Conference
SummerCon 2018 Recap

SummerCon 2018 was another success this year in New York. Being one of the oldest hacking conventions in America we always like the opportunity to attend and enjoy the vibe.

Armed with some great speaker and topic below, this event kept the attention of the attendees.

Read more
Web Security
Web Applications and the Need to Test Them

What make using web applications so desirable to many organizations is that it lightens the developer of the responsibility of building a client for a specific type of computer or a specific operating system.

Read more
Web Security
WebGoat 8: An intentionally Insecure Web Application for WebApp Testing

As an instructor, from time to time to teach a concept, I need to perform an actual test to get my point across to the students.  Testing or hacking a live site may have some repercussions that I rather not have to deal with, so using an insecure application locally works great for me.  I […]

Read more
General Security
OpenVAS Terms to Know

OpenVAS Terms to Know Host A Host is a single system that is connected to a computer network and that may be scanned. One or many hosts form the basis of a scan target. A host is also an asset type. Any scanned or discovered host can be recorded in the asset database. Hosts in […]

Read more
Vulnerability Assessment
OpenVAS Authenticated Scan using Local Security Checks

An authenticated scan may provide more vulnerability details on the scanned system. During an authenticated scan the target is both scanned from the outside via the network and from the inside via a valid user login. During an authenticated scan OpenVAS logs in to the target system in order to run local security checks (LSC). […]

Read more
How-to
Using Metasploit to Conduct NMAP Scans

Using Metasploit and nmap together as been a useful technique for me during some of my engagements.  Below are the steps I take to implement that task. Start metasploit by issuing the following command: msfconsole Verify the status of the database by issuing the following command: db_status Run NMAP from inside msfconsole and save the […]

Read more
General Security
Metaspolit – msfconsole help command output

msf > help Core Commands ============= Command Description ------- ----------- ? Help menu banner Display an awesome metasploit banner cd Change the current working directory color Toggle color connect Communicate with a host exit Exit the console get Gets the value of a context-specific variable getg Gets the value of a global variable grep Grep […]

Read more
Vulnerability
Wireshark Security Advisory

- ------------------------------------------------------------------------- Debian Security Advisory DSA-4217-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 03, 2018 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : wireshark CVE ID : CVE-2018-9273 CVE-2018-7320 CVE-2018-7334 CVE-2018-7335 CVE-2018-7419 CVE-2018-9261 CVE-2018-9264 CVE-2018-11358 CVE-2018-11360 CVE-2018-11362 It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, […]

Read more
How-to
Linux Commands - Run .bin file in Linux / UNIX

Run .bin file in Linux / UNIX Change the permission of the file you downloaded to be executable by typing the following command: $ chmod +x file.bin Start the installation process or run .bin file by typing the following command: $ sudo ./file.bin For example if .bin file name is program.bin. Then type the following […]

Read more
General Security
The Security Assessment Process & Best Practices Presentation

The Security Assessment Process & Best Practices Presentation

Read more