Article Malware Analysis - Follow along reversing the German government's "Bundestrojaner" Introduction I'm reasonably sure that anyone reading this particular article has heard about viruses, worms, trojans and malware; as well as…
Article OSINT and pre-game show for a on-site WLAN Penetration Test Wireless Penetration Testing in my opinion is one of the most fun parts of Ethical Hacking. It incorporates application exploits once you are on the…
Article Iframe & the security risk Web application security is always an important topic to discuss because websites seem to be the first target of malicious hackers. Hackers use…
Article Passive Fingerprinting During penetration testing, the main objective of the auditor is to exploit and gain access. For that to happen, it is required to have some…
Article Hacking AutoUpdate by Injecting Fake Updates Works against Java, AppleUpdate, Google Analytics, Skype, Blackberry and more Introduction [pkadzone zone="main_top"] [pkadzone zone="main_top"] We…
Article AlienVault OSSIM Review - Open Source SIEM Introduction As logs never lie, it's very important to aggregate and analyze the internal and external network logs constantly so that companies can…
Article Understanding the Origins of the China - Philippine Cyber War For many years, there has been a territorial dispute between China and Philippines over the Scarborough Shoal (Philippine Term: Panatag Shoal) or…
Article Man in the Browser Attack vs. Two Factor Authentication Authentication or E-authentication (Electronic authentication) is the way, technique, and method to establish a connection between two entities.…
Article Firewall Security Testing Testing firewall and IDS rules is a regular part of penetration testing or security auditing. However, because of the unique complexity involved of…
Article w3af walkthrough and tutorial part 4 - w3af tools, profiles and scripting This is part 4 in a series. Part 1 is available here:w3af Tutorial Part 1 Part 2 is available here:Discovery and Audit plugins Part 3 is available…
Article Defending yourself from Google hackers Before looking how we can prevent ourselves from Google hackers, let's see what Google hacking is. Google Hacking: [pkadzone zone="main_top"]…
Article Traffic Anomaly Detection – TCP and DNS Ever since the computer and the critical data it holds came into headlines, so did the malicious programs, attacks and the threat landscape. We have…
Article WebInspect With the exponential increase in internet usage, companies around the world are now obsessed about having a web application of their own which would…
Article Social Media Security Excerpted from Securing the Clicks: Network Security in the Age of Social Media by Gary Bahadur, Jason Inasi, Alex de Carvalho (McGraw-Hill; 2012)…
Article Vulnerability Scanners Security of a website is very crucial thing for any organization or for personal websites. It's always advised to check the security of the website…
Article Chapter 7: The role of cryptography in information security After its human resources, information is an organization's most important asset. As we have seen in previous chapters, security and risk management…
Article Metadata: The Hidden Treasure In today's Information age, Data is very crucial for every organization. From Information security point of view also data is what everybody is…
Article IObit Protected Folder Authentication Bypass Acknowledgements I would like to dedicate this article to all my friends, they know who they are, and to Irene, for her love and support.[pkadzone…
Article Protect Your Wireless Network from Leechers and Hackers Nowadays pretty much everyone uses wireless networking from your smart phone to your home and/or business networks. There are many security issues…
Article Playing by the Rules: Performing Firewall Audits Anyone who has ever managed a firewall will know that all too often it's a one way street. From the moment the device is plugged into the network,…
Article Analysis on pBot - a PHP IRC Bot that has Malicious Functions For IRC enthusiasts like me, it's just common to encounter IRC bots in underground channels that have integrated functions like port scanning, nmap,…
Article Chapter 8 - UEFI and the TPM: Building a foundation for platform trust Traditional boot processes cannot stop sophisticated attacks instantiated before operating system load. Consequently, we need a method to ensure…
Article What does a network security engineer do? MacLeod’s story Jim MacLeod's journey toward becoming a network security engineer wasn't typical. Learn what it takes to become a network security engineer.
Article Webinspect Part 2 In the first part of this article we have seen how to start a scan using WebInspect. As discussed earlier, Default scan settings tab is the heart of…
