Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Building and Testing Your Own VPN

Introduction Our previous articles on Virtual Private Networks has provided a comprehensive review of what a Virtual Private Network is all about. We have e
Read More
Article

Launching Shellcode from Cat Pictures

We all know the internet loves cats! I was thinking of how we can combine cats and malware. Then, it struck me! [pkadzone zone="main_top"] I occasionally see
Read More
Article

MASSCAN – Scan the internet in minutes

Scanning is a really important part of any penetration testing. It gives us more information about our target which leads to narrowing the scope of the attac
Read More
Article

Mobile, Smartphone & BYOD

Owing to the development of mobile devices, people nowadays are overwhelmed by tons of information on the go. Curiously, despite being distracted by this con
Read More
Article

More PowerShell Remoting Artifacts

In Part 1 of this series, we looked at PowerShell remoting artifacts under various Event IDs and ways to gather more information from those events and relate
Read More
Article

Avatar Rootkit: Deeper Dropper Analysis

In this second article on the dropper, we will resume our analysis right where we left off: the decryption of the key and data. After the decryption, two str
Read More
Article

Advanced Technical Review of VPN Infrastructure Impacts

Introduction As it was reviewed in the last article, the procurement and deployment of a Virtual Private Network Infrastructure can be a complex task. In fa
Read More
Article

RanRan and PetrWrap Threats: Political and Criminal Abuses in the Ransomware Landscape

Ransomware continues to be one of the most profitable cyber threats, for this reason, every week we see strains of malware in the wild with new features. The
Read More
Article

RIPS – Finding vulnerabilities in PHP application

The biggest fear of any developer has always been that their site may get hacked and occasionally it does end up being hacked. For a very long time, the most
Read More
Article

Maltego: Making sense of data

Information gathering has always been a crucial part of any penetration testing. The more information we have, the more likely we will be able to use that ag
Read More
Article

Code Review of Node.Js Applications: Uncommon Flaws

This article covers the left-over vulnerabilities from Part-1. In this article, we will have an in-depth look at some uncommon flaws and how to find them whi
Read More
Article

PowerShell remoting artifacts: An introduction

Since PowerShell usage by malware is on the rise, in this article series, we will learn about the various artifacts related to PowerShell remoting that can b
Read More
Article

Ursnif Malware

These days, along with the unforeseen climatic conditions, several unpredictable malware campaigns are also occurring across the connected world. Mostly Offe
Read More
Article

WikiLeaks Vault 7 Data Leak: Another Earthquake in the Intelligence Community

The WikiLeaks organization obtained thousands of files allegedly originating from a high-security network of the U.S. Central Intelligence Agency (CIA). T
Read More
Article

Avatar Rootkit: Dropper Analysis

Avatar was first detected by ESET circulating in the wild in early 2013 [1]. However, no samples were collected for analysis until May of the same year. ESET
Read More
Article

SoapUI: Security Testing

SoapUI is an SOAP (Simple Object Access Protocol) and REST (Representational state transfer) API (Application Programing Interface) testing tool. It provides
Read More
Article

The Security Policy and Network Requirements of a Virtual Private Network

Overview of the Last Article In the past couple of articles we have written, we have started to examine the use of what is known as a "Virtual Private Netwo
Read More
Article

Echo Mirage: Walkthrough

In this article, we will learn about Echo Mirage, a freeware tool that hooks into an application's process and enables us to monitor the network interactions
Read More
Article

SAP ABAP Platform Security

From the previous articles of SAP Security for CISO series (especially SAP Risks), you reviewed many examples of potential attacks on these systems. Now it i
Read More
Article

Exclusive – A Close Look at the Largest Credential Harvesting Campaign Via an IoT Botnet

Exclusive: MalwareMustDie discovered a criminal gang that is using SSH TCP direct forward attack technique in a large-scale operation. The popular researche
Read More
Article

Top Firewall for Differently Populated Enterprises

In today's technologically sophisticated world, everyone feels deficient without the internet and computers. In every field and every company computer is the
Read More
Article

How to Conduct a Cost-Benefit Analysis and Implement a Virtual Private Network

Overview of the Last Article For any business or corporation, securing the lines of communications between the sending and receiving parties is a top securi
Read More
Article

Creating Effective Phishing Landing Pages

When using the PhishSIM to test employees (referred to as learners), just as important as creating the phishing email is creating an associated landing page.
Read More
Article

An Insight into Virtual Private Networks and IP Tunneling

Introduction In the world of Cybersecurity today, staying ahead of the hacker is the name of the game. It seems like that for one every one step that is tak
Read More