Article Spearphishing: A New Weapon in Cyber Terrorism Introduction: Spear phishing attacks Spear phishing and its evolutions like the watering hole attack represent one of the most insidious attack…
Article Defending Against Web Attacks: X-XSS Protection In the previous article, we have seen how we can defend against click jacking attacks using the X-Frame-Options header. In this article, we will…
Article Nmap Cheat Sheet 5: The Final View of a Ninja Pentester As we discussed in the last topic of our Nmap Series, this will be our final touch for the cheat sheet. Here we will try to cover most of the topic…
Article “Phishing” is the Name of the Game Recent Trends Intro to the Concept Phishing is an Internet identity fraud that a malicious actor employs to dupe unsuspecting online users into…
Article Fingerprinting: Identifying applications When performing a Web Application Security Assessment, an important step is Fingerprinting which allows for further exploitation by an attacker. So…
Article How to acquire a user’s facebook credentials, using the credential harvester attack In this article you will see how you can obtain a user's Facebook credentials without him suspecting a thing. There are going to be provided two…
Article Dynamic Analysis Techniques As we have covered the malware analysis basics with static techniques here, this post is all about performing the basic analysis of malware using…
Article USBkill Anti-Feds Script Recently, a simple script has been presented that can help someone to brick a computer in case of emergency. This script was defined as a switch…
Article VENOM Vulnerability Opens Millions of Virtual Machines to Attack The VENOM vulnerability A security vulnerability recently patched is scaring the IT industry, its name is VENOM, and it is coded as CVE-2015-3456.…
Article Cracking 64bit Binaries Keygenning is a process of finding a valid key for a program. It is used for cracking/piracy. Most of the cracking has been documented on x86, there…
Article Format String Bug Exploration ABSTRACT The Format String vulnerability significantly introduced in year 2000 when remote hackers gain root access on host running FTP daemon which…
Article The 6 D’s of Cyber Security In this article, we will discuss the 6 D's of cyber security and how you can implement them in your own cyber-defense strategy -- Deter, Detect,…
Article Sharkfest 2014 Part I The sharkfest challenge was organized by Wireshark University. There are five challenges related to the trace files analysis. In each challenge,…
Article Mumblehard Malware Introduction In this article, we will learn about a malware known as Mumblehard which is known for targeting Linux and BSD OS. This malware opens a…
Article Writing Python Compiled Modules Any code that you write utilizing any compiled language like C, C++, or Java can be integrated or imported into another Python script. This code is…
Article The Basics with Node.js Examples Introduction Public-facing APIs have tremendously increased in the last couple of years. Businesses have seen that sharing their business data with…
Article Introducing IDA scripting IDC scripting language is used by IDA disassemblers to programmatically manipulate data assembly and parameter in the loaded IDB database file.…
Article Windows functions in malware analysis - cheat sheet - Part 1 In this article, we will learn briefly about the various windows functions commonly encountered by malware analysts. Windows functions Accept: This…
Article iOS Application Security Part 42 - LLDB Usage continued In this article, we will look at some of the most important commands in LLDB to debug applications. If you have been following this blog series, you…
Article Interview: J. Wolfgang Goerlich, Cyber Security Strategist for Creative Breakthrough J. Wolfgang Goerlich is an influential leader and IT management executive with the ability to act as a cultural change agent, driving security…
Article How to Prevent a Domain Name Theft 1. Introduction The domain names may cost far more than a real estate. For instance, Facebook paid USD 8.5 million to buy fb.com. The high prices of…
Article 15 + Modules for Making Your Drupal Website Secure Drupal is the popular open-source content management system written in PHP. Although it only powers around 2.5% websites on the web, but it is still…
Article Dealing with bad characters & JMP instruction So far, in previous articles, we have learnt how to develop our own working exploit for the Echo Server program; we used two different payloads with…
Article ELF File Format Executable and Linking Format (ELF) is the object format used in UNIX-like operating systems. This post introduces the ELF file format in the big…
