Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Windows Vulnerability Assessment

Nowadays every enterprise, be it small or large, depends on information technology (IT) for some or most of its operations, and with IT; comes information se
Read More
Article

It Is Simple, If I Can Compromise Your Wireless Router, I Own Your Network! Period!

It is convenient, it is a necessity, and some devices give you no other option: wireless networking is all around us. We all use wireless networks on a dail
Read More
Article

Free Web Application Scanners, Part 1

With the rapid increase in technology usage, every company is desperate to provide their services over the Internet. They believe that by offering their serv
Read More
Article

Human Resource Management in Agile - Part 4

In the previous parts of our discussion we focused on internal team building and communication within the team and self-motivation. Today we will go on. We'l
Read More
Article

Bank Fraud & ATM Security

ATMs Fraud Trends According to the last 2011 survey (*) in 27 European countries, card skimming is still the most prevalent crime, however 61% of European c
Read More
Article

The Browser Exploitation Framework (BeEF) – Part 2

The first article in this series can be found here: The Browser Exploitation Framework (BeEF) – Part 1. 1. Using the Modules In this section we'll describe
Read More
Article

Improving Mobile Security with Santoku

Mobile security has been gaining popularity in recent times. Many mobile-based attacks are being discovered as the mobile industry grows more complex and new
Read More
Article

Human Resource Management in Agile - Part 2

Part one of this article series can be found here: Human Resource Management in Agile Part 2. From the previous article you could find out what mistakes you
Read More
Article

The browser exploitation framework (BeEF) – Part 1

We can categorize the BeEF social engineering framework as shown in the picture below: [pkadzone zone="main_top"] [pkadzone zone="main_top"] We
Read More
Article

Incident Response Planning

Boring topic? Maybe. But if you believe what Gartner has to say: "Through 2016, 75% of CISO's who experience publicly disclosed security breaches, and lack d
Read More
Article

Crack Me Challenge: Final Edition

Part 6 [pkadzone zone="main_top"] [pkadzone zone="main_top"] The code for logical segment 6 is as follows: 0040181F |. B9 10000000 mov ecx,10
Read More
Article

Social Media & Security Risk

Social media is the two way communication in Web 2.0 and it means to communicate / share / interact with an individual or with a large audience. Social media
Read More
Article

WordPress Security

1. Introduction There are numerous tools available when checking the security of the WordPress Content Management System (CMS). In the rest of the article we
Read More
Article

CrackMe Challenge Part 3: The Logic Behind the First Challenge

If we take our predicate that we've seen in the end of part 2 into account and input at least 64 bytes (0x40) into the Key 1 field and leave the Name field a
Read More
Article

CrackMe Challenge Part 2

The First Message Box Let's start our unpacked program with OllyDbg, run it, input eight A's into the Name and Key 1 field and press CHECK STAGE 1. What happ
Read More
Article

ESET Rule the Code - CrackMe Challenge Part 1: The Unpacking Process

1. Presenting the Problem The CrackMe challenge was first observed on the ESET CrackMe web page, which looked like the the picture below:[pkadzone zone="main
Read More
Article

Securing the Software Development Environment

In the February 2012 edition of Computer, a sidebar to an article on "Web Application Vulnerabilities" asks the question: "Why don't developers use secure c
Read More
Article

Chapter 11 – Identity management and access controls

Access controls help us restrict whom and what accesses our information resources, and they possess four general functions: identity verification, authentica
Read More
Article

A Review of Selected Cryptographic Libraries

Cryptography is the science that deals with the problems of concealing information by encrypting it, and contains the set of methods for achieving such secre
Read More
Article

Sneak Peak into the Art of Exploitation

It's a well-known saying that gathering maximum information about the enemy is half the work done in defeating him. The same holds true when you are about to
Read More
Article

JBOSS Exploitation

JBoss Application Server is an open-source Java EE-based application server. JBoss is widely used and is deployed by many organizations on their web servers.
Read More
Article

Achieving anonymity with Tor Part 5: Tor bridges and hidden services

Running a Tor bridge is essentially the same as running a Tor relay, as far as configuration is concerned. We already mentioned that the only difference is t
Read More
Article

Achieving Anonymity with Tor Part 4: Tor Relays

1. Introduction We've seen that Tor network is constituted from Tor nodes, through which we tunnel our traffic to reach anonymity. So far we didn't bother wi
Read More
Article

Achieving Anonymity with Tor Part 3: Torbutton and Tsocks

1. Introduction In previous articles: Part 1 and Part 2 we extensively used the Tor Browser Bundle that helps us ensure our anonymity. With the Tor Browser B
Read More