Article n00bz CTF Challenge #2: Practical Website Hacking In the second edition of our n00bs CTF Labs, we've created 13 small challenges to test your web app hacking skills. The challenges are based on…
Article Identifying Vulnerable Code No matter how much care you take during development of any software, security issues creep in. Hence, it is important to get the code reviewed for…
Article Interview: Chris Rouland Chris Rouland is a 25-year veteran of the information security industry and a valued member of the Atlanta technology community. Chris has founded…
Article Secure Your Application Using .htacess File What is Wordpress? WordPress is a free, open-source blogging tool and content management system (CMS) based on PHP and MySQL. Features include a…
Article Firefox Plug-ins a Security Engineer Needs to Know Plug-ins are programs that runs within software, which can improve the features of software. For example, a browser could be simply used for…
Article Cyberspace : A Fast-growing Area of Crime Caught in a growing Internet community, many users have already seen the downside of being dependent on the web for many daily activities. Many may…
Article Introduction to Reverse Engineering In computing, reverse engineering is the process of understanding how things work and reusing the information to do something. This is applicable…
Article Content Security Policy The entire web application security model is built on the idea of "Same Origin Policy" which restricts the content of one domain being accessed by…
Article Office 365 Compliance Matrix When people find out what I do for a living, they often ask if I think the Cloud is secure. We’ve written about this before and my response is along…
Article Win32/Lethic Botnet Analysis Introduction Lethic is a spam botnet consisting of an estimated 210 000 - 310 000 individual machines which are mainly involved in pharmaceutical…
Article The Top Five Cyber Security Vulnerabilities Introduction In the last weeks, the hack of the Federal Office of Personnel Management (OPM), apparently tied to Chinese sponsored hackers, raised…
Article Social Engineering - A Case Study In this article, I am going to illustrate a real life social engineering hack that I did for my friend. He saw some property ads online; he filled…
Article MOOSE Malware: Analysis Part One of this series was a very basic level, and had only thrown light on what Moose Malware actually is, as well as its components and related…
Article How to Deal with Reverse Domain Name Hijacking 1. Introduction The fact that one owns a trademark which is identical or confusingly similar to a domain name does not necessarily mean that she is…
Article Insecure Data storage with NoSQL Databases In one of our previous articles, we discussed how Android applications could be vulnerable to insecure data storage. This is a follow-up article to…
Article HTTP/2: Enforcing Strong Encryption as the De Facto Standard HTTP Protocol, which serves as the communication channel for HTTP requests and responses on the Web, has received its first major revision since…
Article Animal Farm APT and the Shadow of French Intelligence Babacar and Casper Almost every government is working to improve its cyber-capabilities. The majority of them already have in their arsenal powerful…
Article Lessons from Deficient Java Applet-based Authentication Java Applets are bytecodes that are delivered via the browser, and executed using the Java Virtual Machine (JVM) at the client-side. Java Applets…
Article 15 Must Have Books for InfoSec Enthusiasts and IT Security Professionals Aside from security articles, podcasts and videos, books are great resources for developing new skills, improving one's career growth, and gaining…
Article Interview: Steve Lufkin, CEO of Vantix Diagnostics Steve Lufkin is CEO of Vantix Diagnostics, a ground-breaking healthcare technology platform that runs the most common blood tests providing results…
Article Rootkits: User Mode In this article, we will learn about what rootkits are and how they operate. The focus will be on two types of Rootkits exploits: User Mode & Kernel…
Article 35 Awesome InfoSec Influencers You Need to Follow I would like to share some security researchers and information security professionals you might have missed following. I think they deserve credit…
Article Are You InfoSec Geek Enough? Take This Quiz and Let’s See What You Got! I have prepared a simple quiz for you guys out there who are brave enough to test if you really are a certified InfoSec geek. Take note of the…
Article Rootkits: Kernel Mode We have learned in part one of this series about the Rootkits and how they operate in User Mode; in this part of the series we will up the ante and…
