Article Are your backup systems secure? All seemed well with backup operations at my company, until I got a visit from an operations center engineer. The lock already hanging open, he was…
Article Attacking web services Pt 1 - SOAP I often receive testing related questions from AppSec folks new to web services about the techniques used to discover and attack them. Often, web…
Article Attacking web services Pt 2 - SOAP In the previous article, we discussed forming a SOAP request based off the operations listed in a WSDL file and automating this task with Buby and…
Article Understanding the Public Key Infrastructure behind SSL secured websites Synopsis: Public Key Infrastructure (PKI) has recently been the focus of several important discussions within the information security community due…
Article HTTP response splitting attack In this paper we will discuss HTTP Response Splitting and how the attack can actually be carried out. When we're clear about how it works, because…
Article Android malware analysis The advance in technology brought us mobile phones with almost the same power and features as our personal computers. Something that criminal minds…
Article SQL Injection: The Equal Opportunity Vulnerability Introduction In the first installment of this series, we discussed application security within the Software Development Process by demystifying the…
Article A history of anonymous Anonymous is the most famous 'hacktivist' group in the world. The informal nature of the group makes its mechanics difficult to define.…
Article Goodbye DIACAP, Hello DIARMF When C&A becomes A&A, will you be ready? Every few months, an elite group of DoD security experts, IT managers, and senior leadership gather to char
Article UEFI and the TPM: Building a foundation for platform trust Table of Contents Trusted Computing Boot Path Security Challenges Boot Path Attack Surface The Trusted Memory Module (TPM) TPM Architectur
Article VLAN hacking In Virtual LAN or VLAN is a group of hosts communicate with each other, even thoughthey are in different physical location. Virtual LAN provides…
Article Enterprise Security: A practitioner's guide - Chapter 1 Chapter 1Security: A working definition Managing Risk Probability of Occurrence Business Impact Threat Sources Human Threats Geographic Threats Natur
Article Secure random number generation in JAVA “Random numbers” means numbers which are random in practice (i.e. unpredictable and non – reproducible). As simple this term looks when you hear it…
Article Web Analysis, Vulnerability Assessment and Exploitation using Backtrack5 Web application analysis plays a major role while doing a vulnerability assessment/penetration test. Proper information about the web application…
Article LOIC (low orbit ion cannon) - DOS attacking tool The DOS (Denial of service) attack is one of the more powerful hacks, capable of completely taking a server down. In this way, the server will not…
Article Fuzzing: Mutation vs. generation Many of you have undoubtedly come across the word "Fuzzing" and wondered about it. But if you have ever tried modifying some parameter; some sort of…
Article Fuzzing – Application and File Fuzzing In our first article, we reviewed the basics of fuzzing as well as the mutation and generation technique. We have also introduced the PeachFuzzer,…
Article Rock Solid: Will Digital Forensics Crack SSDs? Digital forensics is one of the most interesting and exciting fields of information security that you can ever be fortunate enough to work in, but…
Article The art of writing penetration test reports You close the lid of your laptop; it's been a productive couple of days. There are a few things that could be tightened up, but overall the place…
Article Cross-Site Scripting (XSS) Web applications today suffer from a variety of vulnerabilities. Cross-Site Scripting (XSS) is one of the most prevalent web application security…
Article The THC SSL DoS Threat Ever since computers became ubiquitous and affordable they have attracted malicious users as well as those who use computers for altruistic…
Article Inserting Vulnerabilities in Web Applications In this article we will look at how we can insert vulnerabilities in web applications. Why? There are basically two reasons. [pkadzone…
Article Hacking web authentication - Part 2 In the first part of this article we looked at some of the common authentication types used in Web Applications these days and discussed their pros…
Article A Few Words on Malware - The Sality Way Malware comes in different sizes and shapes. Trojans, worms, viruses, downloaders, and others are becoming more common than common cold medicine.…
