• Packet Capture of WannaCry 2.0 Scanning SMB Port 445

    On Friday May 12, 2017, version 2.0 of the WannaCry (WanaCry) Ransomware generated global interest due to infecting a number of systems in high profile government institutions across the globe including the NHS, Russian Interior Ministry, FedEx, the Russian Police, one of the largest cellphone operators in Russia (MegaFon), and the Frankfurt S-Bahn. The malware […]

  • Installing and configuring INetSim on Ubuntu

    INetSim is a software suite for simulating common internet services in a lab environment. It is useful for behavioral analysis of Malware samples that require a given service to be active on a remote server in order to execute as expected, but you don’t want to have the sample actually connect to the Internet or […]

  • New WordPress Vulnerability: GTD Theme Arbitrary File Upload

    First reported here: We have tested and confirmed that GTD 1 by Templatic is vulnerable on Ubuntu 12.04. In initial testing we were not able to exploit this vulnerability on GTD/P2 Reloaded 2.5 by WPVerse. If you are interested in receiving WordPress vulnerability notifications directly, please sign up for our WordPress Vulnerability Notification Service.

  • Changing the WordPress site URL using the MySQL command line

    If you have been locked out of your WordPress admin panel because the IP address of your server changed or some other reason, you will need to log in to MySQL directly and manually change two values in the wp_options table. If you don’t remember your MySQL username and password, you can look it up […]