Research

This One Time on a Pen Test, Part 4: From Zero to Web Application Admin through Open-Source Intelligence Gathering

Security Impact of Easily Accessible UART on IoT Technology

Password Tips From a Pen Tester: Common Patterns Exposed

Patrick Laverty

Coinhive: Making Other People’s Web Browsers Mine Cryptocurrency

Building a Backpack Hypervisor

Brendan Watters

Multiple vulnerabilities in Wink and Insteon smart home systems

Cisco Smart Install Exposure

Remote Desktop Protocol (RDP) Exposure

Signal to Noise in Internet Scanning Research

The Data Science Process at Rapid7

NCSAM: The Danger of Criminalizing Curiosity

Amanda Fountain

The 2016 Verizon Data Breach Investigations Report (DBIR) Summary - The Defender's Perspective

Adventures in Empty UDP Scanning

I don't always write my own web application fingerprints, but when I do, I use XML

Learn to Pentest SAP with Metasploit As ERP Attacks Go Mainstream

Christian Kirsch

Analysis of the FinFisher Lawful Interception Malware

Vulnerability and Threat Data Export Leveraging "XML Export 2.0" format

Interprocedural Data Flow Dependencies