YARA is a simple, command line based and powerful tool used by cybersecurity researchers to craft rules for detecting currently known or newly created malware. These rules are pattern based so they are based in a different approach than the…
One of the tools that you may use during the first activities of web application security assessment is the dirb tool. Its usage is very simple, it is very lightweight so it doesn’t require any GUI and it is all…
In this post, I’m going to explain and show how ClamAV, a free antivirus software, scans your Linux system to detect malicious software to improve the security posture of it. Nevertheless, ClamAV can’t be considered as a Next Generation AntiVirus…
It is very important to spend a little time to verify that a downloaded file is actually what the website described, to minimise the risk of man in the middle attacks or downloading a fraudulent file. In most of the…
OWASP Zed Attack Proxy (ZAP) is one of the most used suite to perform web application scanning assessment alongside with Burp Suite from PortSwigger. If you don’t know about OWASP (Open Web Application Security Project), you should check their official…
Trivy is a vulnerability scanning tool mainly used for containers images, that helps cybersecurity professionals to obtain such information from them by either running it on demand, or automating its execution in any CI pipeline security testing step. It is…
Do you need in your cybersecurity program a tool for assessing the security and hardening status of your organisation Linux systems without cumbersome deployments or setups? If so, then the tool you are looking for is Lynis which is a…
Nikto is an open source web application scanning tool which helps cybersecurity professionals to cover such activities in an easy, fast paced and in a command line manner. Thanks to its simplicity, it is really a piece of cake to…
The asymmetric encryption is one of the security advances that makes the internet connections and online transactions trustable. Without this trust, nobody are willing to do business or perform any purchase on any e-commerce no matter how fast and convenient…
Imagine a one way function that is able to map an input with infinite possibilities to a fixed length and “unique” output. Note that unique is quoted since theoretically is not possible to map an infinite set to a finite…
The HMAC stands for “Hash-based Message Authentication Code” and it could be based on the previous hash functions explained before to calculate it. It serves for integrity and authentication of a message when using symmetric encryption or any shared secret…
The symmetric encryption is the most used cryptographic operation to protect the confidentiality of the information whether it is personal information or corporate sensitive data. The main reason why symmetric encryption is preferred in most of the cases instead of…
