Your SIM card might seem like a small, harmless piece of plastic inside your phone, but it’s a key part of your mobile identity. It connects you to the mobile network, stores identifying information, and can even receive security codes from your bank. That makes it a tempting target for hackers. In this article, we’ll break down how hackers hack SIM cards, what they can do once they’ve done it, and how you can protect yourself. We’ll cover the main techniques: SIM swapping, SIM cloning, and over-the-air (OTA) attacks, plus some real-world examples and tips to stay safe. What is…
Author: Lipson Thomas Philip
Lipson Thomas Philip
Lipson Thomas Philip is a student of Masters in Network and Information Security at Griffith College, Limerick. He has done an internship in Cyber Cell, Gurugram 2021. His motive is to learn on a daily basis. As somebody said "Never stop learning". You learn new things knowing or unknowingly and as your life changes day by day.
Introduction In this post, we will learn about creating custom rules in Snort. The main question is, what is snort? Snort is an open-source intrusion detection and prevention system (IDS/IPS) used by security experts worldwide. The tool has a vast library of preconfigured rules. However, the true magic begins with the ability to create custom Snort rules. This gives the tool the power to detect specific threats with generic signatures. Whether you want to prevent freshly found malware, monitor suspicious user activity, or fine-tune warnings for internal policy, Snort allows you to create your own rules and have total control…
Burp Suite Series 🌐Overview Burp Suite is one of the most powerful and widely used tools for web application security testing. Whether you’re a beginner learning ethical hacking or a seasoned penetration tester, Burp Suite provides comprehensive features for identifying and exploiting web vulnerabilities. This featured series is designed to guide you through the most essential aspects of Burp Suite — from setup to advanced techniques — in a structured and easy-to-follow format. With more than five detailed articles, you’ll learn how to configure Burp Suite, intercept and modify traffic, use its scanning capabilities, and understand key tools like the…
Installing Snort on Ubuntu might sound complex, but the truth is, to install Snort in Ubuntu is easy and can be done with just a few clear steps. Snort is an open-source IDS and IPS tool developed by Martin Roesch in 1998. It currently has two versions: Snort 2 and Snort 3. Snort 3, an upgraded version of Snort, features a redesigned design and improved effectiveness, performance, scalability, and extensibility. Snort is available in cross-platform: Linux and Windows. The below guide will help to install & configure Snort on Ubuntu. Prerequisites Steps To Install Snort Step 1: Update the repository…
In this article, we’re gonna talk about Snort. You have a doubt about what snort is. When you hear ‘Snort,’ your mind might jump to pigs, laughter, or someone trying to hold in a laugh and failing miserably. But in the world of cybersecurity, Snort is no joke – it’s a powerful tool that sniffs out malicious traffic like a bloodhound on caffeine 😂. Let’s be serious and learn more about snort. What is Snort? Snort is a network tool that acts as an Intrusion Prevention System (IPS) and Intrusion Detection System tool. It is available cross-platform, available for individuals/organizations,…
Subdomain enumeration is important in cybersecurity because it helps detect security flaws inside a target domain. Knock Subdomain Scan, a Python-based application for quick and efficient subdomain enumeration, is one of the best tools for the job. This article explores Knock Subdomain Scan, its features, installation process, usage, and best practices for penetration testers and ethical hackers. What is Knock Subdomain Scan? Knock Subdomain Scan is an open-source tool written in Python that automates the process of discovering subdomains. It helps security professionals uncover potential attack surfaces by identifying subdomains associated with a target domain. Key Features Why is Subdomain…
With the ever-evolving landscape of cybersecurity, penetration testers and security researchers need effective tools to help them identify possible vulnerabilities in web applications. Cariddi is one tool that helps simplify the process of finding endpoints from JavaScript files and other sources. This article explores Cariddi’s features, installation, usage, and benefits, making it an essential resource for cybersecurity professionals. What is Cariddi? Cariddi is an open-source endpoint finder tool that assists security professionals in extracting sensitive endpoints from web applications. It is an excellent tool for reconnaissance and vulnerability assessment since it is very good at parsing HTML, evaluating JavaScript files,…
Finding subdomains connected to a primary domain is known as subdomain enumeration, and it is an essential cybersecurity procedure. Since subdomains frequently include forgotten or less secure assets that attackers might exploit, it is a crucial component of reconnaissance in penetration testing and ethical hacking. Organizations use subdomains to build and deploy many services, apps, or environments, including production, staging, and development. Attackers may use these subdomains as entry points if they are poorly defended. This tutorial will guide you through various subdomain enumeration methods, resources, and best practices. Understanding Subdomains A subdomain is a subset of a primary domain…
In a time when almost every aspect of our lives is connected to the internet, protecting personal data is more critical than ever. Our data is continuously collected and stored whether we use social media, make purchases online, or use smart devices at home. However, this convenience increases the risk of cyber threats like identity theft and unauthorized access to our personal data. Everyone should understand cybersecurity; it’s not just for technical experts. This essay examines the foundations of cybersecurity, how your data is at risk, and doable solutions to safeguard your personal data in the current digital landscape. What…
Cyberattacks happen every 39 seconds, making website security more critical than ever1. But how do cybersecurity professionals test for website vulnerabilities? Experts identify and fix security flaws through penetration testing, vulnerability scanning, and ethical hacking to prevent breaches. Cyber threats are everywhere, so how can we keep our websites secure? Let’s explore the fundamental techniques that make all the difference to mitigate website vulnerabilities. Reconnaissance Before testing for website vulnerabilities, cybersecurity experts conduct reconnaissance to collect as much information as possible about the target website. It is also known as information gathering (to gather information). This includes: Passive Reconnaissance Direct…
