Category: Threats & Vulnerabilities

Learn about the different types of threats facing our networks and systems

The Different Classes of Malware

Malware is the term we've assigned to describe all the different classes of malicious code out in the wild. As you'll see, there are several different classes of malware. One popular type of malware that most people are aware of is a virus. As you'll come to find, there are actually many different sub-classes of ...

PenTest Edition: Creating A Man-in-the-Middle Attack using Cain & Abel [Tutorial]

A man-in-the-middle attack occurs when an attacker sits in the middle of the communication between two victim devices, secretly relaying information back-and-forth on their behalf. It can be thought of as active eavesdropping. The attacker cannot only see the communication traveling to-and-from the victim devices, but can also inject his own malicious traffic. With this ...

How Hackers Still Manage to Steal Facebook Passwords: How You Can Protect Yourself

Throughout the years of Facebook hacking, hackers have discovered plenty of different methods for stealing Facebook credentials. Some are straightforward; others quite clever. But, just like a cat-and-mouse game, Facebook responds with an additional security feature to protect our accounts. Thus, many of the older and easier methods of acquiring Facebook credentials are going obsolete. ...

How Hackers Decrypt Your HTTPS session Using SSL Stripping

I've made quite a few posts on http and https, so this will be the last one for a while. If you've been following these recent posts, I mentioned that even https is not 100 percent secure. Albeit, it is very secure in that it will keep us protected most of the time; however, there ...

Decrypting HTTPS Traffic

Hypertext Transfer Protocol over SSL (https)  is pretty decent security. This is because https uses the Secure Sockets Layer (SSL) encryption scheme to pass keys between two parties over the Internet. These days, however, most of our Web servers are utilizing Transport Layer Security (TLS 1.2), which is an updated version of SSL 3.0. Therefore, ...