Article The Internet Underground: Tor Hidden Services Some people think onion routing or the Tor network is for criminals and people with something to hide. Well, they are half right. The Tor network…
Article The easier form of hacking: Social engineering When we talk about hacking, especially in today's world, we hear the media giving us the stories of how hackers hack into a database and steal…
Article Wfuzz and WebSlayer 1. Introduction WfFuzz is a web application bruteforcer that can be considered an alternative to Burp Intruder as they both have some common…
Article Backtrack 5 R3 Walkthrough - Part 3 In this article we will we look at some of the other new tools that were added into Backtrack 5 with the release of its latest version R3. Wifite…
Article Wordfence: Security Plugin for WordPress Wordfence is a free security plugin for WordPress. Security "plugins" for Wordpress are often highly criticized as many may give a false sense of…
Article Executable Code Injection Introduction Code injection is a process of injecting executable code in a running process or static executable. Executable code in web applications…
Article Password Auditing on Active Directory Databases In this article we explore the options to acquire information from an online or offline Microsoft Active Directory database and its encryption keys.…
Article Analyzing malicious JavaScript Nowadays there are various threats in the wild that want to get malware installed on victim operating systems. Most of them use some kind of social…
Article Environment for Malware Analysis Introduction Before trying to analyze any kind of malware, we need to have a proper environment set up, so we can be most efficient and collect the…
Article Backtrack 5 R3 Walkthrough, Part 4 DHCPig DHCPig is a very nice and handy little tool used to carry out an advanced DHCP exhaustion attack. It does this by grabbing all the IP…
Article Chapter 12 – Applications of Biometrics Passwords are not secure and are useless as an access control… at least that is what many vendors and security consultants try to tell managers…
Article Getting Domain Information 1. Introduction When analyzing malware we can gather a lot of information just by identifying the IP addresses and domains the malware software…
Article Investigating the crime scene part 2: Recovering files with autopsy For part one of this series, please click here. So, in the previous part we saw how we can set up the environment for finding clues and also how to…
Article Introduction to Anonymizing Networks – Tor vs I2P The Right to Anonymity Every operation made in cyber space, every visited web site, and every web service accessed, leave traces of the user's…
Article Web Vulnerabilities Explained Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF,…
Article Eight Handy Security Tools for a Novice Here is a compilation of a few tools that we need to be aware of. The power, the performance and the capabilities of these tools are limited only to…
Article Analysis of Malware Samples with the Immunity Debugger API Introduction Immunity Debugger is a debugger which is very much like Ollydbg. In this tutorial we'll present the Python API that Immunity Debugger…
Article Keeping Your Social Media Accounts Safe Whether you're an average Internet user, or an IT pro who checks Twitter before getting out of bed and goes through several SSH sessions before the…
Article Owasp ZAP [highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our OWASP Top 10 Training course OWASP Top 10 Training. [/highlight]…
Article Low fidelity prototyping: The cheapest corrections in design stage ever! Agenda: 1. Prototyping – what is it? 2. The design process. 3. Showing the project to client before developers will write any line of code. 4.…
Article Exceptions In Injected Code Injection and API Hooking - When you don't know enough to know that you are getting it wrong... Code Injection and API hooking techniques are…
Article Privacy Impact Assessment What is a Privacy Impact Assessment (PIA)? Privacy Impact Assessment is a process to determine the impacts of a program, system, service, scheme,…
Article Domain theft and the possibilities for recovery of the stolen domain names Introduction On October 24th 2012, Diigo, a social bookmarking website allowing signed-up users to bookmark and tag web pages, had its domain,…
Article Handy Devices Revolution: Handy Pentesting & Hacking Part 1 A few weeks ago, I wrote an article entitled 'Transforming your Android Phone into a Network Pentesting Device' which is obviously about turning…
