Article Legality of DDoS: Criminal Deed vs. Act of Civil Disobedience Introduction This article was inspired by two factors: 1) the petition filed by Anonymous on the White House's We the People website in the…
Article Steganography and Steganalysis: Common Image Formats and LSB Part 1: Introduction The information revolution, which resulted in the Internet and in modern communication technologies, has pushed our society…
Article Unordinary Predictions for Information Security in 2014 Introduction The year is closing and it's time for prediction of the evolution of the security landscape in 2014. It's easy to predict an increase…
Article IOS Application Security Part 26 - Patching IOS Applications using IDA Pro and Hex Fiend In the previous applications we have looked at how we can hijack method implementations during runtime using Cycript, and even change the logic of…
Article Steganography and Steganalysis: Common Image Formats and LSB Part 2 JPEG One of the most common image formats is JPEG. It surely deserves a particular discussion, and, in addition, it's very frequently used as Cover…
Article Business Continuity & Disaster Recovery Business Continuity Within a business continuity plan exists a few steps: Business Impact Analysis (BIA) This involves determining the operational…
Article The Mechanics of Metasploit Metasploit is exquisitely prevalent amongst penetration testers and especially hackers because it makes it very easy to develop and launch exploits…
Article Vulnerability Scanning with Metasploit: Part II In the previous article, we learned how to perform a network vulnerability assessment by using the OpenVAS plug-in. In this continuation, we will…
Article Securing Your Java Code 2 For Part 3 [pkadzone zone="main_top"] SQL Injection SQL injection occurs when a user sends malicious data to an interpreter as an SQL query. The a
Article Adobe CQ Pentesting Guide – Part 1 This post deals with the step-by-step security testing guidelines for Adobe CQ installation. Adobe CQ is Adobe's new Web Experience Management…
Article Security Predictions for 2014 As the year 2013 draws to a close, we decided to make some predictions for the most popular Security Trends in 2014. Here is what we think are the…
Article QEMU Windows Guest: Installing the Operating System Now that we've created the image for our guest, we must continue with installing the operating system on it. In Virtualbox/VMWare, we usually select…
Article Forensic Investigation on Windows Machines Digital forensics is the process of identifying and collecting digital evidence from any medium, while preserving its integrity for examination and…
Article QEMU Windows Guest: Networking There are different kind of backend networks that we can use with QEMU. In order to specify the backend network, we need to use the -netdev…
Article QEMU Windows Guest: Bridged Networking Bridged networking can be used when we want our guest virtual machine to get the IP address from our router and be able to see the host and all…
Article Cloud Forensics: An Overview Introduction When discussing cloud forensics, we're actually talking about the intersection between cloud computing and network forensic analysis.…
Article OSSEC Introduction In this article we'll present the open source host-based intrusion detection system, which is needed if we would like to detect…
Article SCA, For a Secure SDLC Today's cyberspace has become a dangerous place for individuals and businesses. Vulnerabilities are exploited using sophisticated malware and…
Article Coding of Disassembler We have practiced much disassembling by using assembly de-compilation tools such as Reflector, ILSpy, etc. Although such tools offer many advantages…
Article HIDS—A Simplified Design Construct This article will briefly discuss the host-based intrusion detection system (HIDS) and an abstract approach that can be used to design an…
Article Beyond password length and complexity (or "Why PCI-DSS-Compliant Passwords Aren't Enough" or "PCI-DSS-Compliant Password Analysis Reveals One-Quarter Still Trivially Compromisable")…
Article Cyber Security During The Holidays Introduction It's the holidays, a key time for cybercrime that exploits the bad habits of unaware internet users. Attackers can defraud and monetize…
Article System address map initialization in x86/x64 architecture part 2: PCI express-based systems This article is the second part of a series that clarifies PCI expansion ROM address mapping to the system address map. The mapping was not…
Article 2014 - The year of changes The year 2014 will be a year of continued change in the ICT security world. It will be a year in which some very fundamental, unfinished business…
