Article Dictionary attack using Burp Suite Nowadays internet usage is growing dramatically because of this, a vast majority of companies and individuals that provide services have a website…
Article One-time passwords with token 1. Introduction One-time passwords are used to achieve higher security than traditional static passwords. They're often generated by tokens. This…
Article Windows Communication Foundation Part-1 Abstract [pkadzone zone="main_top"] Over the year, we have learned innumerable ways of consuming services across the network such as…
Article Incident Response and Forensic Martial Arts with Helix Helix3 is a live CD for doing computer forensic investigation and incident response. It is built on top of Ubuntu and comes in both free and…
Article CBC byte flipping attack—101 approach As usual, there are some explanations about this attack out there (see references at the end), but some knowledge is required to understand it…
Article IOS Application Security Part 13 - Booting a custom Ramdisk using Sogeti Data Protection tools In the previous article, we looked at how we can use Keychain-Dumper and Snoop-it to analyze and dump the contents of the Keychain from an IOS…
Article Databases—vulnerabilities, costs of data breaches and countermeasures This post introduces principal database vulnerabilities, providing an overview of the possible effects for their exploitation. For each database…
Article IOS Application Security Part 14 - Gathering information using Sogeti Data Protection tools In the previous article, we looked at how we can boot a device using a custom ramdisk using Sogeti Data protection tools. In this article, we will…
Article U.S. Cyber Policy – Course and Legal Aspects Image courtesy of Gualberto107 / FreeDigitalPhotos.net [pkadzone zone="main_top"] Introduction Cyber policy is an important issue that many would…
Article Android Master Key Vulnerability—PoC The recently discovered master key vulnerability in Android has given a jolt to the Android team and other parties involved. This vulnerability…
Article Doxing: The Dark Side of Reconnaissance Introduction: [pkadzone zone="main_top"] Doxing is a coin with two sides. Doxing can be used for security, research and collecting proof for…
Article Weapon of anonymous Before starting, I would like to give a small preview about the topic. This article focuses on the world famous hacker group, known as "Anonymous."…
Article Penetration Testing for iPhone Applications — Part 6 In Part 1 of the article we have discussed about the iPhone application traffic analysis. Part 2, Part 3, and Part 4 covered in-depth analysis of…
Article Keygenning: Part I Introduction : A key generator or a Keygen is a computer program that will generate a valid « Product Serial or Key » in order to completely…
Article PsyOps and Socialbots Introduction Social media are the principal aggregation "places" in cyberspace; billions of connected people are using it for a wide variety of…
Article IOS Application Security Part 15 - Static Analysis of IOS Applications using iNalyzer In the previous article, we looked at how we can use Sogeti Data protection tools to boot an iDevice using a custom ramdisk with the help of a…
Article Python for Web application security professionals Introduction: Python is an open source, interactive, object oriented programming language. It's very easy to learn and an extremely powerful high…
Article Penetration testing of an FTP service In this article we are going to learn how to configure ProFTPD service in a CentOS machine. After that we will conduct penetration testing to…
Article Using Hashes in Computer Security 1. Introduction Hashes are often used in computer security. This article presents how data integrity, authenticated data integrity and…
Article The Hunt for Memory Malware Memory forensic is a skill to find out all the artifacts in the memory that is present in the running computer. It is an interesting method to find…
Article IOS Application Security Part 16 - Runtime Analysis of IOS Applications using iNalyzer In the previous article, we looked at how we can perform static analysis of IOS Applications using iNalyzer. In this article, we will look at how we…
Article XKeyscore: NSA’s Surveillance Program Introduction The former contractor for NSA, Edward Snowden, became famous for revealing PRISM, a confidential mass surveillance program run by the…
Article WSUS (Windows Server Update Services) Introduction Windows Server Update Services (WSUS) can be used to manage the deployment of the latest Microsoft Windows operating system updates.…
Article Phishing with Data URI Phishing Phishing is a method of e-mail fraud that is used to gather personal and financial information from the recipients. According to Wikipedia,…
