Privilege escalation is really an important step in Penetration testing and attacking systems. As you know, gaining access to a system is not the final goal. Pentesters want to maintain that access and gain more privilege to perform specific tasks and collect more sensitive information. Privilege escalation is the act of exploiting a bug, design […]
Initially, the penetration tester needs to acquire or gather all the possible relevant information about the main domain that a particular organization uses. When information gathering is complete, the tester can look into the subdomains that the organization uses. There could be a possibility that all the subdomain names that exist under the main domain […]
The compromise of passwords is always a serious threat to the confidentiality and integrity of data. Generally, the passwords shorter than 7 characters are especially susceptible to bruteforce attack. However, a sequence of mistyped commands or incorrect login responses (with attempts to recover or reuse them) can be a signs of brute-force intrusion attempts. Brute […]
In the context of CTFs steganography usually involves finding the hints or flags that have been hidden with steganography. Most commonly a media file or a image file will be given as a task with no further instructions, and the participants have to be able to uncover the hidden message that has been encoded in […]
Something strange is happening. Your advertising doesn’t work anymore, at least not like it used to. You used to be able to buy some TV time or put an ad in a newspaper, but nowadays everyone has TV or a DVR and gets their news online. Every company with a website should have a blog […]
Do you ever wonder why some websites seem to rank at the top search engines so easily, while other, seemingly higher-quality websites struggle to get onto the first page? Often times it’s because their primary keywords are in their domain name. In some niche and local markets that may be just about all that’s needed, […]
Traditional attacks like phishing, and newer twists like vishing, also impact mobile security. Mobile media adoption is huge when it comes to “texting” with others, not to mention brief phone calls and e-mails to friends and family. Devices and the communication systems they involve are becoming highly trusted, and are a lifeline of communication for many users globally. Criminals […]
Last year, Google itself launched Google Play Protect Service which provides an extra layer of security to all users. Although the problem is not fully solved because of risk still exists. NOTE: It is advisable to always install only the apps in the Google Play Store carefully avoiding any APK file, especially if downloaded from […]
The hacking tools mentioned in the US-CERT Report may not be unfamiliar to the security researchers and penetration testers, but the value for the enterprise security defense workers is self-evident. Research is designed to make companies aware of the threats they face and to better prepare for defensive measures. The US government’s network security agency […]
Kali is the latest and greatest version of the ever popular Backtrack Linux penetration testing distribution. The creators of the Backtrack series kept Kali in a format very similar to Backtrack, so anyone familiar with the older Backtrack platform will feel right at home. Kali includes more than 500 security testing tools. A lot of the […]
SEO is undeniably one of the most popular concepts online, gaining attention from experts, developers, website owners, brand, and companies. As website owners strive to be noticed online by the right kind of audience, SEO’s best practices keep changing, not to mention, the needs of the target audience. Also Read: 77 Best SEO Tools Since […]
System performance analytics seems to be a frequent question on forums and mailing lists. Finding out why something is slow is generally nontrivial as there are many factors to consider. It’s really very tough job for every System or Network administrator to monitor and debug Linux System Performance problems every day. After being a Linux Administrator […]
Typically, a Penetration Testing exercise is focused on identifying the gaps in security rather than harming a system. This is a key feature that separates a real attacker from an authorized Penetration Tester. Real hackers don’t follow the rules and are not concerned about interrupting business if it can improve their situation. In some cases, […]
Simply allowing logs to take up disk space, reviewing them only after something has happened and deleting logs when you run low on disk space are all the strategies of an admin doomed to always being in firefighting mode, reacting to bad things when they happen. You know that event log monitoring is important, since […]