security

security

May

Speeding Up Lua Script Execution in ModSecurity

Written By Josh Zlatin

Often when implementing customised ModSecurity solutions we need to extend the built-in functionality via Lua scripting. One of the disadvantages to this approach is the added latency penalty paid for not using the native rules language. When web site performance is critical for business continuity, every additional millesecond counts. The current trunk code fixes a long-standing limitation where ModSecurity needed to create a new VM for each request, which added latency every time a Lua script was executed.

0 Comments

| 3,227 Hits

Tags: Lua, ModSecurity, purewaf, security

Mar

Hacking in the Year 2030

Written By Ty Miller

If you are anything like me, when you hear "Hacking in the Year 2030" you immediately visualize hacking robot armies and UFOs to take them down with lazers and ultrasonic USB attachments via your PlayStation 10 using only changes in pupil dilation to read mental instructions of what hacking tools to launch.

Well this technology may very well be around in 2030, but unfortunately most of you are more likely to still be exploiting Cross Site Scripting (XSS) vulnerabilities in the web interface of the killer robots.

3 Comments

| 2,318 Hits

Tags: 0 day, 0day, hacking, mobile, penetration testing, security, zero day

Sep

Richard Brown, DefCon Badge Hack DDoS Attack

Written By Richard Brown

Richard Brown, Pure Hacking dedicated security consultant and all round security fanatic impressed the conference organisers and participants at this year's DefCon with his innovative DefCon badge hack.

0 Comments

| 1,538 Hits

Tags: badge, black hat, blackhat, ddos, defcon, defcon badge, Denial of Service, hardware, hardware hacking, infra-red, security

Sep

Ty Miller, CTO presented at Black Hat 2012 - Again!!

Written By Ty Miller

Pure Hacking's CTO, Ty Miller was invited to present at Black Hat 2012 for his third appearance as an official trainer at the world’s most high profile security event. Ty originally presented his development of “Reverse DNS Tunneling Shellcode” at Black Hat 2008 and has been an official part of the program with "The Shellcode Lab" since 2011.

0 Comments

| 904 Hits

Tags: 0day, black hat, blackhat, education, exploit, linux, mac os x, metasploit, security, shellcode, training, windows, zero day

Sep

Pure Hacking Trainers Gain Global Recognition

Written By Rob McAdam

We are always proud to share our successes at Pure Hacking and thought it was high time we let you know about the growing global reputation our CTO, Ty Miller is generating.

After being invited to present and train at Black Hat for two years in a row, Asia Pacific security teams can now gain the valuable experience of Ty's training course closer to home.

0 Comments

| 1,765 Hits