ADVANCE DEFENSE: PROCESS MONITORING WITH RUBY
Make you own Security Solution, get alert on new process launch. Stay tuned Today's post can be used by System Admins and fellow friends ...
- Blog
- Categories
Browse by topic
Categories
Every Alpha Threat article grouped by the category it was filed under.
Programming 5 posts
BROWSER PROFILE FORENSICS
This post discuss about how to read the data that your browser stores locally. This data includes cookies, forms, history, boookmarks, et...
FINDING MY FILES WITH RUBY
Here i share code i wrote to search my study related material which was spread all over the Hard disk in multiple partitions. So I have a...
SOME WAYS TO DETECT VIRTUAL MACHINE
This post provides an insight on some of the methods ( C code snippets) that can be use to detect either a program is running in a Virtua...
RUBY ONE LINER COLORED THREADED REVERSE SHELL
Develop a unique oneliner colored reverse shell in Ruby Language This is a simple one liner reverse shell with threading and color featur...
General Security Awareness 5 posts
Top 7 Cyber Security Best Practices To Protect Your Organization
How can you avoid being a victim of a cyber-attack? Here are 7 cybersecurity best practices you can begin to implement today to protect y...
Ransomware Protection: How To Keep Your Data Safe In 2021 I Do's and Don'ts
In recent years, the purpose of ransomware attacks have evolved to target businesses by encrypting entire computer networks and files, st...
OPEN SOURCE SECURITY CONTROLS
This post offers a list of Open source security controls to adapt. Special thanks to Adrian Grigorof for compiling this list SECURITY CON...
APT GROUPS LIST
This post lists some commonly known APT groups of various countries CHINA Comment Crew, APT2 UPS, IXESHE APT16, Hidden Lynx Wekby, Axiom ...
SOCIAL ENGINEERING ATTACK TACTICS
Here we will take a peek into the creativity of attackers who always keep on trying new and creative ideas to steal your identity. This p...
Pentest Engagement 9 posts
CVE 2022-40055
This post sheds light on CVE-2022-40055. Vulnerable device: GPON ONT: Titanium 2122A found HERE Software Version: T2122-V1.26EXL Hardware...
Decoding the /proc/<PID>/net/tcp
The Linux concept of 'Everything is a file' is a very helpful one. This post share details of an attacker can read the network statistics...
SQLMAP TAMPER SCRIPTS
Sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking o...
REGISTRY AND MALWARE PERSISTENCE
This amazingly interesting post describes persistence techniques malwares use today via Registry entries. Malwares have been an interesti...
DATA EXFILTRATION with PING
In this post we dive deep into the ICMP protocol and utilise the same for exfiltration of data without any external tool. Before we get i...
HIDING YOUR BACKDOOR FROM DETECTION
This post explains a very simple technique to skip detection of your backdoor from native tools like netstat, ps, lsof This article assum...
DNS CACHE SNOOPING ATTACK
This article focus on a DNS attack named "DNS Cache Snooping". This helps an outside attacker to gather the intelligence of domains being...
NETCAT - TCP/IP SWISS ARMY KNIFE
Netcat is a utility that is able to write and read data across TCP and UDP network connections. It is widely used by network or system an...
BYPASS CHMOD RESTRICTION
This is a handy trick to execute custom script or executable on target machine if you lack execute permission Lack of execute permission ...
Hacking 10 posts
Malware Techniques: Windows Command Obfuscation
Obfuscation can be simply understood as the art of hiding code in plainsight, in order to defeat the signature based defence mechanisms i...
DNSCRYPT: ENCRYPTING YOUR DAILY DNS TRAFFIC
DNSCrypt aids in encrypting the normal DNS traffic so that it can't be snooped DNSCRYPT DNSCrypt focuses on securing communications betwe...
DEFEATING CAPTCHAS: OPTICAL CHARACTER RECOGNITION
This blog post discuss the art of Optical Character Recognition and using it to read the Captchas. OPTICAL CHARACTER RECOGNITION (OCR) Si...
HTTP BACKDOOR USING WEBIFY
This article discusses about using GoLang tool webify to establish a simple HTTP backdoor that listens on a port and executes remote comm...
MOST COMPLETE IP CAMERA DEFAULT CREDENTIALS LIST
Title says it all.This list comes handy during a pentest. Format is CAMERA MODEL: USERNAME/PASSWORD multiple authentication are separated...
WIRELESS JAMMERS: DEAUTH ATTACKS
This post sheds light to how the attackers are able to bring down a single or all the wireless networks around. We claim no responsibilit...
WIFI PENTEST: ATTACKING WPS
This blog gives an excerpt on attacking WPS feature of a router WPS or WiFi protected setup is used to automatically configure a wireless...
BATCH FILE PROGRAMMING
Batch file programming is the native programming offered by the Microsoft Windows Operating System. Batch file is created using any text ...
KNOWING YOUR KALI TOOLS
This post explains all the tool categories under Kali linux. This post is upon request from one of our readers. Kali contains tons of too...
TABNAPPING ATTACKS
When there is no activity in a tab (NAP) a malicious code is executed that can be used for a phishing attack. Original page is then redir...
WiFi Hacking series 2 posts
WIRELESS JAMMERS: DEAUTH ATTACKS
This post sheds light to how the attackers are able to bring down a single or all the wireless networks around. We claim no responsibilit...
WIFI PENTEST: ATTACKING WPS
This blog gives an excerpt on attacking WPS feature of a router WPS or WiFi protected setup is used to automatically configure a wireless...