Application security

Web Services Penetration Testing, Part 2: An Automated Approach With SoapUI Pro

In the previous article, we discussed how the sudden increase in the use of web services makes it an important attack vector. Also, we covered different com

IOS Application Security Part 20 - Local Data Storage (NSUserDefaults, CoreData, Sqlite, Plist files)

In this article, we will look at the different ways in which applicatons can store data locally on the device and look at how secure these methods are. We w

Will the iPhone 5S Be The Catalyst to Fingerprint Scanners on All Our Devices?

A phone used to be a simple device you would make phone calls with. It could have your contact list, or even a log of recent contacts, but that was about it.

IOS Application Security Part 19 - Programmatical Usage of Introspy

In this article, we will look at how we can Introspy as a python module in our scripts. The first thing to do is to import the introspy module and Namespace

Web Services Penetration Testing Part 1

Introduction: Web application security is quite popular among pen testers, so organizations, developers and pen testers treat web application as primary att

Ajax Security Issues

This article is about exploring major security issues we come across during assessment of Ajax based applications. AJAX: Ajax or 'Asynchronous JavaScript an

Fixing CSRF vulnerability in PHP applications

Cross Site Request Forgery or CSRF is one of top 10 OWASP vulnerabilities. It exploits the website's trust on the browser. This vulnerability harms users' an

IOS Application Security Part 18 - Detecting custom signatures with Introspy

In the previous article, we looked at how we can use Introspy for Black-box assessment of IOS applications. In this article, we will look at how we can use I

Web services penetration testing part 1

Web application security is quite popular among the pen testers. So organizations, developers and pen testers treat web applications as a primary attack vect

IOS Application Security Part 17 - Black-box assessment of IOS Applications using Introspy

In this article, we will look at how we can use Introspy for Black-box assessment of IOS applications. Introspy is developed by ISEC partners and its github