Article Chapter 11 – Identity management and access controls Access controls help us restrict whom and what accesses our information resources, and they possess four general functions: identity verification,…
Article Securing the Software Development Environment In the February 2012 edition of Computer, a sidebar to an article on "Web Application Vulnerabilities" asks the question: "Why don't developers use…
Article ESET Rule the Code - CrackMe Challenge Part 1: The Unpacking Process 1. Presenting the Problem The CrackMe challenge was first observed on the ESET CrackMe web page, which looked like the the picture below:[pkadzone…
Article CrackMe Challenge Part 2 The First Message Box Let's start our unpacked program with OllyDbg, run it, input eight A's into the Name and Key 1 field and press CHECK STAGE 1.…
Article CrackMe Challenge Part 3: The Logic Behind the First Challenge If we take our predicate that we've seen in the end of part 2 into account and input at least 64 bytes (0x40) into the Key 1 field and leave the…
Article WordPress Security 1. Introduction There are numerous tools available when checking the security of the WordPress Content Management System (CMS). In the rest of the…
Article Social Media & Security Risk Social media is the two way communication in Web 2.0 and it means to communicate / share / interact with an individual or with a large audience.…
Article Crack Me Challenge: Final Edition Part 6 [pkadzone zone="main_top"] [pkadzone zone="main_top"] The code for logical segment 6 is as follows: 0040181F |. B9 10000000 mov ecx,10
Article Incident Response Planning Boring topic? Maybe. But if you believe what Gartner has to say: "Through 2016, 75% of CISO's who experience publicly disclosed security breaches,…
Article The browser exploitation framework (BeEF) – Part 1 We can categorize the BeEF social engineering framework as shown in the picture below: [pkadzone zone="main_top"] [pkadzone zone="main_top"] We
Article Human Resource Management in Agile - Part 2 Part one of this article series can be found here: Human Resource Management in Agile Part 2. From the previous article you could find out what…
Article Improving Mobile Security with Santoku Mobile security has been gaining popularity in recent times. Many mobile-based attacks are being discovered as the mobile industry grows more…
Article The Browser Exploitation Framework (BeEF) – Part 2 The first article in this series can be found here: The Browser Exploitation Framework (BeEF) – Part 1. 1. Using the Modules In this section we'll…
Article Bank Fraud & ATM Security ATMs Fraud Trends According to the last 2011 survey (*) in 27 European countries, card skimming is still the most prevalent crime, however 61% of…
Article Human Resource Management in Agile - Part 4 In the previous parts of our discussion we focused on internal team building and communication within the team and self-motivation. Today we will go…
Article Free Web Application Scanners, Part 1 With the rapid increase in technology usage, every company is desperate to provide their services over the Internet. They believe that by offering…
Article It Is Simple, If I Can Compromise Your Wireless Router, I Own Your Network! Period! It is convenient, it is a necessity, and some devices give you no other option: wireless networking is all around us. We all use wireless networks…
Article Windows Vulnerability Assessment Nowadays every enterprise, be it small or large, depends on information technology (IT) for some or most of its operations, and with IT; comes…
Article Best Practices When Creating Passwords I understand perfectly well that the InfoSec website has often discussed the use of good algorithms for hashing passwords. But these articles were…
Article Drupal Security Notes Drupal is one of the most popular free and open source web application frameworks. Drupal is almost infinitely extensible through not only various…
Article How to Break Simple Software Protections Some software developers are really lazy when it comes to protecting their products, and in some cases, the protection they implement (just like…
Article Installing and Running the Honeypot This article is in continuation of Part 1 of the series on Ghost USB Honeypot. Malware threats have become very common these days and hence the need…
Article Backups. What will happen to your data? If you woke up tomorrow morning and found that your computer or portable device wouldn't turn on, or had been stolen, what would you do? I'm a…
Article Noobz guide for setting up a vulnerable lab for Pentesting Most of the people I know who are new to penetration testing want to hone and enhance their skills, but they have problems like: They don't have a tar
