Article Using Hashes in Computer Security 1. Introduction Hashes are often used in computer security. This article presents how data integrity, authenticated data integrity and…
Article The Hunt for Memory Malware Memory forensic is a skill to find out all the artifacts in the memory that is present in the running computer. It is an interesting method to find…
Article IOS Application Security Part 16 - Runtime Analysis of IOS Applications using iNalyzer In the previous article, we looked at how we can perform static analysis of IOS Applications using iNalyzer. In this article, we will look at how we…
Article XKeyscore: NSA’s Surveillance Program Introduction The former contractor for NSA, Edward Snowden, became famous for revealing PRISM, a confidential mass surveillance program run by the…
Article WSUS (Windows Server Update Services) Introduction Windows Server Update Services (WSUS) can be used to manage the deployment of the latest Microsoft Windows operating system updates.…
Article Phishing with Data URI Phishing Phishing is a method of e-mail fraud that is used to gather personal and financial information from the recipients. According to Wikipedia,…
Article OSINT (Open-Source Intelligence) With an estimated 80% of required information available for use in an open source for specific information vital for a deep analysis in newspapers,…
Article Penetration testing of web services with CGI support This article shows hands-on penetration testing using an Apache server with CGI access; it identifies some vulnerabilities and performs exploits…
Article Online dictionary attack with Hydra When an attacker wants to learn credentials for an online system, he can use brute force or a dictionary attack. This article introduces these two…
Article Email encryption: Mailvelope Between constant password breaches and the NSA looking in on everything you do, you've probably got privacy on the mind lately. If you're looking…
Article System address map initialization in x86/x64 architecture part 1: PCI-based systems This article serves as a clarification about the PCI expansion ROM address mapping, which was not sufficiently covered in my "Malicious PCI…
Article Protect Data by Preventing Insecure Cryptographic Storage Daily, we read news about hacking and data leaks. Hackers are really active these days. So, it is our responsibility to prevent them in getting…
Article IOS Application Security Part 17 - Black-box assessment of IOS Applications using Introspy In this article, we will look at how we can use Introspy for Black-box assessment of IOS applications. Introspy is developed by ISEC partners and…
Article Peeping the Social media 1. Synopsis Nowadays it is hard to find a person who doesn't sign in to any social medium at least once a week by using gadgets like a smartphone,…
Article Hacking Satellites … Look Up to the Sky Introduction Satellites have assumed a crucial role in our contemporary society; they are used in both private and public sectors for numerous…
Article Web services penetration testing part 1 Web application security is quite popular among the pen testers. So organizations, developers and pen testers treat web applications as a primary…
Article Backup Media Encryption The problem Information Security is like a chain: it is only as strong as its weakest link. You can protect your network with expensive firewalls,…
Article Conditional Complexity of Risk Models Introduction "Conditional complexity" (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to…
Article Patching .NET Binary Code with CFF Explorer Abstract The purpose of this article is to show how to bypass various security checks by modifying binary code directly, rather than source code,…
Article Social engineering: A hacking story In this article I am going to discuss social engineering attacks, starting with the questions: "What is social engineering?" and "What are the types…
Article IOS Application Security Part 18 - Detecting custom signatures with Introspy In the previous article, we looked at how we can use Introspy for Black-box assessment of IOS applications. In this article, we will look at how we…
Article Windows systems and artifacts in digital forensics, part I: registry Learning about artifacts in Windows is crucial for digital forensics examiners, as Windows accounts for most of the traffic in the world (91.8 of…
Article Linux Kernel Development Process Introduction When I was listening to the question and answer session at LinuxCon, there was some interesting discussion going on: some of the latest…
Article Fixing CSRF vulnerability in PHP applications Cross Site Request Forgery or CSRF is one of top 10 OWASP vulnerabilities. It exploits the website's trust on the browser. This vulnerability harms…
