Application security

Cracking damn insecure and vulnerable app (DIVA) : Part 1

Cracking damn insecure and vulnerable app (DIVA) : Part 1

What is DIVA? DIVA is a vulnerable Android application. According to their official website, "DIVA (Damn insecure and vulnerable App) is an App intentionall

Domain-Based Message Authentication Reporting and Conformance

Domain-Based Message Authentication Reporting and Conformance

Domain-based message authentication reporting and conformance, also known as DMARC, is a set up created by a group of organizations, having the objective to

Application architecture review

Application architecture review can be defined as reviewing the current security controls in the application architecture. This helps a user to identify pote

Securing Your WordPress Admin Panel

Today, anyone can create their own website with tools such as WordPress, Joomla or Drupal. However, many people suffer when they do not take precautions to s

Virtual Assistants: Here to Stay or Data Security Risks?

Virtual Assistants: Here to Stay or Data Security Risks?

Cardiff University and IBM have been working on creating a new virtual assistant (VA) software that can interact with its owner in a more human-like manner.

QARK – A tool for automated android app assessments

There has been a need for automated tools for Android Application Assessments for quite some time. Though there are some frameworks here and there, most of t

Writing Exploit for Mini Share Software: Introduction

Writing Exploit for Mini Share Software: Introduction

In this article, we will analyze another software and develop our own working exploit for it. The software which we will be discussing in this article is cal

HTTP/2: Enforcing Strong Encryption as the De Facto Standard

HTTP/2: Enforcing Strong Encryption as the De Facto Standard

HTTP Protocol, which serves as the communication channel for HTTP requests and responses on the Web, has received its first major revision since introduction

Content Security Policy

Content Security Policy

The entire web application security model is built on the idea of "Same Origin Policy" which restricts the content of one domain being accessed by another do

Firefox Plug-ins a Security Engineer Needs to Know

Firefox Plug-ins a Security Engineer Needs to Know

Plug-ins are programs that runs within software, which can improve the features of software. For example, a browser could be simply used for browsing purpose