Welcome back, my rookie cyber warriors! Man-in-the-Middle attacks can be among the most productive and nefarious attacks. If the attacker/hacker can place themselves between two systems (usually client and server) they can control the flow of traffic between the two systems. In this way they can eavesdrop on the traffic, delete the traffic, inject malware […]

Welcome back, my budding cyber warriors! Automobile or car hacking is the cutting-edge of the cyber security world right now. With the advent of digital systems in automobiles and other vehicles and the soon-to-be autonomous driving cars, this field is rife with potential cyber security issues that will significantly impact our society and safety. This […]

Welcome back, my aspiring network forensics investigators! In my previous post in this series, I introduced you to the most widely-used network forensics tool in the world, Wireshark. No network forensic investigator can do without it this valuable tool! In this tutorial, we will try to advance your knowledge and understanding of Wireshark to the […]

SQL Injection is one of the most important and common attacks on web sites. Nearly every website has a database behind it containing confidential and valuable information that can often be compromised by a well-designed SQL injection attack. There are many SQL injection tools, but probably the most popular is sqlmap. In this tutorial, we […]

Welcome back, my greenhorn cyber warriors! In my previous posts in this series, we installed Snort, configured Snort, set up Snort to send alerts to a database (MySQL) and wrote Snort rules. In this post, we will test our new Snort installation to see whether it can detect and alert us on well-known attacks before […]

Welcome back, my aspiring cyber warriors! In this tutorial on Web App Hacking, we’ll examine Operating System command injection. This web site vulnerability enables the attacker to inject and execute operating system commands into the underlying server and often fully compromise the server and all its data. If the attacker can inject OS commands on […]