Blog

The Global Cybersecurity Forum that took a place on 4-5 February 2020 in Riyadh, Saudi Arabia is already behind us. Unfortunately, I could not attend the event on-site, but luckily organizers delivered a live stream for which I am extremely grateful. I am not able to say how I am impressed of about event organization, the place, the focus of participants during sessions and of course the high quality of interesting topics, discussions, and conclusions of the greatest global cybersecurity panelists. Saying just 'wow' is definitely not enough!

Read now

SECURE Conference is one of the most important IT Security events in the calendar of polish *Cyber Security* conferences. As it appears on the web page, it's organized by NASK and CERT Polska operating within the structure of NASK. As a founder of Defensive Security I am proud to say that during the latest 2019 edition of the conference, we had a pleasure to deliver a free, 4-hour SECURE Hands-on workshop about network adversary simulations based on ATT&CK Framework.

Read more

TLS fingerprint is a technique which bases on the specific set of information that is advertised in the "Hello" message. In practice, it's just 4th packet (but not necessarily) after 3-way handshake connection. However, it is sent by the client as the first message in the TLS handshake process.

Read now

As red teamers, we have plenty, different DNS-based exfiltration/tunneling/ C2 / payload delivery techniques to choose. I went through many available tools and found that most of them rely on DNS query types from the list below:
- A
- AAAA
- SOA
- TXT
- NULL
- MX
- CNAME

So what about DNS AXFR?

Read more