The Ethical Hacker Network RSS News FeedMost Recent Additions to The Ethical Hacker Network, the best, single source of educational content for forensics, pen testing and incident response. Hacker Challenges with prizes, free monthly giveaways, tutorials, articles, forums, certification info and more.It Happened One Friday- March 21, 2008 Overview: Hello, challenge fans. Matt Carpenter and I have brewed up a new one for your analysis. The evidence is below. Analyze it and answer our questions. As always, we'll choose three winners: one technical champ, one creative victor whose answer is technically correct, and one lucky person chosen at random. As you work through this challenge, please observe this very important warning! As they say on TV, DO NOT TRY THIS AT HOME. We'll go even further by saying, DO NOT TRY IT AT WORK...http://www.ethicalhacker.net/content/view/186/2/ Intro to XPath Injection- March 14, 2008 By Chris Gates, CISSP, CPTS, CEH WTF is XPath Injection Data can be stored in a XML file instead of an SQL Database. To sort through complex XML documents, developers created the XPath language. http:www.w3.orgTRxpath (http:www.w3.orgTRxpath) XPath is a query language for XML documents, much like SQL is a query language for databases. Instead of tables, columns, and rows XML files have nodes in a tree. And like SQL, XPATH also had the potential for injection issues if queries...http://www.ethicalhacker.net/content/view/185/24/ Video: Man-in-the-Middle Attack on MySpace with Cain- March 13, 2008 By Brian Wilson, CISSP, CCNA, CCSE, CCAI, MCP, Network+, Security+, JNCIA Last year at ChicagoCon 2007, Brian Wilson gave a great talk entitled Cain Abel: Windows Can Hack, Too! Although the presentation and audio recording of the talk can be downloaded from the ChicagoCon site at Library Media Lab 2007 Evening Presentation Files, I had totally forgotten to publish his videos. Just in case things didn't go as planned during the live event or his laptop crapped out on him, Brian made a..http://www.ethicalhacker.net/content/view/182/24/ |