Welcome to my personal Blog - I blog about Information Security and in general anything I regard as newsworthy. On the professional side I am currently working as an EMEA Practice Lead at Verizon Business for Threat and Vulnerability Management based in Luxembourg.
"Pass the hash" with Nexpose and Metasploit
-
I am proud to announce that Nexpose 5.1.0 now supports "pass the hash", a
technique to remotely authenticate against a Windows machine (or any
SMB/CIFS s...
Password Sharing Among American Teenagers
-
Interesting article from the *New York Times* on password sharing as a show
of affection.
"It's a sign of trust," Tiffany Carandang, a high school senior...
Friday Summary: January 27, 2012
-
This is the Securosis Friday Summary. For those of you who don’t know this
is where Rich and I vent. When I started working with Rich I used to loathe
wr...
De la fermeture de Megaupload...
-
L a fermeture par le FBI de Megaupload la semaine dernière a eu l'effet
d'une bombe. Pas un média, tout support confondu, n'a pu se retenir d'en
parler. Mê...
Nomination for Most Educational Blog
-
It’s an honor just to be nominated. A few weeks ago, the nominations for
the 2012 Social Security Bloggers Awards came out. Given how spanky new
this blog ...
More on the evolution of password security
-
Last time, we covered three factors that affect actual security of a
password: Entropy — How many possibilities does the attacker need to
consider? Guess r...
A New Hope
-
Rep. Mike Rogers (R-MI) and Rep. Dutch Ruppersberger (D-MD) know a secret:
The Federal government is REALLY good at watching people, much better
than, say...
Reaver Now Goes to 11
-
The decision has been made to open source the Reaver command line tool. The
commercial version will contain the all the features the open source
command-li...
Pwn2Own Pre-Game
-
Just in time to get warmed up for Pwn2Own, we are delivering a joint
offering of the training courses “Bug Hunting and Analysis 0×65” by Aaron
Portnoy and ...
Virtual Machine for Android Reverse Engineering
-
Hi !!
Now, it's possible to download a virtual machine (for VirtualBox) with all interesting tools around android RE. So you can test directly Androguard, D...
Summing up SVG fuzzing in browsers
-
Hi there. As the title states, this is a summary of SVG fuzzing results.
Today I would like to prattle a bit about what I was doing for some 2 weeks
in t...
NWScript JIT engine: Wrap-up (for now)
-
Yesterday, I provided a brief performance overview of the MSIL JIT backend
versus my implementation of an interpretive VM for various workloads.
Today, I’l...