Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Incident Response Planning

Boring topic? Maybe. But if you believe what Gartner has to say: "Through 2016, 75% of CISO's who experience publicly disclosed security breaches, and lack d
Read More
Article

Crack Me Challenge: Final Edition

Part 6 [pkadzone zone="main_top"] [pkadzone zone="main_top"] The code for logical segment 6 is as follows: 0040181F |. B9 10000000 mov ecx,10
Read More
Article

Social Media & Security Risk

Social media is the two way communication in Web 2.0 and it means to communicate / share / interact with an individual or with a large audience. Social media
Read More
Article

WordPress Security

1. Introduction There are numerous tools available when checking the security of the WordPress Content Management System (CMS). In the rest of the article we
Read More
Article

CrackMe Challenge Part 3: The Logic Behind the First Challenge

If we take our predicate that we've seen in the end of part 2 into account and input at least 64 bytes (0x40) into the Key 1 field and leave the Name field a
Read More
Article

CrackMe Challenge Part 2

The First Message Box Let's start our unpacked program with OllyDbg, run it, input eight A's into the Name and Key 1 field and press CHECK STAGE 1. What happ
Read More
Article

ESET Rule the Code - CrackMe Challenge Part 1: The Unpacking Process

1. Presenting the Problem The CrackMe challenge was first observed on the ESET CrackMe web page, which looked like the the picture below:[pkadzone zone="main
Read More
Article

Securing the Software Development Environment

In the February 2012 edition of Computer, a sidebar to an article on "Web Application Vulnerabilities" asks the question: "Why don't developers use secure c
Read More
Article

Chapter 11 – Identity management and access controls

Access controls help us restrict whom and what accesses our information resources, and they possess four general functions: identity verification, authentica
Read More
Article

A Review of Selected Cryptographic Libraries

Cryptography is the science that deals with the problems of concealing information by encrypting it, and contains the set of methods for achieving such secre
Read More
Article

Sneak Peak into the Art of Exploitation

It's a well-known saying that gathering maximum information about the enemy is half the work done in defeating him. The same holds true when you are about to
Read More
Article

JBOSS Exploitation

JBoss Application Server is an open-source Java EE-based application server. JBoss is widely used and is deployed by many organizations on their web servers.
Read More
Article

Achieving anonymity with Tor Part 5: Tor bridges and hidden services

Running a Tor bridge is essentially the same as running a Tor relay, as far as configuration is concerned. We already mentioned that the only difference is t
Read More
Article

Achieving Anonymity with Tor Part 4: Tor Relays

1. Introduction We've seen that Tor network is constituted from Tor nodes, through which we tunnel our traffic to reach anonymity. So far we didn't bother wi
Read More
Article

Achieving Anonymity with Tor Part 3: Torbutton and Tsocks

1. Introduction In previous articles: Part 1 and Part 2 we extensively used the Tor Browser Bundle that helps us ensure our anonymity. With the Tor Browser B
Read More
Article

IBM Rational Appscan: Part 2

The first part of this article focused on configuring a scan in Rational Appscan, and as mentioned earlier, it's important to configure the scan based on you
Read More
Article

New Linux Distro for Mobile Security, Malware Analysis, and Forensics

Yes, you read the title right and I hope I just grabbed your attention! A new GNU/Linux distribution or distro designed for helping you in every aspect of yo
Read More
Article

Achieving Anonymity with Tor Part 2: Proxies and DNS servers

1. Using Burp with Tor So far we've looked at how to set up our web browser to use Privoxy, which in turn uses Tor to achieve anonymity on the Internet. But
Read More
Article

Interview with Project Leader Sebastian Poeplau

Introduction Malware threats have become very common these days. In the past, many honeypots have been created to detect malware propagation over the netw
Read More
Article

The Evolution of a Technical Information Security Professional

During my years of work as a consultant and trainer in the information security world, I've noticed a few patterns that usually exist in those who do very we
Read More
Article

Introduction to HTTP Response Headers for Security

Hyper Text Transfer Protocol (HTTP) is a stateless protocol. The implication of this is, at the protocol level there is no record of what happened in the pas
Read More
Article

Risk Management in Agile

In this article, we will explore the business concerns of Agile methodologies in project management. Recently, I read an article by Chris Matts and Olav Maas
Read More
Article

Achieving Anonymity with Tor Part 1

We all know that Tor enables us to be anonymous on the Internet. In this article we'll look at how to achieve this and truly know what we're up against. Firs
Read More
Article

Reversing Malware Loaders - The Matsnu-A Case

The AV industry is growing every day along with the underground industry that produces all types of malware from simple file infectors to more sophisticated
Read More