Article Playing by the Rules: Performing Firewall Audits Anyone who has ever managed a firewall will know that all too often it's a one way street. From the moment the device is plugged into the network,…
Article Analysis on pBot - a PHP IRC Bot that has Malicious Functions For IRC enthusiasts like me, it's just common to encounter IRC bots in underground channels that have integrated functions like port scanning, nmap,…
Article Chapter 8 - UEFI and the TPM: Building a foundation for platform trust Traditional boot processes cannot stop sophisticated attacks instantiated before operating system load. Consequently, we need a method to ensure…
Article What does a network security engineer do? MacLeod’s story Jim MacLeod's journey toward becoming a network security engineer wasn't typical. Learn what it takes to become a network security engineer.
Article Webinspect Part 2 In the first part of this article we have seen how to start a scan using WebInspect. As discussed earlier, Default scan settings tab is the heart of…
Article Simple router pawning techniques - Getting the administrative privileges [pkadzone zone="main_top"] Securing the Access Point (AP) of your router's web page and the Telnet or SSH access should be considered as part of the…
Article Complete file upload vulnerabilities Allowing an end user to upload files to your website is like opening another door for a malicious user to compromise your server. However, uploading…
Article Chapter 9: Securing remote access Remote access is no longer just about a laptop or home desktop user connecting to catch up on some work or update customer and order information.…
Article Reconnaissance with Images Gathering data on a target is extremely important if we plan to execute an attack in a more efficient manner. A typical attack scenario starts with…
Article Malicious code execution in PCI expansion ROM The malicious code in x86/x64 firmware can potentially reside in many places. One of them is in the PCI expansion ROM. In the past, the small amount…
Article Intrusion Prevention System: First Line of Defense In the past few years, advancements in technology have grown hand in hand with a substantial increase in hacking and cyber espionage. The whole…
Article Social Engineering - We Start Playing If hacking is known as entering a computer system through a breach of security, social engineering can be referred to as an intrusion into the mind.…
Article Social Engineering 2—What Do We Have To Watch? In my previous article we focused on providing an introduction to social engineering. For the purposes of this article, I want readers to consider…
Article WebDAV Application DLL Hijacking Exploitation In this article, I will explain WebDAV application DLL hijacking exploitation using our all time favorite, Metasploit. Here we will cover the module…
Article Defending the Internet with Project Meshnet Introduction Topics related to Internet censorship have been debated frequently in the last few years. The main purpose of most Internet censorship…
Article Chapter 10 - Virtualization Security Virtualization brings significant value to business managers and engineers attempting to keep pace with business pressure for additional servers. It…
Article Sulley Fuzzing Framework Intro 1. Sulley Fuzzing Framework Sulley is python fuzzing framework that can be used to fuzz file formats, network protocols, command line arguments, and…
Article IBM Rational Appscan Part 1 IBM Rational Appscan is one of the most widely used tools in the arena of web application penetration testing. It is a desktop application which…
Article A Review of the eSoft InstaGate UTM Appliance It can take an organization several years to build out an information security infrastructure capable of providing them with sufficient protection.…
Article Defcon 20 Day 3 Review Defcon day 3 started with one of the most awaited talks of Defcon 20. It was the talk "Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2" by…
Article Reversing Malware Loaders - The Matsnu-A Case The AV industry is growing every day along with the underground industry that produces all types of malware from simple file infectors to more…
Article Achieving Anonymity with Tor Part 1 We all know that Tor enables us to be anonymous on the Internet. In this article we'll look at how to achieve this and truly know what we're up…
Article Risk Management in Agile In this article, we will explore the business concerns of Agile methodologies in project management. Recently, I read an article by Chris Matts and…
Article Introduction to HTTP Response Headers for Security Hyper Text Transfer Protocol (HTTP) is a stateless protocol. The implication of this is, at the protocol level there is no record of what happened…
