Working Around Anti-Pasting in Mac OS X
Ever come across an input field that didn't allow you to paste? It get's quite frustrating doesn't it; especially if you're stuck typing out a 50 »
Even Banks Can Screw Up Password Security
Yesterday, while I was scrolling through my Twitter feed, I came across this worrying interaction between a clearly frustrated customer and CIBC: @CSISComputers We don’t »
Blind Error-based SQL Injection with NULLIF()
The other day I found an interesting way to use error-/boolean-based SQL injection, blindly, to exfiltrate database artifacts. What do I mean by that? Well, »
Using Groovy in BurpSuite with BurpKit
In August of 2015, I released a tool at DEFCON 23 called BurpKit. BurpKit is a plugin for the de-facto web penetration testing tool, BurpSuite. It »