Welcome back, my aspiring cyberwarriors! The world is rapidly becoming dominated by mobile cellular networks. Not long ago, telecom services were tethered to a cable to each and every home. While this worked well for decades, the advent of cellular technologies has enable us to cut the cord thereby enabling billions of people who […]
Continue Reading
Ransomware is always evolving, and Cactus is no exception. When I came across this sample, I knew it was worth a closer look. It’s built to obfuscate, encrypt, and evade, but like any malware, it leaves behind clues. In this series, I’ll walk you through the process of analyzing Cactus ransomware, starting with static analysis. […]
Continue Reading
Welcome back, my aspiring cyberwarriors! Mobile hacking can take many forms. It can entail any of the following; (1) a hack against a singular phone such Pegasus and many other IoS and Android malware, (2) an attack against the mobile infrastructure such as SS7 (Chinese hackers have recently compromised the entire US telecom […]
Continue Reading
Welcome back, my aspiring cyberwarriors! Cryptography is one of foundational technologies of cybersecurity. It helps to keep our information safe, secure, and confidential. Without cryptography, anyone could read our messages or our stored data. In our previous tutorial in Cryptography Basics, I described one of the oldest forms of cryptography, The Caesar Cipher. […]
Continue Reading
Welcome back, aspiring cyberwarriors! In the complex realm of cybersecurity, professionals face a continuously evolving landscape of digital threats. To address this challenge, MalwareBazaar was introduced as a collaborative defense platform, revolutionizing the way cybersecurity experts analyze and combat malicious software. Conceived by abuse.ch, a distinguished Swiss cybersecurity research organization, MalwareBazaar collects known […]
Continue Reading
Welcome back, my aspiring cyberwarriors! As our digital world progresses toward a circumstance where data analytics and artificial intelligence become key components of any cybersecurity strategy, it is becoming increasingly critical that you understand these techniques to remain relevant and employed in the most exciting and well-paying field in IT. Towards that end, […]
Continue Reading
Welcome back, my aspiring cyberwarriors! Finding vulnerabilities in applications and services is the first step toward developing your own zero-day exploit. Vulnerability scanners are great for finding KNOWN vulnerabilities, but to find unknown or zero-day vulnerabilities a fuzzer is an excellent tool that you should be familiar with. As you know, fuzzing is the […]
Continue Reading
Welcome back, my aspiring cyberwarriors! In the digital battleground of cybersecurity, web application fuzzing stands as a critical technique for uncovering vulnerabilities and developing exploits. This practical guide equips aspiring cyber warriors with the knowledge to wield BASH scripting as a powerful weapon in creating custom fuzzing tools. Fuzzing is a dynamic analysis […]
Continue Reading
Welcome back, aspiring cyberwarriors. As the war rages on, Russia’s gas exports have taken on heightened significance. This resource is literally and figuratively fueling Putin’s war efforts, which only underscores the need for attacks on this sector’s infrastructure. In this article, in collaboration with a student from Cyber Cossacks School – Citadel–we’ll show […]
Continue Reading
Welcome back, my aspiring cyberwarriors! Nuclei is an advanced, open-source vulnerability scanner that has gained significant popularity among cybersecurity professionals, penetration testers and developers. Known for its exceptional speed, high degree of customizability, and accuracy in identifying security vulnerabilities, misconfigurations, and potential exploits across a wide range of digital assets and networks. This article […]
Continue Reading