Groundspeed is an open source firefox add-on that allows you to manipulate the interface of web applications to adapt it to the penetration test needs. Find more about groundspeed here:

Next week I will be talking about some of the ideas behind Groundspeed in the OWASP NY/NJ chapter meeting. The meeting will be on Tuesday, Nov 2 at the KPMG offices (345 Park Ave) from 6pm to 9pm and the agenda includes some very interesting presentations:

• Much Ado about Randomness, Aleksandr Yampolskiy
• Escaping the Sandbox, Stephen Ridley
• Memory Corruption, Exploitation, and You, Dino Dai Zovi

There will be free beer and food and there are over 200 people already registered to attend! This is supposed to be largest OWASP chapter meeting ever held! If you are in the NY/NJ area you should consider coming! For more information and a link to register check the OWASP NY/NJ chapter website.

Last month I presented a webcast titled “Manipulating Web Application Interfaces” as part of the SANS webcast series. It is now available online in the SANS webcast archive here. You will have to sign in with your SANS portal account (free registration) in order to see the link to replay the webcast. The slides are available online here.

Here are the slides from the SANS webcast from April 19th. The PDF version will be available at the SANS website soon.

As soon as the recording is made available I will post a link here.