Application security

OWASP ProActive Controls: Part 2 of 2

In the first part of this series, we covered the Top 5 OWASP ProActive Controls and learned how they can prove to be of great use in securing applications. I

Android Application hacking with Insecure Bank Part 2

In the previous article, we looked at setting up a mobile pentesting platform for Android applications. By now, you must have set up an emulator using genymo

OWASP ProActive Controls: Part 1

What is OWASP ProActive Controls? In one line, this project can be explained as "Secure Coding Practices by Developers for Developers".[pkadzone zone="main_t

OWASP ZAP Reconnaissance – Without Permission!

How To Assess a Third Party Web Site or Cloud Service with the OWASP ZAP Attack Proxy When You Don't Have Permission to Pentest As a security professional, y

iOS Application Security Part 38 - Parse Security in iOS

This is a guest lecture by Egor Tolstoy. Egor is a full-time iOS developer working at Rambler&Co and living with his lovely wife in Moscow, Russia. In hi

Session hijacking cheat sheet

'Session Hijacking' is an old and routine topic in the field of application security. To make it more interesting, in this article, we are going to focus on

Website hacking, Part VI: Input validation and filtering in PHP

In this part of the series, we are going to examine the different ways to escape HTML characters in PHP in order to add security to your web project. We will

iOS Application Security Part 37 - Adapting to iOS 8

In this article we will look at all the things you need to do to set up a pentesting platform on iOS 8 and be comfortable with using all the tools. Jailbreak

Avoiding mod security false positives with white-listing

We have already discussed in my previous articles how to configure Mod Security Firewall with OWASP rules and also analysed the different types of logs which

Examining Android App Specific Data on Non-Rooted Devices

In all of our previous articles so far in this series, we discussed all the examples only on rooted devices and emulators. Generally, there are people who ar