By Chaim Sanders KnowBe4 is a widely used SaaS tool that provides training including security awareness training. Its most…
SSH Attack Mitigation
By Solomon Rubin Introduction Given the high attack rate on SSH servers and the large attack surface that ssh provides,…
A Visual Guide to Setting up a Meraki to AWS Site-to-Site VPN
By Chaim Sanders There are many administrators of Meraki devices now. They make great small business devices and, honestly, simplify…
Bilinear Pairings and Three-Party Key Exchange
By Nicholas O’Brien Diffie-Hellman Key Exchange is one of the most used algorithms in cryptography today. Much of its…
Vulnerability Discovery by Fuzzing
By Duc Duy Phan Introduction What is fuzzing? Fuzzing can simply be understood as the process of automatic discovery of anomalies…
Analyzing Memory after an EternalBlue Attack with the Volatility Framework
By Michael Schade Who Cried….. In the summer of 2017, companies all around the world were being successfully attacked by something…
Dockerizing Insider Threat and Privilege Escalation
By Christopher Tran Over the past few decades, the landscape for application hosting and deployment has changed dramatically multiple times.…
Securing SSH with Vault OTP
By Riley Lloyd System security is an important part of the increasingly prevalent issue of online security threats seen today.…
Bypassing Android’s Secure Fingerprint Lock Screen
By Jonathan Jang Introduction How much of your smartphone contains sensitive information? Do you have a lock screen or…
ISTS 16 CTF: DNS Tunneling
By Lucas Christian At this year’s ISTS 16, I had a great opportunity to create a forensics CTF challenge which…
