Application security

Debugging in the Cloud

In the world we live in, there are different kinds of professions where debugging has been a vital piece of knowledge we must have in order to do our jobs su

Http verb tempering: bypassing web authentication and authorization

What is an HTTP VERB? Hypertext transfer protocol (HTTP) gives you list of methods that can be used to perform actions on the web server. Many of these meth

Taking Control of the Process

In the previous article, we learned about the basics of the Stack Based Buffer Overflow, such as analyzing the stack, creating breakpoints and analyzing the

Why Do We Need Software Escrow?

The practice of software escrow consists of the deposit of the source code of an application with a third party, indicated as the escrow agent. Software escr

iOS Application Security Part 41 - Debugging applications using LLDB

In this article we will learn about the LLDB debugger used by Apple's Xcode for debugging applications, understand why it is better for security testing, and

Hardening IIS security

Security is an essential part of a web application and should be taken into consideration from the first stage of the development process. A website couldn't

iOS Application Security Part 40 - Testing apps on your Mac

In this article, we will discuss the extent to which you can test applications on your Mac rather than the device. This could be useful for many reasons, som

Bypassing In Safari

SOP Bypassing in Safari To help you understand better, http://httpsecure.org and file://httpsecure are both treated as a different origin. The Safari browser

Security Policy Template for Web Applications

Web applications are critical to the enterprise infrastructure. Companies rely on them to communicate with partners, clients, shareholders and others, as wel

Android Application hacking with Insecure Bank Part 4

In this article, we will look at a very handy framework for analysis of android applications named Drozer. Drozer is a very useful tool as it eliminates the