Application security

Android Application hacking with Insecure Bank Part 1

In this article series, we will learn at the various concepts of Android application security while exploiting a vulnerable app InsecureBankv2. We will be lo

Penetration Testing Methodology for Web Applications

Establishing a penetration testing methodology is becoming increasingly important when considering data security in web applications. The more we come to rel

iOS Application Security Part 36 - Bypassing certificate pinning using SSL Kill switch

In this article, we will look at how we can analyze network traffic for applications that use certificate pinning. One of the best definitions I found of cer

Parameterized SQL query over dynamic SQL query

What is a parameterized SQL query? It is used for better performance, high efficiency and prevention of SQL injection vulnerability. Before going further, l

iOS Application Security Part 35 - Auditing iOS applications with iDB

In this article, we will look at another cool utility named iDB for pentesting iOS applications. Before that, i would like to apologize for coming up late wi

Analyzing the mod security logs

In the previous article, we had already configured the Mod-Security Firewall with OWASP Core Rule Set (CRS). But installing and configuring the Mod Security

Securing Shared Preferences with Third Party Libraries

In one of the previous articles, we have seen how developers implement Shared Preferences in Android applications. We have also seen how one can compromise t

Configuring the ModSecurity Firewall with OWASP Rules

In today's world, over 70% of all attacks carried out over are done so at the web application level, so we need to implement security at multiple levels, as

Root detection and evasion

In this article, we will look at the techniques being used by Android developers to detect if a device on which the app is running is rooted or not. There ar

OWASP Practice: Learn and Play from Scratch

OWASP Practice is a virtual environment to help people who want to begin their journey into web application security. Lots of material including videos are a