Dissecting a CVE-2012-4792 Payload
A little while ago I was fortunate enough to get ahold of a sample that was dropped on a system ...
Read More
Finding Zero Days Reading Your Mind in the Year 2052
A number of months ago, I was approach by the organizers of TEDxNaperville to speak at their next ...
Read MoreIntegrating Vulnerability Scanners and Web Application Firewalls
In case you missed it, Breach Security has teamed up with WhiteHat Security so that their Sentinel ...
Read MoreUsing ModSecurity 2 Collections in Rules
A recent posting on the ModSecurity mailing list by K.C. Li is a very good excuse to discuss some ...
Read MoreModSecurity v2.0 Webcast
In response to many of the common questions and issues posted to the mail-list, we at Breach ...
Read MorePortable Web Application Firewall Rule Format News
As some of you may know, I've been working on the portable web application firewall (WAF) rule ...
Read MorePortable web firewall rule format
For some time now I've been working on a portable web firewall rule format as part of the OASIS WAS ...
Read MorePaper on passive information gathering
TechicalInfo.Net is an excellent resource for Web Security information. Gunter Ollmann has provided ...
Read MoreCookie parsing added
Now you can analyse cookies using new selective filtering variables (COOKIE_name, COOKIE_NAMES, ...
Read More