Article YARA: Simple and effective way of dissecting malware In this article, we will learn about the YARA tool, which gives a very simple and highly effective way of identifying and classifying malware. We…
Article Understanding the Cloak & Dagger Attack: Overview & Tutorial The Cloak and Dagger Attack is a method dealing with mismatched permission issues to access certain features on an Android device up to version…
Article Advance Persistent Threat – Lateral Movement Detection in Windows Infrastructure – Part I Techniques to detect Lateral Movement in the Windows Systems In this article, we will focus on the conventional techniques being used by the threat
Article Top 10 Things to Look for or Avoid When Choosing a Pen-Testing Vendor The penetration testing market is currently booming and will continue to do so; in fact, the international company MarketsandMarkets, a provider of…
Article Broadpwn Wi-Fi Vulnerability: How to Detect & Mitigate It can be easy to think our mobile devices are more secure than they are. However, that is just not the case. In the last three years, there have…
Article Basic Principles of Ensuring iOS Apps Security The development of any mobile application requires serious attention to privacy and security. This is especially important for applications that…
Article An introduction to penetration testing Node.js applications In this article, we will have a look at how to proceed when penetration testing Node.js applications or looking for Node.js specific issues. Node.js…
Article Comparing Mobile & Web Application Penetration Testing Pentesting mobile applications is quite different from pentesting web applications. Comparing the two processes lets us make better choices for our…
Article QuadRooter Attack Overview: Vulnerabilities, Methods & Mitigations QuadRooter is a threat vector specifically affecting Android devices. The common vulnerabilities and exposures (CVE) for these security issues are:…
Article How to Use AlientVault SIEM for Threat Detection & Incident Response Malware comes via attachments, malvertising, man-in-the-middle, man-in-the-browser, social engineering and countless other vectors. Even the most…
Article Expert Tips on Incident Response Planning & Communication An organization's ability to recover quickly in the wake of a cyberattack is directly proportional to their incident response capabilities. In…
Article How to Complete a Vulnerability Assessment with Nessus In this lab, we will show you how to conduct and analyze a vulnerability risk assessment using the popular vulnerability scanning tool Nessus. We…
Article 5 New Threats Every Organization Should be Prepared for in 2018 It is no wonder that 2017 was a year full of surprises in the world of cybersecurity. So far in 2018, we've seen new threats appear, and relatively…
Article Penetration Testing Methodology for Mobile Applications: 5 Key Steps The astonishing growth in mobile technologies has introduced many new vulnerabilities. According to findings from Verizon's inaugural Mobile…
Article 10 Steps to Detect Lateral Movement in a Data Breach Many enterprises spend millions of dollars on solutions that promise to bolster their security. However, much less focus is placed on the ability to…
Article Computer Forensic Report Writing and Presentation Introduction The demand for inter-networking keeps increasing amongst users and organizations where access to and sharing of data is a daily…
Article A guide to preventing common security misconfigurations Security misconfigurations are still part of OWASP’s Top 10 Security Risk list. This indicates they have been a persistent issue over the years.…
Article Wireshark: An open-source forensic tool "Today we are at a defining moment in the evolution and growth of the Internet. Large-scale data breaches, uncertainties about the use of our data,…
Article Malicious Cryptominer in Wireless Networks Introduction The Cyber attacker is leveraging covert and malicious ways to produce digital money — often using Crypto miners. This clever technique…
Article Computer Forensics: Embedded Device Analysis and Examination Steps Introduction Nowadays, digital devices are everywhere and everything is connected via the Internet. These devices include digital watches, gaming…
Article Nmap cheat sheet: From discovery to exploits - Part 1: Introduction to Nmap As always during reconnaissance, scanning is the initial stage for information gathering. What is reconnaissance? Reconnaissance is to collect as…
Article Nmap cheat sheet: From discovery to exploits, part 2: Advance port scanning with Nmap and custom idle scan This is our second installment of the Nmap cheat sheet. Basically, we will discuss some advanced techniques for Nmap scanning and we will conduct a…
Article A Guide to XML File Structure & External Entity (XXE) Attacks Modern forms of markup languages such as HTML, XML and XHTML are mostly used in designing web pages. XML, which stands for Extensible Markup…
Article How to Set Up a Web App Pentesting Lab in 4 Easy Steps A pentesting lab can be a small entity used by one security tester, consisting of one or two computers; or it could be a larger set of networked…
