Article Avatar Rootkit: Deeper Dropper Analysis In this second article on the dropper, we will resume our analysis right where we left off: the decryption of the key and data. After the…
Article More PowerShell Remoting Artifacts In Part 1 of this series, we looked at PowerShell remoting artifacts under various Event IDs and ways to gather more information from those events…
Article Mobile, Smartphone & BYOD Owing to the development of mobile devices, people nowadays are overwhelmed by tons of information on the go. Curiously, despite being distracted by…
Article MASSCAN – Scan the internet in minutes Scanning is a really important part of any penetration testing. It gives us more information about our target which leads to narrowing the scope of…
Article Launching Shellcode from Cat Pictures We all know the internet loves cats! I was thinking of how we can combine cats and malware. Then, it struck me! [pkadzone zone="main_top"] I…
Article Building and Testing Your Own VPN Introduction Our previous articles on Virtual Private Networks has provided a comprehensive review of what a Virtual Private Network is all about.…
Article SAP NetWeaver J2EE Platform Security In the previous article, we discussed SAP NetWeaver ABAP Platform and its vulnerabilities. Today's topic is the J2EE platform, its architecture,…
Article IronWASP: An introduction Security scanners have always played an important role during penetration testing. It helps save a lot of resources as automated testing plays a big…
Article Machine learning for malware detection Machine Learning is a subfield of computer science that aims to give computers the ability to learn from data instead of being explicitly…
Article Advanced IronWASP In Part 1, we saw what all IronWASP is capable of and how it handles a single page scan. In Part 2, we shall see how it reacts to a complex web…
Article How Security Awareness Training Can Protect Small Businesses Small businesses are progressively utilizing information technology in business processes, but aren't doing it securely. In essence, they do not…
Article Top 7 Questions to Ask Your Vendors about Their Security Policies Cyber security is one of the most critical issues the U.S. faces today. The threats are real, and the need is pressing. The cyber security status is…
Article Hackerfest Quaoar CTF Walkthrough Quaoar is the first and easiest CTF from Hackerfest. We hosted the VM in Virtual box and ran nmap on its target IP. [pkadzone zone="main_top"] As…
Article Exploiting Protostar – Stack 0-3 In this article, we will be reverse engineering and exploiting simple C programs from Protostar VM by exploit-exercises.com. We will be mainly…
Article Targeting WSUS Server (For the first part of the series, From APK to Golden Ticket, see here ) Two servers were eligible for reaching a stable remote shell goal. The…
Article Minotaur CTF Walkthrough Minotaur is a boot2root CTF. Once you load the VM, treat it as a machine you can see on the network, i.e. you do not have physical access to this…
Article SAP HANA Platform Security After we embraced the security of SAP ABAP and Java platforms, now it's SAP HANA Platform's turn. You will learn the most important notes about its…
Article The Rise of the IoT Botnet: Beyond the Mirai Bot In the beginning, it was the Mirai botnet IoT botnets are probably one of the most dreaded menaces in the threat landscape, poorly configured and…
Article Keeping your Security Awareness Training up to Date The more you perform phishing simulation training your users become more and more security-conscious and thereby more aware of the basic phishing…
Article Hackerfest Sedna CTF Walkthrough Sedna is the second and medium level CTF from Hackerfest. We hosted the VM in Virtual box and ran nmap on its target IP. [pkadzone zone="main_top"]…
Article Memory Forensics Power: An Introduction Since we live in a digital world, it becomes utmost important for digital environment to be secure so that we can operate safely and reliably. So…
Article Steganography - Don’t judge a book by its cover Steganography is the art of hiding data in hiding data within non-secret text or data. A file, message, image, or an audio file can can be concealed…
Article Understanding Security Risk Concepts Understanding and analyzing the various risk factors to network security is of the utmost importance in information technology. Categorizing various…
Article Memory Forensics: Enumeration In Part 1 of this article, we have looked at the memory forensics power during the enumeration of forensically important objects like PROCESS, VAD…
