Tag Info

New answers tagged

4

There are many, I searched for some of them in different forums: HITB Security Conference Black Hat (various events and conferences every year every where) B-Sides (much smaller but more populist conference) The Hacker Conference (first organized in 1984) Blue Hat (Microsoft Hacker Conference hold twice per year) Brucon (conferences, training ... once a ...


1

Probably not enough context to make any accurate determinations. But here is a shot at it. What frequently used law does does the Government rely on to search private property? The supreme court is pretty clear on this that they require a warrant. Even with a warrant, there is some discussions that if your data (hard drive, as an example) is ...


1

There is a polish platform: rozwal.to. The name in english means "destroy.it". There is about 50 tasks which vary with needed skill level and the subject (XSS, Injections, SQLi, Steganogrpahy, bitcoins etc.). The big advantage is that you don't need to install anything, you just simply open pages and hack them. It has also a ranking so you can compare ...


6

I've been trying to maintain a list of useful resources for Security Enthusiasts on my personal website. Here's a part of it: Web Application Security Browser Security Handbook - By Michal Zalewski Google Gruyere - Web Application Exploits and Defenses - a small, cheesy web application that allows its users to publish snippets of text and store assorted ...


14

These are all that i recommend. Web Vulnerability 1. Webgoat(Recommend) - https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project 2. EnigmaGroup(WarGame) - http://www.enigmagroup.org 3. Mutillidae(Good) http://sourceforge.net/projects/mutillidae/ 4. DVWA (not so good) http://www.dvwa.co.uk/ OS Vulnerability 5. Metasploitable(Recommend) - ...


3

You can find platforms that provide so-called wargames, such as OverTheWire. In such games, you have an SSH access to a public machine with custom vulnerable software that you must exploit in order to progress further.


20

Depending on what you call "online", a simple Google search on "damn vulnerable" will reveal the existence of freely downloadable applications of even full OS, meant for, indeed, learning all the ways software can be horribly vulnerable. One of them is Damn Vulnerable Web App, which is, you guessed it, a damn vulnerable Web app. There also used to be a full ...


1

Technically: Solid understanding of CAN-bus (most important IMHO), and maybe LIN bus - error handling, isolation techniques, message structure, HLPs. Working knowledge of ECU, sensor electronics and control modules Advanced reverse engineering skills (sniffing, protocol analysis, cryptography)


3

Virtually all new connected cars have IT security issues. First of all, when we talk about connected cars, we refer to wireless connection. So having a good knowledge of how 802.1 protocol list and technologies such as LAN function is a must. Also there is a wide range of software that connected cars may use, including operating systems such as Microsoft ...



Top 50 recent answers are included