Web Applications and the Need to Test Them
What make using web applications so desirable to many organizations is that it lightens the developer of the responsibility of building a client for a specific type of computer or a specific operating system.
WebGoat 8: An intentionally Insecure Web Application for WebApp Testing
As an instructor, from time to time to teach a concept, I need to perform an actual test to get my point across to the students. Testing or hacking a live site may have some repercussions that I rather not have to deal with, so using an insecure application locally works great for me. I […]
OpenVAS Authenticated Scan using Local Security Checks
An authenticated scan may provide more vulnerability details on the scanned system. During an authenticated scan the target is both scanned from the outside via the network and from the inside via a valid user login. During an authenticated scan OpenVAS logs in to the target system in order to run local security checks (LSC). […]
Openvas 9 on Ubuntu Setup
Sysadmin Ramblings Basic Installation Install Ubuntu 16.04LTS Make sure you update your newly installed system with the latest patches - security updates. sudo apt-get update sudo apt-get upgrade sudo apt-get dist-upgrade Openvas9 is available as a package for Ubuntu 14.04 and Ubuntu 16.04. sudo add-apt-repository ppa:mrazavi/openvas sudo apt-get update sudo apt-get install openvas9 Follow the prompts and […]
Update OpenVAS Plugins (NVT, Cert Data & SCAP Data) Automatically
Once you have install OpenVAS it is a good idea to ensure it is kept up to date and running the latest security scripts to find the latest vulnerabilities as well as sync to the most updated nvt, scap and cert data. The best way to do this is to create a script that sync's […]
Did Cambridge Analytica access your Facebook information? How to check and protect yourself
Starting this past Monday, Facebook started to inform users if their data may have been shared with Cambridge Analytica. The social media company is informing affected users at the top of “News Feeds.” The alert, titled “Protecting Your Information,” will be visible to users whose information was accessed by a third-party website and potentially shared […]
Under Armour MyFitnessPal hack affects 150 million user accounts
The accounts of about 150 million users of nutrition-tracking app MyFitnessPal were breached last month, Under Armour (UAA) said Thursday, adding its name to the list of corporations targeted by hackers. Hackers gained access to personal data included user names, emails and encrypted passwords, the sportswear apparel maker said in a news release. The affected […]
Open Vulnerability Assessment System release 9 (OpenVAS-9)
The OpenVAS developers are happy to announce a round of maintenance releases for the Open Vulnerability Assessment System release 9 (OpenVAS-9). This round includes the following releases: - OpenVAS Libraries 9.0.2 - OpenVAS Scanner 5.1.2 Many thanks to everyone who has contributed to the releases. For a detailed list of the changes in the individual […]
SecurityOrb.com’s Top 3 Security Hacks of 2017
In recent years security breaches have been a big topic as it has impacted many of our lives and 2017 is not different. securityorb.com/ recently reviewed some of the most notable hacks of 2017 and compiled a list of the top 3 security breaches. Equifax – In July of 2017, Equifax one of the […]
7 Steps to a Cyber-Resilient Business
Cyber security is the most prominent risk issue facing company Boards of Directors and executives worldwide.