Article Coding of Disassembler We have practiced much disassembling by using assembly de-compilation tools such as Reflector, ILSpy, etc. Although such tools offer many advantages…
Article HIDS—A Simplified Design Construct This article will briefly discuss the host-based intrusion detection system (HIDS) and an abstract approach that can be used to design an…
Article Beyond password length and complexity (or "Why PCI-DSS-Compliant Passwords Aren't Enough" or "PCI-DSS-Compliant Password Analysis Reveals One-Quarter Still Trivially Compromisable")…
Article Cyber Security During The Holidays Introduction It's the holidays, a key time for cybercrime that exploits the bad habits of unaware internet users. Attackers can defraud and monetize…
Article System address map initialization in x86/x64 architecture part 2: PCI express-based systems This article is the second part of a series that clarifies PCI expansion ROM address mapping to the system address map. The mapping was not…
Article 2014 - The year of changes The year 2014 will be a year of continued change in the ICT security world. It will be a year in which some very fundamental, unfinished business…
Article How the NSA Monitors Target Computers with Radar Wave Devices Introduction Germany's Der Spiegel has published a couple of disturbing articles on the NSA surveillance activities. The media agency has focused…
Article IT Security 101: Prevent Weak Passwords Passwords have been part of IT since long before the age of the desktop PC. However, now more than ever, systems administrators need to re-examine…
Article R00t This Box Here's a challenge, root this box. We found a vulnerable machine named Hackademic RTB1. The main challlenge is to root the box with admin privileges…
Article Disassembler Mechanized Part 2: Generating C# and MSIL code Introduction In the previous papers, we have showcased the essential configuration in terms of external DLL importing into the solution and NuGet…
Article Cyber Extortion Data Held Hostage In the digital age, data has incredible value. Not only for business purposes, but also for criminal intent. It draws the interest…
Article Introduction to the Business of Stolen Card Data Introduction I receive many questions from people who don't work in the security field about the use of stolen credit card data in the cyber-crime…
Article Debugging TLS callbacks TLS (thread local storage) calls are subroutines that are executed before the entry point . There is a section in the PE header that describes the…
Article Disassembler Mechanized Part 3: Code Injection Operation Introduction This article is a continuation of the previous effort of writing the "Disassembler-Mechanized" series, in which we are showing the…
Article Disassembler Mechanized Part 4: DLL Injector Development Introduction We have already presented a couple of papers on modifying binaries through IDA Pro and OllyDbg disassembler, where we added…
Article Securing Your Java Code 3 For Part 2[pkadzone zone="main_top"] Sensitive Data Exposure A web application is vulnerable if it does not store sensitive information like…
Article Manual Web Application Penetration Testing: Introduction In this series of articles, I am going to demonstrate how you can manually exploit the vulnerability of a web application, compared to using any…
Article Manual Web Application Penetration Testing: Identifying Application Entry Points Introduction In this article, I will show you how to find injection points for your target host and how the webpage is encoded when it comes to the…
Article Advanced exploits using XSS SHELL Before understanding what XSS Shell is, let us recall a few basics of XSS (Cross Site Scripting). XSS is one of the most common vulnerabilities that…
Article Buyer Beware: Your Credit Card and Debit Card Data Can Be Stolen at the Cash Register Most adults in the developed world have bank accounts and credit cards. Most of us use debit cards and credit cards at the cash registers of our…
Article ECC: A Case for Mobile Encryption Introduction: It is needless to start this article by talking about the rise of mobile devices in the last few years. We all know how smart phones…
Article IOS Application Security Part 27 - Setting up a mobile pentesting environment with IOS 7 Jailbreak In this article we will look at how we can set up a mobile pentesting platform on our device with the new IOS 7 jailbreak. There has been quite a…
Article Dejan Kosutic on Business Continuity and Disaster Preparedness From an organizational point of view, the concept of resilience is basically the same as the concept of business continuity: An organization’s…
Article IOS Application Security Part 28 - Patching IOS Application with Hopper In Part 26 of this series, we looked at how we can use IDA Pro and Hex Fiend to patch an IOS application and modify its implementation. Patching an…
