MITRE ATT&CK vulnerability spotlight: Access token manipulation
MITRE is a U.S. government federally-funded research and development center (FFRDC) which performs a large amount of research and assessment as a trusted third...
Howard Poston
Howard Poston is a cybersecurity researcher with a background in blockchain, cryptography and malware analysis. He has a master’s degree in Cyber Operations from the Air Force Institute of Technology and two years of experience in cybersecurity research and development at Sandia National Labs. He currently works as a freelance consultant providing training and content creation for cyber and blockchain security.
Page 22
Ethical hacking: Buffer overflow
When taking external input, an application needs to allocate memory to store that input. Many high-level programming languages will do this behind the scenes,...
Top five remote access trojans
Once a hacker has gained initial access to a target machine, expanding and solidifying that foothold is the next logical step. In the case of a phishing attack,...
Cryptography fundamentals for hackers
Cryptography literally means “secret writing.” It’s the science of protecting sensitive data from being read (or modified) by unauthorized parties such...
Covering tracks — Hiding files on Windows/Linux/MacOS
After gaining access to a system, a hacker commonly needs to cover their tracks in order to avoid detection. Many antiviruses operate by searching through...
Top 10 network recon tools
Reconnaissance is an important first stage in any ethical hacking attempt. Before it’s possible to exploit a vulnerability in the target system, it’s necessary...
Lessons learned: the Marriott breach
Marriott International has been in the news throughout 2019 due to a major data breach discovered and investigated in late 2018. The data breach, which leaked...
MITRE ATT&CK vulnerability spotlight: Valid accounts
The MITRE Corporation is a non-profit, federally-funded research and development center (FFRDC) that, among other things, performs cybersecurity research and...
MITRE ATT&CK vulnerability spotlight: Obfuscated files or information
MITRE helps support the U.S. government’s R&D efforts by acting as a Federally Funded Research and Development Center (FFRDC), a non-profit organization...
MITRE ATT&CK vulnerability spotlight: Valid accounts
The MITRE Corporation is a non-profit, federally-funded research and development center (FFRDC) that, among other things, performs cybersecurity research and...