Article Dridex Downloader Analysis Introduction Yesterday I received in my company inbox an email with an attached .xlsm file named D92724446.xlsm coming from…
Article OWASP ProActive Controls: Part 1 What is OWASP ProActive Controls? In one line, this project can be explained as "Secure Coding Practices by Developers for Developers".[pkadzone…
Article Android Application hacking with Insecure Bank Part 2 In the previous article, we looked at setting up a mobile pentesting platform for Android applications. By now, you must have set up an emulator…
Article Setting up a pentest Lab with pfSense in virtualBox Penetration testing requirements often force penetration testers to do both external as well as internal assessments. This article covers the…
Article Cryptography Fundamentals – Part 1 Introduction In this mini-course, we will learn about various aspects of cryptography. We'll start with cryptography objectives, the need for it,…
Article Cryptography Fundamentals, Part 2 – Encryption Encryption These are the main types of encryption. Symmetric Encryption: A single key is used to encrypt and decrypt the message sent between two…
Article Cryptography fundamentals, part three - Hashing Hashing A hash value, also called a message digest, is a number generated from a string of text. As per the hash definition, no two different texts…
Article Cryptography Fundamentals, Part 4 – PKI PKI PKI (public key infrastructure) is a hybrid of symmetric and asymmetric encryption. The handshake uses asymmetric encryption to exchange the…
Article Cryptography Fundamentals, Part 5 – Certificate Authentication Certificate Authentication Here's how to verify that the certificate is from the original sender with GnuPG. [download]Download the Cryptography…
Article Legality of Electronic Signatures in the EU and the US 1. Introduction Electronic signatures were used for the first time in 1861 when agreements were signed by telegraphy using Morse code. In 1869, the…
Article OWASP ProActive Controls: Part 2 of 2 In the first part of this series, we covered the Top 5 OWASP ProActive Controls and learned how they can prove to be of great use in securing…
Article Biometrics: Today’s Choice for the Future of Authentication The options currently available for user authentication fall within three categories: authentication through something that the user knows, such as…
Article HTML5 Security: Cross Domain Messaging In this article, we will discuss HTML5 Web Messaging (or Cross Domain Messaging) attack vectors and security implementations. Why is it important to…
Article Equation Group APT and TAO NSA: Two Hacking Arsenals Too Similar The Equation Group In February 2014, the team of experts from Kaspersky Lab announced the discovery of a hacking group operating since 2001 that…
Article n00bs CTF Labs by Infosec Institute n00bs CTF (Capture the Flag) Labs is a web application presented by Infosec Institute. It has 15 mini Capture the Flag challenges intended for…
Article DDoS on UPNP Devices Denial of service (DOS) attack is an attempt to make a machine or a network resource unavailable to its users. It basically consists of methods to…
Article Digital footprints and privacy concerns "It is too difficult to give exact statistics on the amount of data people leave, but confirmed every time we perform an online action, we are…
Article n00bs CTF Labs - Solutions! Congratulations to our winners and a big shout out to everyone who participated in the n00bs Capture the Flag Challenge! Check out the winning…
Article Understanding Web Caching Quite often we see Web pages that include images and other files loading faster than we expect. If you are wondering how that happens, Web caching…
Article Cyber Security Risk in Supply Chain Management: Part 1 Introduction Cyber security is generally thought of as various types of security devices like firewalls, Web Application Firewall (WAF), IDS/IPS,…
Article The FREAK Vulnerability: From Discovery to Mitigation A few weeks ago, security experts discovered a new major security SSL/TLS vulnerability, dubbed FREAK, that for more than a decade left users of…
Article Cyber Security Risks in Supply Chain Management – Part 2 In Part 1 of this article series, I discussed various risks involved in supply chain management with the latest example of a malicious adware named…
Article iOS Application Security Part 39 - Sensitive information in memory In this article, we will look at analyzing the memory contents of an iOS application. iOS applications may store sensitive information like…
Article Packet crafting: a serious crime! Packet crafting is the art of creating a packet according to various requirements to carry out attacks and to exploit vulnerabilities in a network.…
