Application security

Securing Shared Preferences with Third Party Libraries

In one of the previous articles, we have seen how developers implement Shared Preferences in Android applications. We have also seen how one can compromise t

Configuring the ModSecurity Firewall with OWASP Rules

In today's world, over 70% of all attacks carried out over are done so at the web application level, so we need to implement security at multiple levels, as

Root detection and evasion

In this article, we will look at the techniques being used by Android developers to detect if a device on which the app is running is rooted or not. There ar

OWASP Practice: Learn and Play from Scratch

OWASP Practice is a virtual environment to help people who want to begin their journey into web application security. Lots of material including videos are a

Attacks on android webviews

In this series of articles so far, we have discussed various techniques to identify and exploit vulnerabilities in Android applications. In the previous arti

Exploiting debuggable android applications

In the previous article, we have seen how to debug Java applications using a little tool called JDB. In this article, we will apply the same logic to exploit

Building a Secure API in a Cloud Environment

Introduction In the last couple of years there has been a boom in cloud computing, but mainly just the term is new, as we've been using cloud services for ye

Penetration testing apps for android devices

According to recent research, the amount of mobile phone users is larger than PC users. At the same time, the number of people who own Android phones is incr

Android Application Security Testing Guide: Part 2

In our last part of this series (Android Application Security Testing Guide: Part 1), we discussed static analysis of Android APK files on the security backg

Android Tamer – A Walk Through

Are you a Backtrack/Kali freak? Ever thought of having a similar distribution in your arsenal dedicated for Android Security? "Android Tamer" is the solution