Article Photographer 1: VulnHub CTF walkthrough, part 2 In the first part of this article, we identified the admin page of the application. In this article, we will continue from this step and complete…
Article The Advanced Encryption Standard (AES) Advanced Encryption Standard short formed as AES falls under the symmetric encryption category. Thus, in AES the sender and the recipient of the…
Article Introduction to Asymmetric Cryptography Cryptography uses symmetric and asymmetric encryption for encryption and decryption of data. In this post, we will be focusing on and discussing…
Article Introduction to hash functions Hash functions are the most commonly used mathematical functions in cryptography for implementing security. A hash function converts an input value…
Article Spoofing and Anonymization (Hiding Network Activity) Introduction Forensic investigators should always pay heed to the possibility of a cybercriminal to have been using spoofing and anonymizing…
Article Data integrity and backups Introduction Data integrity means that a given data set is accurate, complete, consistent, unchanged (original or a true copy) and trustworthy…
Article Advanced cryptography in blockchain Blockchain is Built with Cryptography Blockchain technology is revolutionary. It provides a completely different way of accomplishing a wide range…
Article NetWire malware: What it is, how it works and how to prevent it | Malware spotlight NetWire is a remote access Trojan focused on password stealing and keylogging, as well as including remote control capabilities. This threat has…
Article Decrypting Downloaded Files Introduction to Malware Command and Control Malware authors commonly design their malware to communicate with their operators. In some cases, these…
Article What are Race Conditions? Introduction to Race Conditions Parallelized applications have a number of different benefits. They’re able to run faster, support multiple…
Article Introduction to Parallel Processing Introduction to Parallel Processing In the beginning, computers had a single processing core and were single-threaded. While these computers would…
Article What is a side-channel attack? Introduction The origin of the side-channel attack is closely related to the existence of physically observable phenomena caused by the execution of…
Article Hack the Box (HTB) machines walkthrough series — Cache Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB…
Article How Is Cryptography Used In Applications? Introduction Cryptography is used in software to protect the data from adversaries. The key principles of cryptography is to provide…
Article Android vulnerability allows attackers to spoof any phone number Introduction Because many employees use mobile devices for work, the widespread use of mobile devices has come to put company networks at risk for…
Article What is threat modeling? Introduction Everything that touches the internet or enterprise systems faces constant cyber threat from internal and external sources, malicious or…
Article Poor Credential Management Introduction As discussed in the previous article, use of credentials is one of the most common approaches used in applications and this is the de…
Article How To Exploit Credential Management Vulnerabilities Introduction In the previous article, we discussed some examples of poor credential management. Hardcoded credentials, improper error handling and…
Article WastedLocker malware: What it is, how it works and how to prevent it | Malware spotlight Introduction WastedLocker is the name of a data encryption malware, also called ransomware, which will be analyzed in this article. Systems infected…
Article 6 benefits of cyber threat modeling Continuing Infosec’s series on threat modeling, we are going to explore some of the biggest benefits organizations can realize from performing this…
Article How to mitigate Credential Management Vulnerabilities Introduction In the previous articles about credential management, we discussed how credentials can be used in applications and what can go wrong…
Article How to exploit integer overflow and underflow Integer overflows and underflows Integer overflow and underflow vulnerabilities can exist because of how memory and variables are handled in…
Article How to Mitigate Integer Overflow and Underflow Vulnerabilities Introduction to Integer Overflows and Underflows Integer overflow and underflow vulnerabilities are simple but extremely powerful vulnerabilities.…
Article CGEIT certification exam details and process [updated 2021] Introduction For those seeking certification in enterprise IT governance, the Certified in Governance of Enterprise IT (CGEIT) is a certification…
