Pi-Hole Project: Block Ads Network Wide (With Setup & Real Troubleshooting)
In this modern world, all businesses promote their products or services through ads. For users, seeing ads can sometimes be distracting from their work. Ads can be shown on websites or when watching videos. Here, Pi-Hole comes to the rescue for the individual. You are asking why we need this if we can install an […]
Enumerating Subdomains Using Sublist3r
In the red team, enumeration is one of the important steps. Enumerating subdomains is important for discovering potential weak links or easy-to-attack areas of a web application. Today, we will learn all about the sublist3r tool. Sublist3r is one of the best tools to use for looking up subdomains. This is an open-source tool written […]
Hardening OpenSSH: The Definitive Guide to Server Security
In cyberspace, everyone occasionally uses SSH. If you’ve logged into a remote Linux server or system, there’s a good chance OpenSSH was involved. OpenSSH runs quietly in the background on the cloud servers, VPS instances, home labs, and enterprise infrastructure. This runs on every device, yet many people are unaware of it. But after reading […]
Information Gathering in Cybersecurity: A Practical Guide for Red Team Recon
Information gathering is a first step and helps in every field of cybersecurity. It is a procedure to gather sensitive information about the target. Sensitive information can include IP addresses, email addresses, system details, and other data that may expose a target to vulnerabilities. The target could be a website, an application, an organisation, or […]
Unlock the Power of Nmap Scripting Engine: From Discovery to Exploitation
The Nmap Scripting Engine (NSE) is an important feature of Nmap. It allows users to automate scans by running scripts from the command line. NSE supports only Lua scripts. Real-world use case: A network administrator can run automated, predefined scans of the organization’s network/server regularly. This can be really useful for detecting misconfigurations and out-of-date […]
What is Burp Suite? A Practical Introduction for Aspiring Pentesters
Burp Suite is a renowned software used in web security for cyber security professionals. This software is based on a Java-based framework. This software is built and maintained by Portswigger. Burp Suite can be used in various sectors of cybersecurity, such as Application Programming Interfaces (API), mobile applications, and web application security. It can capture […]
MiddleMayhem Investigation: Chasing a Ghost in the Wires
John works in the security team at MiddleMayhem Incorporated. The security team detected unusual network traffic to their admin portal. However, no security breaches have been confirmed. John got SIEM logs about the incident from his team. He has to analyze the attack pattern to determine how the attackers bypassed authentication, achieved remote code execution, […]
Security Frameworks Explained: Building Stronger Controls for Cyber Defence
In cybersecurity, organisations use security frameworks and controls to protect against threats, risks, and vulnerabilities. Frameworks include the NIST Risk Management Framework (NIST RMF), the Cybersecurity Framework (CSF), the CIA triad, and others. Most of the security framework can be applied to any organisation, regardless of its size (small, mid-sized, or large), to protect its […]
Why 90% of Cyber criminals Love Scheduled Tasks: Persistence, Stealth & Control
The most all-time dangerous exploit is a zero-day vulnerability or an unexplored complex virus in cyberspace. Just like its name suggests, the scheduled tasks aim to schedule the task and run on time without any problems. What if a seemingly harmless Windows feature could be your system’s most significant security risk? Confusing, right! Why don’t […]
Shodan Search Engine: The World’s Most Dangerous Search Tool Explained
In today’s digital world, users rely on search engines like Google, Yahoo, or Yandex. But there are a few search engines available that are used by cybersecurity professionals, security analysts, or other IT employees. Shodan is a search engine that reveals everything connected to the Internet, from small smartwatches to large smart TVs. What is […]
