Social Engineering & "Influence", by Dr. Cialdini
Over the past few years, we have completed a number of social engineering tests as part of advanced penetration testing […]
Blogs
Categories
Latest Blogs
K K MookheyFormat Preserving Encryption – In the guise yet retrievable as it is
A recent dive into challenges faced from privacy compliance requirements unearthed an interesting patent. The unearthing of this new patent on the block came from the need of anonymizing data for several reasons including compliance (PCI DSS, German Data Privacy Law [BDSG], UK Data Privacy Act).
Khushbu JithraGeoEdge – IP Address Locator
From forensics point of view, investigating “which user did what on the application/server that lead to its compromise” is of the most importance. Similar scenario applies to Email investigation. It’s quite simple now to find out the IP Address of the person who is sending out fishy or threatening emails to the victim(s).
Nikhil WagholikarA Phishy Story
Phishing sounds similar to fishing. Fishes are to the volume of internet users today much like fishermen are to phishers. […]
Taufiq AliCase Studies CISOs & Executives Cloud Security Cybersecurity Threat Intelligence & Analysis Malware Analysis Research SOC Analysts
Deobfuscating Javascript Malware
Some days back I was greeted by a Google Safe browsing warning when I tried visiting a ‘known’ site. As […]
Wasim HalaniSQL Injection in Stored Procedure & Preventing from the same
Following is the small example of creating a stored procedure. ==================================================================== CREATE PROC sp_login (@loginid nvarchar(25),@password nvarchar(25)) AS DECLARE @SQLString […]
Dhiraj Ranka