Vulnerability Management

On my previous post i’ve explained about the openVAS, If you’re not aware of an openVAS tool kindly check there. Here i’m going to share about the installation process of OpenVAS. Let’s get started Before installing any software it’s crucial to decide how to install the software .We always consider…

Phases Objectives Assumptions Mitigations and Solutions References A security assessment assesses the use of resources, policies, and operational controls to manage and eliminate vulnerabilities that are exploitable by attackers internally and externally. The security requirements and measurements addressed concerns over the areas of Information Security Management; ie. computer hardware and…

Introduction The most secure server in the world is the one that is powered off and disconnected from the Internet. But if we want to use the server for IT operations, we must make sure that the server is secured properly before making it online. Server Hardening is the process of…

Hey, In Previous blog lab demo of the vulnerability was explained. Null Byte Injection- Part-1 A Null byte is used in many languages to detect the end of a string. Systems that do not handle null bytes properly can…systemweakness.com Now, let us review PHP code in similar scenario $file = $_GET[‘file’]; require_once(“/var/www/$file.jpg”); While above script appears to be secured while allowing only .jpg extenstion.

How can we ease into a new normal? I am one of the older people trying to survive Covid-19. I don’t want to die any more than anyone else does! I also don’t want to be forced to spend my (who knows how many) final days of life unable to…

Ever since I was a kid I was fascinated by witches. To be completely honest, at first, I was terrified, only later got fascinated. As I grew older only I realized how disgusting those witch hunts may have been and how very likely it was that I would have ended…

By Pasha Kravtsov, Security Engineer at Monad New security vulnerabilities are discovered every day, and companies that are slow to address them risk data breaches, financial losses and other irreversible harms. As a security engineer, I know first-hand that mitigating software vulnerabilities and managing your attack surface can be extremely…

This blog post was published on PurpleBox website on June 8th, 2022. 1. Introduction On June 2nd, Atlassian released a Confluence security advisory regarding a zero-day remote code execution (RCE) vulnerability in all versions of the Confluence Server and Data Center that has been exploited. In this blog post, we will talk…

Like open locks on a safe, cyber vulnerabilities are weaknesses across people, process and technology (such as misconfigurations, broken process, human error, and technical weaknesses like buffer overflow in a system, network, application or asset) that can be exploited by cybercriminals. After leveraging a vulnerability to gain unauthorized access into…