Head of Penetration Testing at 7safe Sumit Sidharth (Sid), was recently interviewed by the Pentest Magazine to provide insights into his specialism in application and database security. Speaking from over seven years of successful experience within the IT Security Industry, ‘Sid’ talks candidly about his contributions towards a number of white-papers, articles, advisory, tools and [...]

This webinar features two practical exercises taken from the 7Safe Certified Security Testing Associate (CSTA) infrastructure pen testing course: The first on DNS enumeration using Fierce, the second on client-side exploitation using Metasploit. Ethical hacking techniques from this webinar are demonstrated by 7Safe’s renowned Course Manager Jerome Smith, which is hosted by FishNet Security Director [...]

The first sequel of this paper was released in 2010 and it discussed the privileges needed to execute OS code when exploiting a SQL Injection in a web application which has an Oracle back-end. This paper examines new techniques to execute multiple statements via SQL Injection. No special privileges are needed to use these techniques [...]