Breakpoints in Burp, (Wed, Nov 2nd)

No, this is not a story about the Canadian Thanksgiving long weekend, it&#;x26;#;39;s about web application testing. I recently had a web application to assess, and I used Burp Suite Pro as part of that project. Burp is one of my favourite tools to aim at a website, it does a lot of the up-front “test everything” grunt work for you so you can then focus on the details that are most important.

Continue reading Breakpoints in Burp, (Wed, Nov 2nd)→

Posted in Uncategorized

Critical OpenSSL 3.0 Update Released. Patches CVE-2022-3786, CVE-2022-3602, (Tue, Nov 1st)

As preannounced, OpenSSL released version 3.0.7, which patches two related vulnerabilities rated as “High.” Initially, as part of a preannouncement, the vulnerability was rated “Critical.” OpenSSL 3.0 was initially released in September of last year.

Continue reading Critical OpenSSL 3.0 Update Released. Patches CVE-2022-3786, CVE-2022-3602, (Tue, Nov 1st)→

Posted in Uncategorized

NMAP without NMAP – Port Testing and Scanning with PowerShell, (Mon, Oct 31st)

Ever needed to do a portscan and didn&#;x26;#;39;t have nmap installed? I&#;x26;#;39;ve had this more than once on an internal pentest or more often just on run-rate “is that port open? / is there a host firewall in the way?” testing.

Continue reading NMAP without NMAP – Port Testing and Scanning with PowerShell, (Mon, Oct 31st)→

Posted in Uncategorized