~/category/security
142 articles
Most networks, no matter how highly secured, have vulnerabilities that can be exploited by attackers. This article will explore the DNS protocol and tunneling. It is common to see the DNS protocol used to establish outbound sessions from a restricted network, then tunnel other protocols through the
Steganography is the practice of concealing a file, message, image, or video within another file, message, image, or video. The word steganography combines the Greek words steganos, meaning ‘covered, concealed, or protected’, and graphein, meaning ‘writing’. The first recorded use of the term was in
Introducing MorpheusMorpheus is a new tool that provides you with the ability to simulate automated Man-in-the-Middle attacks. Morpheus can be found at https://github.com/r00t-3xp10it/morpheus.The Morpheus application consists of a suite allowing users to manipulate TCP and UDP data packets using a
The Web as an Iceberg The Deep Web, DarkNet, The Hidden Net, The Invisible Net: It has many different names.Many experts believe that approximately 30% of the Internet is indexed by searched engines such as Google. If this is true then we can infer that 70% of the content available online is not sea
There are several ways to either assess your current hacking skills or increase your prowess. Capture the Flag (CTF) programs are a way of gamifying cybersecurity skills within a fun, interactive, and challenging delivery platform. One of my favorite free, public cybersecurity sites is Hack The Box:
There's been a growing trend in the world of cybercrime recently; that of sim-swapping, a new and subversive type of identity theft. Pro League of Legends gamer and multiple time NA LCS champion Yiliang 'Doublelift' Peng recently took to Youtube to describe his own experience of the process."Your Ac
The Simplicity of EggShell Eggshell is an Apple iOS and Macintosh OS post-exploitation surveillance penetration testing tool written in Python. It is a menu-based system that reminds me quite a bit of SET (Social Engineering Toolkit) or a simpler version of Metasploit. Basically you can play around
Distributing malware inside Adobe PDF documents is a popular method for attackers to compromise systems. Within the latest versions of Reader, Adobe has added multiple updates to address vulnerabilities. Additionally, Adobe has added a robust software sandbox capability to Reader, which activates if
Whenever there is a technological development, a cyber-security threat usually isn’t far behind. So, considering the current state of the tech landscape, you may be wondering what the biggest security risks are this year and in the coming year.Unfortunately, there are a number of threats you need t
I was recently in a very high-cost (around $6K), one-week security course in San Francisco. You can infer the institution. The instructor was dynamic, and the topic was focused on technical hacking. A how-to for breaking into computers, detecting the break-in, etc. At the end of the week there was a
Cyber Fraud Affects 5 Percent of the Planet’s GDP The Association of Certified Fraud Examiners (ACFE) estimates typical organizations loses 5 percent of their revenues to fraud each year (ACFE Report). When fraud occurs, the integrity of the data is impacted; intellectual property is lost, stolen, o
Information Security professionals are akin to our policemen. They are equipped with advanced firewalls and porn filters, secure email and web traffic gateways, encryption keys, IPS signatures, security policies, and intrusion detection systems. The best of them are adept at using advanced threat pr