Article Web Services Penetration Testing Part 3: Automation with AppScan and Webinspect In the previous article, we discussed the importance of tools in penetration testing, how automation helps in reducing time and effort, and how to…
Article Web Services Penetration Testing Part 4: Manual Testing with SOA Client In the previous article, we discussed the automated tools available for testing web services, how to automate web services penetration testing using…
Article Web Services Penetration Testing Part 5: Manual Testing with soapUI In the previous article, we discussed the importance of manual web services penetration testing, how to perform a manual test using SOA Client, how…
Article Learning how to pentest VPNs with VulnVPN VulnVPN has been created by the author of http://www.rebootuser.com/ and I must say that it is a very good effort. The goal is to gain root access…
Article Android Application Penetration Testing: Setting up, Certificate Installation and GoatDroid Installation To begin with mobile application penetration testing on the Android platform, we have multiple tools available that can be easily downloaded and…
Article Adobe CQ Pentesting Guide – Part 1 This post deals with the step-by-step security testing guidelines for Adobe CQ installation. Adobe CQ is Adobe's new Web Experience Management…
Article Manual Web Application Penetration Testing: Introduction In this series of articles, I am going to demonstrate how you can manually exploit the vulnerability of a web application, compared to using any…
Article Manual Web Application Penetration Testing: Identifying Application Entry Points Introduction In this article, I will show you how to find injection points for your target host and how the webpage is encoded when it comes to the…
Article IOS Application Security Part 27 - Setting up a mobile pentesting environment with IOS 7 Jailbreak In this article we will look at how we can set up a mobile pentesting platform on our device with the new IOS 7 jailbreak. There has been quite a…
Article A Close Look at the NSA Monitor Catalog – Server Hacking Introduction Summing up what happened, Der Spiegel published an internal NSA catalog that contains detailed information on spies' backdoors used by…
Article Web Services Penetration Testing, Part 6: Fuzzing Parameters with Burp In the previous article we discussed in what cases we might face challenges performing manual web services penetration testing and how SoapUI will…
Article IOS Application Security Part 29 - Insecure or Broken Cryptography In this article we will look at an example of Insecure or Broken Cryptography which is a common vulnerability found in most IOS applications. This…
Article Manually Web Application Penetration Testing: Fuzzing Introduction When we test a web application, we do not test a single page, but a lot of pages of a single web application. Each page may have more…
Article Hacking android apps using backup techniques In the previous article, we had an introduction on how to analyze Android application-specific data using Android backup techniques. This article…
Article Hack I-Bank Pro In this article we are going to see some major vulnerabilities typical of a remote banking application. We found an interesting vulnerable machine…
Article Manual Web Application Penetration Testing – Suffix & Prefix in Fuzzing Introduction In this series of articles, last time we talked about fuzzing and various SQL statement special characters which can be used in fuzzing…
Article Car Hacking: You Cannot Have Safety without Security Introduction The theme of the car hacking is increasingly discussed by the media and within the security community. At one time, the exploits of…
Article The Future is Now: Car Hacking Preface: "Modern Cars" As Dr. Charlie Miller & Chris Valasek stated in their research paper Adventures in Automotive Networks and Control Units,…
Article Approaches to Information Gathering in Physical Penetration Testing - Part I: Gathering Information via Photography 1. Introduction The first phase of an attack, and in a security assessment, is to gather as much data on the target as possible. It is actually…
Article Android hacking and security, part 1: Exploiting and securing application components Mobile Application Security is one of the hottest segments in the security world, as security is really a big concern with growing mobile…
Article .NET penetration testing: Test case cheat sheet Having a cheat sheet is a perfect starting initiative to assist you in generating ideas while penetration testing. A test case cheat sheet is often…
Article Android hacking and security, part 3: Exploiting broadcast receivers In the first two articles, we discussed attacks associated with Activity Components, content provider leakage and ways to secure them. In this…
Article Hacking Implantable Medical Devices Preface: Modern Medical Devices and their Software Contemporary healthcare relies heavily on medical devices to help patients lead normal and…
Article Penetration testing apps for android devices According to recent research, the amount of mobile phone users is larger than PC users. At the same time, the number of people who own Android…
