tag:blogger.com,1999:blog-107330782011-12-01T15:02:42.752-05:00Secure IdeasThis is the blog for Secure Ideas. Secure Ideas is a security consulting firm focused on penetration testing. We also run the MySecurityScanner.com service for continuous vulnerability scanning.Kevin Johnsonhttp://www.blogger.com/profile/08062319461773936036noreply@blogger.comBlogger51100tag:blogger.com,1999:blog-10733078.post-71272698949494962952011-12-01T14:39:00.011-05:002011-12-01T15:02:42.764-05:00How to install BeEF on Ubuntu 10.04 LTS-------------------------------------------------------- The Browser Exploitation Framework (BeEF) is a wonderful tool to have in your pen test arsenal. The latest version of the framework is written in ruby and requires ruby version 1.9.1 or greater in order to run. The default version of ruby that Ubuntu 10.04 LTS installs with the "apt-get install rubyChris Cuevashttp://www.blogger.com/profile/10812511934604529006noreply@blogger.com0tag:blogger.com,1999:blog-10733078.post-87672071840850677332011-11-13T20:48:00.001-05:002011-11-13T21:53:24.497-05:00MobiSec Live Environment DARPA ProjectMobile devices have become the most common computer technology available today, as indicated in a recent report from the CTIA stating that the United States now has more mobile phones than people; a staggering 327.6 million phones! In the past year, the number of smartphones and wireless-enabled PDAs (tablets, e-readers, etc.) has risen 57%, to a total of 95.8 million devices. These mobile Tony DeLaGrangehttp://www.blogger.com/profile/13169158609120073911noreply@blogger.com0tag:blogger.com,1999:blog-10733078.post-1156908331892444662006-08-29T23:22:00.000-04:002006-08-29T23:25:31.903-04:00Life keeps going on....Wow, I can't believe it has been this long since my last post. Quite a bit is going on around here. Sarah was born and I am teaching SANS classes coming up in September and then October. We released the updated hping for Windows and got Nikto-NSE out the door. Both of these were added to the SecTools project. I hope to get some updates out in the next few days as I have a bit to talk about.Kevin Johnsonhttp://www.blogger.com/profile/08062319461773936036noreply@blogger.com0tag:blogger.com,1999:blog-10733078.post-1136175996896651712006-01-01T23:12:00.000-05:002006-01-01T23:26:36.906-05:00Mining in a corporate environmentWe have a virus attack! Words that will stop any security professional in their tracks. Even with strict security policies and procedures around patch and anti-virus management, virii are still a major threat. Everyday new virii and variations of old favorites are released into the wild and our networks. A single host, not under our control, being plugged in or a user that shutdowns their Kevin Johnsonhttp://www.blogger.com/profile/08062319461773936036noreply@blogger.com0tag:blogger.com,1999:blog-10733078.post-1135218371554350392005-12-21T21:17:00.000-05:002005-12-21T21:26:11.566-05:00Technical Debt: Dave Ramsey, where are you?It is interesting how an idea pops up in your daily life. I was reading through the torrent of email that is the FD mailing list and the phrase "Technical Debt" was mentioned. It started me thinking about security and how companies treat it when they develop their systems and infrastructure. I then thought that we all need a little Dave Ramsey in our SOCs. So now the question becomes, how do we Kevin Johnsonhttp://www.blogger.com/profile/08062319461773936036noreply@blogger.com0