Article Filter Evasion: Part 1 1. Introduction First we must talk about vulnerabilities. We know that vulnerabilities that are present in any kind of software can be exploited by…
Article Filter evasion: Part 2 For part 1 of this series, please click here. Methods for bypassing a filter There is a number of different attack strings that can be used to…
Article Estimating Projects, Part I Each of us who has ever worked in any programming project has had to deal with one of the biggest problems we face when creating projects. It is, of…
Article Estimating Projects, Part II For part 1 of this series, please click here. In the first part, our discussion of the estimation focused primarily on the general principles of…
Article Investigating the Crime Scene, Part 1: A Brief Introduction to Computer Forensics and Autopsy Recommended reading http://www.thestudymaterial.com/presentation-seminar/computer-presentation/239-computer-forensics-presentation.html?showall=1…
Article Transforming your Android Phone into a Network Pentesting Device Lester: Hey Nash, are you scanning our school's network with just your smartphone? Nash: Well, yes I am! I'm using a network penetration suite just…
Article x86 Assembly Language Applicable To Reverse Engineering: The Basics – Part 2 For part 1 of this series, please click here. Introduction [pkadzone zone="main_top"] We saw in the first article an introduction to the most comm
Article Hacking SVN, GIT, and Mercurial We all know that when programming with a small or large team, having a revision control in place is mandatory. We can choose from a number of…
Article Free Web Application Scanners, Part 2 In the first part of this article, we have seen the need for free web application scanners and also we have looked into a few tools which are…
Article Legal and Technological Concerns Regarding the Use of BIOS Anti-theft Technologies 1. Introduction In 2006, a laptop containing personal and health data of 26,500,000 veterans was stolen from a data analyst working for the US…
Article Inside Android Applications By the end of 2012, the number of Smartphone shipments around the world will explode to nearly 668 million units, and the Android operating system…
Article Network Topology 1. Introduction Whenever we're doing a penetration test, it's good to figure out the topology of the network we're testing. We can't figure out the…
Article Computer Network Diagnostics, Part 1 Sometimes, at the beginning of my adventure to the Internet, I was wondering how it is that I have a local area network and Internet access. See for…
Article The Internet Underground: Tor Hidden Services Some people think onion routing or the Tor network is for criminals and people with something to hide. Well, they are half right. The Tor network…
Article The easier form of hacking: Social engineering When we talk about hacking, especially in today's world, we hear the media giving us the stories of how hackers hack into a database and steal…
Article Wfuzz and WebSlayer 1. Introduction WfFuzz is a web application bruteforcer that can be considered an alternative to Burp Intruder as they both have some common…
Article Backtrack 5 R3 Walkthrough - Part 3 In this article we will we look at some of the other new tools that were added into Backtrack 5 with the release of its latest version R3. Wifite…
Article Wordfence: Security Plugin for WordPress Wordfence is a free security plugin for WordPress. Security "plugins" for Wordpress are often highly criticized as many may give a false sense of…
Article Executable Code Injection Introduction Code injection is a process of injecting executable code in a running process or static executable. Executable code in web applications…
Article Password Auditing on Active Directory Databases In this article we explore the options to acquire information from an online or offline Microsoft Active Directory database and its encryption keys.…
Article Analyzing malicious JavaScript Nowadays there are various threats in the wild that want to get malware installed on victim operating systems. Most of them use some kind of social…
Article Environment for Malware Analysis Introduction Before trying to analyze any kind of malware, we need to have a proper environment set up, so we can be most efficient and collect the…
Article Backtrack 5 R3 Walkthrough, Part 4 DHCPig DHCPig is a very nice and handy little tool used to carry out an advanced DHCP exhaustion attack. It does this by grabbing all the IP…
Article Chapter 12 – Applications of Biometrics Passwords are not secure and are useless as an access control… at least that is what many vendors and security consultants try to tell managers…
