Memory Forensics with Volatility
When a security breach strikes, the instinct to immediately reboot or isolate a compromised machine can inadvertently wipe out your best forensic evi…
Posts
LLMVault - Walkthrough
Installation git clone https://github.com/CyberSunil/LLMVault.git cd LLMVault pip install -r requirements.txt python app.py LLM01:2025 Promp…
CISSP Domain to ISO 27001:2022 Annex A Mappings
Cybersecurity is a vast field. Below, we illustrate the 8 domains of cybersecurity, covering key disciplines in information security according to th…
To replace "There's nothing here." in Blogspot
To replace "There's nothing here" in Blogger, you can navigate to Layout -> Add a Gadget -> HTML/JavaScript , and paste the fol…
Cybersecurity Exam Mindset Cheat Sheet
Certified Information Systems Security Professional (CISSP) Protecting human life and society is always the #1 priority over data, systems, or bus…
Training Offerings
As a specialized cybersecurity consulting house, we bridge the gap between complex technology and actionable knowledge. Our mission is to empower in…
Hardware Security
Intel RIDL and Fallout: Microarchitectural Data Sampling (MDS) attacks https://mdsattacks.com/ Cisco 😾😾😾 (Thrangrycat) https://thrangry…
Offensive Security Testing Guide - Post Exploitation
Explore the Post-Exploitation phase of offensive security testing covering privilege escalation, lateral movement, and how to measure real-world brea…
File Integrity Monitoring (FIM)
File Checksum Integrity Verifier (FCIV) Reference: https://support.microsoft.com/en-us/help/841290/availability-and-description-of-the-file-chec…
Authentication Bypass - Mobile
18 Apr 2019: Nokia 9 buggy update lets anyone bypass fingerprint scanner with a pack of gum https://twitter.com/decodedpixel/status/11200696…
Remote Working
Learn how attackers exploit legitimate remote working tools like TeamViewer. ISO 27001:2022 Annex A Controls 6.7 Remote working 22 Apr: Evi…
Mobile Security
11 Apr 2019: SIM Swap Attack Reference: https://securelist.com/large-scale-sim-swap-fraud/90353/
Network Device Security
17 Apr 2019: Cisco IOS and IOS XE Software Cluster Management Protocol Remote Code Execution Vulnerability ( CVE-2017-3881 ) Reference: https:…
Information Security
Reference: https://securitybaron.com/blog/the-data-big-tech-companies-have-on-you-or-at-least-what-they-admit-to/
Host Configuration Assessment - ESXi
Connects to a vSphere server Enter the following commands in PowerShell Install-Module -Name VMware.PowerCLI Set-PowerCLIConfiguration -Invalid…
Operational Technology (OT) Security
Industrial Control Systems Pattern by OSA ( Trend Micro ) Examples of security threats to a smart factory with IT and OT convergence ( Ch…
Social Media Security
25 May 2019: Disclose files content from Facebook internal CDNs Reference: https://ysamm.com/?p=272 18 Apr 2019: Facebook says it &#…
Operating System Security - Windows
Windows ALPC Elevation of Privilege Vulnerability ( CVE-2018-8440 ) Reference: https://doublepulsar.com/task-scheduler-alpc-exploit-high-level-a…
Operating System Security - MacOS
MacOS High Sierra 10.13.4 Multiple Security Vulnerabilities (March 29, 2018) 1. Safari automatic download and mounting of disk images ( CVE-2017…