Article Estonia: To Black Out an Entire Country – part one Introduction The cyber-attacks that befell Estonia in 2007 is a case much discussed and underrated at the same time. Many tend to ignore the…
Article Windows Systems and Artifacts in Digital Forensics, Part II Introduction For Part I of these series, please visit this page:…
Article Understanding Windows Internal Call Structure Microsoft Windows is a modular architecture. Windows Components are split into smaller pieces known as DLL (Dynamic-Link Library) and sys files…
Article Hacktivism: Means and motivations … what else? The term "hacktivism," derived by combining hack and activism, refers to the use of computers and any other IT system and network to debate and…
Article Managed C++/CLI Programming: Part-1 Abstract This article illustrates the theory and principle behind C++/CLI programming in a .NET CLR context. We shall investigate the remarkable…
Article The BodgeIt store part one The Bodgelt store The BodgeIt Store created by Psiinon is a vulnerable web application. It consists of a wide variety of vulnerabilities and is NOT…
Article Windows Phone Digital Forensics II Abstract Abbreviated as WP, Windows Phone is a new Smartphone operating system developed by Microsoft in order to succeed the old Windows Mobile.…
Article The breach attack Back in 2012, when Juliano Rizzo and Thai Duong announced the CRIME attack, a TLS / SSL Compression attack against HTTPS, the ability to recover…
Article The BodgeIt store part two Before we go any further, I would like to focus on how a developer thinks and likes to manage a web application development process. During the…
Article Estonia: To Blackout an Entire Country – Part 2 IV. Attack Targets & Impact The main targets appear to be information distribution channels owned either by the Estonian government, or the private…
Article Managed C++/CLI Programming: Part 2 Abstract This outlines the rest of the C++/CLI object oriented programming implementations such as inheritance, interface and polymorphism. We'll…
Article Portable Malware Lab for Beginners – Part 2 In the previous article, "Portable Malware Lab for Beginners," I spoke about nested virtual machines, i.e., deploying a virtual machine with QEMU…
Article File system manipulation This article shows how to perform tasks involving reading and writing files from various partitions by using the C#.net programming API. In…
Article Identity Management and Access Control in a Single Sign-on Environment In this article you will learn the following information: How businesses manage electronic identities and provide access control to their employees,…
Article Hardware attacks, backdoors and electronic component qualification The capillary diffusion of technology in our society has an important consequence. Hardware has to be properly analyzed during acquisition and…
Article BEAST vs. CRIME attack Some months ago there was a top story popping up in almost all the security news feeds about CRIME attacks being able to break SSL. In this article,…
Article CSRF proof of concept with OWASP ZAP This article introduces CSRF (cross-site request forgery) vulnerability and demonstrates how to prepare a CSRF proof of concept with OWASP ZAP.…
Article Unsafe Programming Abstract In .NET, unsafe code really means potentially unsafe code, which is code or memory that exists outside the normal boundary. This article…
Article Port scanning using Scapy TCP connect scan TCP connect is a three-way handshake between the client and the server. If the three-way handshake takes place, then communication…
Article Will the iPhone 5S Be The Catalyst to Fingerprint Scanners on All Our Devices? A phone used to be a simple device you would make phone calls with. It could have your contact list, or even a log of recent contacts, but that was…
Article IOS Application Security Part 20 - Local Data Storage (NSUserDefaults, CoreData, Sqlite, Plist files) In this article, we will look at the different ways in which applicatons can store data locally on the device and look at how secure these methods…
Article Brainpan Brainpan is a vulnerable virtual machine created by superkojiman. It's a vulnerable virtual machine with vulnerable services and it's not intended…
Article Phishing Counter-Measures Unleashed In this article, I have done my best to gather and explain all the possible ways by which phishing can be avoided. Here I am going to explain…
Article Demystifying Java Internals (An introduction) Volume 1 Java is a technology that makes it easy to develop distributed applications, which are programs that can be executed by multiple computers…
