Article Executable Code Injection Introduction Code injection is a process of injecting executable code in a running process or static executable. Executable code in web applications…
Article Password Auditing on Active Directory Databases In this article we explore the options to acquire information from an online or offline Microsoft Active Directory database and its encryption keys.…
Article Analyzing malicious JavaScript Nowadays there are various threats in the wild that want to get malware installed on victim operating systems. Most of them use some kind of social…
Article Environment for Malware Analysis Introduction Before trying to analyze any kind of malware, we need to have a proper environment set up, so we can be most efficient and collect the…
Article Backtrack 5 R3 Walkthrough, Part 4 DHCPig DHCPig is a very nice and handy little tool used to carry out an advanced DHCP exhaustion attack. It does this by grabbing all the IP…
Article Chapter 12 – Applications of Biometrics Passwords are not secure and are useless as an access control… at least that is what many vendors and security consultants try to tell managers…
Article Getting Domain Information 1. Introduction When analyzing malware we can gather a lot of information just by identifying the IP addresses and domains the malware software…
Article Investigating the crime scene part 2: Recovering files with autopsy For part one of this series, please click here. So, in the previous part we saw how we can set up the environment for finding clues and also how to…
Article Introduction to Anonymizing Networks – Tor vs I2P The Right to Anonymity Every operation made in cyber space, every visited web site, and every web service accessed, leave traces of the user's…
Article Web Vulnerabilities Explained Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF,…
Article Eight Handy Security Tools for a Novice Here is a compilation of a few tools that we need to be aware of. The power, the performance and the capabilities of these tools are limited only to…
Article Analysis of Malware Samples with the Immunity Debugger API Introduction Immunity Debugger is a debugger which is very much like Ollydbg. In this tutorial we'll present the Python API that Immunity Debugger…
Article Keeping Your Social Media Accounts Safe Whether you're an average Internet user, or an IT pro who checks Twitter before getting out of bed and goes through several SSH sessions before the…
Article Owasp ZAP [highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our OWASP Top 10 Training course OWASP Top 10 Training. [/highlight]…
Article Low fidelity prototyping: The cheapest corrections in design stage ever! Agenda: 1. Prototyping – what is it? 2. The design process. 3. Showing the project to client before developers will write any line of code. 4.…
Article Exceptions In Injected Code Injection and API Hooking - When you don't know enough to know that you are getting it wrong... Code Injection and API hooking techniques are…
Article Privacy Impact Assessment What is a Privacy Impact Assessment (PIA)? Privacy Impact Assessment is a process to determine the impacts of a program, system, service, scheme,…
Article Domain theft and the possibilities for recovery of the stolen domain names Introduction On October 24th 2012, Diigo, a social bookmarking website allowing signed-up users to bookmark and tag web pages, had its domain,…
Article Handy Devices Revolution: Handy Pentesting & Hacking Part 1 A few weeks ago, I wrote an article entitled 'Transforming your Android Phone into a Network Pentesting Device' which is obviously about turning…
Article How do I go about hacking file transfer protocol? Part I Usually, I write about human resource management, risk assessment and project estimation almost every day, but from time to time, I get an e-mail…
Article Websecurify Walkthrough, Web Application Penetration Testing Tool [caption id="" align="alignright" width="200"] Websecurify Logo[/caption] Information security is a very important thing for the modern Internet…
Article Using Sandboxes For Hostile Program Analysis Sandboxes Introduction[pkadzone zone="main_top"] If you're reading this article, you have probably heard of a sandbox before. But, in case you…
Article Estimating Projects Part III In previous articles on planning and estimating projects, we explored the basic principle of estimates. Estimating cannot really determine precisely…
Article How do I go about hacking file transfer protocol? Part II In the previous part of this article series, we introduced the topic of FTP security, and the basics of how the protocol works. After reading that…
