Article A Close Look at the NSA Monitor Catalog – Server Hacking Introduction Summing up what happened, Der Spiegel published an internal NSA catalog that contains detailed information on spies' backdoors used by…
Article Reinventing Threat Intelligence Effective threat intelligence is one major service that most companies offer to alert about the latest threats. Threat intelligence alerts about the…
Article Web Services Penetration Testing, Part 6: Fuzzing Parameters with Burp In the previous article we discussed in what cases we might face challenges performing manual web services penetration testing and how SoapUI will…
Article IOS Application Security Part 29 - Insecure or Broken Cryptography In this article we will look at an example of Insecure or Broken Cryptography which is a common vulnerability found in most IOS applications. This…
Article Manually Web Application Penetration Testing: Fuzzing Introduction When we test a web application, we do not test a single page, but a lot of pages of a single web application. Each page may have more…
Article Java bytecode reverse engineering This article is designed to show how to crack a Java executable by disassembling the corresponding bytes code. Disassembling Java bytecode is the…
Article Hacking android apps using backup techniques In the previous article, we had an introduction on how to analyze Android application-specific data using Android backup techniques. This article…
Article How to Plan a Social Engineering Assessment A social engineering assessment is a very valuable tool in understanding the security exposure of most organizations. Since human beings tend to be…
Article Hack I-Bank Pro In this article we are going to see some major vulnerabilities typical of a remote banking application. We found an interesting vulnerable machine…
Article Android App Permissions and Security: What You Need to Know As of this article, Android has the greatest OS market share on both smartphones and tablets. If you don't own an Android device, chances are that…
Article When APTs Attack Countless organizations have fallen prey to cyber attacks - from high profile retailers to enterprises and government agencies. Some attacks have…
Article Hidden Phishing Threats By now, the risks associated with phishing are well-known and well-documented. What is often misunderstood or overlooked is a hidden threat related…
Article RansomWar(e) There is a notable upsurge in the number of ransomware attacks in the past couple of months, and undoubtedly the emergence of the CryptoLocker…
Article C# Compiler Development Introduction This article elaborates the complete life cycle of making a custom interactive C# compiler, much like one of an existing CSC.exe. It is…
Article Privacy Implications of Automatic License Plate Recognition Technology ALPR – Technical Specifications The majority of ALPR devices are mounted on bridges, road signs, and poles near traffic lights or outside public…
Article Skype Forensics Skype is an application that enables voice and video calls, instant messaging, file transfers, and screen sharing between users. Millions of people…
Article Manual Web Application Penetration Testing – Suffix & Prefix in Fuzzing Introduction In this series of articles, last time we talked about fuzzing and various SQL statement special characters which can be used in fuzzing…
Article The Debate Over Network Neutrality in the EU and the USA 1. Introduction Network neutrality (also known as net neutrality or Internet neutrality) refers to a general principle that Internet service…
Article Malware-based Attacks Against POS Systems Introduction A sequence of data breaches suffered by principal US retailers Target and Neiman Marcus has put Americans on alert. A total of more…
Article Limiting Automated Access Automated tools are used to carry out many security attacks to online services. There are different protection mechanisms to narrow down such…
Article Recycle bin forensics An icon on the Windows desktop represents a directory in which deleted files are temporarily stored. This enables you to retrieve files that you may…
Article Malvertising: A Growing Threat at the Start of 2014 Word Meaning The term "malvertising" is coined through the combination of two words – "malware" (i.e., "malicious software") and…
Article Injecting spyware in an EXE (code injection) Implanting malicious code in the form of spyware to an existing running process is one of the more sophisticated tasks. Before the advent of…
Article NSA Backdoor Part 2, BULLDOZER: And, Learn How to DIY a NSA Hardware Implant This article is the second part of a series on NSA BIOS Backdoor internals. This part focuses on BULLDOZER, a hardware implant acting as malware…
