Information Technology, Control, Audit and Security Experience

Active Directory is essential to any Microsoft network built on the client-server network model. It provides a simplified query for administrators and users to manage resources, sites, services, and users on a network Active Directory was first provided in Microsoft Windows 2000. It is often managed and controlled through the MMC (Microsoft Management Console). In this post, I will be discussing the most common Active Directory Security issues.

VLAN stands for Virtual Local Area Network. This is a local area network where the computers, servers and other network devices are LOGICALLY connected regardless of their physical location. Vlan is capable of logically grouping these devices into separate segments. Its main purpose is to provide the following: Network security Network traffic management Simplification of Network Lets look at a simple implementation of a VLAN. Supposing you have a 3 story building and each floor houses separate sensitive departments (Accounts, Shipping and Support) . As a network administrator, if you were asked to isolate network traffic from all departments  you have 2 options. 1. either you create a separate network hardware for these system which might cost alot of money or 2. Create a VLAN using a VLAN capable switch. This will create the separated logical network for you while you can easily create rules to preventing the logical network from communicating with each oth...

A Google Dork, also known as Google Dorking or Google hacking, is an advanced technique to retrieve or obtain information from google. It is mostly used to find vulnerable targets and sensitive data using advanced search queries. It is a valuable resource for security researchers. Google is known as a search engine used to find text, images, videos, and news. However, it can also be manipulated to serve as a useful hacking tool. In this post I will be showing you how google dorks is used.

Mozilla Firefox, is a free and open-source web browser developed by the Mozilla Foundation. It is a very powerful browser with an impressive variety of plugins. A plugin is a piece of software that acts as an add-on to a web browser and gives the browser additional functionality. Plugins can allow a web browser to display additional content it was not originally designed to display. In this post I will go through some of the plugins which are useful for penetration testing on the Mozilla web browser. This list was compiled from Infosec institute resource centre . You can check the site out for more interesting resource

Mobile phones have transcended from just making calls to being used as a private vault. Nowadays mobile phones are used to store extremely sensitive data including authentication to corporate and personal emails and most especially banking credentials. A high proportion of bank customers now have mobile phone numbers linked with their bank accounts due to the availability of several alternate banking channels (eg USSD, Mobile Banking etc.). The risk is also heightened now that most mobile phones serve as a device for Multifactor Authentication to mostly banking transactions. These mobile phones contain a small device called  Subscriber Identity Module (SIM) which enables the transmitting and receiving of the signals to and from the network provider.   In recent times, the financial industry has experienced a surge in SIM Swap and SIM Cloning related fraud   SIM Swap VS SIM Cloning attacks. SIM swap is achieved by convincing the mobile phone provider represe...

Column Level VPD In my previous post we did a practical on how to perform Row level restriction using VPD policies. This practical will focus on the Column level restriction. And as said earlier we will be using the HR sample schema. In this tutorial we are going to secure some columns in the HR table “EMPLOYMENT” data.

In our previous post we learnt what the Oracle Virtual Database was all about. If you haven't read it click here . Without wasting much of your time, let get busy with our practicals What is needed W orking Oracle database (10g and above) HR sample schema. Sql work environment (SQL Navigator, Toad, etc) Today's tutorial will look at the following types of Virtual Private Databases: Row level VPD which restricts access to specific rows in a table Column Level VPD  which restricts access to specific columns in a table