Article Gaining Shell Access via UART Interface Part 3 This is the 3rd post in IoT-Hacking-Shell-via-UART series. I hope you have gone through the first two parts. If not, please go through them. In this…
Article And Again, About Storing Passwords When the question of storing passwords arise, the first idea is to simply keep them in clear text in the corresponding table in the database.…
Article Top threats to online voting from a cybersecurity perspective Last year, NASA set up an online voting campaign to pick a name for an astronomical object, a small ice-covered asteroid roving through a remote…
Article The top 15 must-have books in InfoSec An essential part of building information security (InfoSec) professionals' expertise is played by hands-on experience and years of activity.…
Article Mirai botnet evolution since its source code is available online Mirai – The evolving IoT threat Since the release of the source code of the Mirai botnet, crooks have improved their own versions by implementing…
Article Gmail Phishing Scams You Need to Know About Google Account Security Checkup by Wesley Fryer via Flickr. Licensed under CC BY 2.0 [pkadzone zone="main_top"] While Google has set up a war room
Article Beginner’s Guide to Pentesting IoT Architecture/Network and Setting Up IoT Pentesting Lab - Part 1 In this post, I will explain how to pentest an IoT Network/Architecture. Also, I will explain how to set up an IoT Pentesting lab for getting…
Article Beginner’s guide to Pentesting IoT Architecture/Network and Setting up IoT Pentesting Lab - Part 2 This is the 2nd part in Pentesting and Setting up our own IoT Lab. I hope you have gone through the first part. If not, please go through it.…
Article USV: 2017 Part 1 CTF Walkthrough In this article, we will learn to solve another Capture the Flag (CTF) challenge which was posted on VulnHub by "Suceava University." As you may…
Article Kioptrix VMs challenge walkthrough In this article, we will walk through all the basic Kioptrix VMs (total 5) which are available on vulnhub.com. The difficulty level of all these…
Article What Does Compliance With OWASP Really Mean for Financial Institutions? The latest Cost of Cyber Crime study by Accenture found financial services among the most targeted and vulnerable industries, with breaches tripling…
Article PowerShell For Pentesters Part 2: The Essentials of PowerShell Introduction PowerShell represents one of the most interesting and powerful languages for a pentesting purpose as we explained in the first part of…
Article Security vulnerabilities of cryptocurrency exchanges 1. Introduction Many experts argue that cryptocurrencies may radically change not only the financial sector but also the way society operates. The rea
Article Video Tutorial - Paraben E3 Platform and Mobile Phone Forensics Transcription Chris S., InfoSec Institute: Hello and welcome to today's weekly video from Infosec Institute. This week we'll be doing something a…
Article GCIH certification overview The GIAC Certified Incident Handler (GCIH) is one of the most prestigious certs for IT professionals who are starting their journey into the world…
Article Pentester’s Guide to IoT Penetration Testing IoT penetration testing specifics from a certified ethical hacker with 5+ years of experience. With the growing risk to IoT security, penetration…
Article Detecting Data Breaches with Honeywords Introduction Data breaches and security issues related to information leakage are a subject that has been making headlines in recent times. When a…
Article Five techniques to bypass Office 365 protections used in real phishing campaigns In the last couple of years, crooks devised several techniques to bypass anti-phishing filters, let's analyze them to understand the way threat…
Article All about SamSam Ransomware Ransomware: Perhaps Today's No.1 Security Threat Threatening and Risky for you and fruitful for hackers, ransomware has taken over as today's no. 1…
Article Can you spot the phishing scams in 3 of our most popular templates? In a Webroot study of 600 IT decision makers, phishing attacks leapfrog from the number three spot in 2017 to the number one breach concern among…
Article BSides Vancouver: 2018 Walkthrough In this article, we will learn to solve a Capture the Flag (CTF) challenge which was posted on VulnHub by "Abatchy." This CTF is a part of BSides…
Article BabaYaga and the Rise of Malware-Destroying Malware 1. Introduction The team working behind Wordfence (a security plugin for WordPress websites) discovered a new type of malware called BabaYaga. It…
Article How to Get Your Employer to Pay for Your IT Security Training — 10 Steps Introduction “Who’s paying for this?” It’s an age-old question, and while it didn’t start with information technology, it certainly seems to be one…
Article Spam vs. phishing: Definitions, overview & examples Spam is usually defined as unsolicited commercial e-mail, often from someone trying to sell something. Spammers are not generally trying to get…
