Partners ~ Hacking while you're asleep

Popular Posts

Extracting files from a network traffic capture (PCAP)

When we are involved in an incident handling and we are in charge of analyzing a traffic capture in a pcap format related to an attack, one...
Hakcking with default credentials and Shodan

Do you think that the personal from the IT department have default password in their equipments of a production environment? The answer is....
XSS-game by Google exercises 4, 5 and 6.

In the previous post we talked about how to resolve the exercises 1, 2 and 3 of the XSS-game proposed by Google. Now, we are going to res...
Wordpress Denial of Service Responsible Disclosure - Attacking with long passwords

Introduction Wordpress is the CMS most used Worldwide. According to w3techs.com WordPress is used by 61.1% of all the websites whose con...
CVE-2016-3978 Open Redirect & XSS in FortiOS (Fortinet)

Introduction Some months ago, I reported to the Fortinet PSIRT team two vulnerabilities which affect different Fortigate firmware version...