11 August 2017 — I participated in an online lucky draw. Instead of winning some prizes, I stumbled upon two vulnerabilities. It turned out that their CAPTCH...

Wireless@SG is a nation-wide free WiFi service in Singapore. To get Internet access from a Wireless@SG hotspot, a user has to register their phone number, an...

The early days in the cyberspace used to be rather safe when compared to the increasingly hostile worldwide wild west, where various hostile governments, cri...

On the 12th Day of Christmas, Div0 gave to me ... Browser Exploitation Framework (BeEF), theHarvester, nmap Scripting Engine (NSE), msfvenom, searchsploit, u...

On the 7th Day of Christmas, Div0 gave to me ... urlcrazy, recon-ng, Zone Transfer Tool, Using Online Digest Databases, Hash Identification, Password Mutatio...

On the 6th Day of Christmas, Div0 gave to me ... recon-ng, Zone Transfer Tool, Using Online Digest Databases, Hash Identification, Password Mutation Using JT...

It's December! We will be celebrating 12 days of Christmas Div0 Style. For the next 12 days, we will be making a post each day on a useful tool that can be f...

It is a nightmare for anyone running an Internet-facing information system when customers inform you that something strange going on. At first thought, you m...

One of the founding weaknesses in the HTTP protocol was the binding of file systems directly to URL paths. At the time of Gopher and the evolvement of web st...

Zero Day Defence 2014 is one of the few components in Singapore's National Infocomm Security Competition (NISEC). The task is to create a Web Application wit...

According to SANS Top Cyber Security Risks (Jul, 2010), attacks against Web applications make up more than 60% of the total number of attempted attacks on th...

Introduction to Thug & Client Honeypot Client honeypots are amazing tools for security practitioners who wish to perform a quick analysis of Websites, commun...

The Little Padlock "Make sure you see the little padlock icon to verify you are accessing online banking services or e-commerce websites 'securely'," — This ...