Article File Decoys for Endpoints In a typical scenario, threat actors try to gather as much information as possible (such as sensitive documents like credit card numbers, SSN…
Article Windows Subsystem for Linux Microsoft has started developing cross-platform integrations into Windows 10. The Windows Subsystem for Linux (WSL) is an example of one these…
Article Introduction to OWASP ZAP for web application security assessments The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular web application security testing tools. It is made available for free as an open…
Article Introduction to the Nikto web application vulnerability scanner The increase in web applications on the internet today raises a security concern because in some cases, security is haphazardly considered during…
Article Which Are the Most Exploited Flaws by Cybercriminal Organizations? Which are the weapons in the arsenal of cybercrime gangs? Which are the most exploited vulnerabilities? To respond to these questions let's analyze…
Article OWASP top 10 application security risks: 2013 vs 2017 The Open Web Application Security Project (OWASP) is a global, nonprofit organization aiming to improve the security of applications and raise…
Article What is Business Email Compromise (BEC)? Social media platforms may be a popular communication mode, but email remains the preferred business communication tool. The Radicati Group expects…
Article Cryptanalysis tools Some terms and definitions Alice – Sender of the message Bob – Receiver Eve – Eavesdropper or unintended party Plaintext – Message to be sent
Article How to Prevent Business Email Compromise With Multi-Factor Authentication Business email compromise (BEC) scams cost businesses $5.3 billion from 2013 to 2016. BEC fraud is a problem for companies of all sizes and all…
Article 2017 OWASP A4 Update: XML External Entities (XXE) Extensible Markup Language External Entities (XXE) is currently ranked fourth on OWASP’s 2017 Top Ten list of application security risks. Extensible…
Article Building your own pentesting environment Ethical hacking is a term used to describe hacking done by a person/individual to identify the potential vulnerabilities or weakness in the system…
Article Reverse engineering tools First, we're going to describe the process of compiling/assembling a source code to an executable file. This is very important, so we need to…
Article 2017 OWASP A6 Update: Security Misconfiguration The Open Web Application Security Project (OWASP) is a volunteer group whose goal is to build a more robust Internet. One of their flagship…
Article Computer forensics investigation – A case study Disclaimer: We have not performed any live investigation. This was a part of our university assignment, wherein we assumed the roles of forensics…
Article Combat Business Email Compromise Scams With New Awareness Training Tools From SecurityIQ Business email compromise (BEC) attacks are growing in both frequency and severity. According to the FBI, BEC attacks cost businesses $5.3 billion…
Article Basics of cryptography: The practical application and use of cryptography Cryptography originated about 4000 years ago, and the world of cryptography has evolved a lot since then. Today 'Cryptography' is omnipresent in our…
Article 2017 OWASP A9 Update: Using Components With Known Vulnerabilities Introduction It does not take a rocket scientist to understand using components with known vulnerabilities is a very poor choice. While solving this…
Article All You Need to Know About the Cambridge Analytica Privacy Scandal Introduction The commercial data analytics company Cambridge Analytica is in the middle of one of the biggest privacy scandals of the last years;…
Article Android penetration tools walkthrough series: MobSF This article reviews the step-by-step procedures for deploying a Pentesting tool called "MobSF," which is utilized primarily on the Android OS.…
Article Advance persistent threat - Lateral movement detection in Windows infrastructure - Part II In the previous article "Advanced Persistent Threat - Lateral Movement Detection in Windows Infrastructure - Part I," we discussed the advanced…
Article Introduction to the paros proxy lightweight web application tool The Paros Proxy Lightweight Web Application tool is one of the most popular penetration testing tools for web applications. Web app developers and…
Article XML vulnerabilities are still attractive targets for attackers XXE flaws in XML parsers can expose sensitive data, enable attacks, and affect major services. The article explains XXE basics, real exploits,…
Article Vulnerability scanning with Metasploit part I Metasploit Framework, the Metasploit Project's best-known creation, is a software platform for developing, testing, and executing exploits. It can…
Article 2017 OWASP A10 update: Insufficient logging & monitoring Many critics of the Open Web Application Security Project (OWASP) Top Ten list view insufficient logging and monitoring, new on the list in 2017, as…
