Cyber Kill Chain 0

Cyber Kill Chain is a Great Idea, But is It Something Your Company Can Implement?

If you’re one of those folks who read a lot of InfoSec news, you’ve no doubt heard a lot of mention of the effectiveness of

May 21, 2013 General Security
owasp_feature 0

OWASP’s 2013 Web Vulnerabilities List Will Shuffle the Top Ten

The OWASP Top 10 list publicizes the most critical web application security flaws as determined by Open Web Application Security Project (OWASP), a nonprofit, vendor-independent

May 20, 2013 Application Security
Obfuscated-Assemblies-feature 0

Reverse Engineering Obfuscated Assemblies

In previous articles that talked about .NET reverse engineering, we covered almost every aspect of reversing .NET assemblies, we explained how this kind of binary

May 20, 2013 Reverse Engineering
Delegates-feature 0

Delegates and Events: C#, Net 4.0

Abstract In this article, you will learn how to create and manipulates Delegate types as well as C# events, which streamline the process of working

May 17, 2013 Application Security
SNMP-Network-feature 0

Vulnerability Assessment of SNMP Service – II

Background: This is our second article in a series on vulnerability assessment of SNMP Service. In the previous article, we learned how we could set

May 17, 2013 Forensics
scotiabank-feature 0

Fortune 500 Interview: Scotiabank’s Greg Thompson talks hackers, cyber terrorists, hacktivists and more

Greg Thompson has his work cut out for him as <a href=”http://www.scotiabank.com/gls/en/index.html#about”>Scotiabank</a>’s highest level security professional. Thompson, vice president of enterprise security services at the

May 16, 2013 General Security
sysenter-instruc-internals-feature 1

The Sysenter Instruction Internals

Introduction In the previous article we’ve seen that whether we’re using the int 0x2e interrupt or sysenter instruction, the same method in kernel is being

May 16, 2013 Reverse Engineering
Stress-Testing-Wifi-feature 0

Stress Testing Your Wireless Network

In order to overcome physical limitations of wired connections, a lot of us prefer wireless connections. It reminds me of when I had my Sony

May 15, 2013 Application Security
VB-virus-feature 1

Anatomy of a VB Virus

Introduction In this article, we will look in depth at a virus written in Visual Basic. We look at various techniques used by this virus

May 15, 2013 Forensics
Mozilla-Persona-feature 0

Mozilla Persona: What you should know and how to implement it

In the summer of 2012, Mozilla unveiled a new single sign-on (SSO) solution called Mozilla Persona to the online world. At the time, their branding

May 14, 2013 Hacking
Mono-Feature 2

Open Source .NET: Platform-Independent .NET Application Development with MONO – part one

Abstract Over the years, the Linux operating system has become more popular among the developer community due to a significant cost advantage over proprietary platforms.

May 14, 2013 Reverse Engineering
RaspberryPi-feature 1

Pentesting Distributions and Installer Kits for your Raspberry Pi

Raspberry Pi for pwning and penetration testing? Of course! Why not? As an introduction, Raspberry Pi is an ARM GNU / Linux box or a

May 13, 2013 Hacking
SNMP-feature 6

Vulnerability Assessment of SNMP Service – I

Background: This is the first article out of a series of articles that I am planning to write on vulnerability assessment of SNMP Service. SNMP

May 13, 2013 Forensics
debug-Windbg-feature 1

Introduction to Kernel Debugging with Windbg

Introduction You’ve probably heard about Windbg before, right? It’s a Windows debugger written by Microsoft that’s used by developers and hackers for debugging the OS.

May 10, 2013 Reverse Engineering
e-money-fraud 0

E -Money Fraud

1. Introduction Electronic money (e-money) is the digital equivalent of cash that is stored on an electronic device or remotely at a server. It is

May 09, 2013 General Security
email-injection 1

Email Injection

Nowadays, internet usage is growing dramatically, but the vast majority of internet users don’t have a security background. Most of people use the Internet for

May 09, 2013 Hacking
Form-Authentication 1

Form Authentication: ASP.NET Security Part 3

Abstract In the previous articles, you have learned about Windows Authentication and Code Access Security. This article’s objective is to further understanding of Form Authentication

May 08, 2013 Application Security
PE-Header 4

Presenting the PE Header

Let’s present the whole PE file structure with the picture below (taken from [5]): At the beginning there’s a DOS header, which is an MS-DOS

May 08, 2013 Reverse Engineering
Gauss-Malware-feature 0

Gauss: Between technology and politics

Introduction The purpose of this work is to present the reader research of the Gauss malware platform as one of the ultimate nation-state cyber exploitation

May 07, 2013 General Security
iOS-Application 0

IOS Application security Part 2 – Getting class information of IOS apps

Introduction Have you ever checked out an IOS app and thought it was cool, and wondered if you could find some information about the source

May 07, 2013 Application Security
Back to Top Copyright © 2012 - InfoSec Institute