Article Windows Functions in Malware Analysis - Cheat Sheet - Part 2 In the Part 1 of the series, we discuss about windows functions that analysts commonly encounter during malware analysis. In this part, we will…
Article Case Study: Evading Automated Sandbox - Python PoC Introduction With the increasing of Sandbox technology usage, every penetration tester should be prepared to face it one day. While a plenty of…
Article APT28: Cybercrime or State-sponsored Hacking? Once upon the APT28 In October of 2014, the security firm FireEye published a report that revealed the existence of a group of Russian hackers,…
Article Asprox / Kuluoz Botnet Analysis Introduction Kuluoz, aka Asprox, is a spam botnet that emerged in 2007. It has been known for sending mass of phishing emails used in conjunction…
Article Interview: Chris Steel, Chief Solutions Architect at Software AG Government Solutions, Inc. Chris Steel is the Chief Solutions Architect at Software AG Government Solutions, Inc., a leading software provider for the US federal government.…
Article Insider vs. outsider threats: Identify and prevent In my last article, we discussed on a step-by-step approach on APT attacks. The origin of any kind of cyber-attack is through an external or an…
Article Cyber Threat Assessment Template For Special Forces The growing number of cyber threats highlight the risks that US critical infrastructure and Special Forces face. Once considered weak in nature…
Article Reverse Engineering of Embedded Devices Introduction This article is for colleagues who are interested in studying the reverse engineering of embedded devices starting from the…
Article Build A Simple Cloud Using the Open Hardware Technology Abstract Data storage has become a critical problem that facing computer scientists. Not only is it the huge amount of data; it is also also the…
Article Sharkfest 2014 Part II In the first part of our article, we solved the first three challenges, so in this article we will continue with rest of the challenges. CHALLENGE…
Article The seven steps of a successful cyber attack Advanced cyber attacks can now nest inside a network for more than 200 days on average before being discovered. In the infamous Sony Pictures…
Article Bypassing Jailbreak Detection Using Xcon In this small article, we will look at a very handful utility named Xcon for bypassing Jailbreak detection. As per the wiki page ... xCon is a…
Article Interview: Cortney Thompson, Chief Technology Officer at Green House Data Cortney Thompson is the Chief Technology Officer at Green House Data leading the strategic direction of the company's cloud hosting and colocation…
Article The Pitfalls of Client-Side Authentication: Solutions to Net-Force JavaScript CTF challenges Client-side authentication is when authentication checks are performed completely at users' side. The idea is that the authentication procedures,…
Article Security+ Study Guide: Domain 1.0 - Network Security For many years, IT and Security were not usually on speaking terms: IT’s primary responsibility was to just get everything to work, and if it wasn’t…
Article Card fraud in the deep web The majority of activities related to credit card fraud are made in the underground forums and specialized hidden services in the deep web. These…
Article Malware Researcher’s Handbook: Introduction All the Stuff You Know Before Starting Research Malware research contains a lot of information like reverse engineering, exploit-kit, exploit…
Article Enhancements in Damn Vulnerable iOS app version 2.0 In this article, I would like to give a quick walkthrough of the new vulnerabilities and challenges that we have added in version 2.0 of Damn…
Article Interview: Dr. Engin Kirda Dr. Engin Kirda is the Co-Founder & Chief Architect of LastLine and research professor at Northeastern University and the director of the…
Article Analyzing and writing a local exploit So far, in the previous articles, we learnt how to exploit an application remotely. We ran the Python script directly on the Machine B, which was…
Article Interview: Darren Guccione, Co-founder of Keeper Security Darren is the co-inventor of Keeper Security and started the company with extensive experience in product design, engineering and development. At…
Article Transition of ISO 27001: 2005 to ISO 27001: 2013 ISO 27001 is an international standard published by the International Standard Organization (ISO). This standard acts as a specification for an…
Article Netcat uses Netcat is one of the most common tools used by hackers to exploit systems. It runs on a variety of systems including Windows, Linux, Solaris, etc.…
Article MOOSE Malware: Basics In this article series, we will learn about a famous Linux family of malware known as MOOSE, which is used to steal unencrypted traffic over the…
