Nicholas T. Nguyen

Department of Homeland Security looking for vendors to handle Cyber Security Operations Center.

In the news

Cyber warriors are allowed to have long hair. (UK, not satire)

Virginia schools sponsor summer cyber camps to encourage students towards cyber security job fields.

In my past use of WireShark, you can use the tool as a passive sniffing tool to detect packets coming in and out of your network. You can also tailor your syntax to search for specific ip addresses, ports, and […]

Reading Summary:

The reading focused on the functionality of the msf console. The console allows one to look thru plenty of payload options, exploits, and auxiliary scanners. Scanners can act as port scanners, […]

Evasion Techniques

Here’s what I’ve used in the past for evasion techniques; very slow and steady scanning, scanning for only one or two ports at a time, spoofing an IP addresses, encryption to avoid IDS’s, […]

SQL injection is a SQL vulnerability in the database that allows certain queries to be typed in or exploited to reveal the contents of the database. One way of doing this is going into a user input page and typing […]

Web Application vulnerabilities are a significant threat to websites and companies in which an attack can exploit a weakness on the website to gain access to sensitive information. XSS is the most common type of […]

What is Malware?

Malware is a software that makes your computer do undesirable things, but are desirable to malicious actors. Malware can provide a backdoor or reverse shell of your computer to the bad guys, […]

Social Engineering

Social Engineering is bad, mm’kay? It takes advantage of the weakest link in security, which are the people. Th systems can be secure, but people have the need and desire to help others or […]

There are many uses for netcat. One of its primary uses can be for file transfers, but it can also be used for checking port connections on remote hosts, port scanning, firewall testing, address spoofing, as a […]

Sniffing is when one uses tools to track the traffic going on in your network. There are two types of sniffing: active and passive.

Passive sniffing involves observing traffic across the network, such as […]

The War Is On:
Enumeration can help with discovering network resources, users, groups, banner grabbing, and operating system footprinting. There are different enumeration techniques depending on if your target is […]

Vulnerability scanning is important one can find the weaknesses and avenues of approach an enemy can find. You are finding those weaknesses out first in order to fix them, before an enemy can find the weaknesses […]

Open Source Recon Tools:

Conducting active recon with permission from the company would be considered illegal. Only passive forms of recon, such as open source information or social engineering, are considered […]

Summary:

The enterprise Data Center Topology contains the intranet for the internal network, the extranet for supporting business to business functions, and the internet, which allows users to reach out and […]

SQL injection involves the unauthorized access into a company’s database. The hacker would insert SQL queries into the database, and be able to view, edit, delete, or create new databases, tables, or information, […]