Article Code Review of Node.Js Applications: Uncommon Flaws This article covers the left-over vulnerabilities from Part-1. In this article, we will have an in-depth look at some uncommon flaws and how to find…
Article Maltego: Making sense of data Information gathering has always been a crucial part of any penetration testing. The more information we have, the more likely we will be able to…
Article RIPS – Finding vulnerabilities in PHP application The biggest fear of any developer has always been that their site may get hacked and occasionally it does end up being hacked. For a very long time,…
Article RanRan and PetrWrap Threats: Political and Criminal Abuses in the Ransomware Landscape Ransomware continues to be one of the most profitable cyber threats, for this reason, every week we see strains of malware in the wild with new…
Article Advanced Technical Review of VPN Infrastructure Impacts Introduction As it was reviewed in the last article, the procurement and deployment of a Virtual Private Network Infrastructure can be a complex…
Article Avatar Rootkit: Deeper Dropper Analysis In this second article on the dropper, we will resume our analysis right where we left off: the decryption of the key and data. After the…
Article More PowerShell Remoting Artifacts In Part 1 of this series, we looked at PowerShell remoting artifacts under various Event IDs and ways to gather more information from those events…
Article Mobile, Smartphone & BYOD Owing to the development of mobile devices, people nowadays are overwhelmed by tons of information on the go. Curiously, despite being distracted by…
Article MASSCAN – Scan the internet in minutes Scanning is a really important part of any penetration testing. It gives us more information about our target which leads to narrowing the scope of…
Article Launching Shellcode from Cat Pictures We all know the internet loves cats! I was thinking of how we can combine cats and malware. Then, it struck me! [pkadzone zone="main_top"] I…
Article Building and Testing Your Own VPN Introduction Our previous articles on Virtual Private Networks has provided a comprehensive review of what a Virtual Private Network is all about.…
Article SAP NetWeaver J2EE Platform Security In the previous article, we discussed SAP NetWeaver ABAP Platform and its vulnerabilities. Today's topic is the J2EE platform, its architecture,…
Article IronWASP: An introduction Security scanners have always played an important role during penetration testing. It helps save a lot of resources as automated testing plays a big…
Article Machine learning for malware detection Machine Learning is a subfield of computer science that aims to give computers the ability to learn from data instead of being explicitly…
Article Advanced IronWASP In Part 1, we saw what all IronWASP is capable of and how it handles a single page scan. In Part 2, we shall see how it reacts to a complex web…
Article How Security Awareness Training Can Protect Small Businesses Small businesses are progressively utilizing information technology in business processes, but aren't doing it securely. In essence, they do not…
Article Top 7 Questions to Ask Your Vendors about Their Security Policies Cyber security is one of the most critical issues the U.S. faces today. The threats are real, and the need is pressing. The cyber security status is…
Article Hackerfest Quaoar CTF Walkthrough Quaoar is the first and easiest CTF from Hackerfest. We hosted the VM in Virtual box and ran nmap on its target IP. [pkadzone zone="main_top"] As…
Article Exploiting Protostar – Stack 0-3 In this article, we will be reverse engineering and exploiting simple C programs from Protostar VM by exploit-exercises.com. We will be mainly…
Article Targeting WSUS Server (For the first part of the series, From APK to Golden Ticket, see here ) Two servers were eligible for reaching a stable remote shell goal. The…
Article Minotaur CTF Walkthrough Minotaur is a boot2root CTF. Once you load the VM, treat it as a machine you can see on the network, i.e. you do not have physical access to this…
Article SAP HANA Platform Security After we embraced the security of SAP ABAP and Java platforms, now it's SAP HANA Platform's turn. You will learn the most important notes about its…
Article The Rise of the IoT Botnet: Beyond the Mirai Bot In the beginning, it was the Mirai botnet IoT botnets are probably one of the most dreaded menaces in the threat landscape, poorly configured and…
Article Keeping your Security Awareness Training up to Date The more you perform phishing simulation training your users become more and more security-conscious and thereby more aware of the basic phishing…
