From SQL Injection To 0wnage Using SQLMap
SQL injection – one of the most critical vulnerabilities till now – is still included in the OWASP Top 10 […]
Category: Research
Anti-Forensics Hacks Incident Response Malware Analysis Penetration Testing Research Security Testing
Malware on Steroids Part 3: Machine Learning & Sandbox Evasion
Hey, It’s been a busy month for me and I was not able to save time to write the final […]
POODLE Advisory
What is POODLE? POODLE stands for Padding Oracle On Downgraded Legacy Encryption Vulnerability CVE: CVE-2014-3566 What is the attack? The […]
Bourne Again Shell (Bash) Remote Code Execution Vulnerability
Introduction A remotely exploitable vulnerability was discovered by Stephane Chazelas of Akamai in the GNU Bash command shell. The vulnerability […]
CISOs & Executives Cloud Security Cybersecurity Solutions & Defense Developers & DevSecOps Fundamentals Reading Research SMBs & Startups
Metrics For Your Information Security Solutions
Recently, on one of the security mailing lists a query was posted as to what metrics should be produced from a […]
Advanced Persistent Threats – De-Mystifying The Jargon
Introduction Advanced Persistent Threats (APTs) are growing as a serious concern as they represent a threat to an organization’s intellectual […]
Heartbleed Open SSL Bug FAQ & Advisory
Heartbleed Advisory & FAQ Please find below a quick FAQ on the Heartbleed vulnerability and what you can to address […]
Owning The Enterprise With HTTP PUT
During a routine penetration testing engagement, we found an IIS webserver with HTTP methods (verbs) like PUT and DELETE enabled […]
Insecure Implementation of Guest Wireless Networks
Most large organizations provide wireless facilities for their guest, which may include vendors, consultants, business associates, employees from other regions […]
SSL/TLS attacks: Part 2 – CRIME Attack
Compression Ratio Info-leak Made Easy (CRIME) attack: In the previous section we saw how the Chosen Plain-text attack was used […]