Article Information Security Policy For SME Information security (IS) is a critical part of any small scale company and a big enterprise, and a challenge for any firm. Information security…
Article Android hacking and security, part 1: Exploiting and securing application components Mobile Application Security is one of the hottest segments in the security world, as security is really a big concern with growing mobile…
Article Can My JavaScript Access Your Page Elements? We all know that by using JavaScript you can do many things, for example read elements on a page, analyze the DOM, etc. Now assume that you logged…
Article SkypeFreak: A Cross-Platform Skype Forensic tool This is a small tool that can be used to investigate Skype user accounts stored in your PC. First of all, let's learn how to investigate data…
Article Server Side Includes (SSI) injection Injection is a high-category vulnerability in web applications. Attackers and security auditors alike always try to find the kind of vulnerabilities…
Article Hunting Session Fixation Bugs Improper handling of session variables in asp.NET websites is considered a serious threat and opens various doors to malicious hackers. For…
Article 3 Cyber Threats, One Simple Solution Vulnerability management has become a huge challenge in today's malicious cyberspace. SQL Injections, Cross Site Scripting and DDoS Attacks are…
Article Cookies with HttpOnly Flag: Problem in Some Browsers 1. Introduction When a cookie has HttpOnly flag set, then JavaScript cannot read it in case of XSS exploitation. This is actually the reason why…
Article What Good is Tor? To the uninitiated, Tor, formerly known as The Onion Router, is probably the most popular proxy network for internet anonmyzing. It's called an…
Article 8570 Certification and the Way Ahead to 8140 Certification Background on DoD 8570 Before certifications, the only measurement of someone knowing what they said they know was through an educational degree or…
Article Cyber Threats against the Aviation Industry Introduction The recent incident to the Malaysia Airlines Flight MH370 is fueling the discussion of whether would be possible to hack into an…
Article Putting Unstructured Data Into Context: What the Cosmos Can Teach Us About Unstructured Data How is it that something can be so incredibly large and minutely small at the same time? If you're as fascinated by natural science as I am, then…
Article .NET penetration testing: Test case cheat sheet Having a cheat sheet is a perfect starting initiative to assist you in generating ideas while penetration testing. A test case cheat sheet is often…
Article ASP.NET Website Optimization Writing optimized website code is considered to be one the most complicated tasks. Hence, this paper explores amazing server side configuration…
Article Jus in Cyber Bello: How the Law of Armed Conflict Regulates Cyber Attacks Part II Prohibition of Perfidy Article 37 of AP I - Prohibition of perfidy[pkadzone zone="main_top"] 1. It is prohibited to kill, injure or capture an…
Article Information gathering using Metasploit Your goals during information gathering should be to gain accurate information about your targets without revealing your presence or your…
Article Murdering Dexter In this article we are going to solve a Bot challenge. The name of the bot is Dexter and the vulnerable VM which we are going to use is created by…
Article Information Security Policies Organisations are giving more priority to development of information security policies, as protecting their assets is one of the prominent things…
Article Human-implanted RFID chips In 1945, Léon Theremin, a Russian inventor, invented one of the first covert listening devices, also known as "bugs." The device was a predecessor…
Article Invoking Assembly Code in C# Abstract This article explains the techniques of inline Assembly programming by linking or invoking the CPU-dependent Native Assembly 32-bit code to…
Article iOS Application Security Part 33 - Writing tweaks using Theos (Cydia Substrate) In some of the previous articles in this series, we have looked at how we can modify the behaviour of an application by patching it using IDA Pro,…
Article API hooking API hooking is a technique by which we can instrument and modify the behavior and flow of API calls. API hooking can be done using various methods…
Article Buffer Overflow Attack & Defense Abstract This paper attempts to explain one of the critical buffer overflow vulnerabilities and its detection approaches that check the referenced…
Article Android hacking and security, part 3: Exploiting broadcast receivers In the first two articles, we discussed attacks associated with Activity Components, content provider leakage and ways to secure them. In this…
