INFOSEC Featured

SecjuiceCON 2025

Come and host a talk at SecjuiceCON, our very first virtual conference! Submit your speaker presentation abstract by December 31, 2024.

INFOSEC

The CMMC Countdown, Part 2

Start your CMMC action plan with this high-level review of the five-point controls required to get a conditional certificate.

MALWARE

Understanding the Black Basta Ransomware Service

Learn how Black Basta’s double extortion tactics works.

TECHNICAL

Age Verification: An Analysis of its Effectiveness & Risks

Age verification laws have been suddenly rolling out in the USA. In this article, we will navigate through a complex analysis, as I seek to stimulate your thoughts rather than impose conclusions. Today's discussion centers on age verification protocols implemented on pornography websites.

OSINT

Political Donations - OSINT

Explore tools like FEC, Open Secrets, and state databases to research individual political donations and donor details easily.

TECHNICAL

HTB Pilgrimage Walkthrough

Search for flags using tools like nmap and ImageMagick, identify vulnerabilities, exploit them, find user credentials, and capture flags. Happy hacking the box!

HTB Jupiter Walkthrough

Discover how temporary files can provide information for getting access to a Jupyter notebook.

HTB Support Walkthrough

Observe how to use Rubeus to break into an Active Directory server.

HTB RedPanda Walkthrough

Learn how to break into a vulnerable Java application.

HTB Shoppy Walkthrough

Explore how to hack a vulnerable admin portal.

HTB Ambassador Walkthrough

Discover how using an access token can allow breaking into a development server.

OSINT

Ethereum Reboots Crypto Investigation

The smart blockchain created a crypto ecosystem of NFTs, DeFi, and Dapps, along with new kinds of investigations.

News

Timeline and Details of the Change Healthcare Breach

Discover how this healthcare breach unfolds and learn crucial defense strategies. Dive into our expert analysis for actionable insights.

OSINT

How I Research a Bitcoin Wallet's Past: OSINT for Cryptocurrency Investigation Part 2

Explore the intricate world of Bitcoin address research using Blockchair and Oxt.me. Learn to uncover transaction details and patterns for deeper insights into crypto activity.

OSINT

The UK OSINT Community: Working To Boost Sovereign Intelligence Capabilities

British OSINT practitioners are flocking to join the new UK OSINT Community in support of their mission to bolster sovereign intelligence capabilities.

OSINT Featured

The Basics of OSINT for Cryptocurrency Investigation: Part 1

New to cryptocurrencies? Learn to investigate addresses step-by-step, from blockchain explorers to scam databases in our beginner's guide.

HTB Timelapse Walkthrough

I solved the hack-the-box for a Windows machine that was giving me problems. This is how I solved it to get the admin password.

TECHNICAL

Rhysida Ransomware Malware Analysis - Part 2: How to Decrypt

In the second part of our malware analysis walkthrough of Rhysida ransomware, we will pick up where we left off from part 1 (analysis and debugging) and explore how to decrypt the ransomware.

OSINT

Pastebin and Its Incidental OSINT

Despite being a great OSINT tool, Pastebin remains misunderstood and underutilized.

human trafficking Featured

Navigating the Cryptic Nature of Currency in Human Trafficking

"Follow the money." We have all heard it at some point, especially if you are in the anti-human trafficking space. Yet, if only it was THAT simple. Let's pull this apart.

Top 3 Threats of 2024 and How To Protect Against Them

Cyber security threats never stop. A technology gets created, a vulnerability is discovered within it, the vuln gets patched, only for a new vuln to be found – rinse, repeat. Based on numerous reports of the top threats in recent years and expected in 2024 (see “Resources” at the end of

Use OSINT to Investigate a Phishing Scam

One of the greatest tools for infosec professionals to investigate and prevent phishing scams is actually just a collection of websites that produce information that is free and open to the public, also known as Open Source Intelligence (OSINT). This article will identify and explain several OSINT methods that are

Rhysida ransomware Malware Analysis - Part 1: Dynamic analysis

This article is very different from one of my classic HTB walkthroughs. Driven by one of my greatest passions and by the recent articles of another Secjuice author, fairycn, whom I thank for his detailed series of articles on malware analysis and secprentice that gave the idea about the malware's

TECHNICAL

HTB Photobomb Walkthrough

Explore this step-by-step Hack The Box walkthrough on exploiting vulnerabilities to gain unauthorized access to a system.

OSINT

Download Websites to Find OSINT

Websites are full of useful information that is hidden in source code or small print in obscure subdomain. The following is an excerpt from the book, The OSINT Guide, by Thomas Caliendo. Here we will walk through how to discover Open Source Intelligence (OSINT) by downloading a website to search