Skip to main content
Using nfsshell to compromise older environments
  • How Tos
  • Security Blog
Using nfsshell to compromise older environments

7 Min Read

Oct 24, 2014
Tearing down and reverse engineering Android (toys)
  • Android
  • Reverse Engineering
  • Security Blog
Tearing down and reverse engineering Android (toys)

14 Min Read

Oct 23, 2014
Using hexdump analysis for firmware extraction: A how-to
  • How Tos
  • Reverse Engineering
  • Security Blog
Using hexdump analysis for firmware extraction: A how-to

7 Min Read

Oct 20, 2014
Efficient Password Cracking Where LM Hashes Exist for Some Users
  • How Tos
  • Passwords
  • Security Blog
Efficient Password Cracking Where LM Hashes Exist for Some Users

4 Min Read

Oct 17, 2014
Critical SQL Injection Vulnerability in Drupal 7.0-7.31
  • How Tos
  • Security Blog
Critical SQL Injection Vulnerability in Drupal 7.0-7.31

1 Min Read

Oct 16, 2014
  • How Tos
  • Security Blog
POODLE SSLv3 Redux: How to fix it

5 Min Read

Oct 15, 2014
  • Android
  • How Tos
  • Security Blog
Further Rockchip Android brokenness

4 Min Read

Oct 13, 2014
BBC article: Prevent devices being remotely wiped, here’s how to do it properly
  • Android
  • How Tos
  • Macs / Apple
  • Security Blog
BBC article: Prevent devices being remotely wiped, here’s how to do it properly

2 Min Read

Oct 10, 2014
First Hudl2 Teardown?
  • Android
  • Opinions
  • Security Blog
First Hudl2 Teardown?

4 Min Read

Oct 08, 2014
Using Applocker to protect your users from themselves, and you from your users
  • How Tos
  • Security Blog
Using Applocker to protect your users from themselves, and you from your users

5 Min Read

Oct 06, 2014
  • Security Blog
Shell Shock: What it is, and what you can do

4 Min Read

Sep 25, 2014
Who watches the watchmen? A social engineer’s cautionary tale of spy watches
  • Security Blog
  • Social Engineering
Who watches the watchmen? A social engineer’s cautionary tale of spy watches

6 Min Read

Sep 24, 2014
Nmap for Sysadmins
  • How Tos
  • Security Blog
Nmap for Sysadmins

3 Min Read

Sep 22, 2014
  • How Tos
  • Security Blog
Socat-fu lesson

7 Min Read

Sep 19, 2014
Second hand budget Android tablets spark privacy and online safety concerns
  • Android
  • Security Blog
Second hand budget Android tablets spark privacy and online safety concerns

2 Min Read

Sep 17, 2014
Is a remote wipe any better than a factory reset on an Android device?
  • Android
  • How Tos
  • Security Blog
Is a remote wipe any better than a factory reset on an Android device?

3 Min Read

Sep 16, 2014
Recovering data from ‘wiped’ Android devices: A How To Guide
  • Android
  • How Tos
  • Security Blog
Recovering data from ‘wiped’ Android devices: A How To Guide

8 Min Read

Sep 15, 2014
More on tuning John the Ripper
  • How Tos
  • Passwords
  • Security Blog
More on tuning John the Ripper

5 Min Read

Sep 15, 2014
  • How Tos
  • Passwords
  • Security Blog
Custom charsets and rules with John The Ripper and oclhashcat

5 Min Read

Sep 10, 2014
  • Opinions
  • Security Blog
Today’s BBC Article: Securing your nudie selfies

4 Min Read

Sep 02, 2014
Aldi Lifetab also vulnerable to data recovery from memory
  • Android
  • Security Blog
Aldi Lifetab also vulnerable to data recovery from memory

3 Min Read

Aug 28, 2014
  • Opinions
  • Security Blog
BBC Article: Tracking smartphones using Wi-Fi emissions

3 Min Read

Aug 26, 2014
New Rockchip firmware being released, but who is going to flash my grandma’s tablet?
  • Android
  • Opinions
  • Security Blog
New Rockchip firmware being released, but who is going to flash my grandma’s tablet?

