Hello, welcome to the Tuesday, August 11th, 2020 edition of the Sandcent and Storm Center's Stormcast.

My name is Johannes Ulrich, and I'm recording from Jacksonville, Florida.

Well, today to start out with, we have a solution to a challenge that DDA posed last week.

A simple word, Maldock is how he called it. In part two,

he's going over the solution and how to use his numbers to string tool to solve this particular

challenge. So if you've worked on it, take a look at the diary for the solution.

And Boyan, the web app pentester in our group has an interesting diary today about how to scope web application pen tests.

That's a question I see post a lot by people in particular that are newer to pen tests.

They're asking, well, how much time will it take to run a certain pen test?

How do I sort of estimate the time at the beginning of the pen test without spending too much time

just coming up with the estimate?

Well, Boyan is walking us through the process that he's using to scope web application and web service pen tests.

So certainly nice of him to share this information with everybody out there.

And yes, please provide some feedback if you have run into this problem, if you may have a different solution, or if something

that Boyan proposed here doesn't quite work for you. And yes, we have more problems with the

Google Chrome Web Store. That's where you typically find extensions for Google Chrome,

and AdGuard, a company that makes an ad blocker for Google Chrome,

and of course that ad blocker is available as a Chrome extension.

How many fake ad blockers are impersonating its product and also just generically try to claim that they are an ad blocker even if they are

not. Overall, AdGuard found around 300 different extensions that they sort of categorized

in different groups. Now, the largest of these groups will actually inject additional ads

into the browser, in particular if you are visiting a search engine page where you kind of

...