neuroFuzz Application Security, LLC provides Web Application Security services and secure custom software engineering services.  Our main area of operation is the penetration testing and securing of web applications and web services.

Recent talk - CSO Security Seminar

May 2010, I spoke, and took part in a panel, at a CSO Security Seminar in NYC - topic: "State of the Art Security". See the presentation deck here.
 

Check out some client-side (javascript, vbscript, etc) examples of functionality

We have put up some small examples of what is possible, from a security perspective, with client-side code. The sampling is by no means comprehensive but it should get your imagination going. Take a look here.


SSHA Attack is a new open source tool released by us

SSHA Attack is a cracking tool that specifically targets salted SHA hashes as used in LDAP deployments. You can get details here and see a couple of videos @ http://www.neurofuzz.com/modules/software/vidz.php


WSFuzzer is now part of OWASP

WSFuzzer, one of the neuroFuzz donations to the world in the form of Open Source software is now part of OWASP !  OWASP is an excellent project that adds tremendous value to any entity doing business on the Internet and it is an honor for our software to be part of the OWASP project.

Get details here.

Check out a video of WSFuzzer in action @ http://www.neurofuzz.com/modules/software/vidz.php


PPTFWA

We are proud to announce that numerous projects pen testing web applications have led to the writing of a book on the subject. 

You can purchase it via Amazon by following this link:





In the meantime, if you want to contact me, please use this contact form.