▼
Saturday, April 22, 2023

XSS (Cross-Site Scripting) Attack

›
 XSS (Cross-Site Scripting) XSS (Cross-Site Scripting) Client-side attack JavaScript HTML iFrame URL ends in .js Percent encoding %C (<...

HTTP Strict Transport Security (HSTS): Protecting Your Website with HTTPS

›
 HSTS HTTP Strict Transport Security (HSTS) is a web security policy mechanism that forces web browsers to interact with a website using onl...
Friday, September 2, 2022

USB Data Blockers: Safeguarding Your Devices Against Juice Jacking

›
 USB Data Blocker / Prevent Juice Jacking A USB data blocker, often referred to as a "USB condom," is a small device designed to p...

Juice Jacking: Understanding the Threat of Public USB Charging

›
  Juice Jacking Juice jacking is a type of cyber-attack that targets devices like smartphones and tablets when they are charged via public U...
Tuesday, March 15, 2022

Regulations and Standards

›
  Regulations and Standards to know for the exam      NIST RMF: Supply chain risks ISO 27001: Organization meets the security standards ISO...
Thursday, January 13, 2022

2-Step verification

›
 2-Step Verification or Out-of-Band This process is completed by generating a software token on a server and sending it to a user. The token...
Thursday, August 12, 2021

PROTOCOL / PACKET ANALYZERS

›
 WIRESHARK / TCPDUMP Wireshark is a free download in GUI format. The sniffer winpcap captures the traffic, and Wireshark analyzes it.  With ...