Article How to acquire a user’s facebook credentials, using the credential harvester attack In this article you will see how you can obtain a user's Facebook credentials without him suspecting a thing. There are going to be provided two…
Article Dynamic Analysis Techniques As we have covered the malware analysis basics with static techniques here, this post is all about performing the basic analysis of malware using…
Article USBkill Anti-Feds Script Recently, a simple script has been presented that can help someone to brick a computer in case of emergency. This script was defined as a switch…
Article VENOM Vulnerability Opens Millions of Virtual Machines to Attack The VENOM vulnerability A security vulnerability recently patched is scaring the IT industry, its name is VENOM, and it is coded as CVE-2015-3456.…
Article Cracking 64bit Binaries Keygenning is a process of finding a valid key for a program. It is used for cracking/piracy. Most of the cracking has been documented on x86, there…
Article Format String Bug Exploration ABSTRACT The Format String vulnerability significantly introduced in year 2000 when remote hackers gain root access on host running FTP daemon which…
Article The 6 D’s of Cyber Security In this article, we will discuss the 6 D's of cyber security and how you can implement them in your own cyber-defense strategy -- Deter, Detect,…
Article Sharkfest 2014 Part I The sharkfest challenge was organized by Wireshark University. There are five challenges related to the trace files analysis. In each challenge,…
Article Mumblehard Malware Introduction In this article, we will learn about a malware known as Mumblehard which is known for targeting Linux and BSD OS. This malware opens a…
Article Writing Python Compiled Modules Any code that you write utilizing any compiled language like C, C++, or Java can be integrated or imported into another Python script. This code is…
Article The Basics with Node.js Examples Introduction Public-facing APIs have tremendously increased in the last couple of years. Businesses have seen that sharing their business data with…
Article Introducing IDA scripting IDC scripting language is used by IDA disassemblers to programmatically manipulate data assembly and parameter in the loaded IDB database file.…
Article Windows functions in malware analysis - cheat sheet - Part 1 In this article, we will learn briefly about the various windows functions commonly encountered by malware analysts. Windows functions Accept: This…
Article iOS Application Security Part 42 - LLDB Usage continued In this article, we will look at some of the most important commands in LLDB to debug applications. If you have been following this blog series, you…
Article Interview: J. Wolfgang Goerlich, Cyber Security Strategist for Creative Breakthrough J. Wolfgang Goerlich is an influential leader and IT management executive with the ability to act as a cultural change agent, driving security…
Article How to Prevent a Domain Name Theft 1. Introduction The domain names may cost far more than a real estate. For instance, Facebook paid USD 8.5 million to buy fb.com. The high prices of…
Article 15 + Modules for Making Your Drupal Website Secure Drupal is the popular open-source content management system written in PHP. Although it only powers around 2.5% websites on the web, but it is still…
Article Dealing with bad characters & JMP instruction So far, in previous articles, we have learnt how to develop our own working exploit for the Echo Server program; we used two different payloads with…
Article ELF File Format Executable and Linking Format (ELF) is the object format used in UNIX-like operating systems. This post introduces the ELF file format in the big…
Article Windows Functions in Malware Analysis - Cheat Sheet - Part 2 In the Part 1 of the series, we discuss about windows functions that analysts commonly encounter during malware analysis. In this part, we will…
Article Case Study: Evading Automated Sandbox - Python PoC Introduction With the increasing of Sandbox technology usage, every penetration tester should be prepared to face it one day. While a plenty of…
Article APT28: Cybercrime or State-sponsored Hacking? Once upon the APT28 In October of 2014, the security firm FireEye published a report that revealed the existence of a group of Russian hackers,…
Article Asprox / Kuluoz Botnet Analysis Introduction Kuluoz, aka Asprox, is a spam botnet that emerged in 2007. It has been known for sending mass of phishing emails used in conjunction…
Article Interview: Chris Steel, Chief Solutions Architect at Software AG Government Solutions, Inc. Chris Steel is the Chief Solutions Architect at Software AG Government Solutions, Inc., a leading software provider for the US federal government.…
