Article Getting Domain Information 1. Introduction When analyzing malware we can gather a lot of information just by identifying the IP addresses and domains the malware software…
Article Investigating the crime scene part 2: Recovering files with autopsy For part one of this series, please click here. So, in the previous part we saw how we can set up the environment for finding clues and also how to…
Article Introduction to Anonymizing Networks – Tor vs I2P The Right to Anonymity Every operation made in cyber space, every visited web site, and every web service accessed, leave traces of the user's…
Article Web Vulnerabilities Explained Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF,…
Article Eight Handy Security Tools for a Novice Here is a compilation of a few tools that we need to be aware of. The power, the performance and the capabilities of these tools are limited only to…
Article Analysis of Malware Samples with the Immunity Debugger API Introduction Immunity Debugger is a debugger which is very much like Ollydbg. In this tutorial we'll present the Python API that Immunity Debugger…
Article Keeping Your Social Media Accounts Safe Whether you're an average Internet user, or an IT pro who checks Twitter before getting out of bed and goes through several SSH sessions before the…
Article Owasp ZAP [highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our OWASP Top 10 Training course OWASP Top 10 Training. [/highlight]…
Article Low fidelity prototyping: The cheapest corrections in design stage ever! Agenda: 1. Prototyping – what is it? 2. The design process. 3. Showing the project to client before developers will write any line of code. 4.…
Article Exceptions In Injected Code Injection and API Hooking - When you don't know enough to know that you are getting it wrong... Code Injection and API hooking techniques are…
Article Privacy Impact Assessment What is a Privacy Impact Assessment (PIA)? Privacy Impact Assessment is a process to determine the impacts of a program, system, service, scheme,…
Article Domain theft and the possibilities for recovery of the stolen domain names Introduction On October 24th 2012, Diigo, a social bookmarking website allowing signed-up users to bookmark and tag web pages, had its domain,…
Article Handy Devices Revolution: Handy Pentesting & Hacking Part 1 A few weeks ago, I wrote an article entitled 'Transforming your Android Phone into a Network Pentesting Device' which is obviously about turning…
Article How do I go about hacking file transfer protocol? Part I Usually, I write about human resource management, risk assessment and project estimation almost every day, but from time to time, I get an e-mail…
Article Websecurify Walkthrough, Web Application Penetration Testing Tool [caption id="" align="alignright" width="200"] Websecurify Logo[/caption] Information security is a very important thing for the modern Internet…
Article Using Sandboxes For Hostile Program Analysis Sandboxes Introduction[pkadzone zone="main_top"] If you're reading this article, you have probably heard of a sandbox before. But, in case you…
Article Estimating Projects Part III In previous articles on planning and estimating projects, we explored the basic principle of estimates. Estimating cannot really determine precisely…
Article How do I go about hacking file transfer protocol? Part II In the previous part of this article series, we introduced the topic of FTP security, and the basics of how the protocol works. After reading that…
Article SQL Injection Through SQLMap Burp Plugin Hai folks, This article gives you an overview of SQLMAP, an SQL injection tool used for detecting and exploiting the SQLI. What is SQLI? SQL…
Article How do I go about hacking FTP? Part III Oh boy, this whole series about FTP hacking is really getting long. There's just too much information to cover in just one article. In fact, if you…
Article Android and Java Native Interface Java Native Interface (JNI) JNI is a native programming interface supported by Java and is part of the Java SDK. With JNI, we can write code in…
Article Calling Conventions Introduction Calling conventions are used by all programs without the user even realizing it. But before saying more about them, we must first make…
Article Hexed – Working effectively in the hex editor I love my hex editor! I mean I really do. As reverse engineers and binary explorers, the hex editor is arguably the most used tool for human binary…
Article Demystifying dot NET reverse engineering - PART 3: Advanced Byte Patching Introduction In the first two parts, we saw some basics that will let you reverse-engineer some dot NET applications; we covered the concepts of dot…
