Stripe CTF Solutions
Posted by: Dan O'Connor
Just incase you are looking for them, here is the solutions to the CTF game I posted last week. I made it through the first few levels but ran out of time with other...
Just incase you are looking for them, here is the solutions to the CTF game I posted last week. I made it through the first few levels but ran out of time with other...
I have been doing some prep research for some up coming activities and I found an excellent cheat sheet of SQL injection commands. Here; Here is the standards that I usually...
I am currently testing a few php shells that I have against a test php site I created, and I thought I would share some of the basics of a RFI ( Remote File Inclusion ). When I need to deal with web apps this is the second thing I will try right after SQL injection.
Here is the
I find it strange that physical pen testing and digital seem to have some sort of impenetrable wall between them when I talk with people. I know when doing a pen test you have your scope of what is off limits and how far you are supposed to go. These limits can be business based, maybe on...
If you have not noticed they have updated the security section of your dropbox account. You can now enable two factor authentication for your account. Basically it will send a PIN to your mobile device that you append to your password. I am a big fan of this form of two factor authentication. ...
If you have not seen this yet, Gauss is something that appears to have come out of the same labs or workshop as Flame and Stuxnet. This specifically seems to be targeted against the financial industry in the middle east.
Here is a Guardian article with some excellent information;
Very open comment about the cyber capabilities possessed by the US military. Here is the article I found, http://www.khou.com/news/world/167334595.html You can watch his speech right...
Hurry you have one week from today, so next Wednesday the 29th. https://stripe.com/blog/capture-the-flag-20 I'll let you all know how I do!
I picked up another similar listener to the Groupon one the other day. This again is an attached ZIP file with an exe inside. It says its from paypai.com depending on your font the i will look like a L. The exe looks like it has been reused but I don't see any mention of it's original file...