The Shadow File

A grad student emailed me in response to my Netgear auth bypass post .  He's working on a research project and wanted to know if I knew...

For my presentation at BayThreat, entitled "BT Wireless Routers: Adventures in Reversing and Exploiting", rather than have one or ...

At the end of my post on the Netgear wndr3700v4's authentication bugs, I said to expect followup posts. Once the web interface is unloc...

UPDATE: Turns out, Jacob Holocomb ( @rootHak42 on Twitter) of Independent Security Evaluators found this bug back in April on a different d...

I've just added a module to Bowcaster  that I think is cool. Actually, I just got around to finishing a module that was there all along....

Update December 2014: 44CON has posted the videos from all 2013 talks online. Unfortunately, they don't allow the videos to be embedded,...

Note : I have a great job at a company called Tactical Network Solutions, based in Columbia, MD.  I'm not looking for a new job.  That...

Sometimes I need a MIPS Linux system that I can use for development and testing.  Maybe I need to test some shellcode or debug a binary I...

Nothing original here, but this is a great tip, so I want to share it.  Thanks to @thegrugq  for cluing me into this via Twitter. For ever...

In previous parts of the Bowcaster tutorial, I showed how to construct your buffer overflow using the OverflowBuffer class.  I also mention...

In part 1 of the Bowcaster tutorial I showed how to generate an overflow string with the OverflowBuffer class. In part 2 , I showed how to...