Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
2020-08-10	Bojan Zdrnja	Scoping web application and web service penetration tests
2018-12-16	Guy Bruneau	Random Port Scan for Open RDP Backdoor
2018-07-02	Guy Bruneau	Hello Peppa! - PHP Scans
2017-09-06	Adrien de Beaupre	Modern Web Application Penetration Testing , Hash Length Extension Attacks
2017-05-13	Guy Bruneau	Has anyone Tested WannaCry Killswitch? - https://blog.didierstevens.com/2017/05/13/quickpost-wcry-killswitch-check-is-not-proxy-aware/
2016-09-04	Russ McRee	Kali Linux 2016.2 Release: https://www.kali.org/news/kali-linux-20162-release/
2016-01-20	Xavier Mertens	/tmp, %TEMP%, ~/Desktop, T:\, ... A goldmine for pentesters!
2015-11-09	John Bambenek	ICYMI: Widespread Unserialize Vulnerability in Java
2014-08-09	Adrien de Beaupre	Complete application ownage via Multi-POST XSRF
2011-10-26	Rick Wanner	Critical Control 17:Penetration Tests and Red Team Exercises
2011-08-26	Daniel Wesemann	User Agent 007
2011-01-24	Rob VandenBrink	Where have all the COM Ports Gone? - How enumerating COM ports led to me finding a “misplaced” Microsoft tool
2010-08-23	Manuel Humberto Santander Pelaez	Firefox plugins to perform penetration testing activities
2010-08-16	Raul Siles	Blind Elephant: A New Web Application Fingerprinting Tool
2010-06-06	Manuel Humberto Santander Pelaez	Nice OS X exploit tutorial
2010-04-13	Adrien de Beaupre	Web App Testing Tools
2009-07-27	Raul Siles	New Hacker Challenge: Prison Break - Breaking, Entering & Decoding
2009-04-21	Bojan Zdrnja	Web application vulnerabilities
2008-09-20	Rick Wanner	New (to me) nmap Features