Application security

The Importance of Session Regeneration

1. Introduction Users of web applications are recognized by session IDs. That's why it's obvious that session management is an important subject. Session man

Android application security testing guide: Part 1

Android is a Linux kernel mobile platform that has been popular throughout its existence on a huge variety of devices, especially mobile smartphones. Most or

Limiting Automated Access

Automated tools are used to carry out many security attacks to online services. There are different protection mechanisms to narrow down such attacks and one

C# Compiler Development

Introduction This article elaborates the complete life cycle of making a custom interactive C# compiler, much like one of an existing CSC.exe. It is hard to

Hacking android apps using backup techniques

In the previous article, we had an introduction on how to analyze Android application-specific data using Android backup techniques. This article builds on t

IOS Application Security Part 29 - Insecure or Broken Cryptography

In this article we will look at an example of Insecure or Broken Cryptography which is a common vulnerability found in most IOS applications. This vulnerabil

IOS Application Security Part 28 - Patching IOS Application with Hopper

In Part 26 of this series, we looked at how we can use IDA Pro and Hex Fiend to patch an IOS application and modify its implementation. Patching an applicati

IOS Application Security Part 27 - Setting up a mobile pentesting environment with IOS 7 Jailbreak

In this article we will look at how we can set up a mobile pentesting platform on our device with the new IOS 7 jailbreak. There has been quite a lot of disc

Manual Web Application Penetration Testing: Identifying Application Entry Points

Introduction In this article, I will show you how to find injection points for your target host and how the webpage is encoded when it comes to the client si

Manual Web Application Penetration Testing: Introduction

In this series of articles, I am going to demonstrate how you can manually exploit the vulnerability of a web application, compared to using any automation t