OSINT The 7 Deadly Sins of OSINT Curious to know just of many of these seven deadly OSINT sins that you are guilty of committing online?
INFOSEC Penetration Testing for Beginners (1) Interested in penetration testing? Welcome to Part 1 of our beginners guide to the noble art of pen testing.
TECHNICAL How To Bypass CSP By Hiding JavaScript In A PNG Image Hide a malicious JavaScript library in a PNG image and tweet it, then include it in a vulnerable website by exploiting a XSS bypassing its Content-Security-Policy (CSP).
INFOSEC Insecure Serverless Plugins: Why You Should Inspect the Source Code The Serverless Framework supports numerous plugins and they save so much time, but this convenience can come with a negative downside.
OSINT LinkedIn OSINT Techniques: Part I Linkedin users walk a fine line between giving out too little information, or giving out too much information.
OSINT Scalable LinkedIn Username Hunting Automate the OSINT hunting of LinkedIn usernames and profiles using the users email addresses.
INFOSEC Secjuice Squeeze Volume 18 Welcome to the 18th edition of Secjuice Squeeze, a curated selection of interesting security articles and news that you may have missed.
TECHNICAL HTB Postman Walkthrough Now that its been retired, lets take a deep dive into the “Postman” machine on HackTheBox so I can show you how I went about hacking it!
CYBERSEC Remote Working Cybersecurity A closer look at some of the issues faced by cybersecurity teams grappling with the sudden exodus of workers from the office into their homes.
INFOSEC When Politicians Do Cybersecurity An insightful critique of the European Union's Cybersecurity Act, created by politicians rather than infosec people.
INFOSEC Secjuice Squeeze Volume 17 Welcome to the 17th edition of the Secjuice Squeeze, a curated selection of interesting security articles and infosec news that you may have missed.
INFOSEC Creating A Cybersecurity Dictionary Why should you consider creating a cybersecurity dictionary for your organization? #understanding
TECHNICAL HTB "Eat the Cake!" Challenge An excellent write up of the 'Eat The Cake' challenge on HackTheBox.
INFOSEC Secjuice Squeeze Volume 16 Welcome to the 16th edition of the Secjuice Squeeze, a curated selection of interesting security articles and infosec news that you may have missed.
INFOSEC Secjuice Squeeze Volume 15 Welcome to the 15th edition of the Secjuice Squeeze, a curated selection of interesting security articles and infosec news that you may have missed.
INFOSEC Acquisition Activity In The Browser Isolation Cybersecurity Space A closer look at acquisition activity within the browser isolation space.
OSINT Make Your Own Custom OSINT Bookmarklets (p2) Part two of Sinwindie's guide to creating custom Javascript bookmarklets for help you during OSINT investigations.
INFOSEC Removing Sensitive Data & Plaintext Secrets from GitHub Learn how to clean your GitHub history, repository and pull requests containing sensitive data (like passwords), and prevent developers from committing secrets.
INFOSEC Squeeze Volume 14 - KidsGuard, VPN backdoors, Bluetooth, MGM & more! Welcome to Squeeze, a curated selection of interesting infosec articles from the past week that you may have missed.
CYBERSEC Secjuice Hall Of Fame The Secjuice Hall Of Fame, where we immortalize legendary Secjuice members, volunteers who made a difference and writers who contribute to our project.
OSINT Make Your Own Custom OSINT Bookmarklets (p1) Learn how to build your own custom OSINT bookmarklet tools with this how-to guide and sample code!
INFOSEC Squeeze Volume 13 - Voting, Blockchain, DDoS, Malware, & more! Welcome to Squeeze, a curated selection of interesting infosec articles from the past week that you may have missed.
UNUSUAL JOURNEYS INTO INFOSEC Unusual Journeys into Infosec Featuring Rik Ferguson We join Rik Ferguson (VP of Security Research for Trend Micro), as we explore his unusual Journey into infosec.
TECHNICAL ModSecurity Denial of Service Details and PoC CVE-2019-19886 Security researcher Andrea Menin tells us the story of vulnerabilities he found in libModSecurity.