Article Learning Pentesting with Metasploitable3 Metasploitable is back with version 3, which includes lot more interesting vulnerabilities. Metasploitable3 is special because it is not a…
Article /dev/random:Sleepy CTF Walkthrough In this article, we are going to solve a machine which was posted as another VM challenge on the VulnHub website. The machine is named Sleepy. Check…
Article How Hackers Use Fear and Urgency to Get Your Information Your PayPal account is frozen. Provide documents or lose it. The IRS is saying there is an error on your tax return, click the link to resolve it.…
Article Malware-as-a-service Section 1. Introduction In May 2017, a new form of ransomware called WannaCry affected more than 230,000 personal and business computers in over 150…
Article Judy Malware: Millions of Android Devices Potentially Exposed It has happened again; security experts have discovered a malicious application inside the official Google Play store. The new malware, dubbed…
Article Role of Threat Intelligence in Business World New, sophisticated threats persist in emerging daily across various platforms like social media, mobile, email and web applications. Simultaneously,…
Article The Major Security Issues Surrounding Virtual Personal Assistants Introduction As it has been reviewed in past articles, the Smartphone has become a prime target for any just about any types and kinds of hacks. One…
Article Malware Anti-Analysis Techniques-TLS and Process Hallowing In continuation to previous articles, this article will also show a more sophisticated approach used by malware to thwart anti-analysis techniques.…
Article Top 7 Tips to Secure Your Passwords In our current world where technology is finding its way into all aspects of our life, it is important to understand how to properly protect…
Article Pluck: 1 CTF Walkthrough Pluck: 1 is a vulnerable machine created by Ryan Oberto. It surfaced on VulnHub on 11th March 2017. It can be downloaded from…
Article How to Protect Your Right to Personal Identity in the Digital Era As stated by the FBI's Internet Crime Complaint Center (IC3), identity theft "occurs when someone appropriates another's personal information…
Article SambaCry: Hundreds of thousands of Linux systems exposed to a campaign that delivers cryptocurrency miner CVE-2017-7494 - A Samba seven-year-old remote code execution vulnerability At the end of May, security experts discovered a seven-year-old remote…
Article Learning Pentesting with Metasploitable3 – Part 2 Introduction: This is the second part in this series of articles on Learning Pentesting with Metasploitable3. We have prepared our lab setup in our…
Article More Bypassing of Malware Anti-Analysis Techniques For last few articles, we have seen how malware employs some anti-analysis techniques and how we can bypass those techniques. Now, let's raise the…
Article How Much Physical Security is Enough? When it comes to security, physical security is something which either takes a back seat or is not dealt with expertise. Though there are a lot of…
Article NAC-hacking - Bypassing network access control Conducting internal network penetration tests is always fun. There are vulnerabilities that easily help me to get to "keys of the kingdom" i.e.…
Article Troll 2 exploitation walkthrough This write-up will walk you through an exploitation of Troll 2 a boot2root VM; the challenge is designed my Maleus. You can download the VM from the…
Article Big Data Discrimination Introduced in 1997, the term "Big Data" has grown in popularity in the past years. [pkadzone zone="main_top"] Credit: IBM-Big-Data-Definitions by…
Article Which Malware are Specifically Designed to Target ISC Systems? Introduction – ICS malware, a rarity in the threat landscape At the end of May, security experts discovered a seven-year-old remote code execution…
Article Ew! Skuzzy CTF Walkthrough In my last article, we exploited a vulnerable machine from the vulnhub.com. That article must have given you some idea about hacking a machine…
Article Web Application Pentest Guide Part-I In this article, we are going to pentest a web application which was developed by HP for scanner evaluation purpose. We will be demonstrating the…
Article Introduction to Anti-Phishing Throughout the course of your day, think about all the clicking you do with your mouse. You click again and again while opening a never-ending…
Article Anti-Phishing: The Importance of Phishing Awareness Training Of all the precautions you need to take to keep your company afloat, planning for phishing attacks may be the most important by far. Phishing has…
Article Anti-Phishing: Measuring Phishing Awareness Training Effectiveness Do you train your employees to understand what phishing is, what it looks like and what to do if they realize they’ve been targeted? As you’re about…
