Websec Cybersecurity Blog
Expert insights, trends, research findings, and best practices from our security team to help you strengthen your organization's security posture.
Articles
Backdoor In Optical Fiber Device Alcatel-Lucent
The newest optical fiber devices offered by the ISP Infinitum have a backdoor which allow for full administration of these devices. This backdoor account is hidden by nature and does not allow for the password to be changed.
Mac2WepKey HHG5xx for iPhone
The popular Android tool for recovering default WiFi passwords on vulnerable Huawei HHG5xx routers is now available on iOS 5, letting jailbroken iPhone and iPad users scan for and connect to weak networks directly from the device.
Solutions for challenge 2B
A walkthrough of Challenge 2B from our SQL Injection series, including why a temporary table that stays out of information_schema forced participants to find creative ways to enumerate table and column names.
Solutions for challenge 2A
A walkthrough of the different approaches submitted for Challenge 2A in our SQL Injection challenge series, focusing on how the guest login and the user_id cookie open the door to privilege escalation.
A series of SQL Injection challenges
I want to introduce three SQL Injection challenges which were created for a CTF, but have yet to be solved... Could you be the first?
Using Burp to exploit a Blind SQL Injection
How to use Burp Suite to automate the process of extracting information from a SQL database through a Blind SQL Injection.