SECURITY EDUCATION, PRIVACY GUIDANCE, THREAT AWARENESS, OPEN SOURCE TOOLS, RESEARCH NOTES, AND RESPONSIBLE TECHNOLOGY CONTENT

  • Penetration Testing Distribution - BackBox

    BackBox is a penetration test and security assessment oriented Ubuntu-based Linux distribution providing a network and informatic systems analysis toolkit. It includes a complete set of tools required for ethical hacking and security testing...
  • Pentest Distro Linux - Weakerth4n

    Weakerth4n is a penetration testing distribution which is built from Debian Squeeze.For the desktop environment it uses Fluxbox...
  • The Amnesic Incognito Live System - Tails

    Tails is a live system that aims to preserve your privacy and anonymity. It helps you to use the Internet anonymously and circumvent censorship...
  • Penetration Testing Distribution - BlackArch

    BlackArch is a penetration testing distribution based on Arch Linux that provides a large amount of cyber security tools. It is an open-source distro created specially for penetration testers and security researchers...
  • The Best Penetration Testing Distribution - Kali Linux

    Kali Linux is a Debian-based distribution for digital forensics and penetration testing, developed and maintained by Offensive Security. Mati Aharoni and Devon Kearns rewrote BackTrack...
  • Friendly OS designed for Pentesting - ParrotOS

    Parrot Security OS is a cloud friendly operating system designed for Pentesting, Computer Forensic, Reverse engineering, Hacking, Cloud pentesting...

Thursday, February 4, 2016

Microsoft Dynamics AX 2012 R3 Security



Book Description:

Microsoft Dynamics AX is an ERP software that supports multisite operations. The variety of security features in MS Dynamics AX 2012 enables stakeholders to deal with business data smoothly and securely, avoiding security threats and raising their competencies in the market.

This book begins by providing you with the skills to develop security policies, permissions, and privileges using the AOT and secure tables. You will learn about the MorphX security system and customizing security and access permissions. Moving on, you will discover security mechanisms at the data level in tables. You will also learn to implement various security features, leading to best practices for setting up protection around your organization’s valuable assets. By going step by step through every chapter, you will learn everything you need to configure the security of Microsoft Dynamics AX 2012 R3 to match your business needs.


alt : Microsoft Dynamics AX 2012 R3 Security.pdf


Source: allitebooks

By Offensive Sec
Share:

Learning Python Network Programming



Book Description:

Network programming has always been a demanding task. With full-featured and well documented libraries all the way up the stack, Python makes network programming the enjoyable experience it should be.

Starting with a walkthrough of today’s major networking protocols, with this book you’ll learn how to employ Python for network programming, how to request and retrieve web resources, and how to extract data in major formats over the Web. You’ll utilize Python for e-mailing using different protocols and you’ll interact with remote systems and IP and DNS networking.

As the book progresses, socket programming will be covered, followed by how to design servers and the pros and cons of multithreaded and event-driven architectures. You’ll develop practical client-side applications, including web API clients, e-mail clients, SSH, and FTP. These applications will also be implemented through existing web application frameworks.


alt : Learning Python Network Programming.pdf


Source: allitebooks

By Offensive Sec
Share:

Transnational Security



Book Description:

Globalization and the easy movement of people, weapons, and toxins across borders has transformed security into a transnational phenomenon. Preventing transnational security threats has proven to be a very difficult challenge for governments and institutions around the world. Transnational Security addresses these issues, which are at the forefront of every global security professional’s agenda.

This book analyzes the most pressing current transnational security threats, including weapons of mass destruction, terrorism, organized crime, cybercrime, natural disasters, human-made disasters, infectious diseases, food insecurity, water insecurity, and energy insecurity. It considers the applicable international laws and examines how key international organizations are dealing with these issues.

The author uses a combination of theory and real-world examples to illustrate the transnational nature of security risks. By providing a detailed account of the different threats, countermeasures, and their implications for a number of different fields—law, public policy and administration, security, and criminology—this book will be an extremely useful resource for academicians, practitioners, and graduate and upper-level undergraduate students in these areas.


alt : Transnational Security.pdf


Source: allitebooks

By Offensive Sec
Share:

Computer Forensics JumpStart - 2nd Edition




Book Description:

Essential reading for launching a career in computer forensics
Internet crime is on the rise, catapulting the need for computer forensics specialists. This new edition presents you with a completely updated overview of the basic skills that are required as a computer forensics professional. The author team of technology security veterans introduces the latest software and tools that exist and they review the available certifications in this growing segment of IT that can help take your career to a new level. A variety of real-world practices take you behind the scenes to look at the root causes of security attacks and provides you with a unique perspective as you launch a career in this fast-growing field.

