Application security

ActiveX Security Model

Abstract Modern browsers act as a thin client by executing untrusted or portable code called Mobile Code. For example, windows media player too could be us

Privacy concerns about Pokémon GO

Privacy concerns about Pokémon GO

Section 1. Introduction Pokémon Go, an augmented reality smartphone game which has recently become a sensation, is created and operated by the software devel

Purple Teaming: A Security-Testing Collaborative

Introduction The Red Tem term was born in the military environment to represent the highly specialized groups, able to play the role of opponents in contra

Pokemon Go: A new Rising Cyber Threat

Earlier this month people have encountered the new mobile gaming pop culture phenomenon that is Pokemon Go. It is being downloaded by millions of users aroun

Lab: GPG

Lab: GPG

In this lab, we will get an introduction to the GnuPG, the GNU Privacy Guard, an open source implementation of PGP. One problem with public key encryption is

App Transport Security

App Transport Security

One of the most common misconfiguration issues that I find during testing iOS apps is the bypass of the App Transport Security feature introduced by Apple in

Using Mobile Devices for Hacking

Using Mobile Devices for Hacking

Objective: The following lab will instruct you in booting a live version of Android. Using this live version of Android this lab will walk you through the st

Web Application Firewall 101: How to Prevent Web Hacking

Web Application Firewall 101: How to Prevent Web Hacking

At this point, it's is safe to say that web hacking is a pretty rampant concern. It almost seems that on a weekly basis readers are inundated with major web

Cracking Damn Insecure and Vulnerable App (DIVA) – part 3:

Cracking Damn Insecure and Vulnerable App (DIVA) – part 3:

In the first two articles we have seen the solutions for the first 6 challenges in DIVA. In this article we will discuss the "Input Validation Issues" in DIV

Cracking Damn Insecure and Vulnerable App (DIVA) – Part 2:

Cracking Damn Insecure and Vulnerable App (DIVA) – Part 2:

In the previous article, we have seen the solutions for the first two challenges. In this article we will discuss the insecure data storage vulnerabilities i