Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Running Metasploitable2 on virtualBox

Metasploitable is a Linux-based vulnerable virtual machine. It is designed especially for people interested in learning system exploitation. Rapid7 maintains
Read More
Article

Botnets, how do they work? Architectures and case studies – Part 2

In the first part of this of this mini-series on the botnet cyber threat, we have shown the current scenario and the technological evolution in security land
Read More
Article

Snort Rule Writing for the IT Professional: Part 3

Welcome back to my continuing series of articles on Snort rule writing. My first couple of installments in this series addressed some very simple rules in o
Read More
Article

Software Patent Law: EU, New Zealand, and the US compared

1. Introduction A patent is defined as an exclusive right or rights provided by a government to an inventor for a certain period of time in exchange for the
Read More
Article

Massive Vulnerability CVE-2013-0027 Owns/Strikes Internet Explorer 6 to 10

The recent major vulnerability CVE-2013-0027 flooded almost all versions of Microsoft Internet Explorer and affected operating systems like Windows XP, Vista
Read More
Article

The export directory

Example of the export directory Let's take a look at a simple example to understand how the export directory is used by the executables/libraries. Let's sup
Read More
Article

Phishing and social engineering techniques

Internet usage is growing dramatically, but the vast majority of internet users don't have any security backgrounds. Neither do a large majority of companies
Read More
Article

Android Forensics

The article tries to cover various Android forensic techniques that can be helpful in a variety of situations. The techniques or discussions below can be eit
Read More
Article

.NET Framework CLR: Common Language Runtime

Introduction The point of this article is to lay down the conceptual groundwork of numerous .NET related topics such as CLR, CTS, CLS, Managed Code, JIT Comp
Read More
Article

Risks of using a shared hosting server

In this article, I would like to present the risks associated with hosting your site on a shared hosting server. I often correlate it with the analogy, "a ch
Read More
Article

An Introduction to Returned-Oriented Programming (Linux)

INTRODUCTION: In 1988, the first buffer overflow was exploited to compromise many systems. After 20 years, applications are still vulnerable, despite the eff
Read More
Article

Embedding Security in Procurement Process & Vendor Contracts – Part 2

Background: In the previous article, we've covered how to implement security in procurement process and vendor contracts. There are 3 different aspects to m
Read More
Article

DDoS Attack on Spamhaus – An insight

Spamhaus recently witnessed one of the biggest Distributed Denial of Service attacks on its infrastructure. The Spamhaus Project is an international non-prof
Read More
Article

Code Access Security (CAS)

Abstract Security is an essential part of .NET applications and should be taken into consideration from the grass root level. Security is all about protecti
Read More
Article

Loading the Windows Kernel Driver

In the previous part of the article, we've explained how to compile the Windows kernel driver. Now that we know how to compile the driver, we also have to lo
Read More
Article

Penetration testing for iPhone applications – Part 4

In the first part of the article, we have discussed the iPhone application traffic analysis. The second part of the article covered privacy issues and proper
Read More
Article

Compiling the Windows Kernel Driver

Introduction In the previous article, I've written and described a kernel mode driver, but I haven't actually done anything with it. There's something missi
Read More
Article

Writing a Windows Kernel Driver

Introduction If you haven't read the first two articles yet, here and here, then you probably should, because they are essential to understanding what we'll
Read More
Article

Dot NET Assemblies and Strong Name Signature

General Overview Before going any deeper on this subject, we need to clarify a huge ambiguity regarding signing for versioning and signing for protecting.[p
Read More
Article

Windows Building Environment for Kernel Driver Development

Details of Driver Development Environment In the previous article , we saw that upon installing WDK 7.1.0, we got build environments for Windows 7, Windows S
Read More
Article

Botnets and cybercrime - Introduction

Preface One of the most insidious cyber threats for security community is represented by diffusion of botnets, networks of infected computers (bots or zombie
Read More
Article

Machine Learning Part 3: Ranking

INTRODUCTION: In the previous article, we saw the utility of Naïve Bayes Rule for malware classification. While simple to understand and implement, we have
Read More
Article

Windows booting process

In the previous tutorial, we've seen how one would go about booting the Linux operating system by using GRUB. We presented the basic overview of the booting
Read More
Article

Linux Booting Process

Introduction In this article, we'll take a closer look at the booting process of the Linux operating system. We've already described the booting process i
Read More