Article The Sysenter Instruction Internals Introduction In the previous article we've seen that whether we're using the int 0x2e interrupt or sysenter instruction, the same method in kernel…
Article Vulnerability Assessment of SNMP Service – II Background: This is our second article in a series on vulnerability assessment of SNMP Service. In the previous article, we learned how we could set…
Article Delegates and Events: C#, Net 4.0 Abstract In this article, you will learn how to create and manipulates Delegate types as well as C# events, which streamline the process of working…
Article OWASP’s 2013 Web Vulnerabilities List Will Shuffle the Top Ten [highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our OWASP Top 10 Training course OWASP Top 10 Training. [/highlight]…
Article Cyber Kill Chain is a Great Idea, But is It Something Your Company Can Implement? Lysa Myers, Virus Hunter, Intego If you're one of those folks who read a lot of InfoSec news, you've no doubt heard a lot of mention of the…
Article The Top 10 Internet Resources to Use After Suffering a Cyber Breach Most cyber breaches into your online presence will be directed at your website server and its accompanying databases or accounts. And, if you've…
Article Phishing and Social Engineering Techniques 2.0 This is the second part of the phishing and social engineering techniques series. In the first article, we have discussed what phishing is, as well…
Article The ASP.NET Internals ASP.NET Configuration Options The most important configurations in the web.config file will be described in this section:[pkadzone zone="main_top"]…
Article PayPal: Chargebacks and Dispute Resolution Introduction PayPal Inc. is a global provider of online payment services established in 1998 in Palo Alto, California. In 2012, PayPal Inc.…
Article Visual Studio and Build Process Introduction Each DLL contains various exported functions that can be accessed by other programs. DLLs are being extensively used because the DLL is…
Article L-7 Protocol analysis Traditional intrusion detection systems have always relied on protocol specific analysers to extract the context of the traffic stream. Basically,…
Article Data Exfiltration Techniques Introduction In this article we will see how malware encode or encrypt data that's exfiltrated to the Command and Control Server from infected…
Article QR Code: USSD attack The QR code or Quick Response code was originally designed for industrial applications, and has quickly gained popularity in the advertising…
Article Using CreateRemoteThread for DLL injection on Windows Note: all the code examples can be found on my Github profile under visual-studio-projects accessible here: https://github.com/proteansec .…
Article API hooking and DLL injection on Windows Note: all the code examples can be found on my Github profile under visual-studio-projects accessible here: https://github.com/proteansec. [pkadzone…
Article Using SetWindowsHookEx for DLL injection on windows Note: all the code examples can be found on my Github profile under visual-studio-projects accessible here: https://github.com/proteansec .…
Article IOS Application security Part 3 - Understanding the Objective-C Runtime Introduction Almost all the native IOS applications are written in Objective-C. All these apps use Cocoa, which is a library that sits on top on…
Article Crypto building blocks 1. Introduction This article will explain how crypto building blocks can be used to achieve confidentiality, integrity, authentication and…
Article Hacking Drones … Overview of the Main Threats Introduction The Unmanned Aerial Vehicles (UAVs), also known as drones, represent a revolution in the security context; these powerful systems could…
Article LUKS and LVM LVM + LUKS LVM is software that uses physical devices as physical volumes (PVs) in storage pools called volume group (VG). Physical volumes can be a…
Article Calling NTDLL functions directly If you're reading this, then you've probably wanted to call some internal ntdll function that isn't exported and easily callable, right? If no, then…
Article Linux and disk forensics A digital forensic investigation generally consists of five major steps [Figure-1]: Identification Data Acquisition Data Recovery Analysis R
Article Data Exfiltration Techniques Introduction In this article we will see how malware encode or encrypt data that's exfiltrated to the Command and Control Server from infected…
Article iOS Application Security Part 4 – Runtime Analysis Using Cycript (Yahoo Weather App) Introduction In the previous article, we learnt about the runtime capabilities of an IOS App written in Objective-C which uses the Cocoa framework.…
