Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Moria: 1 - Walkthrough

Moria:1 surfaced on VulnHub on April 20th, 2017. Created by Abatchy, it can be found at https://www.vulnhub.com/entry/moria-1,187/. It is the first machine i
Read More
Article

The Dangers of the Windows Mobile Phone

Introduction and Overview of the Last Article Our last article examined in greater detail the threats that are posed to the iOS Operating System, which in tu
Read More
Article

A4 Black Friday: Massive Ransomware Attack Leveraging on Wannacry Hit Systems Worldwide

WannaCry ransomware hit Windows computers worldwide A massive malicious ransomware-based attack made the headlines on Friday, first targeting UK hospitals a
Read More
Article

Kioptrix: Level 1 - Walkthrough

Kioptrix: Level 1 surfaced on VulnHub on February 17th, 2010. Created by Kioptrix, it can be found at https://www.vulnhub.com/entry/kioptrix-level-1-1,22/. I
Read More
Article

Dropbox Phishing Attacks- Templates and Examples

Dropbox, the handy Cloud based storage for files, has been one of those amazing tech success stories. As of May 2016, Dropbox had over 500 million registered
Read More
Article

What is the HCISPP? Healthcare Information Security & Privacy Practitioner

The worldwide healthcare sector is expected to be one of the fastest-growing employers for the next 10 years. With the growth of the healthcare industry, the
Read More
Article

Malware Anti-Analysis and Bypassing its Techniques

In continuation to the previous article on how malware can evade normal detections and how analysts can bypass those techniques now let's look at some even m
Read More
Article

SickOS 1.2: Walkthrough

SickOS 1.2 surfaced on VulnHub on April 21st, 2016. Created by D4rk, it can be found at https://www.vulnhub.com/entry/sickos-12,144/. It is the second machin
Read More
Article

Billu: B0x - Walkthrough

Billu B0x is a relatively new machine that came on VulnHub. Created by Manish Kishan Tanwar, it surfaced on April 21st, 2017. It can be downloaded from https
Read More
Article

Security Assessment of CCTV

What is CCTV? Closed Circuit TV (CCTV), also known by the name video surveillance, is the utilization of camcorders to transmit a flag to a particular place,
Read More
Article

DonkeyDocker:1 CTF - Walkthrough

DonkeyDocker: 1 is a relatively new CTF which appeared on VulnHub on April 22nd, 2017 by dhn. It can be found at https://www.vulnhub.com/entry/donkeydocker-1
Read More
Article

The Security Weaknesses of the iOS: The Aisi Helper, Sandjacking, and Image Threats

Introduction As we have eluded in other articles, the world of Information Technology and all of its related hardware and software applications are growing a
Read More
Article

Misconfigured WAFs: Bypassing Broken Access Controls Protection

In this article, I will look to build upon the previous article I wrote on finding zero-day vulnerabilities in Oracle e-business suite. The link can be found
Read More
Article

Advanced Techniques Attackers Use to Crack Passwords

The common denominator of most massive data breaches is the use of weak passwords. Some are so weak that they could be cracked instantly with commercial dict
Read More
Article

OSXCollector: Walkthrough

OSXCollector is an open-source forensic evidence and analysis tool for OSX released by Yelp back in 2014. Its GitHub repository can be found at https://githu
Read More
Article

Steps to Stronger Passwords

A journey of password The utilization of passwords is known to be old. Sentries would challenge those wishing to enter a territory or moving toward it to sup
Read More
Article

Malware Anti-Analysis Techniques and Ways to Bypass Them

This article series will focus on various anti-analysis techniques used by malware, and then we will discuss various ways in which the anti-analysis techniqu
Read More
Article

Error Message Phishing Attacks- Templates, Examples & Prevention Strategy

If your target is comprised of mostly low-tech staff members then attackers may opt to leverage seemingly legitimate technical data to entice users to follow
Read More
Article

Artificial Intelligence and Its Impact on Cyber Security

Understanding Artificial Intelligence Artificial Intelligence or AI is the intelligence shown by machines. Usually, the term Artificial Intelligence is used
Read More
Article

SonarQube: A Hidden Gem

SonarQube is an open source quality management software that analyzes and measures the technical quality of project portfolio to a method which essentially m
Read More
Article

Cyber risks for Industrial environments continue to increase

ICS Attacks continues to increase worldwide Industrial control systems (ICS) are a privileged target of different categories of threat actors. According to I
Read More
Article

Top Ten Phishing Scams

Image taken from CSO Online [pkadzone zone="main_top"] Dyre Phishing Scam In October 2014, the Dyre, also known as Dyreza, infected more than 20,000 people
Read More
Article

Shellcode Analysis- Basics

In this article, we will look at how what shellcode is, what is its purpose and various shellcode patterns, etc. Please note that this article will not cover
Read More
Article

The Security Weaknesses of Smartphones

Introduction Back a long time ago, one of the first computers at least came out was known as the "TRS-80", which was manufactured by Radio Shack at the time.
Read More