~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
231 articles
WPA2-PSK may not be as safe as you think. There are a few attacks against WAP2-PSK. One of the most common attacks is against WPA2 is exploiting a weak passphrase.Below you will find a few easy steps on how to break WPA2 with a weak passphrase.Breaking the Wireless Lab Home Network:I set up a test
The Simplicity of EggShell Eggshell is an Apple iOS and Macintosh OS post-exploitation surveillance penetration testing tool written in Python. It is a menu-based system that reminds me quite a bit of SET (Social Engineering Toolkit) or a simpler version of Metasploit. Basically you can play around
VPN for Hacking: Which one is the Best?If you’re not using a VPN in 2018, you might as well stop using public WiFi. In the age of hackers and government censorships, your Internet connection is not safe. Your ISP provider wants to track your data. Some countries won’t allow you to access social med
Distributing malware inside Adobe PDF documents is a popular method for attackers to compromise systems. Within the latest versions of Reader, Adobe has added multiple updates to address vulnerabilities. Additionally, Adobe has added a robust software sandbox capability to Reader, which activates if
Whenever there is a technological development, a cyber-security threat usually isn’t far behind. So, considering the current state of the tech landscape, you may be wondering what the biggest security risks are this year and in the coming year.Unfortunately, there are a number of threats you need t
I was recently in a very high-cost (around $6K), one-week security course in San Francisco. You can infer the institution. The instructor was dynamic, and the topic was focused on technical hacking. A how-to for breaking into computers, detecting the break-in, etc. At the end of the week there was a
Cyber Fraud Affects 5 Percent of the Planet’s GDP The Association of Certified Fraud Examiners (ACFE) estimates typical organizations loses 5 percent of their revenues to fraud each year (ACFE Report). When fraud occurs, the integrity of the data is impacted; intellectual property is lost, stolen, o
Information Security professionals are akin to our policemen. They are equipped with advanced firewalls and porn filters, secure email and web traffic gateways, encryption keys, IPS signatures, security policies, and intrusion detection systems. The best of them are adept at using advanced threat pr
In light of all the cyberattacks that have been well publicized as of late, we see the increasing need for skilled IT security resources to both protect against and respond to rapidly evolving cyber-threats. IT professionals tasked with protecting their companies’ cyber assets are facing growing cha
FISMA is the Federal Information Security Management Act of 2002. The goal of FISMA is to encourage and to hold government agencies in securing their data and information. Additionally, it encourages organizations that do business with the government to secure their information as well. According to
Most people incorporate commonly used words as their passwords. Studies show when people select random passwords, there is very little randomization to the words. Furthermore, as more large sites have their user’s passwords leaked, attackers are figuring out common password obfuscation techniques pe
Kali Linux does not come with SSH enabled. SSH is the preferred method of remote management for most Linux based systems. Secure Shell (SSH) is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services betwe