3 Min Read

Aug 22, 2014
Top 10 ways to compromise your mobile security that you’d never believe
  • Android
  • How Tos
  • Macs / Apple
  • Security Blog
Top 10 ways to compromise your mobile security that you’d never believe

3 Min Read

Aug 20, 2014
Tesco Hudl 2 – our wish list
  • Android
  • Security Blog
Tesco Hudl 2 – our wish list

3 Min Read

Aug 18, 2014
Top 10 stupidest ways we’ve got domain admin
  • How Tos
  • Security Blog
Top 10 stupidest ways we’ve got domain admin

2 Min Read

Aug 13, 2014
Yes, really. A car review on a pen test blog. It’s topical, honest!
  • Automotive Security
  • Security Blog
Yes, really. A car review on a pen test blog. It’s topical, honest!

4 Min Read

Aug 07, 2014
  • Android
  • How Tos
  • Macs / Apple
  • Security Blog
Advanced traffic interception for mobile apps using Mallory and Burp

9 Min Read

Aug 06, 2014
  • Passwords
  • Security Blog
Adobe, eBay and other breaches. Should you change your password? Yes, but only if it’s a lousy password

4 Min Read

Aug 05, 2014
  • How Tos
  • Security Blog
Further IBM Maximo Asset Management Vulnerabilities Reported

0 Min Read

Jul 31, 2014
  • Honeypots
  • Security Blog
Work on our honeynet continues apace

2 Min Read

Jul 30, 2014
  • Opinions
  • Security Blog
Shiny New Pen Test Report! So What…

5 Min Read

Jul 29, 2014
Don’t use PIN Patterns on Android
  • Android
  • Security Blog
Don’t use PIN Patterns on Android

3 Min Read

Jul 25, 2014
  • Security Blog
  • Vulnerability Disclosure
ICO makes a mockery of disclosure

3 Min Read

Jul 23, 2014
  • Cyber Liability Insurance
  • Opinions
  • Security Blog
Sketchy BIS Report Data, FUD, and Why You Need Cyber Liability Insurance

4 Min Read

Jul 11, 2014
PTP Code Respository
  • Code Repository
  • How Tos
  • Security Blog
PTP Code Respository

1 Min Read

Jul 07, 2014
  • How Tos
  • Security Blog
Auditing AWS Security Groups – Part 2

2 Min Read

Jul 07, 2014
  • How Tos
  • Security Blog
Hacking Sat Navs

8 Min Read

Jul 04, 2014
  • Passwords
  • Security Blog
Unicode – the future of passwords? Possibly…

7 Min Read

Jul 03, 2014
  • How Tos
  • Security Blog
Auditing AWS Security Groups

3 Min Read

Jul 02, 2014
  • Android
  • Passwords
  • Security Blog
Key Sniffing with Android

11 Min Read

Jun 20, 2014
  • Passwords
  • Security Blog
Postal Services Breached, customers urged to change house numbers urgently

2 Min Read

Jun 18, 2014
  • How Tos
  • Security Blog
Is everything actually broken? Software will always be flawed, but here’s what you can do about it

8 Min Read

Jun 17, 2014
  • Passwords
  • Security Blog
One-way password hashing is essential, but it’s even better if you select the right algorithm

4 Min Read

Jun 12, 2014
Old pre-smartphones from eBay – Blackmail Central!
  • How Tos
  • Security Blog
Old pre-smartphones from eBay – Blackmail Central!

7 Min Read

Jun 10, 2014
  • How Tos
  • Security Blog
  • Virtual Environments
Breaking Out of Citrix and other Restricted Desktop Environments

29 Min Read

Jun 06, 2014
How to scrape plain text from an encrypted Android phone OR why most MDM products just don’t cut it
  • Android
  • How Tos
  • Security Blog
How to scrape plain text from an encrypted Android phone OR why most MDM products just don’t cut it

5 Min Read

Jun 04, 2014
  • Passwords
  • Security Blog
CorrectHorseBatteryStaple isn’t a good password. Here’s why.

