Article Preventing Business Email Compromise (BEC) With Strong Security Policies Introduction Business email compromise (BEC) is a phishing and social engineering scam threatening every organization in every sector on every…
Article Android penetration tools walkthrough series: Apktool In this article, we will look at the step by step procedure to setup utility called "Apktool" and its usage in android application penetration…
Article Android penetration tools walkthrough series Dex2Jar, JD-GUI, and Baksmali In this article, we will be focusing on Android penetration testing tools such as Dex2Jar, JD-GUI, and Baksmali to work with reverse engineering…
Article 2017 OWASP A3 Update: Sensitive Data Exposure Introduction Si vis pacem, para bellum! This classic Latin quote by Vegetius translates to "If you want peace, prepare for war." As far as aphorisms…
Article 9 free risk management tools for IT & security pros Selecting and following the appropriate risk assessment methodology is key to creating a safe computing environment. However, the reality is that…
Article Pentesting for PCI DSS compliance: 6 key requirements For any organization that processes, stores or transmits credit card data, penetration testing has been an obligation since 2013. That's when the…
Article Android vs. iOS Mobile App Penetration Testing The adoption rate of smartphones has exploded in recent years. The two dominant smartphone operating systems (OS) of today are the Android OS develope
Article 5 real-world examples of business email compromise Business email compromise (BEC) is a type of phishing scheme where the cyber attacker impersonates a high-level executive (CIO, CEO, CFO, etc.) and…
Article How Business Email Compromise Attacks Work: A Detailed Case Study Business email compromise (BEC) attacks are widespread and growing in frequency. Due to their simplicity and effectiveness, BEC will continue to be on
Article How Secure Wire Transfer Procedures Can Prevent Business Email Compromise Introduction Formerly known as the “man in the email attack,” business email compromise (BEC) is a scam that takes control of a senior employee’s…
Article 2017 OWASP A7 Update: Cross-Site Scripting Introduction For the past 15 years, the Open Web Application Security Project (OWASP) has helped organizations develop, purchase, and maintain…
Article 2017 OWASP A8 Update: Insecure Deserialization Introduction 2017 saw a new addition to the Open Web Application Security Project’s (OWASP) Top Ten list of web application vulnerabilities —…
Article Free & open source rootkit and malware detection tools A lot of sniffers, rootkits, botnets, backdoor shells and malwares are still on the wild today, which are used by malicious attackers after…
Article Android exploitation with Kali In this tutorial, we shall see how to create an apk file using the tools offered by Kali Linux. Kali Linux is a Linux distro with a preset of…
Article The Ultimate Guide to EC-Council Certifications: Overview & Career Paths Of the top ten most valuable companies, four of them are in technology and the rest are based on technology. Out of this explosion of tech and the…
Article Tiredful API Part One In this post, I will explain how to solve Tiredful-API. Let's start. What is TIREDFUL-API TIREDFUL-API is an intentionally designed broken web…
Article ZLAB MALWARE ANALYSIS REPORT: RANSOMWARE-AS-A-SERVICE PLATFORMS Introduction Over the years, the diffusion of darknets has created new illegal business models. Along with classic illegal goods such as drugs and…
Article Tiredful API Part Two This is the 2nd part of the solving Tiredful-API series. I hope you have gone through the 1st part. If not, please go through it. Tiredful…
Article Inspeckage: Dynamic Assessment Tool for Android If you are pen-testing Android applications, you will need to monitor/check many things at the same time. While doing dynamic analysis, one must…
Article Guiding principles in information security A principle which is a core requirement of information security for the safe utilization, flow, and storage of information is the CIA triad. CIA…
Article Top 10 Open-Source Security Tools Released by Tech Giants We have always wondered how tech giants have been able to keep their security so tight? Do they use the same tools that are available for the rest…
Article Kali reporting tools Penetration testing report is the key deliverable in any security assessment activity. In Penetration testing, the final deliverable is the report…
Article Tools and resources to prepare for a hacker CTF competition or challenge CTF or Capture the Flag is a traditional competition or war game in any hacker conferences like DEFCON, ROOTCON, HITB and some hackathons. CTF games…
Article How to Prevent BEC with Security Awareness Training Introduction The crime of business email compromise (BEC), which targets a business to facilitate financial theft, is expected to cost business more…
