Black Hat Vegas

Another year has past and SensePost is returning to the Black Hat Briefings. This year's conference promises some interesting papers, including one from SensePost. This year's talk is presented by Haroon Meer and Marco Slaviero. Last year the team showed how DNS and Timing attacks could be used for a variety of attacks. This year we take those attacks further and show how small footholds in a target network can be converted into portals we can (and do) drive trucks through! Interested? Some of our thinking for this talk will also be discussed on our blog.

Black Hat is rated one of the best security conferences in the world and brings together the best and brightest the industry has to offer.

SensePost will also be presenting updated versions of our classic Hacking By Numbers Cadet , Bootcamp and Combat courses. This year for the first time we'll also be introducing our all new, all existing Hacking By Numbers Web 2.0 course. Web 2.0 is a whole new world and Hacking By Numbers - Web 2.0 Edition is a course designed to prepare you for it. Brought to you by the same team that created the successful "Bootcamp" and "Combat" editions, "Web 2.0 Edition" focuses on the knowledge, skills, tools and thinking techniques required to understand security and hacking in the Web 2.0 world.

Seasons Greetings

We'd thought we'd spread the cheer by releasing some new and some revamped tools.

Spud Version 1.0

Spud is an amalgamated search API which provides SOAP services on the localhost and amalgamates search results from Google, MSN Live Search and Yahoo into a single batch of results.

Wikto 2.0

A special, Christmas build of Wikto is available. This build includes a configurable "404" string, Spud support and updated Nikto database.

Suru Version 2.0

SensePost is pleased to announce the release of Suru version 2.0 - the new version of it's MITM proxy. Suru version 2.0 is now compatible with the .Net 2 framework and comes with a number of new feature and a cleaner GUI.

Another blog in the wall

SensePost is pleased to announce the public release of its blog site. We've been blogging internally for many years and now we've finally succumbed to pressure to make it public. Along with the blog we're also releasing a new video section and a public 'Question of Week' section modeled on 'Hacking By Numbers - Combat Grading Edition' course. Visit the new parts of our site here.