Article The 6 D’s of Cyber Security In this article, we will discuss the 6 D's of cyber security and how you can implement them in your own cyber-defense strategy -- Deter, Detect,…
Article Sharkfest 2014 Part I The sharkfest challenge was organized by Wireshark University. There are five challenges related to the trace files analysis. In each challenge,…
Article Mumblehard Malware Introduction In this article, we will learn about a malware known as Mumblehard which is known for targeting Linux and BSD OS. This malware opens a…
Article Writing Python Compiled Modules Any code that you write utilizing any compiled language like C, C++, or Java can be integrated or imported into another Python script. This code is…
Article The Basics with Node.js Examples Introduction Public-facing APIs have tremendously increased in the last couple of years. Businesses have seen that sharing their business data with…
Article Introducing IDA scripting IDC scripting language is used by IDA disassemblers to programmatically manipulate data assembly and parameter in the loaded IDB database file.…
Article Windows functions in malware analysis - cheat sheet - Part 1 In this article, we will learn briefly about the various windows functions commonly encountered by malware analysts. Windows functions Accept: This…
Article iOS Application Security Part 42 - LLDB Usage continued In this article, we will look at some of the most important commands in LLDB to debug applications. If you have been following this blog series, you…
Article Interview: J. Wolfgang Goerlich, Cyber Security Strategist for Creative Breakthrough J. Wolfgang Goerlich is an influential leader and IT management executive with the ability to act as a cultural change agent, driving security…
Article How to Prevent a Domain Name Theft 1. Introduction The domain names may cost far more than a real estate. For instance, Facebook paid USD 8.5 million to buy fb.com. The high prices of…
Article 15 + Modules for Making Your Drupal Website Secure Drupal is the popular open-source content management system written in PHP. Although it only powers around 2.5% websites on the web, but it is still…
Article Dealing with bad characters & JMP instruction So far, in previous articles, we have learnt how to develop our own working exploit for the Echo Server program; we used two different payloads with…
Article ELF File Format Executable and Linking Format (ELF) is the object format used in UNIX-like operating systems. This post introduces the ELF file format in the big…
Article Windows Functions in Malware Analysis - Cheat Sheet - Part 2 In the Part 1 of the series, we discuss about windows functions that analysts commonly encounter during malware analysis. In this part, we will…
Article Case Study: Evading Automated Sandbox - Python PoC Introduction With the increasing of Sandbox technology usage, every penetration tester should be prepared to face it one day. While a plenty of…
Article APT28: Cybercrime or State-sponsored Hacking? Once upon the APT28 In October of 2014, the security firm FireEye published a report that revealed the existence of a group of Russian hackers,…
Article Asprox / Kuluoz Botnet Analysis Introduction Kuluoz, aka Asprox, is a spam botnet that emerged in 2007. It has been known for sending mass of phishing emails used in conjunction…
Article Interview: Chris Steel, Chief Solutions Architect at Software AG Government Solutions, Inc. Chris Steel is the Chief Solutions Architect at Software AG Government Solutions, Inc., a leading software provider for the US federal government.…
Article Insider vs. outsider threats: Identify and prevent In my last article, we discussed on a step-by-step approach on APT attacks. The origin of any kind of cyber-attack is through an external or an…
Article Cyber Threat Assessment Template For Special Forces The growing number of cyber threats highlight the risks that US critical infrastructure and Special Forces face. Once considered weak in nature…
Article Reverse Engineering of Embedded Devices Introduction This article is for colleagues who are interested in studying the reverse engineering of embedded devices starting from the…
Article Build A Simple Cloud Using the Open Hardware Technology Abstract Data storage has become a critical problem that facing computer scientists. Not only is it the huge amount of data; it is also also the…
Article Sharkfest 2014 Part II In the first part of our article, we solved the first three challenges, so in this article we will continue with rest of the challenges. CHALLENGE…
Article The seven steps of a successful cyber attack Advanced cyber attacks can now nest inside a network for more than 200 days on average before being discovered. In the infamous Sony Pictures…