Tag Archive for: Hackin9

You are here: / Hackin9

Posts

Feb Edition of Hackin9 – Network Security

Another exciting edition of Hackin9 is out and you can download it here.  Information about this edition is located below:

·  Wuala – Secure Online Storage

There are a lot of online storage/backup solutions available nowadays and it is hard to find differences between them, but I think Wuala from LACIE may have something unique in the way their solution works.

– MICHAEL MUNT

·  A Beginners Guide to Ethical Hacking
– SHYAAM SUNDHAR

·  A Security System That Changed The World

Enterprise data is a valuable corporate asset, and therefore ensuring it’s over integrity is an issue of superior business cycle model to any commercial or government organization.

– YURY CHEMERKIN

·  Get in through the backdoor: Post exploitation with Armitage

IT professionals have a dated image of hacking. Many picture the process as running nmap, finding an exploit, and running it to compromise a server.

– RAPHAEL MUDGE

·  Breaking The Code: Brute Forcing The Encryption Key

There’s no way around it, cryptography is an aspect of our digital lives that’s becoming more and more prevalent.

– RICH HOGGAN

·  Is Data Secure on the Password Protected Blackberry Device?

People who have ever heard of password utility think the usage of it can protect their private data. There are, however, several ways to steal a lot of information in spite of the fact that device locked by password. These ideas are not complicated to first-time malware developer.

– YURY CHEMERKIN

·  Examine your Network With Nmap What is network Scanning?

Network scanning is an important part of network security that any system administrator must be comfortable with. Network scanning usally consists of a port scanner and vulnerability scanner.

– MOHSEN MOSTAFA JOKAR

·  Network Security – Data Breaches

There doesn’t appear to be a day that passes where we don’t hear about a corporate or government network data breach (http://datalossdb.org/) in the media. Whatever individuals or businesses do, we all fail miserably when it comes to protecting our most valued assets – personal and financial information.

– JULIAN EVANS

·  What is Good Enough Coverage?

Everything we buy, build, or test in the security space calls itself full coverage, complete coverage, or all you’ll ever need. But we all know no product could possibly say they can be full coverage, as in they’ll cover every threat you could be faced with.

– MATTHEW JONKMAN

·  Exploring GCIH certification for fun and employability

Do you remember the time when you used to read everything you got on Internet from underground e-zines to README files? How many years of professional experience do you have? This really counts. Enhance your skill set by challenging this certification exam! There’s no more room to discuss whether it’s good or bad being certified. The market needs it.

– ALEXANDRE TEIXEIRA

·  Certification Smart?

A job in computers is a position of experience; if you don’t have experience the next best thing is a computer certification.

Hackin9 November Issue – Spyware – Someone is always watching…

Hackin9 November Issue – Spyware – Someone is always watching…

Free Issue to Download!

In order to download the magazine you need to sign up to our newsletter. After clicking the “Download” button, you will be asked to provide your email address. You need to verify your email address using the link from the activation email you will receive. If you already subscribed to our list, you will be asked to provide your email address each time you download the magazine. No activation email will be sent and you should see the link for download.

IMPORTANT NOTICE
1. After the activation of your subscription you need to click the“download” button once again to start downloading the PDF.
2. In case you do not get the activation email please check your spam folder. If it is not there, please use different email address.

·       Deploying & Utilizing Intrusion Detection Using Snorby

Snorby is an advanced Snort IDS front-end. Snorby has two basic fundamental pieces, which are simplicity and power. The project goal is to create a free, open source and highly competitive application for network monitoring in enterprise environments or private use.

– Joshua Morin

·       Malware Incident Response – Outbreak Scenario

This article applies to Microsoft OS on Intel Platform. With the ongoing threat of the Conficker Virus, which is still hanging like the sword of Damocles, it becomes very important to know and understand, what exactly needs to be done during a possible Virus Outbreak.

– Rajdeep Chakraborty

·       TDSS botnet – full disclosure

What is a botnet? A botnet is not merely an army of infected computers. First of all, a botnet is an externally managed complex structure. While the malware side is studied pretty well in most known botnets, the management side is often underestimated. The latter usually involves hacking and vulnerability exploitation, because server side scripts of a centralized botnet are hidden from public.

– Andrey Rassokhin and Dmitry Oleksyuk

·       When XOR is your friend…

Using a random enough input stream may sound like outright blasphemy to many if not all reading this; however in this article I will demonstrate when using it makes sense. One of my hobbies include creating crypto challenges where I hide an English message string in a block of numbers and letters. The first challenger that can correctly find what the message exactly states and demonstrate the algorithm used (usually in a programmatic fashion) they win a cash prize. I’ve learned over this year that in the past I had been making it far too difficult…

– Israel Torres

·       Proactive Defenses and Free Tools

In my last article, I described the greatest breach in cyber history and made some suggestions on how it could have been avoided – enabling strong wireless encryption, testing your wireless routers for vulnerabilities, visitinghttp://nvd.nist.gov, limiting the number of trusted devices allowed
on your wired and wireless networks and hardening your systems.

– Gary S. Miliefsky

·       Wuala – Secure Online Storage
– Michael Munt

·       Book review: A beginners Guide to Ethical Hacking
– Shyaam Sundhar

·       An analysis of the spyware threat and how to protect a PC
– Julian Evans

·       Electronic Cold War
– Matthew Jonkman

August Issue of Hakin9: Securing the Cloud – Free Download

Free Issue to Download!

• Prey: A New Hope
Misplaced your laptop or had it stolen? You are not alone.

– MERVYN HENG
• An introduction to Reverse Engineering: Flash, .NET
This article is about the demonstration of Reversing of Flash and .NETapplications. This is an introductory article showing basics of decompiling/ disassembling. In the first I have chosen to show reversing of Flash files and .NET files and how to patch them.

– NILESH KUMAR
• Web Malware – Part 1
The Internet has been plagued by a variety of Malware that use the Web for propagation and as these threats loom around in the Internet it can infect even the smartest and the most tech savvy computer users.

– Rajdeep Chakraborty
• Cyber warfare with DNSbotnets
Botnets aren’t just a fad or items being sold and purchased like items on ebay, but are becoming carefully designed tools used for cyber war. In this article we will discuss what a Botnet is, and the next generation of Botnets over DNS.

– Francisco Alonso
• Search Engine Security and Privacy
It’s no secret that search engines like Google, Yahoo, Bing (MSN) retain search data and metadata regarding searches. They are open about doing so. What’s unsure, though, is to what extent this creates a long-term threat to information security and privacy. This article briefly reviews what data is retained and stored by these search engines and what readers can do to protect their information.

– Rebecca Wynn
• Securing the Cloud: Is it a Paradigm Shift in Information Security?
First let me start by saying No. There’s really nothing new in the Cloud except where risk appears to shift. But does it really? I would argue that it increases your risk and there can be no shift of blame for a successful Cloud attack and breach of confidential data stored in the Cloud. You are ultimately responsible.

– Gary Miliefsky
• Radio Frequency-enabled Identity Theft
A discussion on how radio frequency-enabled technology could leave people vulnerable to identity theft and then potential identity fraud.

– JULIAN EVANS
• Intelligence Monopolies
In general a monopoly is bad for an industry. Prices invariably increase beyond reasonable production costs and innovation stops. It’s a natural law that competition brings about new advances and achievement.

– MATTHEW JONKMAN
• Capturing the New Frontier: How To Unlock the Power of Cloud Computing
So here’s a question: Which IT sector accounts for fully 25% of the industry’s year-over-year growth and, if the same growth trajectories continue, will generate about one-third of the IT industry’s net new growth by 2013?

– MIKE ARMISTEAD