Application security

15 + Modules for Making Your Drupal Website Secure

Drupal is the popular open-source content management system written in PHP. Although it only powers around 2.5% websites on the web, but it is still importan

Introducing IDA scripting

IDC scripting language is used by IDA disassemblers to programmatically manipulate data assembly and parameter in the loaded IDB database file. Script can ma

The Basics with Node.js Examples

Introduction Public-facing APIs have tremendously increased in the last couple of years. Businesses have seen that sharing their business data with the publi

Format String Bug Exploration

ABSTRACT The Format String vulnerability significantly introduced in year 2000 when remote hackers gain root access on host running FTP daemon which had anon

Fingerprinting: Identifying applications

When performing a Web Application Security Assessment, an important step is Fingerprinting which allows for further exploitation by an attacker. So as a secu

Defending Against Web Attacks: X-XSS Protection

In the previous article, we have seen how we can defend against click jacking attacks using the X-Frame-Options header. In this article, we will discuss anot

Debugging in the Cloud

In the world we live in, there are different kinds of professions where debugging has been a vital piece of knowledge we must have in order to do our jobs su

Http verb tempering: bypassing web authentication and authorization

What is an HTTP VERB? Hypertext transfer protocol (HTTP) gives you list of methods that can be used to perform actions on the web server. Many of these meth

Taking Control of the Process

In the previous article, we learned about the basics of the Stack Based Buffer Overflow, such as analyzing the stack, creating breakpoints and analyzing the

Why Do We Need Software Escrow?

The practice of software escrow consists of the deposit of the source code of an application with a third party, indicated as the escrow agent. Software escr