- HADESS

KPIs for Cyber Security

Introduction In today’s rapidly evolving digital landscape, cybersecurity is more critical than ever. Organizations are not only focused on protecting data and assets but also on measuring the effectiveness of their security strategies. This article explores the most important KPIs in cybersecurity, providing a framework for organizations to assess, monitor, and enhance their security posture….

Memory Forensic: A Comprehensive Technical Guide

Introduction to Memory Forensics Memory forensics is a specialized field within digital forensics that involves the analysis of a computer’s volatile memory (RAM) to extract evidence of system activity, running processes, network connections, and other crucial information that is lost when a system is powered down. Unlike traditional disk forensics, which focuses on analyzing static…

Windows Downdate: Downgrade Attacks Using Windows Updates and Beyond

The “Windows Downdate” vulnerability, identified and demonstrated by researcher Anon Leviev, is a downgrade attack technique that leverages Windows Update mechanisms to reintroduce older, vulnerable versions of system files. By circumventing normal update verification checks, this attack allows malicious actors to downgrade essential system components like the Windows kernel, Hyper-V hypervisor, and other critical drivers,…

Art of Post-Exploitation

Post-exploitation in red teaming involves navigating and exploiting a compromised system to achieve deeper control and further access to sensitive data and networks. This phase follows initial access and lateral movement, focusing on persistence, privilege escalation, and data exfiltration. Key techniques include system enumeration to gather information such as running processes, installed software, and user…

_Featured

WordPress Vulnerabilities Plugins | Security Analysis

hadessFebruary 11, 2023

In this article, we will examine the vulnerabilities of WordPress as well as the vulnerabilities of WordPress plugins. In the following, we will examine the concept of CSRF and HTTP header, and finally we will share a list of WordPress vulnerabilities with you.

OWASP In Cyber Security 2023 | Top 10 For LLM Applications

OWASP Top 10 for Large Language Model Applications

hadessMay 26, 2023

In this comprehensive article, we explored the concept of OWASP in cyber security. We have explained the reason for using it and then discussed the top 10 OWASP in 2023. We answered the question whether OWASP Top 10 is enough for cyber security or not? And finally, we named 10 of the best for Large Language Model Applications and explained them one by one. We hope that you will use this article in a good way. Thank you for your support.

From Faces to Feelings: The Role of OSINT in Emotion Detection and Cybersecurity

hadessJune 17, 2023

The quest to understand and interpret human emotions has spanned centuries, captivating the minds of philosophers, researchers, and scientists. In today's digital age, with the integration of technology and human sciences, significant strides have been made in the domain of emotion detection. One innovative approach that stands out in its effectiveness is Open Source Intelligence (OSINT). As the crossroads of cybersecurity and human emotion merge, understanding OSINT's role becomes imperative.

Unveiling the Art of Face Generation

hadessAugust 18, 2023

As we stand at the intersection of art, innovation, and practical application, one realm beckons with increasing allure - the world of face generation in Open Source Intelligence (OSINT). From creating characters for the latest VR game to navigating the complex web of cybersecurity, the implications of face generation are as vast as they are varied. Let's dive into this digital cosmos and decode the intriguing artistry of creating lifelike faces with algorithms.

The Art Of Hiding In Windows

hadessSeptember 27, 2023

The intricate dance between cyber defenders and adversaries plays out daily in the vast digital playground of the Windows operating system. As the dynamics of this age-old game evolve, the strategies employed by both sides have grown increasingly nuanced. The line between cybersecurity professionals and cybercriminals blurs when it comes to mastering the art of evasion within Windows. In this deep dive, we'll unpack the tactics, techniques, and procedures that render these actors invisible in plain sight.

Jenkins Attack Vector

hadessOctober 11, 2023

Jenkins, an open-source automation server, is widely utilized for building, deploying, and automating any project, making it a valuable target for Advanced Persistent Threat (APT) actors. Understanding the attack vectors and surfaces within Jenkins is crucial to safeguarding the platform and protecting organizational assets. This article delves into the potential attack vectors and surfaces within Jenkins, providing insights into securing your CI/CD pipeline.