Article IOS Application Security Part 27 - Setting up a mobile pentesting environment with IOS 7 Jailbreak In this article we will look at how we can set up a mobile pentesting platform on our device with the new IOS 7 jailbreak. There has been quite a…
Article A Close Look at the NSA Monitor Catalog – Server Hacking Introduction Summing up what happened, Der Spiegel published an internal NSA catalog that contains detailed information on spies' backdoors used by…
Article Web Services Penetration Testing, Part 6: Fuzzing Parameters with Burp In the previous article we discussed in what cases we might face challenges performing manual web services penetration testing and how SoapUI will…
Article IOS Application Security Part 29 - Insecure or Broken Cryptography In this article we will look at an example of Insecure or Broken Cryptography which is a common vulnerability found in most IOS applications. This…
Article Manually Web Application Penetration Testing: Fuzzing Introduction When we test a web application, we do not test a single page, but a lot of pages of a single web application. Each page may have more…
Article Hacking android apps using backup techniques In the previous article, we had an introduction on how to analyze Android application-specific data using Android backup techniques. This article…
Article Hack I-Bank Pro In this article we are going to see some major vulnerabilities typical of a remote banking application. We found an interesting vulnerable machine…
Article Manual Web Application Penetration Testing – Suffix & Prefix in Fuzzing Introduction In this series of articles, last time we talked about fuzzing and various SQL statement special characters which can be used in fuzzing…
Article Car Hacking: You Cannot Have Safety without Security Introduction The theme of the car hacking is increasingly discussed by the media and within the security community. At one time, the exploits of…
Article The Future is Now: Car Hacking Preface: "Modern Cars" As Dr. Charlie Miller & Chris Valasek stated in their research paper Adventures in Automotive Networks and Control Units,…
Article Approaches to Information Gathering in Physical Penetration Testing - Part I: Gathering Information via Photography 1. Introduction The first phase of an attack, and in a security assessment, is to gather as much data on the target as possible. It is actually…
Article Android hacking and security, part 1: Exploiting and securing application components Mobile Application Security is one of the hottest segments in the security world, as security is really a big concern with growing mobile…
Article .NET penetration testing: Test case cheat sheet Having a cheat sheet is a perfect starting initiative to assist you in generating ideas while penetration testing. A test case cheat sheet is often…
Article Android hacking and security, part 3: Exploiting broadcast receivers In the first two articles, we discussed attacks associated with Activity Components, content provider leakage and ways to secure them. In this…
Article Hacking Implantable Medical Devices Preface: Modern Medical Devices and their Software Contemporary healthcare relies heavily on medical devices to help patients lead normal and…
Article Penetration testing apps for android devices According to recent research, the amount of mobile phone users is larger than PC users. At the same time, the number of people who own Android…
Article Hack-Proof Drones Possible with HACMS Technology Introduction Unmanned Aerial Vehicles (UAVs) are one of the most flexible and useful solutions adopted by the military and private industries.…
Article Hacking traffic light systems Traffic light systems security issues We often see movie scenes in which hackers are able to hack systems for the control of traffic lights, with…
Article Alleged Hack of iCloud Exposed Nude Photos of Celebrities Online The case The gossip news of this week is the alleged hack of Apple's iCloud of many celebrities. Hundreds of naked photos purportedly belonging to…
Article Clickjacking, Strokejacking or UI Redress Introduction Clickjacking was first publicized by Jeremiah Grossman and Robert "Rsnake" Hansen in 2008. Clickjacking is an attack that is possible…
Article Hacking ATMs: The New Wave of Malware Introduction In recent weeks, security experts at Kaspersky Lab have observed several attacks on Automated Teller Machines (ATMs) which were…
Article Penetration Testing Methodology for Web Applications Establishing a penetration testing methodology is becoming increasingly important when considering data security in web applications. The more we…
Article Android Application hacking with Insecure Bank Part 1 In this article series, we will learn at the various concepts of Android application security while exploiting a vulnerable app InsecureBankv2. We…
Article Regin: State-Sponsored Malware or Cybercrime? Regin, a highly advanced spying tool A few weeks ago, Symantec security firm published the results of its investigation on the backdoor Regin, a…