Explores the profession of computer forensics, which is more in demand than ever due to the rise of Internet crime
Details the ways to conduct a computer forensics investigation
Highlights tips and techniques for finding hidden data, capturing images, documenting your case, and presenting evidence in court as an expert witness
Walks you through identifying, collecting, and preserving computer evidence
Explains how to understand encryption and examine encryption files
Computer Forensics JumpStart is the resource you need to launch a career in computer forensics.


alt : Computer Forensics JumpStart - 2nd Edition.pdf


Source: allitebooks

By Offensive Sec
Share:

Wireshark Network Analysis - 2nd Edition



Book Description:

Wireshark is the world’s most popular network analyzer tool with over 500,000 downloads per month. This book provides insider tips and tricks to spot performance issues fast – no more finger pointing because the packets never lie! From “Death by Database” to “Troubleshooting Time Syncing,” 49 case studies offer insight into performance and security situations solved with Wireshark.

Learn to customize Wireshark for faster and more accurate analysis of your network traffic. Build graphs to identify and expose issues such as packet loss, receiver congestion, slow server response, network queuing and more.

This book is the Official Study Guide for the Wireshark Certified Network Analyst program.

This Second Edition includes an introduction to IPv6, ICMPv6 and DHCPv6 analysis, updated Wireshark functionality and new trace files. Refer to wiresharkbook.com for book supplements, index, table of contents and more.


alt : Wireshark Network Analysis - 2nd Edition.pdf


Source: allitebooks

By Offensive Sec
Share:

Bitcoin for the Befuddled



Book Description:

Unless you’ve been living under a rock for the last couple of years, you’ve probably heard of Bitcoin-the game-changing digital currency used by millions worldwide.

But Bitcoin isn’t just another way to buy stuff. It’s an anonymous, revolutionary, cryptographically secure currency that functions without the oversight of a central authority or government. If you want to get into the Bitcoin game but find yourself a little confused, Bitcoin for the Befuddled may be just what you’re looking for. Learn what Bitcoin is; how it works; and how to acquire, store, and spend bitcoins safely and securely.

You’ll also learn:

Bitcoin’s underlying cryptographic principles, and how bitcoins are created
The history of Bitcoin and its potential impact on trade and commerce
All about the blockchain, the public ledger of Bitcoin transactions
How to choose a bitcoin wallet that’s safe and easy to use
How to accept bitcoins as payment in your physical store or on your website
Advanced topics, including Bitcoin mining and Bitcoin programming
With its non-technical language and patient, step-by-step approach to this fascinating currency, Bitcoin for the Befuddled is your ticket to getting started with Bitcoin. Get out from under the rock and get in the Bitcoin game. Just make sure not to lose your shirt.


alt : Bitcoin for the Befuddled.pdf


Source: allitebooks

By Offensive Sec
Share:

Cyberspace and Cybersecurity



Book Description:

English | ISBN: 1466501332 | 2012 | 236 pages | PDF | 2 MB
Based on relate

Based on related courses and research on the cyber environment in Europe, the United States, and Asia, Cyberspace and Cybersecurity supplies complete coverage of cyberspace and cybersecurity. It not only emphasizes technologies but also pays close attention to human factors and organizational perspectives.

Detailing guidelines for quantifying and measuring vulnerabilities, the book also explains how to avoid these vulnerabilities through secure coding. It covers organizational-related vulnerabilities, including access authorization, user authentication, and human factors in information security. Providing readers with the understanding required to build a secure enterprise, block intrusions, and handle delicate legal and ethical issues, the text:

Examines the risks inherent in information system components, namely hardware, software, and people
Explains why asset identification should be the cornerstone of any information security strategy
Identifies the traits a CIO must have to address cybersecurity challenges
Describes how to ensure business continuity in the event of adverse incidents, including acts of nature
Considers intrusion detection and prevention systems (IDPS), focusing on configurations, capabilities, selection, management, and deployment
Explaining how to secure a computer against malware and cyber attacks, the text’s wide-ranging coverage includes security analyzers, firewalls, antivirus software, file shredding, file encryption, and anti-loggers. It reviews international and U.S. federal laws and legal initiatives aimed at providing a legal infrastructure for what transpires over the Internet. The book concludes by examining the role of the U.S. Department of Homeland Security in our country’s cyber preparedness.

Exercises with solutions, updated references, electronic presentations, evaluation criteria for projects, guidelines to project preparations, and teaching suggestions are available upon qualified course adoption.

d courses and research on the cyber environment in Europe, the United States, and Asia, Cyberspace and Cybersecurity supplies complete coverage of cyberspace and cybersecurity. It not only emphasizes technologies but also pays close attention to human factors and organizational perspectives.

