Can I See Your “USER AGENT” Please?
Recently, on an assessment, I was working on trying to bypass AMSI+EDR in order to get our lovely Cobalt Strike beacon to phone home. After assessing the target environment, I […]
Blog
Secure360 2024 Cybersecurity Conference
Many of you know this is one of our favorite local cybersecurity conferences to attend! We are so excited to be exhibiting and presenting again this year, so be sure […]
Cursor Chaos: Tackling The Text Troublemaker In Burp Suite Professional
Burp Suite Professional’s User Interface is one of the most advanced Java UIs out there, but everyone has a bad day now and then. Frustratingly, the tool’s Message Editor can […]
Slam The Door Shut On Burp Suite’s Perfunctory Proxy
Burp Suite has some really cool features that make it useful as an HTTP Swiss Army Knife. It’s great for debugging and acting as a middle translation layer to duct […]
Hamming Distance & Password Variation
We’ve all had this experience: Your password is required to be changed every so often, and now you’ve got to come up with a new one. While security-conscious people often […]
Burp Suite: Session Timeout Vulnerabilities & Session Extension
Penetration Testing is often an exercise of observing the behavior of the target, and then finding creative ways to subvert its expectations to trigger an unusual (security-impacting) behavior. Sometimes the […]
AddToTLSPassThrough 1.0.1 Version Burp Extension Release Notes
Following our initial release of the addToTLSPassThrough Burp Suite Extension, we are pleased to announce publication of version 1.0.1! AddToTLSPassThrough 1.0.1 Significant improvements to the extension have been added to […]
Bugcrowd
Pentesting and bug bounty hunting go hand-in-hand. Several of our pentesters find joy in bug bounty hunting in their free time, and one of our own, Chris Inzinga, will be […]
Sculpting Burp Extension Output With Burp Suite Reshaper Plugin
One of the reasons that Burp Suite has become a standard tool for Web Application Penetration Testing is the ecosystem of Extensions that enable it to support new functionality. Sometimes […]
CCDC 2024
Each year, hundreds of students compete in the Collegiate Cyber Defense Competition. Starting off the 2024 year with loads of excitement is the Midwest Regional Collegiate Cyber Defense Competition (MWCCDC) […]