Application security

IOS Application Security Part 26 - Patching IOS Applications using IDA Pro and Hex Fiend

In the previous applications we have looked at how we can hijack method implementations during runtime using Cycript, and even change the logic of the code r

IOS Application Security Part 25 - Secure Coding Practices for IOS Development

In this article, we will look at some of the best practices an IOS developer should follow in order to make sure that their application is not easily exploit

Anti- Reverse Engineering (Assembly Obfuscation)

This article illustrates these contents in detail: Abstract Obfuscation The .NET Application Anti-Reversing Implementation Obfuscated Code Analysis MS

Attacking MS SQL server to gain system access

All systems and database administrators will agree that password complexity does not go very far when it comes to SQL servers. Whether this is done to keep t

IOS Application Security Part 24 - Jailbreak Detection and Evasion

In this article, we will look at the checks a developer can incorporate in his application to check whether the device on which the application is running is

Web Services Penetration Testing Part 5: Manual Testing with soapUI

In the previous article, we discussed the importance of manual web services penetration testing, how to perform a manual test using SOA Client, how SOA clie

IOS Application Security Part 23 - Defending against runtime analysis and manipulation

In the previous articles, we have looked at how we can use debuggers and tools like Cycript to do runtime analysis and manipulation of IOS Applications. We h

IOS Application Security Part 22 - Runtime Analysis and Manipulation using GDB

In this article, we will look at how we can use GDB to perform runtime analysis of IOS applications. In the previous articles, we have looked at how we can u

Fuzzing for SQL injection with Burp Suite intruder

This article introduces Burp Suite Intruder and shows how it can be used for SQL injection fuzzing. Burp suite intruder It is a part of Burp Suite, which i

IOS Application Security Part 21 - ARM and GDB Basics

All the IOS devices released uptil now are based on the ARM architecture. All the Objective-C code that we write while developing IOS applications is first c