Home / Resources
Practical notes on tools and techniques: scanners, brute-force risks, plugin flaws and post-exploitation scripts, with the defensive view.
See also the SecWiki reading list and useful security sites.
A look at how attackers enumerate WordPress usernames and brute-force logins, and the defences that stop it: rate limiting, disabling XML-RPC multicall, and two-factor authentication.
Read moreA conceptual walkthrough of how ping sweeps, threaded port scanning and service fingerprinting combine into a network reconnaissance workflow, and why it requires explicit authorisation.
Read moreA tiny shell one-liner that hunts a compromised Linux box for config and history files shows why post-exploitation enumeration is cheap and effective.
Read moreAn old PHP scanning and credential-guessing concept, built to run from inside a compromised web host, illustrates internal-network risk after a breach.
Read moreCVE-2013-1463: the zeroclipboard SWF shipped with WP-Table Reloaded passed an unsanitised id parameter into an ActionScript call, enabling script injection.
Read moreCVE-2013-1464: an unsanitised flashvar in the Audio Player WordPress plugin's bundled SWF allowed script execution in the page context.
Read moreApache's handling of oversized headers once echoed full cookie values back in an error page, defeating the httponly flag that was meant to hide them from scripts.
Read moreA conceptual breakdown of how file-upload vulnerabilities tend to be grouped, and the layered defences that address each class.
Read more