Article Wifite walkthrough part 1 In this article series, we will look at a tool named Wifite suitable for automated auditing of wireless networks. Most of you who have experience in…
Article End of SSL with POODLE In this article we will learn about the how SSL has reaches its end with various vulnerabilities. This article will also cover the recent…
Article Protecting WordPress Installations in an IaaS Environment Introduction In this article we're going to take a look at how to secure a WordPress installation against attackers in an IaaS virtual machine.…
Article Hacking ATMs: The New Wave of Malware Introduction In recent weeks, security experts at Kaspersky Lab have observed several attacks on Automated Teller Machines (ATMs) which were…
Article Wifite walkthrough part 2 In this article, we will look at cracking access points using WPA-PSK or WPA2-PSK using Wifite. If you have used tools like airodump-ng, aircrack-ng…
Article NAT-PMP Vulnerability In this article we will learn about the latest NAT-PMP vulnerability being discovered, which will affect around 1.2 billion SOHO routers worldwide.…
Article What is Online Defamation /a.k.a. Cyber Libel/ and How it Pertains to some Contemporary Legal Systems Preface: Balancing Freedom of Expression and Reputation Protection [pkadzone zone="main_top"] The right to freedom of expression – is there a better…
Article DDoS Security Policy Template to Prevent Massive Attacks It sounds like the 90s sci-fi horror thriller, "Tremors". Unfortunately, today, it could easily be a headline from the recent space of…
Article iOS Application Security Part 36 - Bypassing certificate pinning using SSL Kill switch In this article, we will look at how we can analyze network traffic for applications that use certificate pinning. One of the best definitions I…
Article Practical Shellshock exploitation – Part 1 Topics covered Introduction What is Shellshock? When can it be exploited? How to check if you are vulnerable Checking your bash version
Article Practical shellshock exploitation – part two Topics Covered Background Prerequisites Configuring SSH server Adding a new user Creating authorized keys for a specific client Adding au
Article Checklist for Next Gen Firewalls Due to the ever-changing threat landscape, a few security products such as firewalls, IDS/IPS, etc. are becoming obsolete because of the older…
Article Acceptable Use Policy Template for User Level Passwords As technology radically shapes the working environment of users across the globe, we are also responsible for keeping up with the security trends to…
Article Online Defamation Cases - Part I Introduction We all know how important it is nowadays to have a clean online record, almost as important as having no previous criminal offences.…
Article Online Defamation Cases - Part II Introduction We all know how important it is nowadays to have a clean online record, almost as important as having no previous criminal offences.…
Article How to Test the Security of IoT Smart Devices Just when we thought we had our applications secured, they pull us back in. No, this isn't a case of directory traversal bugs reappearing in IIS,…
Article StingRay Technology: How Government Tracks Cellular Devices StingRay Technology StingRay is an IMSI-catcher (International Mobile Subscriber Identity) designed and commercialized by the Harris Corporation.…
Article What Apple Knows about Us Introduction Every day, we share information about us or what we do on the Internet, and our information is targeted by multinational companies in…
Article All about AGDLP group scope for active directory - account, global, domain local, permissions Lately I've gotten a few questions from prospective clients about AD security group scope. I wanted to take a minute to give an overview of what…
Article Malware Threat Assessment Template for Financial Institutions Financial institutions conducting online brokerage, alternative payments, Internet banking and other similar activities have been facing a growing…
Article Understanding Disk Encryption on Android and iOS Introduction Mobile devices these days handle lots of sensitive information – messages, photos, contacts and more. The question about how this data…
Article The dos and don’ts of sharing sensitive business data All businesses handle sensitive data of one kind or another. Whether this is confidential client information, financial details, or even employee…
Article The Windows Kerberos Vulnerability: What You Need to Know A mythological three-headed dog was supposed to guard the gates of Redmond. But it turns out that Kerberos was very poorly implemented in numerous…
Article Penetration Testing Methodology for Web Applications Establishing a penetration testing methodology is becoming increasingly important when considering data security in web applications. The more we…
