Article /dev/random: Pipe CTF Walkthrough In this article, we will try to solve another Capture the Flag (CTF) challenge which was posted on VulnHub by the Segi. The downloadable URL of the…
Article Massive Petya Attack: Cybercrime or Information Warfare? Hits organizations in several states Just five weeks after the WannaCry massive attack, a new wave of ransomware-bases attack hit targets in various…
Article Learning Pentesting with Metasploitable3: (Exploiting WebDAV) Introduction: In the third part of this series, we discussed how to exploit Metasploitable3 using a vulnerability in Elasticsearch 1.1.1. As…
Article Trend Micro OSINT Challenge In this article, we are going to solve all three OSINT challenges from Trend Micro CTF.[pkadzone zone="main_top"] Challenge 1: Today you received an…
Article Mobile Systems Vulnerabilities With a significant increase in Android malware and targeted Wi-Fi attacks over the past few years, consumer and enterprise mobile devices are more…
Article Amazon Phishing Template: Example and Preventing Attack What to do if you’ve clicked on an Amazon Phishing Email Amazon is the world's largest online retailer and a prominent cloud services provider.…
Article Phishing Checklist for Browsing Emails Phishing emails often look authentic and can trick you into believing they are legitimate. It’s becoming more and more difficult to spot fraudulent…
Article Exploiting Windows Authentication Protocols: Introduction SMB relay attack Exploiting the weak Windows authentication protocols is on the top of the list for any adversary, because it mostly relies on a…
Article Learning Pentesting with Metasploitable3: Exploiting WordPress Introduction: This is part 5 in the series of articles on learning pentesting with Metasploitable3. In the previous article, we discussed how WebDAV…
Article More Security Issues Surrounding Virtual Personal Assistants Introduction Our last article reviewed some of the Security issues surrounding the use of the Virtual Personal Assistant. Some of the Security…
Article Learning Pentesting with Metasploitable3: Exploiting WebDAV In the third part of this series, we discussed how to exploit Metasploitable3 using a vulnerability in Elasticsearch 1.1.1. As mentioned in one of…
Article Vault 7 Data Leak: Analyzing the CIA files Vault 7 revealed alleged CIA tools for targeting Windows, Linux, routers and Wi-Fi-enabled devices. This article breaks down key releases since…
Article AlphaBay Market: What is the Impact of the Cyber-criminal Underground? The AlphaBay Market was shut down by the law enforcement AlphaBay Market was the largest black marketplace on the Dark Web, it was an excellent…
Article Practical android phone forensics Today's world is Android World. Almost 90% of devices are running on Android, and each one of us is using Android in some or the other way. There…
Article Reverse Engineering – LAB 3 Software: IDA Pro Free (v 5.0) DLL Name: Test.dll[pkadzone zone="main_top"] Story about DLL: This DLL is reportedly scanning the system for running…
Article Ways to Stay Secure When using File Sharing When sharing small files over the Internet, you can always attach them to an email but, when the file is large, it may not be possible to send it…
Article The Ins and Outs of Email Security Awareness Email has been used as a medium for remote communication even before the World Wide Web and other technological breakthroughs came into light.…
Article SecOS: 1 CTF Walkthrough In this article, we will try to solve another Capture the Flag (CTF) challenge which was posted on VulnHub by PaulSec. According to the information…
Article Petya Ransomware Initial Analysis The document below is an initial level analysis of the recent Petya Ransomware (2017). We will also discuss an analysis of a dll variant of the…
Article Feature Phone Forensics Introduction A feature phone can be described as a wireless mobile device that has more features than a standard cell phone, but limited…
Article The concept of mobile phone The digital forensic community is striving hard to stay abreast of the current state of the art in the constantly changing technologies which we use…
Article The Case for Annual Security Awareness Training Training Annually vs One-Off Training Anything short of annual IT security awareness training, at a minimum, is difficult to consider a legitimate…
Article Top 20 Security Awareness Tips & Tricks Top 20 Security Awareness Tips & Tricks Keeping your data safe and far away from the clutches of the hacking community is a need of the hour in…
Article Reverse engineering a JavaScript obfuscated dropper Nowadays one of the techniques most used to spread malware on windows systems is using a JavaScript (js) dropper. A js dropper represents, in most…
