Application security

Wordpress Security for Users

Wordpress Security for Users

Introduction We all know that Wordpress is the primary CMS system used on the Internet. We also know that security in Wordpress is not always taken for grant

Leveraging the command line for windows: malware analysis and forensics. Part I

Leveraging the command line for windows: malware analysis and forensics. Part I

cmd.exe - Leveraging the command line for windows: malware analysis and forensics. Part I Abstract : The command prompt for windows is a dark horse of sort

What is an SQL Injection? SQL Injections: An Introduction

What is an SQL Injection? SQL Injections: An Introduction

New SQL Injection Lab! Skillset Labs walk you through infosec tutorials, step-by-step, with over 30 hands-on penetration testing

Burp Suite tutorial: Session handling mechanisms

Burp Suite tutorial: Session handling mechanisms

Web applications, nowadays, handle sessions and state by implementing session expiration and sessionid lifecycle in a more secure manner to avoid security is

A prototype model for web application fingerprinting:  w3 scrape

A prototype model for web application fingerprinting: w3 scrape

Introduction: Web application fingerprinting is one of the most important aspects of the information gathering phase of ethical hacking. This allows us to n

PHP Session ID’s – The Risks

PHP Session ID’s – The Risks

In today's article I want to address a very important topic. Namely, I want to talk about PHP session security. I know and understand that this is a very bro

How to Safely and Wisely use jQuery: Several Key Issues

How to Safely and Wisely use jQuery: Several Key Issues

At the beginning of this article, I want to thank all those without whom this article would not exist. For starters, I'd like to thank Izabela Galazewska. Yo

Websecurify Walkthrough, Web Application Penetration Testing Tool

Websecurify Walkthrough, Web Application Penetration Testing Tool

[caption id="" align="alignright" width="200"] Websecurify Logo[/caption] Information security is a very important thing for the modern Internet world. So, p

Owasp ZAP

Owasp ZAP

[highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our  OWASP Top 10 Training course OWASP Top 10 Training. [/highlight] Introduct

Web Vulnerabilities Explained

Web Vulnerabilities Explained

Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF, etc. In t