On a recent engagement, I encountered a multifunction printer/scanner/copier, an HP Officejet Pro, without password protection. It was possible to....

While performing a penetration test, it’s quite common to encounter JBoss and Tomcat application servers. These servers are generally attractive....

I love to pass the hash and steal tokens as much as the next pentester, but sometimes it’s nice to have the actual password for a user. Here are some....