Article Clickjacking, Cursorjacking & Filejacking Same origin bypasses using clickjacking Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of…
Article Defense in depth is dead; Long live defense in depth! Defense in depth is dead. The way you're thinking about data center security is outdated. Security started changing long before Sony, Target and the…
Article Tunneling, Crypto and VPNs 1. Introduction The idea of Virtual Private Network (VPN) is to simulate a private network over a public network. A VPN tunnel can be used to…
Article Taking Control of the Process In the previous article, we learned about the basics of the Stack Based Buffer Overflow, such as analyzing the stack, creating breakpoints and…
Article HTML5 security: Local storage In a previous article of mine, I discussed Cross Domain Messaging in HTML5. This article walks you through another feature, called local storage,…
Article Defeating Conundrums: Solutions to Net-Force Internet CTF Challenges About Net-Force Internet Challenges These challenges require that you provide the correct passwords that are revealed to you after solving them. The…
Article Security features and risks in Google Chrome Today a web browser has become a very important piece of software in our daily life. It is an application that finds and displays the web pages. Be…
Article Static malware analysis Starting here, I would like to share the results of my recent research into malware analysis. We will begin with some basics and proceed to advanced…
Article The importance of cyber hygiene in cyberspace The drastic increase in the frequency of cyber attacks on financial systems and the healthcare industry (both large and small scale industries) have…
Article Overwriting the Stack In previous articles, we got to know the basics of the Stack Based Buffer Overflow and changing the address in the run time by modifying the…
Article Http verb tempering: bypassing web authentication and authorization What is an HTTP VERB? Hypertext transfer protocol (HTTP) gives you list of methods that can be used to perform actions on the web server. Many of…
Article Debugging in the Cloud In the world we live in, there are different kinds of professions where debugging has been a vital piece of knowledge we must have in order to do…
Article Why Artificial Neural Networks (ANN) Technology Offers a Promising Future in IDS/IPS Intrusion systems have been the subject of considerable research for decades to improve the inconsistencies and inadequacies of existing methods,…
Article Spearphishing: A New Weapon in Cyber Terrorism Introduction: Spear phishing attacks Spear phishing and its evolutions like the watering hole attack represent one of the most insidious attack…
Article Defending Against Web Attacks: X-XSS Protection In the previous article, we have seen how we can defend against click jacking attacks using the X-Frame-Options header. In this article, we will…
Article Nmap Cheat Sheet 5: The Final View of a Ninja Pentester As we discussed in the last topic of our Nmap Series, this will be our final touch for the cheat sheet. Here we will try to cover most of the topic…
Article “Phishing” is the Name of the Game Recent Trends Intro to the Concept Phishing is an Internet identity fraud that a malicious actor employs to dupe unsuspecting online users into…
Article Fingerprinting: Identifying applications When performing a Web Application Security Assessment, an important step is Fingerprinting which allows for further exploitation by an attacker. So…
Article How to acquire a user’s facebook credentials, using the credential harvester attack In this article you will see how you can obtain a user's Facebook credentials without him suspecting a thing. There are going to be provided two…
Article Dynamic Analysis Techniques As we have covered the malware analysis basics with static techniques here, this post is all about performing the basic analysis of malware using…
Article USBkill Anti-Feds Script Recently, a simple script has been presented that can help someone to brick a computer in case of emergency. This script was defined as a switch…
Article VENOM Vulnerability Opens Millions of Virtual Machines to Attack The VENOM vulnerability A security vulnerability recently patched is scaring the IT industry, its name is VENOM, and it is coded as CVE-2015-3456.…
Article Cracking 64bit Binaries Keygenning is a process of finding a valid key for a program. It is used for cracking/piracy. Most of the cracking has been documented on x86, there…
Article Format String Bug Exploration ABSTRACT The Format String vulnerability significantly introduced in year 2000 when remote hackers gain root access on host running FTP daemon which…
