Article The Major Security Issues Surrounding Virtual Personal Assistants Introduction As it has been reviewed in past articles, the Smartphone has become a prime target for any just about any types and kinds of hacks. One…
Article Malware Anti-Analysis Techniques-TLS and Process Hallowing In continuation to previous articles, this article will also show a more sophisticated approach used by malware to thwart anti-analysis techniques.…
Article Top 7 Tips to Secure Your Passwords In our current world where technology is finding its way into all aspects of our life, it is important to understand how to properly protect…
Article Pluck: 1 CTF Walkthrough Pluck: 1 is a vulnerable machine created by Ryan Oberto. It surfaced on VulnHub on 11th March 2017. It can be downloaded from…
Article How to Protect Your Right to Personal Identity in the Digital Era As stated by the FBI's Internet Crime Complaint Center (IC3), identity theft "occurs when someone appropriates another's personal information…
Article SambaCry: Hundreds of thousands of Linux systems exposed to a campaign that delivers cryptocurrency miner CVE-2017-7494 - A Samba seven-year-old remote code execution vulnerability At the end of May, security experts discovered a seven-year-old remote…
Article Learning Pentesting with Metasploitable3 – Part 2 Introduction: This is the second part in this series of articles on Learning Pentesting with Metasploitable3. We have prepared our lab setup in our…
Article More Bypassing of Malware Anti-Analysis Techniques For last few articles, we have seen how malware employs some anti-analysis techniques and how we can bypass those techniques. Now, let's raise the…
Article How Much Physical Security is Enough? When it comes to security, physical security is something which either takes a back seat or is not dealt with expertise. Though there are a lot of…
Article NAC-hacking - Bypassing network access control Conducting internal network penetration tests is always fun. There are vulnerabilities that easily help me to get to "keys of the kingdom" i.e.…
Article Troll 2 exploitation walkthrough This write-up will walk you through an exploitation of Troll 2 a boot2root VM; the challenge is designed my Maleus. You can download the VM from the…
Article Big Data Discrimination Introduced in 1997, the term "Big Data" has grown in popularity in the past years. [pkadzone zone="main_top"] Credit: IBM-Big-Data-Definitions by…
Article Which Malware are Specifically Designed to Target ISC Systems? Introduction – ICS malware, a rarity in the threat landscape At the end of May, security experts discovered a seven-year-old remote code execution…
Article Ew! Skuzzy CTF Walkthrough In my last article, we exploited a vulnerable machine from the vulnhub.com. That article must have given you some idea about hacking a machine…
Article Web Application Pentest Guide Part-I In this article, we are going to pentest a web application which was developed by HP for scanner evaluation purpose. We will be demonstrating the…
Article Introduction to Anti-Phishing Throughout the course of your day, think about all the clicking you do with your mouse. You click again and again while opening a never-ending…
Article Anti-Phishing: The Importance of Phishing Awareness Training Of all the precautions you need to take to keep your company afloat, planning for phishing attacks may be the most important by far. Phishing has…
Article Anti-Phishing: Measuring Phishing Awareness Training Effectiveness Do you train your employees to understand what phishing is, what it looks like and what to do if they realize they’ve been targeted? As you’re about…
Article Anti-Phishing: Browser Security Features For a common internet user, a web browser is one of the regularly used programs on the computer. Web browsers were once only used for displaying…
Article Web application pentest guide Part-II In last part of the article we have discussed the process of Requirement Collection, Information gathering and URL discovery now we will discuss the…
Article “Robin Hood” Ransomware and Psychological Manipulation Techniques 1. Introduction In 2016, the ransomware CryptMix gained popularity. CryptMix is based on source code of other infamous types of malware, such as…
Article Anti-Phishing: Threat Modeling and Impact Analysis Introduction Phishing is an efficient and cost-effective cyberattack. It has prevailed in cyberspace for over two decades. Phishing is commonly…
Article SAP SECURITY FOR CISO: SAP Attacks and Incidents If you read this series, you already know enough about SAP ERP Security to discover a real impact of having insecure SAP implementation. Recently,…
Article Learning Pentesting with Metasploitable3: Exploiting Elasticsearch Introduction: In the second part of this series, we discussed how we could gather information about our target to proceed with the exploitation…
