user

Making Difficult Passwords Easy

Creating a 6-Digit Numeric Password for Various Lock Devices Source: Wendy Boswell of the LifeHacker blog → If you forget the password, subtract the digits you added from the number that is written down. The result is the password.This method can also be applied when creating 4-digit and 5-digit numeric passwords. Creating Passwords of Simple

Q. A Tool That Makes Dull Security Training Engaging

Information security awareness training for the general public is dull for the audience and difficult for the instructor!Training that teaches skills in a specific field naturally holds the listener’s attention, but the personal information protection or information security training that most companies and institutions conduct twice a year has an atmosphere no different from reserve-forces

CONSULTING CASE OF SECURITY TEST ON AD SECURITY POLICY

There was a consulting request from the client company for the AD security policy. AD security policy can be seen from various points of view from design of AD to account management, but since the total number of accounts is over 100,000, this consulting focused on identifying the latest issue, abnormal account, and suggesting improvement

Netcat Usage Examples

* Telnet Connection * Server-to-Server Chat * Connect via IPv6 (-6: IPv6, -4: IPv4) * copying a file * Hard Drives & partition Clone * port scanning * Send the “quit” command across the port range to check for responses (version information). * Simple web-page (somepage.html) service

Useful tools to use alongside dedicated solutions when performing application source code vulnerability assessments

Most application source code vulnerability assessments involve reviewing a large volume of source files.In general, this work is performed through a combination of static analysis using dedicated tools such as Fortify and manual dynamic analysis conducted by experienced security consultants.Given the substantial amount of source code that must be manually reviewed during this process, it

Essential Wireshark Tips for Effective Vulnerability Assessment

Changing Packet Time Display Settings (Menu: View > Time Display Format) Viewing Packet Flow (Menu: Statistics > Flow Graph) Viewing Packet Transmissions Between Specific Hosts (Menu: Statistics > Conversations) Viewing Packet Flow (Menu: Statistics > Endpoints) Searching for Packets Containing Specific Strings (Menu: Edit > Find Packet, Ctrl+F)

Wapiti

Wapiti allows you to audit the security of your web applications.It performs “black-box” scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data.Once it gets this list, Wapiti acts like a fuzzer, injecting payloads

PHP Security Audit

php_aduit_script.php <?php   /** * PHP Security Check Script * http://php-security-audit.com/ * * This security check script will evaluate the PHP runtime environment * for your configuration to determine whether any improvements could be * made to your configuration. * * * * * * * * * * Revision History * * 2009-05-08 –