A few weeks ago I needed a way of grabbing a bunch of different articles based on a set of basic keywords for one of my projects. Essentially what I wanted was a way to feed a whole bunch of different RSS feeds into a program, have it download the...
Read more →Earlier this year the world got it’s first taste of major mac malware, flashback. In the month of April, Sophos reported on a python backdoor used in some of the attacks. When I first heard this I was excited to see something new, but not too exci...
Read more →In the packing PDFs blog entry I mentioned that I created a tool for creating the documents I later released. At the time I decided that releasing the tool would not be in the best interest of everyone else, but then I thought of metasploit and th...
Read more →In my last post I gave a simple example of an XMPP bot in action. The bot demonstrated how easy it was to plug a python XMPP bot into an existing XMPP setup. This post is going to go a little deeper and show command and control could be performed ...
Read more →Back in January I made a post about a talk I submitted to Shmoocon. You can check it out here, but basically it was proposing and demonstrating the use of XMPP as a command and control channel instead of something like plain HTTP or IRC. I list th...
Read more →Details: Simple PoC of JavaScript delivery based on timed token. Page generated contains no JavaScript unless a valid token is supplied. If the token is correct then the JavaScript source reference is added to the page which is then executed makin...
Read more →