Malware on Steroids – Part 2: Evading Antivirus in a Simulated Organizational Environment
Recap In the previous post, we wrote a simple CMD Reverse Shell over TCP. However, in a real-life scenario, things […]
Category: Security Testing
Windows Kernel Exploitation
This write-up summarizes a workshop/humla conducted by Ashfaq Ansari on the basics of various kinds of attacks available for exploiting […]
Thick Client Application Security Testing
Introduction A thick client is a computer application runs as an executable on the client’s system and connects to an […]
Anti-Forensics Hacks Incident Response Malware Analysis Penetration Testing Research Security Testing
Malware on Steroids Part 3: Machine Learning & Sandbox Evasion
Hey, It’s been a busy month for me and I was not able to save time to write the final […]
Server Side Request Forgery (SSRF)
Introduction Is your server protected against port scanning? The general answer will be “Yes, I have a firewall which restricts […]
The Lesser Known XE Attack
The Meaning XE which stands for XML Entity is a standard for representing sets of data. Meanwhile, Entities are more […]
CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Fundamentals Hacks Malware Analysis Penetration Testing Research Security Testing SOC Analysts Social Engineering Tools
Malware Development – Welcome to the Dark Side: Part 1
If you are in cybersecurity, especially Red Teaming, writing a full-undetectable (FUD) malware is a great skill to have. Folks […]
CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Research Security Testing SOC Analysts Social Engineering Tools
Exfiltration Using Powershell & Outlook
Introduction When an attacker compromises an end-point system in an organization, he needs some sort of confirmation that: his code […]