Article Website Hacking Part V Introduction In this part of the Website Hacking series we are going to take a look at how to minimize damages from XSS attacks considering our web…
Article 2015 Security Predictions: The Rise of Hacking Campaigns Introduction With just a few days until the end of 2014, it's time to analyze what's happened in the last twelve months. I would like to analyze…
Article Website hacking, Part VI: Input validation and filtering in PHP In this part of the series, we are going to examine the different ways to escape HTML characters in PHP in order to add security to your web…
Article Antenna theory for wardriving and penetration testing Wardriving is an activity in which a person seeks wireless access points in moving vehicles with high gain antennas mounted on the top. Usually,…
Article Ethical Hacking Interview Questions If you’ve got hacking skills, you can turn your ethical hacking into a career. Ethical hacking is the term given to penetration testing and…
Article Clean up Your WordPress Site after Hack and Secure it against Future Threats WordPress is the most popular CMS (Content Management System) available nowadays online, used by the vast majority of all sites. If you have a look…
Article Android Application hacking with Insecure Bank Part 2 In the previous article, we looked at setting up a mobile pentesting platform for Android applications. By now, you must have set up an emulator…
Article Setting up a pentest Lab with pfSense in virtualBox Penetration testing requirements often force penetration testers to do both external as well as internal assessments. This article covers the…
Article Equation Group APT and TAO NSA: Two Hacking Arsenals Too Similar The Equation Group In February 2014, the team of experts from Kaspersky Lab announced the discovery of a hacking group operating since 2001 that…
Article Ethical Hacking Dual Certification Interested in an online course for hacking? A dual training CEH boot camp?[pkadzone zone="main_top"] Our most popular information security and…
Article Android Application hacking with Insecure Bank - Part 3 In this article, we will look at attacking components in Android applications, starting with activities. But first, it is essential to understand…
Article Android Application hacking with Insecure Bank Part 4 In this article, we will look at a very handy framework for analysis of android applications named Drozer. Drozer is a very useful tool as it…
Article Nmap Cheat Sheet 5: The Final View of a Ninja Pentester As we discussed in the last topic of our Nmap Series, this will be our final touch for the cheat sheet. Here we will try to cover most of the topic…
Article APT28: Cybercrime or State-sponsored Hacking? Once upon the APT28 In October of 2014, the security firm FireEye published a report that revealed the existence of a group of Russian hackers,…
Article n00bz CTF Challenge #2: Practical Website Hacking In the second edition of our n00bs CTF Labs, we've created 13 small challenges to test your web app hacking skills. The challenges are based on…
Article Maligno: An Open Source Pentesting Tool Today I want show you a new tool that could help in your penetration testing activity. Maligno is an open source penetration-testing tool under the…
Article CTF #2: Practical Web Hacking Winners Congratulations to our winners and a big shout out to everyone who participated in our second CTF: Practical Website Hacking! Check out the winning…
Article What's Worse: APTs or Spear Phishing? In this article, we are going to look into advance persistent threat (APT) and spear phishing, the role of spear phishing in APT attacks, the level…
Article Checklist for Hiring a Good Web Penetration Tester or Web App Security Consultant The task of a web security tester or penetration tester is of course to audit the security of the web applications, web services, and web servers in…
Article Hacking ZigBee networks What is ZigBee? Internet of Things (IoT) is what most experts consider as the next step of the Internet revolution where physical objects are…
Article Virtual Assistants: Here to Stay or Data Security Risks? Cardiff University and IBM have been working on creating a new virtual assistant (VA) software that can interact with its owner in a more human-like…
Article Pentesting SAP applications : An introduction SAP (Systems-Applications-Products) is a software suite that offers standard business solutions; it is used by thousands of customers across the…
Article A Beginner’s Guide to Setting Up an SNMP Pentest Lab Using Vyos and Pfsense SNMP often provides a great deal of information during the information gathering phase of a penetration test. It is often seen that SNMP protocol is…
Article Web Application Firewall 101: How to Prevent Web Hacking At this point, it's is safe to say that web hacking is a pretty rampant concern. It almost seems that on a weekly basis readers are inundated with…
