous blog post, we discussed the common lifecycle of web server botnet ...

Discovering BMW Car Systems: Getting Started

June 17, 2013 | Bruno Oliveira

Since I love both (in)security and cars, it is not uncommon for me to mix those ...

SpiderLabs Radio June 14, 2013 w/ Space Rogue

June 14, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Sometimes, The PenTest Gods Shine On You

June 14, 2013 | Nathan Drier

Settling down for a hacking session usually means lots of hard work and a long ...

Microsoft Patch Tuesday, June 2013

June 11, 2013

Finally, patch Tuesday has arrived and fortunately this one will be a real ...

TWSL2013-007: Multiple Vulnerabilities in VLC Media Player - Web Interface

June 11, 2013

Yesterday, Trustwave SpiderLabs has published an advisory for multiple ...

TWSL2013-006: Cross-Site Scripting Vulnerability in Coldbox

June 11, 2013 | Robert Foggia

Trustwave SpiderLabs has published a new advisory yesterday fora reflective ...

[Honeypot Alert] Active Exploits Attempts for Plesk Vulnerability

June 10, 2013 | Ryan Barnett

Last week, hacker "kingcope" provided PoC expliot code for a Plesk 0-day on the ...

Behind the Phish: Romance Perhaps?

June 10, 2013 | Phil Hay

When I look at the masses of spam we receive on a daily basis, I often wonder ...

SpiderLabs Radio June 7, 2013 w/ Space Rogue

June 07, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Microsoft Advance Notification for June 2013

June 06, 2013 | Space Rogue

So far this year we has had two Patch Tuesday months with seven bulletins ...

ModSecurity Updates: Nginx Stable Release and Google Summer of Code Participation

June 06, 2013 | Ryan Barnett

Availability of ModSecurity 2.7.4: Nginx Stable Release The ModSecurity ...

The Speed is from the Devil – Some Thoughts about Google’s New Disclosure Policy

June 03, 2013 | Ziv Mador

If you follow info-security news, you might have heard about Google considering ...

Alina: Following The Shadow Part 2

June 03, 2013 | Josh Grunzweig

This will likely be the final blog post in this series on the Alina Point of ...

SpiderLabs Radio May 31, 2013 w/ Space Rogue

May 31, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Under The Hood: Linksys Remote Command Injection Vulnerabilities

May 31, 2013

Several models in the Linksys E-Series WiFi routers running their respective ...

ModSecurity Performance Recommendations

May 31, 2013 | Breno Silva

Sometimes we see ModSecurity users asking about performance in the mail-list. ...

SpiderLabs Radio May 24, 2013 w/ Space Rogue

May 24, 2013

This weeks episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Machine Learning Update 1

May 20, 2013 | Ryan Merritt

It has been almost exactly a month since my last post regarding the new project ...

SpiderLabs Radio May 17, 2013 w/ Space Rogue

May 17, 2013

This week's episode of SpiderLabs Radio hosted by Space Rogue is brought to you ...

Analysis of Malicious Document Files Spammed by Cutwail

May 15, 2013 | Rodel Mendrez

In our Global Security Report, we highlighted a zero day vulnerability in the ...

TWSL2013-002: Multiple XSS Vulnerabilities in The Bug Genie

May 14, 2013

Trustwave SpiderLabs has published a new security advisory for multiple ...

Microsoft Patch Tuesday, May 2013

May 14, 2013

I keep hoping for an easy relaxing Patch Tuesday of say, only two or three ...