Application security

Application security

In the previous articles, we have seen how applications like Snoop-it can trace method calls specific to the application at runtime. This is very important i

Application security

Abstract This paper is designed to demonstrate the common IIS web server security specifications in the form of a checklist that aids web masters or penetrat

Application security

In some of the previous articles in this series, we have looked at how we can modify the behaviour of an application by patching it using IDA Pro, Hopper etc

Application security

Writing optimized website code is considered to be one the most complicated tasks. Hence, this paper explores amazing server side configuration techniques an

Application security

1. Introduction When a cookie has HttpOnly flag set, then JavaScript cannot read it in case of XSS exploitation. This is actually the reason why HttpOnly fla

Application security

Injection is a high-category vulnerability in web applications. Attackers and security auditors alike always try to find the kind of vulnerabilities which al

Application security

We all know that by using JavaScript you can do many things, for example read elements on a page, analyze the DOM, etc. Now assume that you logged into faceb

Application security

Information disclosure is considered to be a serious threat, wherein an application reveals too much sensitive information, such as mechanical details of the

Application security

This paper especially pinpoints the poor practice of cryptography in URL, which is typically implemented to encrypt sensitive data residing in the website UR

Application security

In this article, we will talk about why we shouldn't completely rely on using third party libraries for securing our apps. Usually, some of the things we try