Polito Inc. is pleased to announce that we are releasing the Hash Exporter extension for X-Ways. Hash Exporter helps automate hash extract

This blog post will cover how to conduct a ret2libc attack. The ret2libc technique is a tactic used in Linux exploit development that allows

How to conduct basic phishing campaigns using Gophish, an open-source tool for testing an organization’s vulnerability to phishing.

To start, you’ll need your MetaDefender Cloud API key ready. You can sign up for MetaDefender’s free API key at opswat.com.  You can downloa

Vulnerability scanners assist in the identification and detection of vulnerabilities arising from misconfigurations or insecure coding with

One of the latest trends in penetration testing and malware development is to weaponize the so-called Living Off the Land Binaries and Scrip

Today’s malware authors and exploit developers have automated methods of obfuscating their software, When these techniques are combined with

Today, much of the malware still operates via the same concept of infecting machines and spreading throughout networks. Due to this, it only

While Pi-hole includes a nice web-based admin interface, I started to experiment with shipping its dnsmasq logs to the Elastic (AKA ELK) sta

*This blog entry was originally published on January 29, 2016 on the original Polito Blog by Ian Duffy. It was re-posted on October 3,...

Wouldn't it be cool if we could use Yara in this situation to help identify pages that contained malicious content? We set out to write