Article Security Assessment of a Digital Signage Solution Digital signage is a form of electronic display used by the organizations to advertise and boost their business. They are often used to display…
Article Computer Forensics: Forensic Issues with Virtual Systems What is Virtual System Forensics? When something is virtual, it is almost the same as the original—but not quite. In computing, this emulation can…
Article How to configure & use Suricata for threat detection Suricata is an excellent, low-cost tool that gives you greater insight into a network. Despite this, it needs to be viewed as a single layer in a…
Article Open source threat intelligence tools & techniques The Internet, the network or networks is huge and has the most significant data you can ever think about; it is not limited to search the people or…
Article Automated Tools vs a Manual Approach Penetration Testing is one of the essential tasks for the security of mobile apps. Choosing between automated and manual testing is a dilemma for…
Article How to land your first Penetration testing job Pentesting (penetration testing) is a career unlike any other in a lot of ways. It will test your limits on an almost daily basis, spurring you on…
Article Top 5 Free Intrusion Detection Tools for Enterprise Network Due to the complexity of today's data breaches and intrusions, deploying and maintaining network security more frequently requires a promising…
Article Threat Hunting – Command and Control Center - OFFICE WORK This is a lab that is conducted in a test bed. The resources were downloaded from malware.trafficanalysis.net. The samples provided came from a case…
Article Top 10 Reasons Why Pentesting is Important to Help Meet Compliance Compliance is one of the most important aspects an organization needs to address. This means the company and its employees follow strict guidelines…
Article Memcrashed: The Dangerous Trend Behind the Biggest DDoS Attack Ever Introduction In November 2017, a group of researchers provided a macroscopic characterization of the DoS ecosystem; they shared their findings at…
Article Top 6 mobile application penetration testing tools The widespread use of mobile applications comes with a full range of new attacks formerly not relevant in the classic web application world.…
Article Bulldog: 1 CTF Walkthrough In this article, we will learn to solve another Capture the Flag (CTF) challenge which was posted on VulnHub by Nick Frichette. You all must be…
Article ICMP attacks ICMP stands for Internet Control Message Protocol and is the most used protocol in networking technology. A connectionless protocol, ICMP does not…
Article YARA: Simple and effective way of dissecting malware In this article, we will learn about the YARA tool, which gives a very simple and highly effective way of identifying and classifying malware. We…
Article Understanding the Cloak & Dagger Attack: Overview & Tutorial The Cloak and Dagger Attack is a method dealing with mismatched permission issues to access certain features on an Android device up to version…
Article Advance Persistent Threat – Lateral Movement Detection in Windows Infrastructure – Part I Techniques to detect Lateral Movement in the Windows Systems In this article, we will focus on the conventional techniques being used by the threat
Article Top 10 Things to Look for or Avoid When Choosing a Pen-Testing Vendor The penetration testing market is currently booming and will continue to do so; in fact, the international company MarketsandMarkets, a provider of…
Article Broadpwn Wi-Fi Vulnerability: How to Detect & Mitigate It can be easy to think our mobile devices are more secure than they are. However, that is just not the case. In the last three years, there have…
Article Basic Principles of Ensuring iOS Apps Security The development of any mobile application requires serious attention to privacy and security. This is especially important for applications that…
Article An introduction to penetration testing Node.js applications In this article, we will have a look at how to proceed when penetration testing Node.js applications or looking for Node.js specific issues. Node.js…
Article Comparing Mobile & Web Application Penetration Testing Pentesting mobile applications is quite different from pentesting web applications. Comparing the two processes lets us make better choices for our…
Article QuadRooter Attack Overview: Vulnerabilities, Methods & Mitigations QuadRooter is a threat vector specifically affecting Android devices. The common vulnerabilities and exposures (CVE) for these security issues are:…
Article How to Use AlientVault SIEM for Threat Detection & Incident Response Malware comes via attachments, malvertising, man-in-the-middle, man-in-the-browser, social engineering and countless other vectors. Even the most…
Article Expert Tips on Incident Response Planning & Communication An organization's ability to recover quickly in the wake of a cyberattack is directly proportional to their incident response capabilities. In…
