Browsing Monthly Archive January 2013
facebook-soldier-sized 0

Social Media use in the Military Sector

Introduction Social media has assumed a fundamental role in today’s society. It is a technology with the highest penetration level, as billions of people are

January 31, 2013 General Security
Facebook_Hacker_Cup-sized 2

Facebook Hacker Cup 2013 Qualification Round: Balanced Smileys

I must admit that I was a little bit hesitant whether or not I should enter the Facebook Hacker Cup, but I did it anyway

January 31, 2013 Hacking
metadata-sized 0

MetaData and Information Security

Information security and penetration testing is not limited to find the vulnerabilities on the website and network; it is an interesting profession that covers every

January 31, 2013 General Security, Hacking
Linux-Hardening-sized 5

Linux Hardening

This article aims to provide a general list of security issues that should be considered when you are auditing a Linux system or when you

January 30, 2013 General Security
AndroidApplication-sized 1

Android Application Assessment

In this article, we’ll discuss THE steps involved in performing A security assessment of an Android based application. We will see the use of various

January 30, 2013 Hacking
EMET-sized 1

Enhanced Mitigation Experience Toolkit (EMET)

Defining the problem First, we must define the problem before we try to find the solution. The problem with Windows systems is that they can

January 30, 2013 Hacking
office-exploit-sized 2

Executing Office 2007 Exploit on Office 2010

So in the last post, we discussed how to insert your own payload by reversing a malware sample. Here, we are going to discuss how

January 29, 2013 Exploit Development
ASP.NET_Logo-sized 0

The Basics of ASP.NET

Introduction In this article we’ll talk about unicode support in various elements of the HTTP protocol, but first let’s say a few words about HTTP.

January 29, 2013 Application Security
frontcover-sized 0

CompTIA Security+: SY0-301 Study Guide excerpt

Get Certified – Get Ahead The CompTIA Security+ SY0-301 certification validates foundation-level security knowledge and skills and is recognized by organizations around the world. As

January 29, 2013 IT Certifications
HaveYouEver-sized 2

Have You Ever Seen the Red Spike? (D)DoS: Mitigation Strategies

Executive Summary DDoS, or Distributed Denial of Service, is a cyber-attack in which an attacker tries to bring the functioning of a computer system that

January 28, 2013 Hacking
Article-51-sized 0

Invoking Article 51 (self-defense) of the UN Charter in Response to Cyber Attacks – II

Cyber attacks through the perspective of the armed attack notion A cyber attack cannot rise to the level of an armed attack as prescribed in

January 28, 2013 General Security
Blackberry-Curve-sized 0

Introduction to Blackberry Balance Technology

Blackberry is known for its email and security rather than a company which produces fancy mobile phones. This is one of the reasons why Blackberry

January 28, 2013 General Security
cainNabel-sized 0

Password Cracking Using Cain & Abel

Introduction According to the official website, Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kinds

January 25, 2013 Hacking
Article-51-sized 1

Invoking Article 51 (self-defense) of the UN Charter in Response to Cyber Attacks – I

Introduction Among the series of problems with regard to the legal regulation of cyber attacks is how the self-defense doctrine applies to them. In itself,

January 25, 2013 General Security
social-media-restrict-sized 1

Restricting social media at work

Introduction Employees using social networks such as Facebook and Google+ may not only waste a lot of their working time, but also spread viruses on

January 25, 2013 General Security
authentication-sized 0

To Trust or Not To Trust?

While taking a knowledge management course in school, one thing that struck me was the common theme among classmates of, “…as long as the knowledge

January 24, 2013 General Security, Hacking
downloads-sized 4

Arbitrary File Download: Breaking into the system

What you will learn: Introduction to Arbitrary File Download Difference between Arbitrary File Download and LFI/ RFI How it is exploited- a real example Countermeasures

January 24, 2013 Hacking
fiddler-sized 1

Using X5S with Fiddler to find XSS Vulnerabilities

Cross Site Scripting is one of the top 10 OWASP security threats. This dangerous vulnerability allows attackers to inject malicious scripts on a website in

January 24, 2013 Application Security
gamestick-sized 0

Handy Devices Revolution: Watch Out for Hackable Gaming Consoles

I have always been a video game console fan and enjoy playing RPG (role-playing games) and “Hack and Slash” games (cheers to God of War

January 23, 2013 Hacking
reverse-engineering-sized 3

Demystifying dot NET Reverse Engineering: Advanced Round-trip Engineering

Before going through this article, I highly advice you to read all previous ones in the series since I will not re-explain some techniques and

January 23, 2013 Reverse Engineering
Back to Top Copyright © 2012 - InfoSec Institute