top of page
Welcome
to my Blog
explore more, deepen your horizon, and gain a comprehensive awareness as to Cybersecurity
Articles


CyberPath for the newCyberians
Steps as a roadmap: Fundamental Certifications that could be earned for beginners: Source: startacybercareer.com
Dec 28, 20221 min read


Phishing Simulation: is it so easy, yes it is…
Phishing and social engineering are trending because they exploit human psychology rather than relying solely on technical hacking...
Jul 5, 20243 min read


Uncovering the Threat: How Does NTFS Alternate Data Stream (ADS) Hide Embedded Malware?
Alternate Data Streams (ADS) is a file attribute found only in the NTFS file system. In this system a file is composed of several...
Jun 24, 20243 min read


PART-2 / Exploring the Efficacy of Custom Reconnaissance on ICS/SCADA: OT Security&Pentest
In the previous article, we have already discussed on how risky open port and discoverable services in public internet at OT sector. In...
May 30, 20242 min read


PART-1 / Exploring the Efficacy of Custom Scripts on ICS/SCADA: OT Security&Pentest
Many devices are executable without authentication. With enumeration, it can be mapped on the network to gather info such as PLC type,...
May 12, 20243 min read


Network Simulation Lab Training: EVE-NG vs Cisco Packet Tracer
Networking has a vital role in connecting devices. At this point, network simulation plays a critical role. Before establishing a...
Jan 4, 20244 min read


Beef; yes it is, something edible, but not meat: The Browser Exploitation Framework (BeEF)
The Browser Exploitation Framework (BeEF) is a tool used mostly for honeypot and social engineering under the penetration testing. It...
Jul 7, 20232 min read


IDOR/Broken Access Control with BurpSuite
Refence: OWASP Report When we visit a website, web applications obtains us to access the content through objects. These objects describe...
Jun 22, 20232 min read


Fortigate IPsec Tunneling between Sites on EVE-NG Lab
How to secure remote access to an enterprise network system? Demand for reliable and secure virtual networks is growing day by day. One...
Jun 1, 20232 min read


Persistence on Windows with BackDoors (4/4)
4. Windows Login screen with Sticky Keys or Utilman It is the last part of basic backdooring for persistence. In our case, we have...
May 31, 20231 min read


Persistence on Windows with BackDoors (3/4)
3. Dumping hashes and assigning admin privileges for unprivileged users This is the 3rd part of the persistence series, and I will walk...
May 19, 20232 min read


Persistence on Windows with BackDoors (2/4)
2. Using executable files modified by msfvenom Let’s continue placing payload on target machine. We can modify any mini-tools for Windows...
May 11, 20231 min read


Persistence on Windows with BackDoors (1/4)
To be ensure not losing the gained access on target device, we should create alternative ways to get re-access without exploitation, yet...
May 11, 20231 min read


using Hydra on Login pages with a right method: dvwa training
Hydra as a password cracking tool benefits also for dictionary attacks. It performs on many protocols such as RDP, SSH, FTP and HTTP. In...
May 9, 20232 min read


manually cgi-bin / shellshock Exploitation w/o Metapsloit
As it's known, cgi-bin is a directory that contains .cgi (Common Gateway Interface) command scripts, provide functionality with a web...
May 7, 20231 min read


solved: unable to connect Fortigate GUI at .ovf installation on VMware
After the installation of Fortigate image file on VMware Workstation (if the Network Adapter is on Bridged connection), Port1 is going to...
May 5, 20231 min read


How to reset a lost password: Fortigate
Instead of "admin" account, the usage of "maintainer" accout is going to fix our issue, but note that do not skip to type a key prefix ...
May 4, 20231 min read


Common port numbers
Source: packetlife.net by Jeremy. S.
Dec 28, 20221 min read


CyberPath for the newCyberians
Steps as a roadmap: Fundamental Certifications that could be earned for beginners: Source: startacybercareer.com
Dec 28, 20221 min read


A Glossary of Common Terminology
Cyber Dictionary provides you with the most common cyber security terminology (as defined in the well-known standards) for knowledge and...
Dec 28, 202213 min read
bottom of page