Application security

Secure Your Application Using .htacess File

What is Wordpress? WordPress is a free, open-source blogging tool and content management system (CMS) based on PHP and MySQL. Features include a plugin archi

Enhancements in Damn Vulnerable iOS app version 2.0

In this article, I would like to give a quick walkthrough of the new vulnerabilities and challenges that we have added in version 2.0 of Damn Vulnerable iOS

Bypassing Jailbreak Detection Using Xcon

In this small article, we will look at a very handful utility named Xcon for bypassing Jailbreak detection. As per the wiki page ... xCon is a collaborative

Dealing with bad characters & JMP instruction

So far, in previous articles, we have learnt how to develop our own working exploit for the Echo Server program; we used two different payloads with the expl

15 + Modules for Making Your Drupal Website Secure

Drupal is the popular open-source content management system written in PHP. Although it only powers around 2.5% websites on the web, but it is still importan

Introducing IDA scripting

IDC scripting language is used by IDA disassemblers to programmatically manipulate data assembly and parameter in the loaded IDB database file. Script can ma

The Basics with Node.js Examples

Introduction Public-facing APIs have tremendously increased in the last couple of years. Businesses have seen that sharing their business data with the publi

Format String Bug Exploration

ABSTRACT The Format String vulnerability significantly introduced in year 2000 when remote hackers gain root access on host running FTP daemon which had anon

Fingerprinting: Identifying applications

When performing a Web Application Security Assessment, an important step is Fingerprinting which allows for further exploitation by an attacker. So as a secu

Defending Against Web Attacks: X-XSS Protection

In the previous article, we have seen how we can defend against click jacking attacks using the X-Frame-Options header. In this article, we will discuss anot