Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Handy Devices Revolution: Handy Pentesting & Hacking Part 1

A few weeks ago, I wrote an article entitled 'Transforming your Android Phone into a Network Pentesting Device' which is obviously about turning your Android
Read More
Article

Domain theft and the possibilities for recovery of the stolen domain names

Introduction On October 24th 2012, Diigo, a social bookmarking website allowing signed-up users to bookmark and tag web pages, had its domain, diigo.com
Read More
Article

Privacy Impact Assessment

What is a Privacy Impact Assessment (PIA)? Privacy Impact Assessment is a process to determine the impacts of a program, system, service, scheme, initiativ
Read More
Article

Exceptions In Injected Code

Injection and API Hooking - When you don't know enough to know that you are getting it wrong... Code Injection and API hooking techniques are gaining in pop
Read More
Article

Low fidelity prototyping: The cheapest corrections in design stage ever!

Agenda: 1. Prototyping – what is it? 2. The design process. 3. Showing the project to client before developers will write any line of code. 4. Changes in
Read More
Article

Owasp ZAP

[highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our  OWASP Top 10 Training course OWASP Top 10 Training. [/highlight] Introduct
Read More
Article

Keeping Your Social Media Accounts Safe

Whether you're an average Internet user, or an IT pro who checks Twitter before getting out of bed and goes through several SSH sessions before the day is ov
Read More
Article

Analysis of Malware Samples with the Immunity Debugger API

Introduction Immunity Debugger is a debugger which is very much like Ollydbg. In this tutorial we'll present the Python API that Immunity Debugger uses for w
Read More
Article

Eight Handy Security Tools for a Novice

Here is a compilation of a few tools that we need to be aware of. The power, the performance and the capabilities of these tools are limited only to the crea
Read More
Article

Web Vulnerabilities Explained

Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF, etc. In t
Read More
Article

Introduction to Anonymizing Networks – Tor vs I2P

The Right to Anonymity Every operation made in cyber space, every visited web site, and every web service accessed, leave traces of the user's experience on
Read More
Article

Investigating the crime scene part 2: Recovering files with autopsy

For part one of this series, please click here. So, in the previous part we saw how we can set up the environment for finding clues and also how to set up A
Read More
Article

Getting Domain Information

1. Introduction When analyzing malware we can gather a lot of information just by identifying the IP addresses and domains the malware software uses. Most m
Read More
Article

Chapter 12 – Applications of Biometrics

Passwords are not secure and are useless as an access control… at least that is what many vendors and security consultants try to tell managers today. Instea
Read More
Article

Backtrack 5 R3 Walkthrough, Part 4

DHCPig DHCPig is a very nice and handy little tool used to carry out an advanced DHCP exhaustion attack. It does this by grabbing all the IP addresses in it
Read More
Article

Environment for Malware Analysis

Introduction Before trying to analyze any kind of malware, we need to have a proper environment set up, so we can be most efficient and collect the most info
Read More
Article

Analyzing malicious JavaScript

Nowadays there are various threats in the wild that want to get malware installed on victim operating systems. Most of them use some kind of social engineeri
Read More
Article

Password Auditing on Active Directory Databases

In this article we explore the options to acquire information from an online or offline Microsoft Active Directory database and its encryption keys. We will
Read More
Article

Executable Code Injection

Introduction Code injection is a process of injecting executable code in a running process or static executable. Executable code in web applications can be i
Read More
Article

Wordfence: Security Plugin for WordPress

Wordfence is a free security plugin for WordPress. Security "plugins" for Wordpress are often highly criticized as many may give a false sense of security or
Read More
Article

Backtrack 5 R3 Walkthrough - Part 3

In this article we will we look at some of the other new tools that were added into Backtrack 5 with the release of its latest version R3. Wifite [pkad
Read More
Article

Wfuzz and WebSlayer

1. Introduction WfFuzz is a web application bruteforcer that can be considered an alternative to Burp Intruder as they both have some common features. With b
Read More
Article

The easier form of hacking: Social engineering

When we talk about hacking, especially in today's world, we hear the media giving us the stories of how hackers hack into a database and steal information fr
Read More
Article

The Internet Underground: Tor Hidden Services

Some people think onion routing or the Tor network is for criminals and people with something to hide. Well, they are half right. The Tor network was designe
Read More