Application security

IOS Application Security Part 23 - Defending against runtime analysis and manipulation

In the previous articles, we have looked at how we can use debuggers and tools like Cycript to do runtime analysis and manipulation of IOS Applications. We h

IOS Application Security Part 22 - Runtime Analysis and Manipulation using GDB

In this article, we will look at how we can use GDB to perform runtime analysis of IOS applications. In the previous articles, we have looked at how we can u

Fuzzing for SQL injection with Burp Suite intruder

This article introduces Burp Suite Intruder and shows how it can be used for SQL injection fuzzing. Burp suite intruder It is a part of Burp Suite, which i

IOS Application Security Part 21 - ARM and GDB Basics

All the IOS devices released uptil now are based on the ARM architecture. All the Objective-C code that we write while developing IOS applications is first c

Web Services Penetration Testing, Part 2: An Automated Approach With SoapUI Pro

In the previous article, we discussed how the sudden increase in the use of web services makes it an important attack vector. Also, we covered different com

IOS Application Security Part 20 - Local Data Storage (NSUserDefaults, CoreData, Sqlite, Plist files)

In this article, we will look at the different ways in which applicatons can store data locally on the device and look at how secure these methods are. We w

Will the iPhone 5S Be The Catalyst to Fingerprint Scanners on All Our Devices?

A phone used to be a simple device you would make phone calls with. It could have your contact list, or even a log of recent contacts, but that was about it.

IOS Application Security Part 19 - Programmatical Usage of Introspy

In this article, we will look at how we can Introspy as a python module in our scripts. The first thing to do is to import the introspy module and Namespace

Web Services Penetration Testing Part 1

Introduction: Web application security is quite popular among pen testers, so organizations, developers and pen testers treat web application as primary att

Ajax Security Issues

This article is about exploring major security issues we come across during assessment of Ajax based applications. AJAX: Ajax or 'Asynchronous JavaScript an