3 Min Read

May 29, 2014
  • Android
  • How Tos
  • Security Blog
How to hardware hack Android over UART

4 Min Read

May 29, 2014
  • How Tos
  • Opinions
  • Security Blog
BMW i3 password issues

6 Min Read

May 28, 2014
  • Opinions
  • Security Blog
The truth behind vulnerabilities, a missive from the trenches

4 Min Read

May 23, 2014
How to Hack the Hudl – We give Rockchip a good seeing to
  • Android
  • How Tos
  • Security Blog
How to Hack the Hudl – We give Rockchip a good seeing to

10 Min Read

May 22, 2014
  • How Tos
  • Opinions
  • Security Blog
Defeating corporate anti-virus

12 Min Read

May 20, 2014
  • How Tos
  • Security Blog
Quick and dirty binary analysis using sandboxes

4 Min Read

May 14, 2014
Shameless self promotion – Pen Test Partners at Infosecurity Europe 2014
  • Android
  • How Tos
  • Security Blog
  • Shameless Self Promotion
Shameless self promotion – Pen Test Partners at Infosecurity Europe 2014

1 Min Read

Apr 30, 2014
  • How Tos
  • Opinions
  • Security Blog
SayNoTo0870.com SayYesToCreditCardFraud.co.uk..?

3 Min Read

Apr 25, 2014
  • Android
  • How Tos
  • Security Blog
Keep your Android versions updated. Why? If you have to ask…

4 Min Read

Apr 24, 2014
  • Heartbleed
  • Opinions
  • Security Blog
Wildcard SSL certificates, not good value any more, my Heartbleeds

2 Min Read

Apr 15, 2014
  • Heartbleed
  • How Tos
  • Security Blog
Security vs the community: you’re doing it right!

3 Min Read

Apr 14, 2014
  • Heartbleed
  • Opinions
  • Security Blog
Heartbleed in the wild, the call of duty

2 Min Read

Apr 14, 2014
  • How Tos
  • Passwords
  • Security Blog
New Zeus variant may get lost in the clamour of Heartbleed

6 Min Read

Apr 11, 2014
  • Heartbleed
  • How Tos
  • Security Blog
WTF Heartbleed? Don’t make me move all my HTTPS services to HTTP and ditch SSL completely

2 Min Read

Apr 09, 2014
  • Heartbleed
  • How Tos
  • Security Blog
Heartbleed OpenSSL bug- overview and fixes

2 Min Read

Apr 08, 2014
  • How Tos
  • Security Blog
WAF (Web Application Firewall) Testing for dummies

1 Min Read

Apr 08, 2014
  • Opinions
  • Security Blog
Why you might want to rethink providing free wi-fi

4 Min Read

Apr 07, 2014
  • How Tos
  • Opinions
  • Security Blog
Top Tips For Internet Privacy

6 Min Read

Apr 04, 2014
  • How Tos
  • Security Blog
Scanning for Default Files

4 Min Read

Apr 01, 2014
  • Honeypots
  • How Tos
  • Security Blog
Honey traps, a lesson in espionage, and managing your ego

2 Min Read

Mar 25, 2014
  • Honeypots
  • How Tos
  • Opinions
  • Security Blog
Create a honeynet, dupe your attackers, build threat intelligence

3 Min Read

Mar 24, 2014
  • How Tos
  • Opinions
  • Security Blog
Hacking Computer Games

5 Min Read

Mar 20, 2014
  • Opinions
  • Security Blog
Connected cars, signals systems, mischief and European drivers. These scare me.

6 Min Read

Mar 14, 2014
  • How Tos
  • Opinions
  • Passwords
  • Security Blog
8 ways to be great at password management, and protect your customers

4 Min Read

Mar 13, 2014
Really? A notebook to write down your passwords in, sold by Amazon?
  • Opinions
  • Passwords
  • Security Blog
Really? A notebook to write down your passwords in, sold by Amazon?

