The early days of IoT, which are just barely behind us, were basically the wild west in terms of security. If implemented at all, security controls were either poorly configured or a homebrew system that created more problems than it fixed. Standards simply did not exist. …

The OWASP Top Ten is a list of web application security vulnerabilities, released by the Open Web Application Security Project that “is intended to serve as an educational tool for developers and security professionals.” There are three new categories, four categories with naming and scoping changes, and some consolidation in…

MSFVenom, if you’re not already familiar, is the payload creating cousin of Metasploit. With it, you can create a wide variety of shellcodes, reverse tcp connectors, and much more. I’ll leave the full explanation for another article, as I’m sure you probably know the basics if you’re here. This command…

In the first part of the series, we spoke about the psychology behind successful phishing techniques, and how to choose the right tools for the job. For this article, let’s jump into the more advanced topics and learn how to bring the pieces we’ve learned into a coherent process. Spearphishing and Whaling

A Brief Introduction Phishing: to exploit the weakest link of the chain, human beings, through carefully crafted false narratives, delivered electronically, for the purpose of gaining valuable intel on your target. This isn’t the official definition, but it might be a more realistic, living definition of what phishing actually is. It is a…