Article Exploiting CVE-2015-8562 (A New Joomla! RCE) Introduction: A critical remote code execution(RCE) vulnerability was discovered in Joomla! websites. This is making a lot of noise because of the…
Article Malware Researcher’s Handbook (Demystifying PE File Part 2) Demystifying PE File - Continued As per our previous article we will continue on this article here by the rest of section of PE file. Those who…
Article Gift Card Fraud: A Profitable Business Gift cards are a very pleasant gift, especially during the holiday season, but they also can represent a good opportunity for crooks. When dealing…
Article 2016 Cyber Security Predictions: From Extortion to Nation-state Attacks Introduction Here we are, once again, to discuss the current cyber threat landscape, trying to predict possible evolutions of the menaces for the…
Article Domain-Based Message Authentication Reporting and Conformance Domain-based message authentication reporting and conformance, also known as DMARC, is a set up created by a group of organizations, having the…
Article A Beginner’s Guide to Setting Up an SNMP Pentest Lab Using Vyos and Pfsense SNMP often provides a great deal of information during the information gathering phase of a penetration test. It is often seen that SNMP protocol is…
Article Cracking damn insecure and vulnerable app (DIVA) : Part 1 What is DIVA? DIVA is a vulnerable Android application. According to their official website, "DIVA (Damn insecure and vulnerable App) is an App…
Article Cracking Damn Insecure and Vulnerable App (DIVA) – Part 2: In the previous article, we have seen the solutions for the first two challenges. In this article we will discuss the insecure data storage…
Article Cellphone Surveillance: The Secret Arsenal StingRay and the cellphone surveillance In a previous post, I detailed the technologies used to track mobile devices, with a specific reference to…
Article A Case Study of Information Stealers: Part II Introduction: In the second part of this analysis, we will be exploring how Pony steals data and how it sends it to the C&C server. We are equally…
Article Cracking Damn Insecure and Vulnerable App (DIVA) – part 3: In the first two articles we have seen the solutions for the first 6 challenges in DIVA. In this article we will discuss the "Input Validation…
Article BlackEnergy Used as a Cyber Weapon Against Ukrainian Critical Infrastructure Introduction Recently the researchers at ESET firm spotted a new wave of malware-based attacks that are targeting media outlets and energy companies…
Article IoT Security Awareness The world of interconnected "smart" devices is here. Seizing the opportunity for Internet of Things (IoT) devices are manufacturers, retailers in…
Article Spear phishing: Real life examples Spear phishing is a more selective and effective scheme than traditional phishing plots. This technique has raised e-scams to a new level and has…
Article Creating your Own Simple Exploit Module for a Remote Code Execution in Web Apps To all readers, a zip file containing the code used in the article can also be downloaded here: [download][pkadzone zone="main_top"] MSF is one of…
Article Digital forensics models In the increasingly dynamic world of technology, the number of smart devices (computers, smartphones) is dramatically increasing leading to a huge…
Article Why ITIL, COBIT and Other Non-Infosec Based Frameworks Are Infosec’s Best Friends As a current or aspiring security professional, you will know of a range of information security frameworks and enablers. These might include…
Article SQL injection analysis It is one thing to be able to execute a simple SQL injection attack; it is another to do a proper investigation of such an attack. Unfortunately,…
Article Web Application Firewall 101: How to Prevent Web Hacking At this point, it's is safe to say that web hacking is a pretty rampant concern. It almost seems that on a weekly basis readers are inundated with…
Article Windows logging for PCI-DSS Various organizations strive to be PCI-DSS compliant, and they often have a hard time deciding what to log from Windows Systems so as to retain all…
Article SAP Afaria Security: Attacking Mobile Device Management (MDM) Solution It is known that the BYOD trend is changing the way enterprises are managed, delivered, and, most importantly, secured. While BYOD has its benefits,…
Article SAP Cybersecurity History After we got to know what is SAP and why SAP Security is important, we are ready to take the next step, to learn a history of SAP Security and the…
Article Why Does No One Talk about BYOD Anymore? The emergence of BYOD has been a revolution in the work world. For the first time, employees were able to use their own preferred, personal piece of…
Article EINSTEIN System is Still Too Immature to Protect Fully the US Government Networks On Jun 2105, the US Government announced that a major data breach likely backed by Chinese hackers caused the exposure of data belonging to millions…
