Red Teaming is a simulation of a real attacker’s activity that is based on the most up-to-date knowledge regarding risks that are relevant to a specific company. It assists independent security teams in configuring real-world attacks to determine where the organizational barrier may be breached, allowing the business to address…

What is a Penetration Test? A Penetration Test, or commonly named “Pentest”, is the process of evaluating the security weaknesses of an organization’s assets, using similar methodologies to the ones used by real attackers. Penetration Test = Vulnerability Assessment? The answer is clearly, NO! A Pentest is not equal to a Vulnerability Assessment, and a lot of people tend to…

In this blog we will know What is social engineering? Why is it so effective? Also we cover specifically about the different types of social engineering techniques such as phishing, smishing, vishing, shoulder surfing, dumpster diving, influence campaigns, and things like hybrid warfare, and then we’ll also talk about the…

Google hacking, sometimes, referred to as Google Dorking, is an information-gathering technique used by an attacker leveraging advanced Google searching techniques. …

This is Part 3 where we talk about the collection has been pulled together and includes Podcasts, Videos, Presentations, and other Media to help you learn more about DevSecOps, SecDevOps, DevOpsSec, and/or DevOps + Security. To know about DevSecOps, you first need to know what is DevOps and for this…

This is Part 2 where we talk about Github Repositories which helps you to know about the Cybersecurity and other stuffs. As we are all aware of the Awesome Trend on Github, this blog is all about that. 1. Awesome Hacking GitHub - Hack-with-Github/Awesome-Hacking: A collection of various awesome lists for hackers… A collection of awesome lists for hackers, pentesters & security researchers. Your contributions are always welcome …github.com

I am starting a series of blogs where you find the collection of documents, presentations, videos, training materials, tools, services, and general leadership that support the Cybersecurity mission. These are the essential building blocks and tidbits that can help you to arrange for a Cybersecurity experiment or to help you…

OWASP Juiceshop — Created by Bjoern kimminich This application contains various vulnerabilities which can be exploited which helps users to understand the methodology and attack scenarios. It’s a simulated environment. OWASP Juice Shop OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security…owasp.org 2. OWASP WebGoat: An insecure web application with existing underlying vulnerabilities which are commonly found in Java-based web applications.

What Is Malware Analysis? Malware analysis is the process of analyzing a malware sample/binary and extracting to understand the scope of the functionality of the Malware, how the system was infected with the malware and how to defend against similar attacks Objectives of malware analysis To understand the type of malware and the entire scope of what it…