Article Social Engineering - We Start Playing If hacking is known as entering a computer system through a breach of security, social engineering can be referred to as an intrusion into the mind.…
Article Social Engineering 2—What Do We Have To Watch? In my previous article we focused on providing an introduction to social engineering. For the purposes of this article, I want readers to consider…
Article WebDAV Application DLL Hijacking Exploitation In this article, I will explain WebDAV application DLL hijacking exploitation using our all time favorite, Metasploit. Here we will cover the module…
Article Defending the Internet with Project Meshnet Introduction Topics related to Internet censorship have been debated frequently in the last few years. The main purpose of most Internet censorship…
Article Chapter 10 - Virtualization Security Virtualization brings significant value to business managers and engineers attempting to keep pace with business pressure for additional servers. It…
Article Sulley Fuzzing Framework Intro 1. Sulley Fuzzing Framework Sulley is python fuzzing framework that can be used to fuzz file formats, network protocols, command line arguments, and…
Article IBM Rational Appscan Part 1 IBM Rational Appscan is one of the most widely used tools in the arena of web application penetration testing. It is a desktop application which…
Article A Review of the eSoft InstaGate UTM Appliance It can take an organization several years to build out an information security infrastructure capable of providing them with sufficient protection.…
Article Defcon 20 Day 3 Review Defcon day 3 started with one of the most awaited talks of Defcon 20. It was the talk "Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2" by…
Article Reversing Malware Loaders - The Matsnu-A Case The AV industry is growing every day along with the underground industry that produces all types of malware from simple file infectors to more…
Article Achieving Anonymity with Tor Part 1 We all know that Tor enables us to be anonymous on the Internet. In this article we'll look at how to achieve this and truly know what we're up…
Article Risk Management in Agile In this article, we will explore the business concerns of Agile methodologies in project management. Recently, I read an article by Chris Matts and…
Article Introduction to HTTP Response Headers for Security Hyper Text Transfer Protocol (HTTP) is a stateless protocol. The implication of this is, at the protocol level there is no record of what happened…
Article The Evolution of a Technical Information Security Professional During my years of work as a consultant and trainer in the information security world, I've noticed a few patterns that usually exist in those who…
Article Interview with Project Leader Sebastian Poeplau Introduction Malware threats have become very common these days. In the past, many honeypots have been created to detect malware propagation over…
Article Achieving Anonymity with Tor Part 2: Proxies and DNS servers 1. Using Burp with Tor So far we've looked at how to set up our web browser to use Privoxy, which in turn uses Tor to achieve anonymity on the…
Article New Linux Distro for Mobile Security, Malware Analysis, and Forensics Yes, you read the title right and I hope I just grabbed your attention! A new GNU/Linux distribution or distro designed for helping you in every…
Article IBM Rational Appscan: Part 2 The first part of this article focused on configuring a scan in Rational Appscan, and as mentioned earlier, it's important to configure the scan…
Article Achieving Anonymity with Tor Part 3: Torbutton and Tsocks 1. Introduction In previous articles: Part 1 and Part 2 we extensively used the Tor Browser Bundle that helps us ensure our anonymity. With the Tor…
Article Achieving Anonymity with Tor Part 4: Tor Relays 1. Introduction We've seen that Tor network is constituted from Tor nodes, through which we tunnel our traffic to reach anonymity. So far we didn't…
Article Achieving anonymity with Tor Part 5: Tor bridges and hidden services Running a Tor bridge is essentially the same as running a Tor relay, as far as configuration is concerned. We already mentioned that the only…
Article JBOSS Exploitation JBoss Application Server is an open-source Java EE-based application server. JBoss is widely used and is deployed by many organizations on their web…
Article Sneak Peak into the Art of Exploitation It's a well-known saying that gathering maximum information about the enemy is half the work done in defeating him. The same holds true when you are…
Article A Review of Selected Cryptographic Libraries Cryptography is the science that deals with the problems of concealing information by encrypting it, and contains the set of methods for achieving…
