DigiNinja · Scour

A script I knocked together to import issues from my DradisPro install into MediaWiki so they could be the start of my issues library.

digi.ninja·49w

Abusing Cisco Dynamic Trunking Protocol, DTP, to change a switch port from access to trunk mode to gain access to all VLAN traffic.

digi.ninja·49w

Pipal gets a Kippo log parser to show what passwords attackers are using when brute forcing SSH servers.

digi.ninja·49w

Custom word list generator based on tweets - Update to use the new Twitter search API

digi.ninja·49w

Part two of the exploiting RIP series, this time looking at RIPv2 and it's authentication mechanisms.

digi.ninja·49w

Write up of my efforts to track down what turned out to be an accidental DoS against my Gmail account.

digi.ninja·49w

Setting up a RIPv1 lab in GNS3 and then exploiting it to poison routes between two machines.

digi.ninja·49w

My opinion on the eBay password reset policy - no pasting and 20 character caps are bad.

digi.ninja·49w

A tool to follow HTTP redirects showing the full details at each request, collecting and replaying cookies on the way.

digi.ninja·49w

A huge thank you to the amazing hacker community.

digi.ninja·49w

My opinion on the Sony hack.

digi.ninja·49w

A short howto on removing the obfuscation added to non-default passwords by Nessus.

digi.ninja·1252w

A short guide to exploiting POST based reflected XSS using CSRF and iframes.

digi.ninja·1252w

Pipal analysis of 13,000 passwords from the Lizard Squad dump.

digi.ninja·1252w

A write up of my recent experiences of getting clients involved during testing.

digi.ninja·1252w

Trying to understand why the EE web portal doesn't have a password change feature.

digi.ninja·1252w

Here is a little trick I just learned about to help prevent things like API keys from ending up in your Git repo. I've mentioned it to a few Git loving develope...

digi.ninja·1252w

New tool, Sitediff

digi.ninja·1252w

Asking the question, when it is acceptable to miss a vulnerability on a test.

digi.ninja·1252w

Accidentally Sharing CrashPlan Data

digi.ninja·1252w

Log in to enable infinite scrolling