Browsing Tag
hacker
164 posts
Navigating the Maze: Mastering Sink-to-Source Vulnerability Analysis
Most people learn vulnerability research by starting at the front door — where does user input enter the…
The Three Pillars of Vulnerability Research: Code Review, Reverse Engineering, and Fuzzing
Every technique in vulnerability research eventually traces back to one of three disciplines: reading code (or its equivalent…
pipal: A tool for analyzing password statistics from password dumps to assess password security
When I first started digging into password security research, I kept hearing the same name from people who…
cutycapt: A tool for capturing screenshots of web pages and converting them to images
I’ve used a lot of screenshot tools over the years, but CutyCapt remains one of my favorites for…
cherrytree: A hierarchical note-taking application for organizing notes and information
If there’s one piece of non-hacking software I recommend to every security professional I mentor, it’s CherryTree. It’s…
hashdeep: A tool for computing and verifying hash values of files in a directory
Every digital forensics investigation I’ve worked on starts with the same non-negotiable step: proving that the evidence I’m…
bulk_extractor: A tool for extracting useful data from large data sets, such as disk images
bulk_extractor is a high-speed digital forensics tool that scans a disk image, file, or directory of files and…
binwalk: A tool for analyzing and extracting data from firmware images
Binwalk is a fast, open-source tool for analyzing, reverse engineering, and extracting firmware images and arbitrary binary files.…
autopsy: A digital forensics tool for analyzing hard drives and smartphones for evidence
Autopsy is, without question, the single tool I’ve spent the most hours inside during my forensics career. It’s…
pdfid: A tool for identifying the structure and objects in PDF files
Before I ever open a suspicious PDF attachment in a full parser — or, heaven forbid, in an…