Article Shellshock [CVE-2014-6271]: Another Attack Vector - Bluffing IPS/IDS Sensors With Python Crafted Pkts While a lot of online websites and blogs are explaining the vulnerability damage, providing PoC scripts and repetitive information, here we will…
Article Windows Resource Protection In this article, we will learn about a not-so-well known but a very useful security feature in Windows: Windows Resource Protection. This feature…
Article Mobile Developer Salary The world of mobile is taking over desktop applications, and mobile development and people who understand mobile design and architecture are in…
Article IT Security Policies Should Include a Physical Security Policy We live in a world that's becoming ever more dependent on the various digital products at our disposal. From the average man on the street making…
Article Pricing Policies in the Cyber Criminal Underground Introduction Underground markets are places on the Internet where criminal gangs offer a wide range of illegal products and services. Black markets…
Article Flick Challenge Here is another interesting challenge we are going to solve. The vulnerable machine name is Flick. As usual, we started the game by hosting the…
Article Sharkfest 2013 The sharkfest challenge was organized by Wireshark University. There are seven challenges related to the trace files analysis. In each challenge,…
Article Microsoft DirectAccess In this article we will learn about a very famous security product of Microsoft known as Microsoft Direct Access. It is a product built over an old…
Article Sharkfest 2013: Part II In the first part of our article we solved the first three challenges, so in this article we will continue with rest of the challenges. CHALLENGE…
Article Evolution of 3D Printing Technology Raises Security Concerns Introduction Also known as the term additive manufacturing (AM), 3D printing is a process for making a three-dimensional object of almost any shape…
Article The Importance of an Online Encryption Policy within an Organization Benjamin Franklin once said, "If you fail to plan, you plan to fail." This quote summarizes the importance of online encryption policy and hands-on…
Article Information Security of Nanorobots 1. Introduction The year is 2045. A 31-year-old woman is brought to the hospital complainingof headaches and fever. The doctors identify a species…
Article Wifite walkthrough part 1 In this article series, we will look at a tool named Wifite suitable for automated auditing of wireless networks. Most of you who have experience in…
Article End of SSL with POODLE In this article we will learn about the how SSL has reaches its end with various vulnerabilities. This article will also cover the recent…
Article Protecting WordPress Installations in an IaaS Environment Introduction In this article we're going to take a look at how to secure a WordPress installation against attackers in an IaaS virtual machine.…
Article Hacking ATMs: The New Wave of Malware Introduction In recent weeks, security experts at Kaspersky Lab have observed several attacks on Automated Teller Machines (ATMs) which were…
Article Wifite walkthrough part 2 In this article, we will look at cracking access points using WPA-PSK or WPA2-PSK using Wifite. If you have used tools like airodump-ng, aircrack-ng…
Article NAT-PMP Vulnerability In this article we will learn about the latest NAT-PMP vulnerability being discovered, which will affect around 1.2 billion SOHO routers worldwide.…
Article What is Online Defamation /a.k.a. Cyber Libel/ and How it Pertains to some Contemporary Legal Systems Preface: Balancing Freedom of Expression and Reputation Protection [pkadzone zone="main_top"] The right to freedom of expression – is there a better…
Article DDoS Security Policy Template to Prevent Massive Attacks It sounds like the 90s sci-fi horror thriller, "Tremors". Unfortunately, today, it could easily be a headline from the recent space of…
Article iOS Application Security Part 36 - Bypassing certificate pinning using SSL Kill switch In this article, we will look at how we can analyze network traffic for applications that use certificate pinning. One of the best definitions I…
Article Practical Shellshock exploitation – Part 1 Topics covered Introduction What is Shellshock? When can it be exploited? How to check if you are vulnerable Checking your bash version
Article Practical shellshock exploitation – part two Topics Covered Background Prerequisites Configuring SSH server Adding a new user Creating authorized keys for a specific client Adding au
Article Checklist for Next Gen Firewalls Due to the ever-changing threat landscape, a few security products such as firewalls, IDS/IPS, etc. are becoming obsolete because of the older…
