Article The Evolution of a Technical Information Security Professional During my years of work as a consultant and trainer in the information security world, I've noticed a few patterns that usually exist in those who…
Article Interview with Project Leader Sebastian Poeplau Introduction Malware threats have become very common these days. In the past, many honeypots have been created to detect malware propagation over…
Article Achieving Anonymity with Tor Part 2: Proxies and DNS servers 1. Using Burp with Tor So far we've looked at how to set up our web browser to use Privoxy, which in turn uses Tor to achieve anonymity on the…
Article New Linux Distro for Mobile Security, Malware Analysis, and Forensics Yes, you read the title right and I hope I just grabbed your attention! A new GNU/Linux distribution or distro designed for helping you in every…
Article IBM Rational Appscan: Part 2 The first part of this article focused on configuring a scan in Rational Appscan, and as mentioned earlier, it's important to configure the scan…
Article Achieving Anonymity with Tor Part 3: Torbutton and Tsocks 1. Introduction In previous articles: Part 1 and Part 2 we extensively used the Tor Browser Bundle that helps us ensure our anonymity. With the Tor…
Article Achieving Anonymity with Tor Part 4: Tor Relays 1. Introduction We've seen that Tor network is constituted from Tor nodes, through which we tunnel our traffic to reach anonymity. So far we didn't…
Article Achieving anonymity with Tor Part 5: Tor bridges and hidden services Running a Tor bridge is essentially the same as running a Tor relay, as far as configuration is concerned. We already mentioned that the only…
Article JBOSS Exploitation JBoss Application Server is an open-source Java EE-based application server. JBoss is widely used and is deployed by many organizations on their web…
Article Sneak Peak into the Art of Exploitation It's a well-known saying that gathering maximum information about the enemy is half the work done in defeating him. The same holds true when you are…
Article A Review of Selected Cryptographic Libraries Cryptography is the science that deals with the problems of concealing information by encrypting it, and contains the set of methods for achieving…
Article Chapter 11 – Identity management and access controls Access controls help us restrict whom and what accesses our information resources, and they possess four general functions: identity verification,…
Article Securing the Software Development Environment In the February 2012 edition of Computer, a sidebar to an article on "Web Application Vulnerabilities" asks the question: "Why don't developers use…
Article ESET Rule the Code - CrackMe Challenge Part 1: The Unpacking Process 1. Presenting the Problem The CrackMe challenge was first observed on the ESET CrackMe web page, which looked like the the picture below:[pkadzone…
Article CrackMe Challenge Part 2 The First Message Box Let's start our unpacked program with OllyDbg, run it, input eight A's into the Name and Key 1 field and press CHECK STAGE 1.…
Article CrackMe Challenge Part 3: The Logic Behind the First Challenge If we take our predicate that we've seen in the end of part 2 into account and input at least 64 bytes (0x40) into the Key 1 field and leave the…
Article WordPress Security 1. Introduction There are numerous tools available when checking the security of the WordPress Content Management System (CMS). In the rest of the…
Article Social Media & Security Risk Social media is the two way communication in Web 2.0 and it means to communicate / share / interact with an individual or with a large audience.…
Article Crack Me Challenge: Final Edition Part 6 [pkadzone zone="main_top"] [pkadzone zone="main_top"] The code for logical segment 6 is as follows: 0040181F |. B9 10000000 mov ecx,10
Article Incident Response Planning Boring topic? Maybe. But if you believe what Gartner has to say: "Through 2016, 75% of CISO's who experience publicly disclosed security breaches,…
Article The browser exploitation framework (BeEF) – Part 1 We can categorize the BeEF social engineering framework as shown in the picture below: [pkadzone zone="main_top"] [pkadzone zone="main_top"] We
Article Human Resource Management in Agile - Part 2 Part one of this article series can be found here: Human Resource Management in Agile Part 2. From the previous article you could find out what…
Article Improving Mobile Security with Santoku Mobile security has been gaining popularity in recent times. Many mobile-based attacks are being discovered as the mobile industry grows more…
Article The Browser Exploitation Framework (BeEF) – Part 2 The first article in this series can be found here: The Browser Exploitation Framework (BeEF) – Part 1. 1. Using the Modules In this section we'll…
