Article CGEIT certification exam: overview of domains [Updated 2021] Introduction When it comes to IT governance, organizations hope to find professionals who can help ensure their operations adhere to specific…
Article Exploiting NFS share [updated 2021] Recently, while performing a network-level penetration testing activity for one of the clients, I came across a vulnerability which was used to…
Article Infosec Skills Author Jason Welsh shares his passion for Linux and Cybersecurity Infosec Skills author Jason Welsh on his passion for Linux
Article Introduction to Public Key Infrastructure (PKI) Public Key Infrastructure (PKI) Public Key Infrastructure (PKI) uses mathematical structures and operators. Cryptography and cryptanalysis functions…
Article Methods for attacking full disk encryption Full disk encryption is part of cryptography that uses mathematical structures and operators. Cryptography and cryptanalysis functions are used in…
Article IDS/IPS overview A typical corporate network makes use of a number of networking devices for preventing attacks originating from the internet and maintaining the…
Article SonicWall firewall VPN vulnerability (CVE-2020-5135): Overview and technical walkthrough A critical stack-based buffer overflow vulnerability was discovered in SonicWall Network Security Appliance (NSA) VPN. In this article, we will…
Article How to reserve a CVE: From vulnerability discovery to disclosure What is a CVE? A CVE, meaning Common Vulnerabilities and Exposure, is a publicly reported vulnerability in software products. Vulnerabilities are…
Article Key findings from ESG’s Modern Application Development Security report A deep dive into security issues In August 2020, the Enterprise Strategy Group (ESG) published its report, “Modern Application Development…
Article ELECTION: 1 VulnHub CTF walkthrough Information shared in this article is intended for educational purposes only. Infosec and the author are not responsible for nefarious actions…
Article Cybersecurity Weekly: Phishing attacks spike, SHAREit patch, NSA exploit Malformed URL prefix phishing attacks spike 6,000%. SHAREit fixes security bugs in their app with one billion downloads. Hackers used an NSA exploit…
Article Stacks and Heap Memory is a crucial resource for any system when conducting reverse engineering. Malware analysts must understand the way memory is assigned to a…
Article Hack the Box [HTB] machines walkthrough CTF series — Omni Hack the Box (HTB) is an excellent platform that hosts machines belonging to multiple operating systems. Individuals have to solve the puzzle…
Article What types of cybersecurity skills can you learn in a cyber range? What is a cyber range? A cyber range is an environment designed to provide hands-on learning for cybersecurity concepts. This typically involves a…
Article Basic snort rules syntax and usage [updated 2021] In this series of lab exercises, we will demonstrate various techniques in writing Snort rules, from basic rules syntax to writing rules aimed at…
Article Cyber ranges: Who are they for and how can they help Why do you need hands-on training? The field of cybersecurity has a number of great books and references. Whether general overviews, deep dives into…
Article Cybersecurity weekly: SolarWinds blames intern, AOL phishing scam, Kia ransomware attack SolarWinds blames an intern for the weak password that led to a cyberattack. An AOL phishing email states your account will be closed. Kia Motors…
Article Dumping a complete database using SQL injection [updated 2021] What is SQL injection? SQL Injection is a web-based attack used by hackers to steal sensitive information from organizations through web…
Article Ghimob Trojan Banker: What it is, how it works and how to prevent it | Malware spotlight Introduction Malware is a popular term used to classify software with bad proposes that is part of our lives these days. Ghimob Trojan Banker is one…
Article Decrypting SSL/TLS traffic with Wireshark [updated 2021] The internet wasn’t designed to be secure from the start. Many protocols (such as HTTP and DNS) were designed to serve their purpose of conveying…
Article Purple team cyber ranges: Hands-on training for red and blue teams Businesses are always adapting and innovating when it comes to cybersecurity. While the use of layered defenses and red and blue teams used to be…
Article How To Earn CGEIT CPE Credits [updated 2021] Introduction Earning Continuing Professional Education (CPE) credits is mandatory to keep your CGEIT certification active and alive. CPE policy is…
Article AWS APIs abuse: Watch out for these vulnerable APIs In December 2020, Unit 42 researchers at Palo Alto Networks discovered a class of AWS application programming interfaces (APIs) that can be abused…
Article Elliptic curve cryptography As its name suggests, elliptic curve cryptography (ECC) uses elliptic curves (like the one shown below) to build cryptographic algorithms. Because…
