Article PowerShell for pentesters part 1: Introduction to PowerShell and Cmdlets PowerShell represents one of the most interesting and powerful languages for a pentesting purpose. [pkadzone zone="main_top"] So, we will try to fo
Article Gaining Shell Access via UART Interface Part 1 What is IoT The Internet of Things (IoT) is the network of physical devices, vehicles, home, appliances, vehicle, and other items embedded with…
Article What Is an IdM and how to discover if you need one IdM is an abbreviation for "Identity Management," i.e., management of user accounts. Let's turn to Wikipedia: "IdM is the security discipline that…
Article Gaining Shell Access via UART Interface Part 2 This is the 2nd post in IoT-Hacking-Shell-via-UART series. I hope you have gone through the first part. If not, please go through it. In this post,…
Article Mechanics Behind Ransomware-as-a-Service Introduction Ransomware is an increasingly serious concern, and this problem is getting worse over time. Initially, this malware began to compromise…
Article The Decline of Ransomware and the Rise of Cryptocurrency Mining Malware 1. Introduction ISACA, an international association focused on IT governance, has recently released its annual study "State of Cybersecurity." The…
Article Gaining Shell Access via UART Interface Part 3 This is the 3rd post in IoT-Hacking-Shell-via-UART series. I hope you have gone through the first two parts. If not, please go through them. In this…
Article And Again, About Storing Passwords When the question of storing passwords arise, the first idea is to simply keep them in clear text in the corresponding table in the database.…
Article Top threats to online voting from a cybersecurity perspective Last year, NASA set up an online voting campaign to pick a name for an astronomical object, a small ice-covered asteroid roving through a remote…
Article The top 15 must-have books in InfoSec An essential part of building information security (InfoSec) professionals' expertise is played by hands-on experience and years of activity.…
Article Mirai botnet evolution since its source code is available online Mirai – The evolving IoT threat Since the release of the source code of the Mirai botnet, crooks have improved their own versions by implementing…
Article Gmail Phishing Scams You Need to Know About Google Account Security Checkup by Wesley Fryer via Flickr. Licensed under CC BY 2.0 [pkadzone zone="main_top"] While Google has set up a war room
Article Beginner’s Guide to Pentesting IoT Architecture/Network and Setting Up IoT Pentesting Lab - Part 1 In this post, I will explain how to pentest an IoT Network/Architecture. Also, I will explain how to set up an IoT Pentesting lab for getting…
Article Beginner’s guide to Pentesting IoT Architecture/Network and Setting up IoT Pentesting Lab - Part 2 This is the 2nd part in Pentesting and Setting up our own IoT Lab. I hope you have gone through the first part. If not, please go through it.…
Article USV: 2017 Part 1 CTF Walkthrough In this article, we will learn to solve another Capture the Flag (CTF) challenge which was posted on VulnHub by "Suceava University." As you may…
Article Kioptrix VMs challenge walkthrough In this article, we will walk through all the basic Kioptrix VMs (total 5) which are available on vulnhub.com. The difficulty level of all these…
Article What Does Compliance With OWASP Really Mean for Financial Institutions? The latest Cost of Cyber Crime study by Accenture found financial services among the most targeted and vulnerable industries, with breaches tripling…
Article PowerShell For Pentesters Part 2: The Essentials of PowerShell Introduction PowerShell represents one of the most interesting and powerful languages for a pentesting purpose as we explained in the first part of…
Article Security vulnerabilities of cryptocurrency exchanges 1. Introduction Many experts argue that cryptocurrencies may radically change not only the financial sector but also the way society operates. The rea
Article Video Tutorial - Paraben E3 Platform and Mobile Phone Forensics Transcription Chris S., InfoSec Institute: Hello and welcome to today's weekly video from Infosec Institute. This week we'll be doing something a…
Article GCIH certification overview The GIAC Certified Incident Handler (GCIH) is one of the most prestigious certs for IT professionals who are starting their journey into the world…
Article Pentester’s Guide to IoT Penetration Testing IoT penetration testing specifics from a certified ethical hacker with 5+ years of experience. With the growing risk to IoT security, penetration…
Article Detecting Data Breaches with Honeywords Introduction Data breaches and security issues related to information leakage are a subject that has been making headlines in recent times. When a…
Article Five techniques to bypass Office 365 protections used in real phishing campaigns In the last couple of years, crooks devised several techniques to bypass anti-phishing filters, let's analyze them to understand the way threat…
