Article Android exploitation with Kali In this tutorial, we shall see how to create an apk file using the tools offered by Kali Linux. Kali Linux is a Linux distro with a preset of…
Article The Ultimate Guide to EC-Council Certifications: Overview & Career Paths Of the top ten most valuable companies, four of them are in technology and the rest are based on technology. Out of this explosion of tech and the…
Article Tiredful API Part One In this post, I will explain how to solve Tiredful-API. Let's start. What is TIREDFUL-API TIREDFUL-API is an intentionally designed broken web…
Article ZLAB MALWARE ANALYSIS REPORT: RANSOMWARE-AS-A-SERVICE PLATFORMS Introduction Over the years, the diffusion of darknets has created new illegal business models. Along with classic illegal goods such as drugs and…
Article Tiredful API Part Two This is the 2nd part of the solving Tiredful-API series. I hope you have gone through the 1st part. If not, please go through it. Tiredful…
Article Inspeckage: Dynamic Assessment Tool for Android If you are pen-testing Android applications, you will need to monitor/check many things at the same time. While doing dynamic analysis, one must…
Article Guiding principles in information security A principle which is a core requirement of information security for the safe utilization, flow, and storage of information is the CIA triad. CIA…
Article Top 10 Open-Source Security Tools Released by Tech Giants We have always wondered how tech giants have been able to keep their security so tight? Do they use the same tools that are available for the rest…
Article Kali reporting tools Penetration testing report is the key deliverable in any security assessment activity. In Penetration testing, the final deliverable is the report…
Article Tools and resources to prepare for a hacker CTF competition or challenge CTF or Capture the Flag is a traditional competition or war game in any hacker conferences like DEFCON, ROOTCON, HITB and some hackathons. CTF games…
Article How to Prevent BEC with Security Awareness Training Introduction The crime of business email compromise (BEC), which targets a business to facilitate financial theft, is expected to cost business more…
Article 5 Business Email Compromise Attack Examples We Can Learn From Business email compromise (BEC) is a type of phishing scheme where the cyber attacker impersonates a high-level executive (CIO, CEO, CFO, etc.) and at
Article Use of Various Windows Utilities to Manage ICS Processes Introduction Target Audience: Operational Technology (OT) operators of industrial control systems (ICS) that do not have information technology (IT)…
Article Business Email Compromise (BEC): How To Avoid CEO Fraud Introduction Phishers, especially the type that specialize in high-level CEO fraud, are often large criminal organizations with expertise in…
Article 6 Days Lab 1.1 CTF Walkthrough In this article, we will attempt to complete another Capture the Flag (CTF) challenge which was posted on the VulnHub website by "CanYouPwn.Me."…
Article MyPublicWiFi – A Windows Utility to manage ICS Overview: Internet Connection Sharing (ICS), a feature which has been available in Microsoft Windows Operating System since the deployment of…
Article Configuration of Anti-Virus and Anti-Malware Software within an ICS Environment Anti-virus/anti-malware (AV) software is a critical component or layer of protection in securing your Industrial Control System (ICS) from external…
Article Log analysis for web attacks: A beginner's guide It is often the case that web applications face suspicious activities due to various reasons, such as a kid scanning a website using an automated…
Article Null byte injection in PHP The null character is a control character with the value zero. It is presented in many character sets such as ASCII (American Standard Code of for…
Article Android Penetration Tools Walkthrough Series: Androguard Today, much of our personal and financial information is tied to mobile and web apps. Penetration testing is an ever-growing enterprise in the tech…
Article CGEIT Domain 2: Strategic Management [DECOMMISSIONED ARTICLE] NOTE: This article reflects an older version of the CGEIT Exam -- please see the current CGEIT Certification page for the most up-to-date information.
Article Cooperation between Humans and Artificial Intelligence in the Name of Security Artificial Intelligence (AI) - Machine Learning (ML) - Deep Learning (DL) Artificial intelligence as a term dates back to the 1950s, but only…
Article 4 Ways to Integrate BEC Prevention Strategies into Your Organization Business email compromise (BEC), an international fraud scheme, is seemingly forever on the rise and no company is safe from attack. It’s therefore…
Article How to Prevent BEC With Email Security Features Business email compromise (BEC) has bilked unsuspecting institutions around the world for more than $9 billion dollars. A whopping two-thirds of…
