Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Web Vulnerabilities Explained

Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF, etc. In t
Read More
Article

Introduction to Anonymizing Networks – Tor vs I2P

The Right to Anonymity Every operation made in cyber space, every visited web site, and every web service accessed, leave traces of the user's experience on
Read More
Article

Investigating the crime scene part 2: Recovering files with autopsy

For part one of this series, please click here. So, in the previous part we saw how we can set up the environment for finding clues and also how to set up A
Read More
Article

Getting Domain Information

1. Introduction When analyzing malware we can gather a lot of information just by identifying the IP addresses and domains the malware software uses. Most m
Read More
Article

Chapter 12 – Applications of Biometrics

Passwords are not secure and are useless as an access control… at least that is what many vendors and security consultants try to tell managers today. Instea
Read More
Article

Backtrack 5 R3 Walkthrough, Part 4

DHCPig DHCPig is a very nice and handy little tool used to carry out an advanced DHCP exhaustion attack. It does this by grabbing all the IP addresses in it
Read More
Article

Environment for Malware Analysis

Introduction Before trying to analyze any kind of malware, we need to have a proper environment set up, so we can be most efficient and collect the most info
Read More
Article

Analyzing malicious JavaScript

Nowadays there are various threats in the wild that want to get malware installed on victim operating systems. Most of them use some kind of social engineeri
Read More
Article

Password Auditing on Active Directory Databases

In this article we explore the options to acquire information from an online or offline Microsoft Active Directory database and its encryption keys. We will
Read More
Article

Executable Code Injection

Introduction Code injection is a process of injecting executable code in a running process or static executable. Executable code in web applications can be i
Read More
Article

Wordfence: Security Plugin for WordPress

Wordfence is a free security plugin for WordPress. Security "plugins" for Wordpress are often highly criticized as many may give a false sense of security or
Read More
Article

Backtrack 5 R3 Walkthrough - Part 3

In this article we will we look at some of the other new tools that were added into Backtrack 5 with the release of its latest version R3. Wifite [pkad
Read More
Article

Wfuzz and WebSlayer

1. Introduction WfFuzz is a web application bruteforcer that can be considered an alternative to Burp Intruder as they both have some common features. With b
Read More
Article

The easier form of hacking: Social engineering

When we talk about hacking, especially in today's world, we hear the media giving us the stories of how hackers hack into a database and steal information fr
Read More
Article

The Internet Underground: Tor Hidden Services

Some people think onion routing or the Tor network is for criminals and people with something to hide. Well, they are half right. The Tor network was designe
Read More
Article

Computer Network Diagnostics, Part 1

Sometimes, at the beginning of my adventure to the Internet, I was wondering how it is that I have a local area network and Internet access. See for yourself
Read More
Article

Network Topology

1. Introduction Whenever we're doing a penetration test, it's good to figure out the topology of the network we're testing. We can't figure out the whole to
Read More
Article

Inside Android Applications

By the end of 2012, the number of Smartphone shipments around the world will explode to nearly 668 million units, and the Android operating system will have
Read More
Article

Legal and Technological Concerns Regarding the Use of BIOS Anti-theft Technologies

1. Introduction In 2006, a laptop containing personal and health data of 26,500,000 veterans was stolen from a data analyst working for the US Department o
Read More
Article

Free Web Application Scanners, Part 2

In the first part of this article, we have seen the need for free web application scanners and also we have looked into a few tools which are available in th
Read More
Article

Hacking SVN, GIT, and Mercurial

We all know that when programming with a small or large team, having a revision control in place is mandatory. We can choose from a number of revision contro
Read More
Article

x86 Assembly Language Applicable To Reverse Engineering: The Basics – Part 2

For part 1 of this series, please click here. Introduction [pkadzone zone="main_top"] We saw in the first article an introduction to the most comm
Read More
Article

Transforming your Android Phone into a Network Pentesting Device

Lester: Hey Nash, are you scanning our school's network with just your smartphone? Nash: Well, yes I am! I'm using a network penetration suite just to check
Read More
Article

Investigating the Crime Scene, Part 1: A Brief Introduction to Computer Forensics and Autopsy

Recommended reading http://www.thestudymaterial.com/presentation-seminar/computer-presentation/239-computer-forensics-presentation.html?showall=1 First Re
Read More