Penetration Testing: Create a DNS Zone Transfer Lab
DNS zone transfers use the AXFR protocol to replicate DNS records across DNS servers. If you do not protect your name servers, attackers can get information about all your hosts with AXFR.
Articles
Everything we have published
463 articles, newest first.
Vulnerability vs Exploit, Do You Know The Difference?
Many news and articles keep on referring to words like vulnerability and exploits. But do you really know the difference?
How To Check If Your Phone Has Been Hacked
Is your device behaving weirdly? Outgoing calls you did not make, your device is getting hot without reason? Maybe its time to check if your phone has been hacked.
Copies of “Spider-Man: No Way Home” Infected with Malware
The long awaited Marvel movie "Spider-Man: No Way Home" is out. People are trying to download an illegal copy are up for an unpleasant surprise.
Popular Game Series “Just Dance” Targeted by Attackers
Ubisoft Entertainment a French video game company recently announced that they have identified an intrusion in their IT Infrastructure targeting Just Dance.
A List of Tools to Help you Detect the Log4j Vulnerability
How can you detect the Log4j zero day vulnerability (known as Log4shell)? Here's a list of FREE Log4j vulnerability scanner tools.
NCA Shares 585 Million Compromised Passwords With “Have I Been Pwned”
The National Crime Agency of United Kingdom (NCA) shared a collection of more than 585 million compromised passwords that were found during an investigation with the infamous Have I Been Pwned website.
Hacking Group Leaked Confidential UK Police Data
Russian hacking group "Clop" leaked confidential information held by the UK police onto the dark web. The data were stolen from Dacoll, an IT company which handles the Police National Computer.
Threat Actors Impersonating Pfizer
Phishing campaigns that use COVID-19 as a hook are still on the rise. Hackers are increasingly using vaccine-related emails in their targeted spear-phishing attacks.
Audio Tech Giant Exposed Thousands of Customers’ Data
The data may be old, but it's still valuable to criminals and hackers, and the leak itself could have been much worse. It represents a massive oversight by a huge, multinational, well-known company.
Why Do Data Breaches Happen
We have gotten used to seeing news every day of sensitive data being exposed to unauthorized parties, but do you know why do data breaches happen?
Build a Penetration Testing Lab on a Raspberry Pi with DVWA
You can build a pentest lab on a raspberry pi with DVWA to test your skills and also learn new tricks on how to attack and/or secure web applications.
Hunt a Username on Social Media with Sherlock
Many users register themselves on websites using the same username. If you are performing an investigation on a person, and especially if you know a username or handle they are usually using online, you may hunt for usernames on social media platforms with Sherlock.
Facebook Owner Meta Bans Fake Accounts Used by Cyber-Spy Firms
Facebook said it canceled 1,500 fake social media accounts used by seven surveillance-for-hire firms to conduct online attacks against government critics and members of civil society.
How To Find Domains Owned by a Company
During a black box, or grey box penetration testing engagement for a company, one of the main things you will need to find domains owned by the company.
Cryptocurrency Exchange Hacked
On Sunday, AscendEX announced via Twitter that it had identified a number of unauthorized transactions from one of its hot wallets on Saturday.
HR Management Platform Hit by Ransomware
HR management platform Kronos has been hit by a ransomware attack and information from its customers may have been accessed.
Massive Internet Scans and Log4j Exploit Attempts
Many organizations have noticed a surge in internet scans to discover vulnerable systems and exploit attempts on them.