Application security

Filter evasion: Part 2

For part 1 of this series, please click here. Methods for bypassing a filter There is a number of different attack strings that can be used to bypass a

Filter Evasion: Part 1

1. Introduction First we must talk about vulnerabilities. We know that vulnerabilities that are present in any kind of software can be exploited by acceptin

Penetration Testing with the Joomla Security Scanner

Joomla Security Scanner Joomla Security Scanner Detects file inclusion, sql injection, command execution vulnerabilities of a target Joomla Websites. It wil

IronWASP Part 1

IronWASP stands for Iron Web application Advanced Security testing Platform, and was developed by Mr.Lavakumar Kuppan. It is an open source system and is mai

Drupal Security Notes

Drupal is one of the most popular free and open source web application frameworks. Drupal is almost infinitely extensible through not only various theme poss

Free Web Application Scanners, Part 1

With the rapid increase in technology usage, every company is desperate to provide their services over the Internet. They believe that by offering their serv

Improving Mobile Security with Santoku

Mobile security has been gaining popularity in recent times. Many mobile-based attacks are being discovered as the mobile industry grows more complex and new

WordPress Security

1. Introduction There are numerous tools available when checking the security of the WordPress Content Management System (CMS). In the rest of the article we

Introduction to HTTP Response Headers for Security

Hyper Text Transfer Protocol (HTTP) is a stateless protocol. The implication of this is, at the protocol level there is no record of what happened in the pas

w3af walkthrough and tutorial part 4 - w3af tools, profiles and scripting

This is part 4 in a series. Part 1 is available here:w3af Tutorial Part 1 Part 2 is available here:Discovery and Audit plugins Part 3 is available here: Rema