Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Demystifying dot NET reverse engineering: Introducing Round-trip engineering

Introduction After covering the basics of dot NET reverse engineering in first articles (refer to the references), it's time to go more in depth of the dot
Read More
Article

What is an SQL Injection? SQL Injections: An Introduction

New SQL Injection Lab! Skillset Labs walk you through infosec tutorials, step-by-step, with over 30 hands-on penetration testing
Read More
Article

Forensic Artifact: Malware Analysis in Windows 8

Windows is the most used operating system worldwide. I have met a lot of IT guys in my country and also other computer elites. My discovery was that 90 perc
Read More
Article

Hello world: C, assembly, object file and executable

Summary: In this article we'll take a look at the C program that prints "Hello World!" to the screen, which we'll assemble and compile. Then we'll compare th
Read More
Article

Burp Suite tutorial: Session handling mechanisms

Web applications, nowadays, handle sessions and state by implementing session expiration and sessionid lifecycle in a more secure manner to avoid security is
Read More
Article

Reverse Engineering a Malicious Word Document

In this post, I am going to explain in detail how to go about reversing an exploit with which one can easily insert his/her own payload, providing an exploit
Read More
Article

A prototype model for web application fingerprinting: w3 scrape

Introduction: Web application fingerprinting is one of the most important aspects of the information gathering phase of ethical hacking. This allows us to n
Read More
Article

Domain name parking of gTLDs

Introduction Over the past ten years, there has been a steady increase in the number of generic top-level domain names (gTLD). As a result, people can curre
Read More
Article

Importance of a BYOD Policy for Companies

[highlight color="blue"]Interested in formal iPhone forensics training? Check out our 3 day iPhone and iOS forensics course now available. [/highlight] Intro
Read More
Article

Virtual Honeypots

At the beginning of this series of tutorials, I would like to note one thing: All the activities that we usually take to increase the security of information
Read More
Article

PHP Session ID’s – The Risks

In today's article I want to address a very important topic. Namely, I want to talk about PHP session security. I know and understand that this is a very bro
Read More
Article

Sniffing Network Traffic on Android

Introduction There has been a lot of talk about how to connect your laptop though the Android network and use the bandwidth that you're already paying for. U
Read More
Article

Handy Devices Revolution: Handy Pentesting and Hacking Part III

And now is the time for the third article of the Handy Devices Revolution series! In the second article we talked about Arduino and Power Pwn; this time we w
Read More
Article

Cyberterrorism Defined (as distinct from “Cybercrime”)

Introduction Technology is developing at an extremely vigorous pace over the last couple of decades. There are many unknown terms that come along with this
Read More
Article

Mobile Security – Basic Challenges

[highlight color="blue"]Interested in formal iPhone forensics training? Check out our 3 day iPhone and iOS forensics course now available. [/highlight] "Dat
Read More
Article

How to filter user input: An overview

If you make web sites, online apps, or even just your own personal blog, chances are that you've heard the phrase "Don't trust user input!" This is one of th
Read More
Article

IT Continuity Planning

Today most organizations have committed resources, developed policies, procedures, and tools, and set their organization and IT infrastructure to maintain th
Read More
Article

Reverse-Engineering Arrays

Introduction Whenever we would like to reverse-engineer a function, we need to know exactly how the function is being called: its calling convention, number
Read More
Article

How to Safely and Wisely use jQuery: Several Key Issues

At the beginning of this article, I want to thank all those without whom this article would not exist. For starters, I'd like to thank Izabela Galazewska. Yo
Read More
Article

Physical security: Managing the intruder

No information security guide is complete without a chapter about securing physical access to information resources. After all, physical access gives even th
Read More
Article

Virtualization security

Virtualization has made a huge impact in a very short time in the IT and networking worlds and has already provided huge cost savings and returns on investme
Read More
Article

Differences in Copyright Enforcement between the U.S. and China

Introduction China and the U.S. have signed the Berne Convention and the Agreement on Trade Related Aspects of Intellectual Property Rights (TRIPS Agreement
Read More
Article

Book Excerpt: Advanced Network Design, Chapter 4: Infrastructure

Security does not happen by accident. Sure, a crashed router will keep hackers (and everyone else) out of your network, but in most cases if you want securit
Read More
Article

Wireshark

A network sniffer or protocol analyzer is a software application or hardware device which is capable of intercepting traffic and logging it for further analy
Read More