Detailing guidelines for quantifying and measuring vulnerabilities, the book also explains how to avoid these vulnerabilities through secure coding. It covers organizational-related vulnerabilities, including access authorization, user authentication, and human factors in information security. Providing readers with the understanding required to build a secure enterprise, block intrusions, and handle delicate legal and ethical issues, the text:

Examines the risks inherent in information system components, namely hardware, software, and people
Explains why asset identification should be the cornerstone of any information security strategy
Identifies the traits a CIO must have to address cybersecurity challenges
Describes how to ensure business continuity in the event of adverse incidents, including acts of nature
Considers intrusion detection and prevention systems (IDPS), focusing on configurations, capabilities, selection, management, and deployment
Explaining how to secure a computer against malware and cyber attacks, the text’s wide-ranging coverage includes security analyzers, firewalls, antivirus software, file shredding, file encryption, and anti-loggers. It reviews international and U.S. federal laws and legal initiatives aimed at providing a legal infrastructure for what transpires over the Internet. The book concludes by examining the role of the U.S. Department of Homeland Security in our country’s cyber preparedness.

Exercises with solutions, updated references, electronic presentations, evaluation criteria for projects, guidelines to project preparations, and teaching suggestions are available upon qualified course adoption.


alt : Cyberspace and Cybersecurity.pdf


Source: allitebooks

By Offensive Sec
Share:

Official (ISC)2 Guide to the CISSP-ISSMP CBK - Second Edition



Book Description:

The Certified Information Systems Security Professional-Information Systems Security Management Professional (CISSP-ISSMP®) certification was developed for CISSPs who are seeking to further their careers and validate their expertise in information systems security management. Candidates for the ISSMP need to demonstrate a thorough understanding of the five domains of the ISSMP Common Body of Knowledge (CBK®), along with the ability to apply this in-depth knowledge to establish, present, and govern information security programs, while demonstrating management and leadership skills.

Supplying an authoritative review of key concepts and requirements, the Official (ISC)2® Guide to the CISSP®-ISSMP® CBK®, Second Edition is both up to date and relevant. This book provides a comprehensive review of the five domains in the ISSMP CBK: Security Leadership and Management, Security Lifecycle Management, Security Compliance Management, Contingency Management, and Law, Ethics, and Incident Management.

Numerous illustrated examples and practical exercises are included in this book to demonstrate concepts and real-life scenarios. Endorsed by (ISC)2 and compiled and reviewed by ISSMPs and industry luminaries around the world, this book provides unrivaled preparation for the exam. Earning your ISSMP is a deserving achievement that should ultimately help to enhance your career path and give you a competitive advantage.


alt : Official (ISC)2 Guide to the CISSP-ISSMP CBK - Second Edition.pdf


Source: allitebooks

By Offensive Sec
Share:

Android Security - Attacks and Defenses



Book Description:

Android Security: Attacks and Defenses is for anyone interested in learning about the strengths and weaknesses of the Android platform from a security perspective. Starting with an introduction to Android OS architecture and application programming, it will help readers get up to speed on the basics of the Android platform and its security issues.

Explaining the Android security model and architecture, the book describes Android permissions, including Manifest permissions, to help readers analyze applications and understand permission requirements. It also rates the Android permissions based on security implications and covers JEB Decompiler.

The authors describe how to write Android bots in JAVA and how to use reversing tools to decompile any Android application. They also cover the Android file system, including import directories and files, so readers can perform basic forensic analysis on file system and SD cards. The book includes access to a wealth of resources on its website: www.androidinsecurity.com. It explains how to crack SecureApp.apk discussed in the text and also makes the application available on its site.

The book includes coverage of advanced topics such as reverse engineering and forensics, mobile device pen-testing methodology, malware analysis, secure coding, and hardening guidelines for Android. It also explains how to analyze security implications for Android mobile devices/applications and incorporate them into enterprise SDLC processes.

The book’s site includes a resource section where readers can access downloads for applications, tools created by users, and sample applications created by the authors under the Resource section. Readers can easily download the files and use them in conjunction with the text, wherever needed. Visit www.androidinsecurity.com for more information.


alt : Android Security - Attacks and Defenses.pdf


Source: allitebooks

By Offensive Sec
Share:
Established in 2015. Offensive Sec Blog has been sharing security research, hacking tools, threat intelligence, and offensive security content since 2015.
Copyright © OffSec Blog | Powered by OffensiveSec
Design by OffSec | Built for the security community