Hey all, It has been a number of weeks since I last posted, I have been far to busy with work and upSploit to add anything on here. This blog post is just a quick shout out to all the european / (worldwide) hackers about a conference in Athens next year. The conference is ran by Kyprianos Vasilopoulos, a senior consultant where I work, and Christian Papathanasiou – both native greek penetration testers. They aim to provide people...

I recently started at Trustwave’s SpiderLabs and one of the things I have been wanting to do for a while is start some kind of ‘serious’ podcast for people to listen to and say “Hey that is good!”. (Something that by the way Disaster Protocol never did, it was just there to make people laugh at us ) So Myself and Zack Fasel have decided to do a monthly episode on SpiderLabs Radio (an iTunes podcast that was...

So for those of you that do not know it, ever since I was introduced to my first apple product I have been hooked. I am a self proclaimed mac fag and I am definitely proud of it. I now own an iPad, iPhone, MacBook Air, Apple TV and will soon be getting a MacBook Pro and currently saving for an iMac! So yeah I am a fan boy, sorry. I have recently running the beta iOS software for my iPhone and I am able to do it for my iPad too but have...

Web App Story starts in 1990 not interesting till 1996 – cookies come about 1998 first advisory on SQL injection 2007 web attacks became monetizes – SQL injection bots 50% of compromises via web apps 2008 & 2009 25X recocords compromised in 2011 via webappsec vs. 2010 DBIR —– Threat Landscape 285 millions records were compromised in 2008 – verizon data breach report 54% percent of breachs were through the...

Smartphones There are so many different things you can do with SmartPhones:- Heart Rate Monitor OCR etc Enisa’s Smartphone Report Top 10 Risk Risks are different in three usage scenarios Consumers Employees High official or aide Cross-over can occur i.e. a politician using their smart phone to access personal email. Device Loss leading to data leakage Is there a password? Encrypted? UK govt 2008 – 2% of UK reported their mobile...