Article Inside Android Applications By the end of 2012, the number of Smartphone shipments around the world will explode to nearly 668 million units, and the Android operating system…
Article Network Topology 1. Introduction Whenever we're doing a penetration test, it's good to figure out the topology of the network we're testing. We can't figure out the…
Article Computer Network Diagnostics, Part 1 Sometimes, at the beginning of my adventure to the Internet, I was wondering how it is that I have a local area network and Internet access. See for…
Article The Internet Underground: Tor Hidden Services Some people think onion routing or the Tor network is for criminals and people with something to hide. Well, they are half right. The Tor network…
Article The easier form of hacking: Social engineering When we talk about hacking, especially in today's world, we hear the media giving us the stories of how hackers hack into a database and steal…
Article Wfuzz and WebSlayer 1. Introduction WfFuzz is a web application bruteforcer that can be considered an alternative to Burp Intruder as they both have some common…
Article Backtrack 5 R3 Walkthrough - Part 3 In this article we will we look at some of the other new tools that were added into Backtrack 5 with the release of its latest version R3. Wifite…
Article Wordfence: Security Plugin for WordPress Wordfence is a free security plugin for WordPress. Security "plugins" for Wordpress are often highly criticized as many may give a false sense of…
Article Executable Code Injection Introduction Code injection is a process of injecting executable code in a running process or static executable. Executable code in web applications…
Article Password Auditing on Active Directory Databases In this article we explore the options to acquire information from an online or offline Microsoft Active Directory database and its encryption keys.…
Article Analyzing malicious JavaScript Nowadays there are various threats in the wild that want to get malware installed on victim operating systems. Most of them use some kind of social…
Article Environment for Malware Analysis Introduction Before trying to analyze any kind of malware, we need to have a proper environment set up, so we can be most efficient and collect the…
Article Backtrack 5 R3 Walkthrough, Part 4 DHCPig DHCPig is a very nice and handy little tool used to carry out an advanced DHCP exhaustion attack. It does this by grabbing all the IP…
Article Chapter 12 – Applications of Biometrics Passwords are not secure and are useless as an access control… at least that is what many vendors and security consultants try to tell managers…
Article Getting Domain Information 1. Introduction When analyzing malware we can gather a lot of information just by identifying the IP addresses and domains the malware software…
Article Investigating the crime scene part 2: Recovering files with autopsy For part one of this series, please click here. So, in the previous part we saw how we can set up the environment for finding clues and also how to…
Article Introduction to Anonymizing Networks – Tor vs I2P The Right to Anonymity Every operation made in cyber space, every visited web site, and every web service accessed, leave traces of the user's…
Article Web Vulnerabilities Explained Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF,…
Article Eight Handy Security Tools for a Novice Here is a compilation of a few tools that we need to be aware of. The power, the performance and the capabilities of these tools are limited only to…
Article Analysis of Malware Samples with the Immunity Debugger API Introduction Immunity Debugger is a debugger which is very much like Ollydbg. In this tutorial we'll present the Python API that Immunity Debugger…
Article Keeping Your Social Media Accounts Safe Whether you're an average Internet user, or an IT pro who checks Twitter before getting out of bed and goes through several SSH sessions before the…
Article Owasp ZAP [highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our OWASP Top 10 Training course OWASP Top 10 Training. [/highlight]…
Article Low fidelity prototyping: The cheapest corrections in design stage ever! Agenda: 1. Prototyping – what is it? 2. The design process. 3. Showing the project to client before developers will write any line of code. 4.…
Article Exceptions In Injected Code Injection and API Hooking - When you don't know enough to know that you are getting it wrong... Code Injection and API hooking techniques are…
