Article Hacking android apps using backup techniques In the previous article, we had an introduction on how to analyze Android application-specific data using Android backup techniques. This article…
Article How to Plan a Social Engineering Assessment A social engineering assessment is a very valuable tool in understanding the security exposure of most organizations. Since human beings tend to be…
Article Hack I-Bank Pro In this article we are going to see some major vulnerabilities typical of a remote banking application. We found an interesting vulnerable machine…
Article Android App Permissions and Security: What You Need to Know As of this article, Android has the greatest OS market share on both smartphones and tablets. If you don't own an Android device, chances are that…
Article When APTs Attack Countless organizations have fallen prey to cyber attacks - from high profile retailers to enterprises and government agencies. Some attacks have…
Article Hidden Phishing Threats By now, the risks associated with phishing are well-known and well-documented. What is often misunderstood or overlooked is a hidden threat related…
Article RansomWar(e) There is a notable upsurge in the number of ransomware attacks in the past couple of months, and undoubtedly the emergence of the CryptoLocker…
Article C# Compiler Development Introduction This article elaborates the complete life cycle of making a custom interactive C# compiler, much like one of an existing CSC.exe. It is…
Article Privacy Implications of Automatic License Plate Recognition Technology ALPR – Technical Specifications The majority of ALPR devices are mounted on bridges, road signs, and poles near traffic lights or outside public…
Article Skype Forensics Skype is an application that enables voice and video calls, instant messaging, file transfers, and screen sharing between users. Millions of people…
Article Manual Web Application Penetration Testing – Suffix & Prefix in Fuzzing Introduction In this series of articles, last time we talked about fuzzing and various SQL statement special characters which can be used in fuzzing…
Article The Debate Over Network Neutrality in the EU and the USA 1. Introduction Network neutrality (also known as net neutrality or Internet neutrality) refers to a general principle that Internet service…
Article Malware-based Attacks Against POS Systems Introduction A sequence of data breaches suffered by principal US retailers Target and Neiman Marcus has put Americans on alert. A total of more…
Article Limiting Automated Access Automated tools are used to carry out many security attacks to online services. There are different protection mechanisms to narrow down such…
Article Recycle bin forensics An icon on the Windows desktop represents a directory in which deleted files are temporarily stored. This enables you to retrieve files that you may…
Article Malvertising: A Growing Threat at the Start of 2014 Word Meaning The term "malvertising" is coined through the combination of two words – "malware" (i.e., "malicious software") and…
Article Injecting spyware in an EXE (code injection) Implanting malicious code in the form of spyware to an existing running process is one of the more sophisticated tasks. Before the advent of…
Article NSA Backdoor Part 2, BULLDOZER: And, Learn How to DIY a NSA Hardware Implant This article is the second part of a series on NSA BIOS Backdoor internals. This part focuses on BULLDOZER, a hardware implant acting as malware…
Article Applied Reverse Engineering with IDA Pro This editorial is committed to subverting the essential security restriction mechanisms of a native binary executable by employing the IDA Pro…
Article Android application security testing guide: Part 1 Android is a Linux kernel mobile platform that has been popular throughout its existence on a huge variety of devices, especially mobile…
Article Reverse Engineering with Reflector Abstract We have already got the taste of reverse engineering with Reflector in the previous paper. It was basically a kick-start about this…
Article Ten Important Privacy Threats 1. Introduction As the Internet becomes more and more important to our lives, the challenge is to enjoy the conveniences of online activities while…
Article The Importance of Session Regeneration 1. Introduction Users of web applications are recognized by session IDs. That's why it's obvious that session management is an important subject.…
Article Top 10 Common Misconceptions About Application Whitelisting Application Whitelisting is a technology that has been in use in the security world for quite a long time. For those who may not already be familiar…