Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

SAP SECURITY FOR CISO: SAP Attacks and Incidents

If you read this series, you already know enough about SAP ERP Security to discover a real impact of having insecure SAP implementation. Recently, Crowd Rese
Read More
Article

Anti-Phishing: Threat Modeling and Impact Analysis

Introduction Phishing is an efficient and cost-effective cyberattack. It has prevailed in cyberspace for over two decades. Phishing is commonly considered a
Read More
Article

“Robin Hood” Ransomware and Psychological Manipulation Techniques

1. Introduction In 2016, the ransomware CryptMix gained popularity. CryptMix is based on source code of other infamous types of malware, such as CryptoWall 3
Read More
Article

Web application pentest guide Part-II

In last part of the article we have discussed the process of Requirement Collection, Information gathering and URL discovery now we will discuss the other st
Read More
Article

Anti-Phishing: Browser Security Features

For a common internet user, a web browser is one of the regularly used programs on the computer. Web browsers were once only used for displaying text documen
Read More
Article

Anti-Phishing: Measuring Phishing Awareness Training Effectiveness

Do you train your employees to understand what phishing is, what it looks like and what to do if they realize they’ve been targeted? As you’re about to find
Read More
Article

Anti-Phishing: The Importance of Phishing Awareness Training

Of all the precautions you need to take to keep your company afloat, planning for phishing attacks may be the most important by far. Phishing has become a wi
Read More
Article

Introduction to Anti-Phishing

Throughout the course of your day, think about all the clicking you do with your mouse. You click again and again while opening a never-ending stream of emai
Read More
Article

Web Application Pentest Guide Part-I

In this article, we are going to pentest a web application which was developed by HP for scanner evaluation purpose. We will be demonstrating the complete pr
Read More
Article

Ew! Skuzzy CTF Walkthrough

In my last article, we exploited a vulnerable machine from the vulnhub.com. That article must have given you some idea about hacking a machine without having
Read More
Article

Which Malware are Specifically Designed to Target ISC Systems?

Introduction – ICS malware, a rarity in the threat landscape At the end of May, security experts discovered a seven-year-old remote code execution vulnerabil
Read More
Article

Big Data Discrimination

Introduced in 1997, the term "Big Data" has grown in popularity in the past years. [pkadzone zone="main_top"] Credit: IBM-Big-Data-Definitions by DigitalRalp
Read More
Article

Troll 2 exploitation walkthrough

This write-up will walk you through an exploitation of Troll 2 a boot2root VM; the challenge is designed my Maleus. You can download the VM from the followin
Read More
Article

NAC-hacking - Bypassing network access control

Conducting internal network penetration tests is always fun. There are vulnerabilities that easily help me to get to "keys of the kingdom" i.e. domain admin.
Read More
Article

How Much Physical Security is Enough?

When it comes to security, physical security is something which either takes a back seat or is not dealt with expertise. Though there are a lot of solutions
Read More
Article

Security Awareness Implications of the 2017 Verizon Data Breach Report

Each year, Verizon publishes a report that highlights data breach and incident trends from the previous year. This report offers significant insight into not
Read More
Article

More Bypassing of Malware Anti-Analysis Techniques

For last few articles, we have seen how malware employs some anti-analysis techniques and how we can bypass those techniques. Now, let's raise the bar a bit
Read More
Article

Learning Pentesting with Metasploitable3 – Part 2

Introduction: This is the second part in this series of articles on Learning Pentesting with Metasploitable3. We have prepared our lab setup in our previous
Read More
Article

SambaCry: Hundreds of thousands of Linux systems exposed to a campaign that delivers cryptocurrency miner

CVE-2017-7494 - A Samba seven-year-old remote code execution vulnerability At the end of May, security experts discovered a seven-year-old remote code execut
Read More
Article

How to Protect Your Right to Personal Identity in the Digital Era

As stated by the FBI's Internet Crime Complaint Center (IC3), identity theft "occurs when someone appropriates another's personal information without their k
Read More
Article

Pluck: 1 CTF Walkthrough

Pluck: 1 is a vulnerable machine created by Ryan Oberto. It surfaced on VulnHub on 11th March 2017. It can be downloaded from https://www.vulnhub.com/entry/p
Read More
Article

Top 7 Tips to Secure Your Passwords

In our current world where technology is finding its way into all aspects of our life, it is important to understand how to properly protect yourself online
Read More
Article

Malware Anti-Analysis Techniques-TLS and Process Hallowing

In continuation to previous articles, this article will also show a more sophisticated approach used by malware to thwart anti-analysis techniques. Let's sta
Read More
Article

The Major Security Issues Surrounding Virtual Personal Assistants

Introduction As it has been reviewed in past articles, the Smartphone has become a prime target for any just about any types and kinds of hacks. One of the b
Read More