Article Object Oriented Programming in C#.net OOP's overview Object-oriented programming is the core ingredient of the .NET framework. OOP is so important that before embarking on the road to…
Article Implementing Secure Software Development Program – Part 3 Background: In the previous parts we covered the approach for implementing Secure SDLC (S-SDLC) and Gap Analysis. In this part we are going to cover…
Article Unpacking, reversing, patching This article is an introduction of packing, how to unpack, to reverse an exe and finally patching it. I have chosen to show reversing of a sample…
Article Anti-debugging: Detecting system debugger In the previous tutorial, we've talked about techniques that harden the reverse engineering of the executable and then we looked at anti-debugging…
Article Anatomy of a Risk Assessment To an organization that is serious about security and wants to identify the most efficient way to invest in security solutions, a risk assessment is…
Article Identity Management Solutions Identity management as a platform is an emerging branch of Information security. Top vendors such as Microsoft, IBM, and Oracle have taken serious…
Article Which Weapon Should I Choose for Web Penetration Testing? 2.0 Introduction This is the second edition of "Which weapon should I choose for Web Penetration Testing?" I hope that you liked the first edition. The…
Article Application security testing of thick client applications In this article, we will learn about thick client applications, their vulnerabilities and ways to carry out security assessment of these…
Article Awesome modules of Recon-ng used for Web Recon testing In my previous article, I wrote an introduction to the Recon-ng Framework and its basic usage, which is primarily used for automatic information…
Article Linear sweep vs recursive disassembling algorithm We know that there are two ways of disassembling a binary executable into its assembler instructions. The first technique is linear sweep algorithm…
Article Android: WhatsApp chat forensic analysis We all love messaging and using IMs on our smartphones to stay in touch with our friends and family. We use various mobile apps like WhatsApp to IM…
Article Snort Rule Writing for the IT Professional Snort--the open source intrusion detection and prevention (IDS/IPS) system—for over a decade now has proven its value and efficacy and is ranked…
Article Implementing Secure SDLC – Part 4 Background So far we have covered all the necessary information regarding what is Secure SDLC and strategically how to go about implementing it.…
Article IDA program patching It's not a rare occurrence when we want to load a binary executable in a debugger, change some bytes and then save the changed binary to a hard…
Article Reversing Loops Introduction Every program nowdays contains branch statements where the decision making happens and loops where we're repeating some piece of code.…
Article GFI LanGuard – Network Security Scanner Introduction: In a corporate environment, every computer connected to the network poses a security threat. As more and more computers get added into…
Article Arrays: A Brief Tutorial Introduction Arrays are powerful data structures that can be used to solve many programming problems. You have seen during the creation of different…
Article The Exponential Nature of Password Cracking Costs Let's assume for a moment that you suffered a security breach for a web application accessed by your customers. Somehow, an intruder was able to…
Article InfoSec Institute Interview: Alexander Polyakov – CTO at ERPSCAN How it started It started pretty much as usual. When you have a ZX Spectrum at home as a child, you will turn to the technology area anyway, but the…
Article Cyber Exploitation Introduction Over the past couple of years, cyber exploitation has established a reputation of something more than mere nuisance. The repercussions…
Article Cracking the Defender: The Deobfuscated Code Introduction So far we've taken a look at the obfuscation routine and how it deobfuscates the instructions in the loc_4033D1. At the beginning…
Article Collection Objective of the Module: Introduction ArrayList Hashtable BitArray [pkadzone zone="main_top"] Introduction .NET offers a variety of collections such
Article Introduction to SoftICE It's often the case that we need to debug a kernel application, like device driverS, system calls, interrupt routines, or some other kernel…
Article Introduction to application risk rating & assessment Understanding today's threat landscape and looking at the pace with which organizations are adopting secure development practices, there seems to be…