Application security

A prototype model for web application fingerprinting: w3 scrape

Introduction: Web application fingerprinting is one of the most important aspects of the information gathering phase of ethical hacking. This allows us to n

PHP Session ID’s – The Risks

In today's article I want to address a very important topic. Namely, I want to talk about PHP session security. I know and understand that this is a very bro

How to Safely and Wisely use jQuery: Several Key Issues

At the beginning of this article, I want to thank all those without whom this article would not exist. For starters, I'd like to thank Izabela Galazewska. Yo

Websecurify Walkthrough, Web Application Penetration Testing Tool

[caption id="" align="alignright" width="200"] Websecurify Logo[/caption] Information security is a very important thing for the modern Internet world. So, p

Owasp ZAP

[highlight color="blue"]Interested in formal OWASP Top 10 Training? Check out our  OWASP Top 10 Training course OWASP Top 10 Training. [/highlight] Introduct

Web Vulnerabilities Explained

Introduction We all know that vulnerabilities in web pages are quite common these days. They range from SQL injections, XSS vulnerabilities, CSRF, etc. In t

Wordfence: Security Plugin for WordPress

Wordfence is a free security plugin for WordPress. Security "plugins" for Wordpress are often highly criticized as many may give a false sense of security or

Wfuzz and WebSlayer

1. Introduction WfFuzz is a web application bruteforcer that can be considered an alternative to Burp Intruder as they both have some common features. With b

Inside Android Applications

By the end of 2012, the number of Smartphone shipments around the world will explode to nearly 668 million units, and the Android operating system will have

Free Web Application Scanners, Part 2

In the first part of this article, we have seen the need for free web application scanners and also we have looked into a few tools which are available in th