Security Blog

• 
  How NOT to use HTML Purifier

  Today we learn how not to use HTML Purifier and not become lulled into false sense of security.

• 
  Dionaea Honeypot Obfuscation - Avoiding service identification

  Since some days we work on a fork of the great Dionaea Honeypot.

• 
  IRC Botnets are not dead yet

  I thought IRC botnets were dead for some time but recently I was proved wrong.

• 
  Apache / PHP 5.x Remote Code Execution

  We currently register more attacks on our honeypot system that want to exploit a specific vulnerability in Apache and PHP.

• 
  Glastopf Statistics Script

  Here a small Script written in Python which sends Queries to the Glastopf Honeypot Database for printing out some interesting Statistics.

Projects

Vulnerable Web

This Site shows what kind of vulnerabilities exists and how to prevent security flaws in your applications.

Online

XSS Cheatsheet

A collection of XSS attack vectors.

Online