Proactive Defense

The first time that I had to work with a buffer overflow exploit, I was completely out of my depth. Although I could build networks and con...

Late last year, I set about building a new virtualization platform to serve as my security lab. Since the advent of Microsoft Hyper-V and VM...

The truism "anything worth having doesn't come easy" is one I have often remembered when on a particularly difficult path to a...

If you are involved with PCI compliance scanning you are probably familiar with the "SSL Server Has SSLv2 Enabled" vulnerability. ...

Security awareness training is one of the least expensive and most effective ways of protecting your organizations assets. I came across thi...

I recently discovered a new search engine which has some interesting capabilities, from the site.. SHODAN lets you find servers/ routers/ ...

nmap is one of my favorite network tools. It's versatile and powerful and lots of fun to use. Nmap scan types are denoted by -s*. -sS is...