Article The Mechanics of Metasploit Metasploit is exquisitely prevalent amongst penetration testers and especially hackers because it makes it very easy to develop and launch exploits…
Article Vulnerability Scanning with Metasploit: Part II In the previous article, we learned how to perform a network vulnerability assessment by using the OpenVAS plug-in. In this continuation, we will…
Article Securing Your Java Code 2 For Part 3 [pkadzone zone="main_top"] SQL Injection SQL injection occurs when a user sends malicious data to an interpreter as an SQL query. The a
Article Adobe CQ Pentesting Guide – Part 1 This post deals with the step-by-step security testing guidelines for Adobe CQ installation. Adobe CQ is Adobe's new Web Experience Management…
Article Security Predictions for 2014 As the year 2013 draws to a close, we decided to make some predictions for the most popular Security Trends in 2014. Here is what we think are the…
Article QEMU Windows Guest: Installing the Operating System Now that we've created the image for our guest, we must continue with installing the operating system on it. In Virtualbox/VMWare, we usually select…
Article Forensic Investigation on Windows Machines Digital forensics is the process of identifying and collecting digital evidence from any medium, while preserving its integrity for examination and…
Article QEMU Windows Guest: Networking There are different kind of backend networks that we can use with QEMU. In order to specify the backend network, we need to use the -netdev…
Article QEMU Windows Guest: Bridged Networking Bridged networking can be used when we want our guest virtual machine to get the IP address from our router and be able to see the host and all…
Article 10 popular password-auditing tools compared [2026] Passwords are the most commonly used method for user authentication. Passwords are so popular because the logic behind them makes sense to people…
Article Cloud Forensics: An Overview Introduction When discussing cloud forensics, we're actually talking about the intersection between cloud computing and network forensic analysis.…
Article OSSEC Introduction In this article we'll present the open source host-based intrusion detection system, which is needed if we would like to detect…
Article SCA, For a Secure SDLC Today's cyberspace has become a dangerous place for individuals and businesses. Vulnerabilities are exploited using sophisticated malware and…
Article Coding of Disassembler We have practiced much disassembling by using assembly de-compilation tools such as Reflector, ILSpy, etc. Although such tools offer many advantages…
Article HIDS—A Simplified Design Construct This article will briefly discuss the host-based intrusion detection system (HIDS) and an abstract approach that can be used to design an…
Article Beyond password length and complexity (or "Why PCI-DSS-Compliant Passwords Aren't Enough" or "PCI-DSS-Compliant Password Analysis Reveals One-Quarter Still Trivially Compromisable")…
Article Cyber Security During The Holidays Introduction It's the holidays, a key time for cybercrime that exploits the bad habits of unaware internet users. Attackers can defraud and monetize…
Article System address map initialization in x86/x64 architecture part 2: PCI express-based systems This article is the second part of a series that clarifies PCI expansion ROM address mapping to the system address map. The mapping was not…
Article 2014 - The year of changes The year 2014 will be a year of continued change in the ICT security world. It will be a year in which some very fundamental, unfinished business…
Article How the NSA Monitors Target Computers with Radar Wave Devices Introduction Germany's Der Spiegel has published a couple of disturbing articles on the NSA surveillance activities. The media agency has focused…
Article IT Security 101: Prevent Weak Passwords Passwords have been part of IT since long before the age of the desktop PC. However, now more than ever, systems administrators need to re-examine…
Article R00t This Box Here's a challenge, root this box. We found a vulnerable machine named Hackademic RTB1. The main challlenge is to root the box with admin privileges…
Article Disassembler Mechanized Part 2: Generating C# and MSIL code Introduction In the previous papers, we have showcased the essential configuration in terms of external DLL importing into the solution and NuGet…
Article Cyber Extortion Data Held Hostage In the digital age, data has incredible value. Not only for business purposes, but also for criminal intent. It draws the interest…
