Article Snort Lab: Blinding IDS IDSs and IPSs can be attacked by generating false positives. If you can generate enough false positives, you can potentially: Overwhelm the IDS…
Article Panama Papers - How Hackers Breached the Mossack Fonseca Firm Introduction The Panama Papers are a huge trove of high confidential documents stolen from the computer systems of the Panamanian law firm Mossack…
Article Encryption Everywhere? This article discusses opportunistic encryption (OE) and ways to set up systems so that they will automatically encrypt whenever they can, rather…
Article Cryptographic algorithms lab For this lab we'll be using GPG, OpenSSL to demonstrate symmetric and asymmetric encryption/decryption and MD5, SHA1 to demonstrate hash functions.…
Article Snort Lab: Rule Performance Analysis There are various for analyzing Snort rules performance. In this lab, we are going to focus on the one that directly applies to rules: Rule…
Article Android forensics labs Exercise 1: Getting started with ADB Objective: "adb" is an essential tool for interacting with Android devices. We use this utility in multiple…
Article Information Security Vulnerabilities of Trains 1. Introduction Since the invention of the steam locomotive, there have been continuous technological developments in the field of railway…
Article Phishing Definition and History Phishing Definition and History Related articles in this section: [clist id="1470243405619" post="35256"] If you’re new to the concept of phishing,…
Article Public Key Infrastructure: Concepts & Lab Setup Executive Summary This article is a detailed theoretical and hands-on with Public Key Infrastructure (PKI) and OpenSSL based Certificate Authority.…
Article SNMP pentesting In the previous article about SNMP, we have discussed how to set up your own vulnerable lab where we have configured pfSense and VyOS with SNMP…
Article Mastering Mobile Forensics Smartphone forensics is relatively new and quickly emerging field of interest in the digital forensic community and law enforcement, today's mobile…
Article 5 Reasons for Segmenting Your Phishing Simulation Campaigns Phishing campaigns are part of security awareness education and training There are several important reasons for why you would want to segment your…
Article SS7 protocol: How hackers might find you The Signalling System No 7 (SS7), also known as Common Channel Signalling System 7 (CCSS7) or Common Channel Interoffice Signaling 7 (CCIS7), is a…
Article Memory Forensics This mini-course started with forensic memory basics, in this mini-course, we have explained how you can and what you can find artifacts from…
Article Snort Lab: Activate / Dynamic Rules We've already learned that using flowbits allows us to make Snort rules work as a group. In this lab, we are going to look at different, and a more…
Article Phishing Simulation - How Do You Calculate Effectiveness and ROI? (Part 1 of 2) We now know that the best way to instill people with a healthy degree of "inbox suspicion" is to flood them with harmless but realistic-looking…
Article Penetration testing of a citrix server Here I'll discuss how I did a pentest of a Citrix server in a lab network. First, let us understand about Windows terminal service. [pkadzone…
Article ISIS Cyber Capabilities Introduction At the end of April 2015, the US Government announced the first attack conducted by the Cyber Command against online activities…
Article Mobile device penetration testing For this lab, we'll be using Kali Linux and android emulator to do mobile penetration testing. Kali Linux is one of the Debian-based operating…
Article A Hacker’s Tips for Running a Security Company There's always the sting of irony when a cyber security company gets hacked. Not to mention the embarrassment and bottom line impact suffered by the…
Article The art of searching for open source intelligence The Internet is a big ocean, and it carries loads of information you might be interested in or looking for, but where and how to find that…
Article Penetration Testing and Cloud Platforms. A holistic security approach also encompasses the aspect of penetration testing. Not only is it good practice to conduct regular penetration tests…
Article Phishing Attacks on the Retail Industry Phishing Attacks in the Retail Industry Phishing Targets by Industry: Financial Phishing Government and Military Phishing Healthcare Phishing Retail…
Article Phishing on Social Networks - Gathering information Phishing on Social Networks - Gathering information Most people will remember the scandalizing 2015 new headlines when sensitive personal data…
