Application security

Mobile security has been gaining popularity in recent times. Many mobile-based attacks are being discovered as the mobile industry grows more complex and new

1. Introduction There are numerous tools available when checking the security of the WordPress Content Management System (CMS). In the rest of the article we

Hyper Text Transfer Protocol (HTTP) is a stateless protocol. The implication of this is, at the protocol level there is no record of what happened in the pas

This is part 4 in a series. Part 1 is available here:w3af Tutorial Part 1 Part 2 is available here:Discovery and Audit plugins Part 3 is available here: Rema

During penetration testing, the main objective of the auditor is to exploit and gain access. For that to happen, it is required to have some information abou

Web application security is always an important topic to discuss because websites seem to be the first target of malicious hackers. Hackers use websites to s

During vulnerability assessment or penetration testing, identifying the input vectors of the target application is a primordial step. Sometimes, when dealing

Web based interfaces are convenient for managing networking equipment, but under no circumstances should these be open to the world and the internet. Many ne

Did you say a "cookie" ? A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to

w3af (Web Application audit and attack framework) is a framework for auditing and exploitation of web applications. In this series of articles we will be loo