Application security

IOS Application Security Part 28 - Patching IOS Application with Hopper

In Part 26 of this series, we looked at how we can use IDA Pro and Hex Fiend to patch an IOS application and modify its implementation. Patching an applicati

IOS Application Security Part 27 - Setting up a mobile pentesting environment with IOS 7 Jailbreak

In this article we will look at how we can set up a mobile pentesting platform on our device with the new IOS 7 jailbreak. There has been quite a lot of disc

Manual Web Application Penetration Testing: Identifying Application Entry Points

Introduction In this article, I will show you how to find injection points for your target host and how the webpage is encoded when it comes to the client si

Manual Web Application Penetration Testing: Introduction

In this series of articles, I am going to demonstrate how you can manually exploit the vulnerability of a web application, compared to using any automation t

IOS Application Security Part 26 - Patching IOS Applications using IDA Pro and Hex Fiend

In the previous applications we have looked at how we can hijack method implementations during runtime using Cycript, and even change the logic of the code r

IOS Application Security Part 25 - Secure Coding Practices for IOS Development

In this article, we will look at some of the best practices an IOS developer should follow in order to make sure that their application is not easily exploit

Anti- Reverse Engineering (Assembly Obfuscation)

This article illustrates these contents in detail: Abstract Obfuscation The .NET Application Anti-Reversing Implementation Obfuscated Code Analysis MS

Attacking MS SQL server to gain system access

All systems and database administrators will agree that password complexity does not go very far when it comes to SQL servers. Whether this is done to keep t

IOS Application Security Part 24 - Jailbreak Detection and Evasion

In this article, we will look at the checks a developer can incorporate in his application to check whether the device on which the application is running is

Web Services Penetration Testing Part 5: Manual Testing with soapUI

In the previous article, we discussed the importance of manual web services penetration testing, how to perform a manual test using SOA Client, how SOA clie