Article OSINT (Open-Source Intelligence) With an estimated 80% of required information available for use in an open source for specific information vital for a deep analysis in newspapers,…
Article Penetration testing of web services with CGI support This article shows hands-on penetration testing using an Apache server with CGI access; it identifies some vulnerabilities and performs exploits…
Article Online dictionary attack with Hydra When an attacker wants to learn credentials for an online system, he can use brute force or a dictionary attack. This article introduces these two…
Article Email encryption: Mailvelope Between constant password breaches and the NSA looking in on everything you do, you've probably got privacy on the mind lately. If you're looking…
Article System address map initialization in x86/x64 architecture part 1: PCI-based systems This article serves as a clarification about the PCI expansion ROM address mapping, which was not sufficiently covered in my "Malicious PCI…
Article Protect Data by Preventing Insecure Cryptographic Storage Daily, we read news about hacking and data leaks. Hackers are really active these days. So, it is our responsibility to prevent them in getting…
Article IOS Application Security Part 17 - Black-box assessment of IOS Applications using Introspy In this article, we will look at how we can use Introspy for Black-box assessment of IOS applications. Introspy is developed by ISEC partners and…
Article Peeping the Social media 1. Synopsis Nowadays it is hard to find a person who doesn't sign in to any social medium at least once a week by using gadgets like a smartphone,…
Article Hacking Satellites … Look Up to the Sky Introduction Satellites have assumed a crucial role in our contemporary society; they are used in both private and public sectors for numerous…
Article Web services penetration testing part 1 Web application security is quite popular among the pen testers. So organizations, developers and pen testers treat web applications as a primary…
Article Backup Media Encryption The problem Information Security is like a chain: it is only as strong as its weakest link. You can protect your network with expensive firewalls,…
Article Conditional Complexity of Risk Models Introduction "Conditional complexity" (also called cyclomatic complexity) is a term used to measure the complexity of software. The term refers to…
Article Patching .NET Binary Code with CFF Explorer Abstract The purpose of this article is to show how to bypass various security checks by modifying binary code directly, rather than source code,…
Article Social engineering: A hacking story In this article I am going to discuss social engineering attacks, starting with the questions: "What is social engineering?" and "What are the types…
Article IOS Application Security Part 18 - Detecting custom signatures with Introspy In the previous article, we looked at how we can use Introspy for Black-box assessment of IOS applications. In this article, we will look at how we…
Article Windows systems and artifacts in digital forensics, part I: registry Learning about artifacts in Windows is crucial for digital forensics examiners, as Windows accounts for most of the traffic in the world (91.8 of…
Article Linux Kernel Development Process Introduction When I was listening to the question and answer session at LinuxCon, there was some interesting discussion going on: some of the latest…
Article Fixing CSRF vulnerability in PHP applications Cross Site Request Forgery or CSRF is one of top 10 OWASP vulnerabilities. It exploits the website's trust on the browser. This vulnerability harms…
Article Enterprise Security Management An enterprise invests considerable amount of time in its day to day scanning and managing patched for the infrastructure. But, an enterprise…
Article Windows Phone Digital Forensics I Abstract Abbreviated as WP, Windows Phone is a new Smartphone operating system developed by Microsoft in order to succeed the old Windows Mobile,…
Article Ajax Security Issues This article is about exploring major security issues we come across during assessment of Ajax based applications. AJAX: Ajax or 'Asynchronous…
Article Web Services Penetration Testing Part 1 Introduction: Web application security is quite popular among pen testers, so organizations, developers and pen testers treat web application as…
Article IOS Application Security Part 19 - Programmatical Usage of Introspy In this article, we will look at how we can Introspy as a python module in our scripts. The first thing to do is to import the introspy module and…
Article Pin: Dynamic Binary Instrumentation Framework Introduction Pin is a DBI framework for IA-32 and x86-64 architectures, which can be used for dynamic analysis of the binary program at run time.…
