Article Tutorial on SQLi Labs Structured Query Language, also known as SQL, is basically a programming language that deals with databases. For beginners, databases are simply dat
Article Phishing: A Very Dangerous Cyber Threat Introduction In recent years, phishing attacks have increased exponentially, targeting every sector of society. Despite the simplicity of the schema…
Article Network Scanning Using Nessus What is Nessus? If you are looking for a vulnerability scanner, you might have come across several expensive commercial products and tools with a…
Article Google Hacking with GGGoogleScan When scraping the Google search engine, we need to be careful so that Google doesn't detect our automated tool as a bot, which will redirect us to a…
Article Wireshark A network sniffer or protocol analyzer is a software application or hardware device which is capable of intercepting traffic and logging it for…
Article Book Excerpt: Advanced Network Design, Chapter 4: Infrastructure Security does not happen by accident. Sure, a crashed router will keep hackers (and everyone else) out of your network, but in most cases if you…
Article Differences in Copyright Enforcement between the U.S. and China Introduction China and the U.S. have signed the Berne Convention and the Agreement on Trade Related Aspects of Intellectual Property Rights (TRIPS…
Article Physical security: Managing the intruder No information security guide is complete without a chapter about securing physical access to information resources. After all, physical access…
Article How to Safely and Wisely use jQuery: Several Key Issues At the beginning of this article, I want to thank all those without whom this article would not exist. For starters, I'd like to thank Izabela…
Article Reverse-Engineering Arrays Introduction Whenever we would like to reverse-engineer a function, we need to know exactly how the function is being called: its calling…
Article IT Continuity Planning Today most organizations have committed resources, developed policies, procedures, and tools, and set their organization and IT infrastructure to…
Article How to filter user input: An overview If you make web sites, online apps, or even just your own personal blog, chances are that you've heard the phrase "Don't trust user input!" This is…
Article Mobile Security – Basic Challenges [highlight color="blue"]Interested in formal iPhone forensics training? Check out our 3 day iPhone and iOS forensics course now available.…
Article Cyberterrorism Defined (as distinct from “Cybercrime”) Introduction Technology is developing at an extremely vigorous pace over the last couple of decades. There are many unknown terms that come along…
Article Handy Devices Revolution: Handy Pentesting and Hacking Part III And now is the time for the third article of the Handy Devices Revolution series! In the second article we talked about Arduino and Power Pwn; this…
Article Sniffing Network Traffic on Android Introduction There has been a lot of talk about how to connect your laptop though the Android network and use the bandwidth that you're already…
Article PHP Session ID’s – The Risks In today's article I want to address a very important topic. Namely, I want to talk about PHP session security. I know and understand that this is a…
Article Virtual Honeypots At the beginning of this series of tutorials, I would like to note one thing: All the activities that we usually take to increase the security of…
Article Importance of a BYOD Policy for Companies [highlight color="blue"]Interested in formal iPhone forensics training? Check out our 3 day iPhone and iOS forensics course now available.…
Article Domain name parking of gTLDs Introduction Over the past ten years, there has been a steady increase in the number of generic top-level domain names (gTLD). As a result, people…
Article A prototype model for web application fingerprinting: w3 scrape Introduction: Web application fingerprinting is one of the most important aspects of the information gathering phase of ethical hacking. This allows…
Article Reverse Engineering a Malicious Word Document In this post, I am going to explain in detail how to go about reversing an exploit with which one can easily insert his/her own payload, providing…
Article Burp Suite tutorial: Session handling mechanisms Web applications, nowadays, handle sessions and state by implementing session expiration and sessionid lifecycle in a more secure manner to avoid…
Article Hello world: C, assembly, object file and executable Summary: In this article we'll take a look at the C program that prints "Hello World!" to the screen, which we'll assemble and compile. Then we'll…
