Application security

Website hacking, Part VI: Input validation and filtering in PHP

In this part of the series, we are going to examine the different ways to escape HTML characters in PHP in order to add security to your web project. We will

iOS Application Security Part 37 - Adapting to iOS 8

In this article we will look at all the things you need to do to set up a pentesting platform on iOS 8 and be comfortable with using all the tools. Jailbreak

Avoiding mod security false positives with white-listing

We have already discussed in my previous articles how to configure Mod Security Firewall with OWASP rules and also analysed the different types of logs which

Examining Android App Specific Data on Non-Rooted Devices

In all of our previous articles so far in this series, we discussed all the examples only on rooted devices and emulators. Generally, there are people who ar

Android Application hacking with Insecure Bank Part 1

In this article series, we will learn at the various concepts of Android application security while exploiting a vulnerable app InsecureBankv2. We will be lo

Penetration Testing Methodology for Web Applications

Establishing a penetration testing methodology is becoming increasingly important when considering data security in web applications. The more we come to rel

iOS Application Security Part 36 - Bypassing certificate pinning using SSL Kill switch

In this article, we will look at how we can analyze network traffic for applications that use certificate pinning. One of the best definitions I found of cer

Parameterized SQL query over dynamic SQL query

What is a parameterized SQL query? It is used for better performance, high efficiency and prevention of SQL injection vulnerability. Before going further, l

iOS Application Security Part 35 - Auditing iOS applications with iDB

In this article, we will look at another cool utility named iDB for pentesting iOS applications. Before that, i would like to apologize for coming up late wi

Analyzing the mod security logs

In the previous article, we had already configured the Mod-Security Firewall with OWASP Core Rule Set (CRS). But installing and configuring the Mod Security