We are looking for pentesters to join our team! Send your CV to [email protected]. More info at gremwell.com/we_are_hiring_….

Pentesting Meteor Applications with Burp Suite - gremwell.com/node/945

Our employee of the month @QKaiser had his research featured in the latest Metasploit blog. Read all about it at rapid7.com/research/repor….

Introducing Qsslcauditproxy: an easy way to test for client SSL issues with Qsslcaudit - gremwell.com/node/953

Thanks everyone who came out to IOActive, Inc hack soho to see my talk on wSAST! I’ve put my slides online here: wsast.co.uk/ioa-hs-winter2…

Writeup of a command injection exploit in IBM Lotus Notes: pwnani.com

Dear #twitter, please don't write my session cookie to the console.

Writeup of directory traversal vulnerabilities in jsupload.cgi.pl: pwnani.com

Hey guys you might like this exploit! Really fun bug if not the most impressive target: pastebin.com/QP7eZaJt

Metasploit module for IBM Lotus Notes Client URL Handler Command Injection released: exploit-db.com/exploits/23650/ Nice work juan vazquez

How I Hacked Facebook OAuth To Get Full Permission On Any Facebook Account (Without App "Allow" Interaction) nirgoldshlager.com/2013/02/how-i-…

Thank you Peter Winter-Smith and Dominic Chell 👻 for the denial of service attack against my iPhone 5 messages app. I'm plotting my revenge!

When using oleview.exe, I cannot be the only one who gets this mental image.

I have hosted my #CSCBE challenge for everyone to try. All details @ pwnanisec.blogspot.be. Best challenge ever according to some guy.

If you have solved the challenge, DM me the solution and get in my personal Hall of Fame. Writeup will follow soon.

Solution to my #CSCBE challenge available at pwnanisec.blogspot.be/2016/04/cyber-…. Thanks for playing.

Writeup of my UAF bug in Google Hangouts ActiveX: pwnanisec.blogspot.be/2017/02/use-af…