~/authors/aamir-lakhani
Founder · Packet.Zip
Aamir Lakhani is a leading senior security strategist responsible for providing IT security solutions to major enterprises and government organizations. He creates technical security strategies and leads security implementation projects for Fortune 500 companies, and has designed offensive counter-defense measures for the Department of Defense and national intelligence agencies.
His areas of expertise include adversarial AI, cyber defense, mobile application threats, malware management, Advanced Persistent Threat (APT) research, and the dark web. He is the author or contributor of several books, and has appeared on FOX Business News, National Public Radio, and other media outlets as an expert on cybersecurity.
Writing under the pseudonym Packet.Zip, he operates this blog. In its list of 46 Federal Technology Experts to Follow on Twitter, Forbes described Aamir Lakhani as "a blogger, InfoSec specialist, super hero…and all around good guy."
~/articles
200 published articles
GitHub is a great source of software. It is based on a library or version control system, providing developers an outlet for open source software and related updates. I recently took a look at Dracnmap, which can be found at: https://github.com/Screetsec/Dracnmap Dracnmap is an open source program p
Introducing MorpheusMorpheus is a new tool that provides you with the ability to simulate automated Man-in-the-Middle attacks. Morpheus can be found at https://github.com/r00t-3xp10it/morpheus.The Morpheus application consists of a suite allowing users to manipulate TCP and UDP data packets using a
The Web as an Iceberg The Deep Web, DarkNet, The Hidden Net, The Invisible Net: It has many different names.Many experts believe that approximately 30% of the Internet is indexed by searched engines such as Google. If this is true then we can infer that 70% of the content available online is not sea
There are several ways to either assess your current hacking skills or increase your prowess. Capture the Flag (CTF) programs are a way of gamifying cybersecurity skills within a fun, interactive, and challenging delivery platform. One of my favorite free, public cybersecurity sites is Hack The Box:
There's been a growing trend in the world of cybercrime recently; that of sim-swapping, a new and subversive type of identity theft. Pro League of Legends gamer and multiple time NA LCS champion Yiliang 'Doublelift' Peng recently took to Youtube to describe his own experience of the process."Your Ac
Docker is a great way of running an isolated environment for testing. A few people have been asking me is it possible to run Kali Linux in Docker. Kali is a great use case for Docker under the right circumstances. In all honesty, I have not used it often, but in general, I find Docker is well suite
WPA2-PSK may not be as safe as you think. There are a few attacks against WAP2-PSK. One of the most common attacks is against WPA2 is exploiting a weak passphrase.Below you will find a few easy steps on how to break WPA2 with a weak passphrase.Breaking the Wireless Lab Home Network:I set up a test
The Simplicity of EggShell Eggshell is an Apple iOS and Macintosh OS post-exploitation surveillance penetration testing tool written in Python. It is a menu-based system that reminds me quite a bit of SET (Social Engineering Toolkit) or a simpler version of Metasploit. Basically you can play around
VPN for Hacking: Which one is the Best?If you’re not using a VPN in 2018, you might as well stop using public WiFi. In the age of hackers and government censorships, your Internet connection is not safe. Your ISP provider wants to track your data. Some countries won’t allow you to access social med
Distributing malware inside Adobe PDF documents is a popular method for attackers to compromise systems. Within the latest versions of Reader, Adobe has added multiple updates to address vulnerabilities. Additionally, Adobe has added a robust software sandbox capability to Reader, which activates if
Whenever there is a technological development, a cyber-security threat usually isn’t far behind. So, considering the current state of the tech landscape, you may be wondering what the biggest security risks are this year and in the coming year.Unfortunately, there are a number of threats you need t
I was recently in a very high-cost (around $6K), one-week security course in San Francisco. You can infer the institution. The instructor was dynamic, and the topic was focused on technical hacking. A how-to for breaking into computers, detecting the break-in, etc. At the end of the week there was a