Article What is Business Email Compromise (BEC)? Social media platforms may be a popular communication mode, but email remains the preferred business communication tool. The Radicati Group expects…
Article Cryptanalysis tools Some terms and definitions Alice – Sender of the message Bob – Receiver Eve – Eavesdropper or unintended party Plaintext – Message to be sent
Article How to Prevent Business Email Compromise With Multi-Factor Authentication Business email compromise (BEC) scams cost businesses $5.3 billion from 2013 to 2016. BEC fraud is a problem for companies of all sizes and all…
Article 2017 OWASP A4 Update: XML External Entities (XXE) Extensible Markup Language External Entities (XXE) is currently ranked fourth on OWASP’s 2017 Top Ten list of application security risks. Extensible…
Article Building your own pentesting environment Ethical hacking is a term used to describe hacking done by a person/individual to identify the potential vulnerabilities or weakness in the system…
Article Reverse engineering tools First, we're going to describe the process of compiling/assembling a source code to an executable file. This is very important, so we need to…
Article 2017 OWASP A6 Update: Security Misconfiguration The Open Web Application Security Project (OWASP) is a volunteer group whose goal is to build a more robust Internet. One of their flagship…
Article Computer forensics investigation – A case study Disclaimer: We have not performed any live investigation. This was a part of our university assignment, wherein we assumed the roles of forensics…
Article Combat Business Email Compromise Scams With New Awareness Training Tools From SecurityIQ Business email compromise (BEC) attacks are growing in both frequency and severity. According to the FBI, BEC attacks cost businesses $5.3 billion…
Article Basics of cryptography: The practical application and use of cryptography Cryptography originated about 4000 years ago, and the world of cryptography has evolved a lot since then. Today 'Cryptography' is omnipresent in our…
Article 2017 OWASP A9 Update: Using Components With Known Vulnerabilities Introduction It does not take a rocket scientist to understand using components with known vulnerabilities is a very poor choice. While solving this…
Article All You Need to Know About the Cambridge Analytica Privacy Scandal Introduction The commercial data analytics company Cambridge Analytica is in the middle of one of the biggest privacy scandals of the last years;…
Article Android penetration tools walkthrough series: MobSF This article reviews the step-by-step procedures for deploying a Pentesting tool called "MobSF," which is utilized primarily on the Android OS.…
Article Advance persistent threat - Lateral movement detection in Windows infrastructure - Part II In the previous article "Advanced Persistent Threat - Lateral Movement Detection in Windows Infrastructure - Part I," we discussed the advanced…
Article Introduction to the paros proxy lightweight web application tool The Paros Proxy Lightweight Web Application tool is one of the most popular penetration testing tools for web applications. Web app developers and…
Article XML vulnerabilities are still attractive targets for attackers XXE flaws in XML parsers can expose sensitive data, enable attacks, and affect major services. The article explains XXE basics, real exploits,…
Article Vulnerability scanning with Metasploit part I Metasploit Framework, the Metasploit Project's best-known creation, is a software platform for developing, testing, and executing exploits. It can…
Article 2017 OWASP A10 update: Insufficient logging & monitoring Many critics of the Open Web Application Security Project (OWASP) Top Ten list view insufficient logging and monitoring, new on the list in 2017, as…
Article Preventing Business Email Compromise (BEC) With Strong Security Policies Introduction Business email compromise (BEC) is a phishing and social engineering scam threatening every organization in every sector on every…
Article Android penetration tools walkthrough series: Apktool In this article, we will look at the step by step procedure to setup utility called "Apktool" and its usage in android application penetration…
Article Android penetration tools walkthrough series Dex2Jar, JD-GUI, and Baksmali In this article, we will be focusing on Android penetration testing tools such as Dex2Jar, JD-GUI, and Baksmali to work with reverse engineering…
Article 2017 OWASP A3 Update: Sensitive Data Exposure Introduction Si vis pacem, para bellum! This classic Latin quote by Vegetius translates to "If you want peace, prepare for war." As far as aphorisms…
Article 9 free risk management tools for IT & security pros Selecting and following the appropriate risk assessment methodology is key to creating a safe computing environment. However, the reality is that…
Article Pentesting for PCI DSS compliance: 6 key requirements For any organization that processes, stores or transmits credit card data, penetration testing has been an obligation since 2013. That's when the…
