Ransomware Simulation
Attack is the secret of defense; defense is the planning of an attack. – Sun Tzu, The Art of War […]
Category: Audience
CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Fundamentals Hacks Malware Analysis Penetration Testing Research Security Testing SOC Analysts Social Engineering Tools
Malware Development – Welcome to the Dark Side: Part 1
If you are in cybersecurity, especially Red Teaming, writing a full-undetectable (FUD) malware is a great skill to have. Folks […]
USB Forensics
In this article we will learn on how to do the forensic of USB devices, how to correlate the USB […]
Social Engineering & "Influence", by Dr. Cialdini
Over the past few years, we have completed a number of social engineering tests as part of advanced penetration testing […]
GeoEdge – IP Address Locator
From forensics point of view, investigating “which user did what on the application/server that lead to its compromise” is of the most importance. Similar scenario applies to Email investigation. It’s quite simple now to find out the IP Address of the person who is sending out fishy or threatening emails to the victim(s).
A Phishy Story
Phishing sounds similar to fishing. Fishes are to the volume of internet users today much like fishermen are to phishers. […]
Case Studies CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Malware Analysis Research SOC Analysts
Deobfuscating Javascript Malware
Some days back I was greeted by a Google Safe browsing warning when I tried visiting a ‘known’ site. As […]
SQL Injection in Stored Procedure & Preventing from the same
Following is the small example of creating a stored procedure. ==================================================================== CREATE PROC sp_login (@loginid nvarchar(25),@password nvarchar(25)) AS DECLARE @SQLString […]
HIPAA Compliance – Introduction & Pointers
Introduction Protecting the confidentiality, integrity and availability of patient information by healthcare organizations became a legal requirement via the Health […]
LinkedIn Cross-Site-Scripting (XSS) & Content Spoofing Vulnerability
Couple of days back, I reported XSS and Content Spoofing on LinkedIn. Here are the details of the issues. Cross Site Scripting: […]