iProg

In the dynamic landscape of cybersecurity, traditional defensive measures are no longer sufficient to protect organizations from sophisticated threats. In response, cybersecurity professionals are turning to proactive strategies like Red Teaming to identify vulnerabilities, assess defenses, and enhance overall security posture. In this blog post, we’ll explore the key differences… Read more »

In the third segment of the blog focusing on AWS penetration testing, we will delve into the process of executing privilege escalation through a lambda function. In this particular scenario, we possess a set of keys, and our objective is to elevate our privileges. To initiate the environment, we commence… Read more »

In the upcoming blog post, we’ll employ Cloud Goat to simulate a scenario where we escalate privileges for an IAM user. In order to configure the environment, we must execute the following command:: python3 cloudgoat.py create iam_privesc_by_rollback Once the new user is created, we can locate the relevant information such… Read more »

Introduction As the world of technology continues to evolve, businesses are increasingly adopting cloud services to streamline operations and enhance efficiency. Among the top cloud service providers, Amazon Web Services (AWS) has emerged as a frontrunner, offering a comprehensive suite of tools and services to cater to diverse business needs…. Read more »

Introduction Amass is an open-source reconnaissance tool that helps collect information on a target. It focuses on domain information gathering and network mapping to identify potential vulnerabilities. Amass can be used in various contexts such as cybersecurity research, network security assessment, and business risk management. In this blog, we will… Read more »

Understanding Pithus Mobile Threat Intelligence Tool Pithus Mobile Threat Intelligence Tool is a mobile security solution that offers real-time detection and mitigation of mobile threats. The solution is designed to provide comprehensive mobile threat intelligence that helps organizations identify and address mobile security risks. The solution uses machine learning algorithms… Read more »

What is YARA? YARA is an open-source tool developed by Victor Alvarez that is used to identify and categorize malware based on patterns and rules. It allows security researchers and analysts to create custom rules using a specific syntax to detect specific malware samples. These rules can be based on… Read more »

Introduction The MITRE ATT&CK framework is a comprehensive knowledge base of tactics and techniques used by cyber attackers during various stages of a cyber attack. The framework is maintained by the MITRE Corporation, a not-for-profit organization that operates federally-funded research and development centers (FFRDCs). In this article, we will discuss… Read more »

Introduction The National Institute of Standards and Technology (NIST) is a non-regulatory agency of the United States Department of Commerce. Its main mission is to promote innovation and industrial competitiveness in the country by advancing technology, developing standards, and providing technical support to industry, government agencies, and other stakeholders. In… Read more »