Article IOS Application Security Part 23 - Defending against runtime analysis and manipulation In the previous articles, we have looked at how we can use debuggers and tools like Cycript to do runtime analysis and manipulation of IOS…
Article SIM card forensics: An introduction The SIM (subscriber identity module) is a fundamental component of cellular phones. It also known as an integrated circuit card (ICC), which is a…
Article Exploiting Linux Kernel Heap Corruptions (SLUB Allocator) 1. Introduction In recent years, several researchers have studied Linux kernel security. The most common kernel privilege vulnerabilities can be…
Article .NET reversing with Reflexil Technically speaking a .NET built software or component (DLL) resembles an executable assembly. That's because it's compiled in MSIL, and you can…
Article Analyzing malicious PDFs PDF files have become very common in everyday work. It's hard to imagine business proposals without PDFs. The PDF format is used in almost all…
Article Windows Systems and Artifacts in Digital Forensics: Part III: Prefetch Files 1. Introduction In this article, I'm going to focus on prefetch files, specifically, their characteristics, structure, points of interest in terms…
Article Web Services Penetration Testing Part 3: Automation with AppScan and Webinspect In the previous article, we discussed the importance of tools in penetration testing, how automation helps in reducing time and effort, and how to…
Article Windows 7 Exploitation Microsoft Windows 7 is much more secure than Microsoft Windows XP. The Windows XP operating system has lots of OS vulnerabilities and the malware…
Article Tracking user activities using web bugs We live in a world where we're connected to each other by a mouse click and a few keystrokes. It's a revolution that changed the way we live our…
Article Web Services Penetration Testing Part 4: Manual Testing with SOA Client In the previous article, we discussed the automated tools available for testing web services, how to automate web services penetration testing using…
Article Web Services Penetration Testing Part 5: Manual Testing with soapUI In the previous article, we discussed the importance of manual web services penetration testing, how to perform a manual test using SOA Client, how…
Article IOS Application Security Part 24 - Jailbreak Detection and Evasion In this article, we will look at the checks a developer can incorporate in his application to check whether the device on which the application is…
Article Attacking MS SQL server to gain system access All systems and database administrators will agree that password complexity does not go very far when it comes to SQL servers. Whether this is done…
Article Anti- Reverse Engineering (Assembly Obfuscation) This article illustrates these contents in detail: Abstract Obfuscation The .NET Application Anti-Reversing Implementation Obfuscated Code Analysis MS
Article LAYER 7 DDOS ATTACKS: DETECTION & MITIGATION Introduction: Initial Detection/Mitigation Challenges[pkadzone zone="main_top"] Before we go to the main topic of this article, let us take heed of…
Article Learning how to pentest VPNs with VulnVPN VulnVPN has been created by the author of http://www.rebootuser.com/ and I must say that it is a very good effort. The goal is to gain root access…
Article Applied cracking & byte patching with IDA Pro In the previous IDA Pro article, we took a look at the basics of reverse engineering source code and binary files. This rare dissertation committed…
Article Improving SCADA System Security Introduction Supervisory control and data acquisition (SCADA) networks contain computers and software that perform critical tasks and provide…
Article Invalid SSL certification exploitation Internet usage is growing dramatically, but the vast majority of Internet users don't have any security backgrounds. Nor do a large majority of…
Article Shadow Network Part I I. Introduction[pkadzone zone="main_top"] Similarly to the real real-life situation where a GhostNet report is followed by the one on the…
Article IOS Application Security Part 25 - Secure Coding Practices for IOS Development In this article, we will look at some of the best practices an IOS developer should follow in order to make sure that their application is not…
Article Vulnerability Scanning with Metasploit Part I Metasploit Framework, the Metasploit Project's best-known creation, is a software platform for developing, testing, and executing exploits. It can…
Article Android Application Penetration Testing: Setting up, Certificate Installation and GoatDroid Installation To begin with mobile application penetration testing on the Android platform, we have multiple tools available that can be easily downloaded and…
Article Firewall Unleashed Introduction Firewalls are used to control the inbound and outbound traffic on a protected network. They have an ability to block and allow the…