2 Min Read

Mar 10, 2014
  • How Tos
  • Passwords
  • Security Blog
Passwords: A step-by-step analysis of breaking them

7 Min Read

Mar 06, 2014
  • Honeypots
  • How Tos
  • Security Blog
Need to avoid a honeypot? Here’s how

3 Min Read

Mar 05, 2014
  • How Tos
  • Opinions
  • Security Blog
Webcam Security: I can SEE you!

3 Min Read

Mar 04, 2014
  • How Tos
  • Opinions
  • Security Blog
Keylogging domain creds; who needs a hash? Lock the victim’s workstation to order and snarf them immediately

4 Min Read

Mar 03, 2014
  • How Tos
  • Opinions
  • Security Blog
Threat Intelligence: Log File Hacking

3 Min Read

Feb 26, 2014
  • How Tos
  • Opinions
  • Passwords
  • Security Blog
Password re-use: the game is changing, SO USE A PASSWORD VAULT!

3 Min Read

Feb 21, 2014
  • How Tos
  • Opinions
  • Security Blog
Can you really wipe a mobile device remotely?

4 Min Read

Feb 20, 2014
  • How Tos
  • Security Blog
DIY – Build Your Own “Pwn Pad” Style Nexus 7 Hack Box

5 Min Read

Feb 19, 2014
  • How Tos
  • Opinions
  • Security Blog
Analysis of reported Tesco account and password data

2 Min Read

Feb 14, 2014
  • How Tos
  • Security Blog
How can I be tracked using my mobile devices? Here’s how…

3 Min Read

Feb 13, 2014
  • How Tos
  • Opinions
  • Security Blog
It’s Safer Internet Day and we’ve got six tips to help you stay out of trouble

2 Min Read

Feb 11, 2014
  • Cyber Liability Insurance
  • Opinions
  • Security Blog
Cyber liability insurance, you need it, and here’s why…

4 Min Read

Feb 11, 2014
  • Security Blog
Hacker High School

6 Min Read

Feb 06, 2014
  • Opinions
  • Security Blog
There are “pen tests” and then there are “PEN TESTS”…

5 Min Read

Jan 28, 2014
  • Opinions
  • Security Blog
Encryption and cloud based storage

5 Min Read

Jan 27, 2014
  • How Tos
  • Opinions
  • Passwords
  • Security Blog
Passwords, passwords, passwords (repeat)

5 Min Read

Jan 24, 2014
  • How Tos
  • Opinions
  • Security Blog
Belt AND Braces: Web apps and mod_security

3 Min Read

Jan 22, 2014
  • How Tos
  • Security Blog
Data Exfiltration: DNS tunnelling using iodine

4 Min Read

Jan 20, 2014
  • How Tos
  • Opinions
  • Security Blog
Test early, test often: 6 things you should know about application security testing

3 Min Read

Jan 17, 2014
  • How Tos
  • Security Blog
IBM Maximo Asset Management Vulnerability Reported

1 Min Read

Jan 16, 2014
  • How Tos
  • Security Blog
Abusing Group Policy Preferences to Elevate Privileges

4 Min Read

Jan 06, 2014
  • Security Blog
Web application Unicode character transforms

3 Min Read

Jan 03, 2014
  • Security Blog
NSA – Never Safe Again?

3 Min Read

Jan 02, 2014
  • How Tos
  • Opinions
  • Security Blog
Hackey Phishmas!

3 Min Read

Dec 16, 2013
  • Opinions
  • Security Blog
Cyber security kite mark being touted, but for what exactly? People? Passwords? Patches?

2 Min Read

Dec 12, 2013
  • Macs / Apple
  • Security Blog
iOS phone users still vulnerable to old PIN bypass vulnerabilities: Lesson – Update your stuff

1 Min Read

Dec 09, 2013
  • How Tos
  • Security Blog
Transferring Data the Low Tech Way

3 Min Read

Dec 04, 2013
1 … 7 8 9 10