The Supply Chain Cybersecurity Saga: Challenges and SolutionsFeatured
According to a study by Argon Security, software supply chain attacks grew by more than 300% in 2021 compared to 2020. The study also indicated that attackers […]
Category: Case Studies
Holiday wishes from the CEO’s Desk!
The end of 2021 brought with it two high-impact events. One was the appearance of the Omicron variant that has led to a resurgence in […]
Kerberoasting, exploiting unpatched systems – a day in the life of a Red Teamer
The Scope Recently, we conducted a red team assessment for a large enterprise client where the scenarios allowed were to either use the hardened laptop […]
Security Analytics Using ELK
Few months back, I had the opportunity to conduct two workshops at BSidesDelhi and CSI Mumbai on the above topic. Both sessions were great experiences […]
Hardware Security Module (HSM) security testing checklist
One of the key security devices in a lot of organizations is an HSM – Hardware Security Module. All banks use it to store your debit […]
Security Review of Microsoft DirectAccess Implementation
This article presents the key risks with DirectAccess and how to audit them. Let’s begin by first understanding the DirectAccess technology. Introduction of DirectAccess From […]
Anatomy of a Credit Card Stealing POS Malware
INTRODUCTION Point-of-sale (POS) is the place where a retail transaction is completed. It is the point at which a customer makes a payment to the […]
Asus RT-N10 Plus Cross Site Scripting CVE-2015-1437
Overview ASUS Router RT-N10 Plus is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the result_of_get_changed_status.asp script. A remote authenticated attacker […]
The Lesser Known XE Attack
The Meaning XE which stands for XML Entity is a standard for representing sets of data. Meanwhile, Entities are more like shortcuts to standard text […]
Shellshock Exploitation: Using BeEF Framework
In a previous article, we have described the Shellshock vulnerability and in this article we show how to exploit this vulnerability using the BeEF Framework. […]