How to Complete a Vulnerability Assessment with Nessus
In this lab, we will show you how to conduct and analyze a vulnerability risk assessment using the popular vulnerability scanning tool Nessus. We will:
Run...
SecRat
SecRat works at a start-up. He’s interested in Windows Driver Programming.
How to Use AlientVault SIEM for Threat Detection & Incident Response
Malware comes via attachments, malvertising, man-in-the-middle, man-in-the-browser, social engineering and countless other vectors. Even the most stringent...
QuadRooter Attack Overview: Vulnerabilities, Methods & Mitigations
QuadRooter is a threat vector specifically affecting Android devices. The common vulnerabilities and exposures (CVE) for these security issues are:
CVE-2016-2059...
How to configure & use Suricata for threat detection
Suricata is an excellent, low-cost tool that gives you greater insight into a network. Despite this, it needs to be viewed as a single layer in a comprehensive...
WannaCryptor Analysis
WannaCryptor was a global ransomware outbreak which created chaos on May 12-2017. Initially, it propagated using EternalBlue exploit released by the Shadow...
TrojanDownloader.Wask Analysis
The file is not packed. It has been written in MSVC (Possibly 2010). Following are the headers present in the PE structure.
Below is the PEDUMP of the Trojan
PE...
API Call Logging: Windows API
API call logging is a mechanism of logging API call made by an application.
In this series, we are going to learn about how to develop an API call logger using...
Analysis of a Spam Bot
Binary starts fixing the API calls.
After fixing up the imports, the Reg32 path is retrieved. Default heap is accessed, and Socket / MAC addresses are retrieved....
Reversing the Pony Trojan part II
Pony is a stealer Trojan and has been active for quite a while now. It was responsible for stealing over $200,000 in bitcoins ( https://threatpost.com/latest-instance-of-pony-botnet-pilfers-200k-700k-credentials/104463/)...
Reversing the Pony Trojan Part I
Pony is a stealer Trojan and has been active for quite a while now. It was responsible for stealing over $200,000 in bitcoins ( https://threatpost.com/latest-instance-of-pony-botnet-pilfers-200k-700k-credentials/104463/)...