PentestMag Library
Practical security research, tutorials and analysis from PentestMag.
105 articles found · Showing 49–72
INTRODUCTION TO PENETRATION TESTING Penetration Testing is used to evaluate a computer system’s security by performing authorized simulated attacks. A cybersecurity expert performs penetration testing to identify vulnerabilities and weak spots in a system’s security which hackers or attackers could exploit. A penetration test is also known as pen test and, a
helena piorun
What is Edge Computing? Imagine a personal assistant who anticipates your business needs and provides solutions immediately without having to consult a central office. Just like how a personal assistant stationed at your side can quickly address your requests and provide tailored assistance, edge computing processes data locally, near its source, enabling ra
helena piorun
Building your own penetration testing (pentest) lab is a great way to enhance your cybersecurity skills and test your knowledge in a controlled environment. Here's a step-by-step guide to help you create your own pentest lab for 2024: Step 1: Define Objectives Define the specific skills and techniques you intend to practice within the controlled environment
helena piorun
Introduction As we navigate through the complexities of modern cybersecurity penetration testing (pentesting) remains a crucial practice for organisations and individuals alike. As we step into 2024, the digital ecosystem has become more complex and interconnected, making the role of pentesting more significant than ever. This form of ethical hacking serves
helena piorun
The Internet of Things (IoT) has undergone a very fast evolution, fundamentally altering the way we engage with our surroundings, be it our home or office. This change has introduced unprecedented convenience and connectivity across various aspects of our lives including industries, healthcare facilities and our homes as well. Smart devices, such as thermost
helena piorun
The goal of many pentesters is to improve security. Yet, the deliverable for many pentests is still not cybersecurity but simply a pentest report. That gap in goals versus results remains significant and impactful. At the same time, dev teams are increasingly leaning on cloud platforms and scanners that integrate into teams. Scanners flag items and deliver v
helena piorun
The security of space assets has become paramount in our interconnected world, where space operations rely on a complex infrastructure encompassing space, user, link, and ground segments. This article delves into the interdependence between space and cyber domains and the vulnerabilities that expose space infrastructure to cyber threats. The space segment in
helena piorun
Cybersecurity is a hot-button issue in all technology sectors. Hackers are constantly competing against the technologies aimed at stopping them, with the number of documented hacks increasing alongside the number of cybersecurity services offered on the market. Still, even in the context of this developing situation, most companies do not take the threat ser
helena piorun
Questions, Questions You want to get started in pentesting, but you: Don't have a victim, er, target machine that is safe to test (testing the targets you know is unethical and could get you jail time). Think that setting up a vulnerable lab is expensive. Don’t have a clue where to even start. Penetration Testing can mean all kinds of things, depending on al
helena piorun
Introduction Space has been a critical asset since the beginning of time, from the period when navigators started to use constellations to guide them across uncharted waters, to today, where the logistics for most of the free world have some dependency on space assets. But what does that mean in the context of space cybersecurity? How can we globally measure
helena piorun
The Importance of Securing the Supply Chain in the Global Business Environment The paramount importance of robust supply chain security cannot be overstated, as organizations face an escalating array of cyber threats, geopolitical uncertainties, and unprecedented disruptions that underscore the critical need for safeguarding the integrity, resilience, and tr
helena piorun
Objective: Pioneering AI's Role in Cybersecurity This study explores how artificial intelligence (AI) transforms the world of cybersecurity and computer networks. We're on a mission to understand how AI acts as a powerful shield against evolving cyber threats, reshaping computer networks in the process. AI brings revolutionary changes to the Internet by intr
helena piorun
Definition of the Malware – “Malware (short for “malicious software”) is a file or code, typically delivered over a network, that infects, explores, steals or conducts virtually any behavior an attacker wants. And because malware comes in so many variants, there are numerous methods to infect computer systems”. (Paloaltonetworks,2023). Definition of the phis
helena piorun
Overview In the modern workplace, organizations often grapple with the challenge of managing and controlling the applications their employees use. While strict application policies may help maintain security, there are instances when employees require additional tools to streamline their tasks. This leads to a fundamental question: how can organizations dete
helena piorun
Introduction The fusion of social engineering and artificial intelligence (AI) has given rise to a new and dangerous threat in the rapidly evolving field of cybersecurity: AI-powered voice deception attacks. The increasing advancement of technology has led to hackers taking advantage of AI's skills to create dangerous deception, whereby they mimic reliable v
helena piorun
Introduction What is supply chain cyber-security? Supply chain cyber-security mostly involves protecting an organization's software and services from cyber-attacks against products. These include sourcing, vendor management, supply chain continuity and quality, transportation security and many other functions across the enterprise and require a coordinated e
helena piorun
1. Introduction: The evolving role of cybersecurity in the space domain 1.1. Transforming cybersecurity from space age to digital era In the dawn of the space age, during the mid-20th century, the primary concerns were propulsion, navigation, and basic communication. The rudimentary computer systems of early spacecraft were not networked in the way we unders
helena piorun
Introduction Radio Frequency (RF) penetration testing, popularly referred to as RF pentesting, stands as a vital domain within ethical hacking. Its primary goal is to meticulously identify vulnerabilities inherent within wireless communication systems (Smith & Johnson, 2018). In contemporary times, with the exponential growth of the Internet of Things (IoT),
helena piorun
About the Author: Larbi OUIYZME Cybersecurity Consultant and Licensed Ham Radio Operator since 1988 with prefix CN8FF, deeply passionate about RF measurement, antennas, satellites, Software-defined radio, Digital Mobile Radio and RF Pentesting. 1. How effective are attackers with regard to RF in eavesdropping, DoS & DDoS, MitM, spoofing and malware propagati
helena piorun
Vulnerability assessment is one of the most important components of risk management, with a lot of enterprise tools provided to reach this target. One of the first questions is: can we have anything in the open source world that can provide us enterprise tool features? Tools designed to be open source exist, NERVE (my personal fork of NERVE project https://g
helena piorun
The Theory behind WiFi Jamming in the RF Spectrum You might have seen several WiFi jamming devices on Chinese sites such as Aliexpress, Wish, or Alibaba. However, Signal Jammers are very different from WiFi deauthers, since the first one creates a lot of signal interference in the RF spectrum while the other one basically injects forged frames to disconnect
helena piorun
1. Introduction In our modern, interconnected world, the concept of Web3, also known as the decentralized web, represents the next significant shift in Internet technology. Web3, underpinned by blockchain technology and smart contracts, offers unprecedented decentralization, transparency, and user sovereignty possibilities. However, with these new possibilit
helena piorun
By Dr. Dennis Kengo Oka Principal Automotive Security Strategist, Synopsys [email protected] The rapid development of more advanced technologies and complex software solutions has transformed the automotive industry. A typical modern vehicle contains more than 100 million lines of code, and there are millions of connected and autonomous vehicles
helena piorun
Created: 05/12/2023 By Max Ahartz Prepared for: Curious Minds Everywhere *** Disclaimer *** This guide is for educational purposes only. I do not condone or promote malicious behavior of any kind. You should be working with self-generated hashes for your own research purposes only or, if on an engagement, have legal authority and permission to do so. Executi
Bartek Adach
