Hello everyone We all know how to intercept a request in a web application – simply activate your proxy, Fiddler or Burp suite and redirect

What is it? It wasn’t long since the massive WannaCry ransomware hit the cyber-world, and starting from yesterday, Tuesday June 27th, a massive new attack of

Hi everyone Monday tech is dead, all hail the new king ComTech (which stands for Comsec-Tech). Monday tech wasn’t always published on Mondays so I

Introduction Comsec Group recently created a ransomware readiness service, which maps the gaps, validates the readiness level of an organization against ransomware attacks and provides

Hi everyoneWPAD or Web Proxy Autodiscovery Protocol, is a protocol that is used in Windows by Internet Explorer and other web browsers that follow Window’s

Hey all, Here are this week’s cyber updates: (1) Hyundai app has been found vulnerable to MiTM attacks. The app communicates with Hyundai’s server using

Hi everyoneToday I’m going to talk about a nice variation of DDoS that I recently encountered: PRSD DoS – Pseudo Random Sub Domain attack, also

Hi all A hash function as you all know takes any data and produces a digest of the same data, that “represents” it. Many think

Hi everyone Sometimes you do a penetration test of a 2-tier application – a fatthick client application. A 2-tier thick client application is an app

Hi everyone Last week I talked about cracking regular CAPTCHAs, but the world is moving on to a more user friendly mechanisms, so this week