Article Bypassing In Safari SOP Bypassing in Safari To help you understand better, http://httpsecure.org and file://httpsecure are both treated as a different origin. The…
Article iOS Application Security Part 40 - Testing apps on your Mac In this article, we will discuss the extent to which you can test applications on your Mac rather than the device. This could be useful for many…
Article Solutions to net-force cryptography CTF challenges Cryptanalysis refers to the study of ciphers with the objective of breaking the code and obtaining plaintext (sensible) information. While older…
Article PoS Malware is More Effective and Dangerous Introduction to POS malware In September 2014, experts at Trustwave firm published an interesting report on the evolution of the point-of-sale (PoS)…
Article Anonymizing Activities in the Digital World using TOR Introduction When it comes to anonymizing activities in digital world, it can be referred to in various ways. Researchers might take it to identify…
Article Cracking NQ vault step by step The mobile encryption app NQ Vault has been in the news for bad reasons. Mobile encryption apps are commonly used to prevent access to sensitive…
Article Hardening IIS security Security is an essential part of a web application and should be taken into consideration from the first stage of the development process. A website…
Article iOS Application Security Part 41 - Debugging applications using LLDB In this article we will learn about the LLDB debugger used by Apple's Xcode for debugging applications, understand why it is better for security…
Article Spoof using right to left override (RTLO) technique In this article we will learn about the one of the most overlooked spoofing mechanisms, known as right to left override (RTLO). What is RTLO? RIGHT…
Article Why Do We Need Software Escrow? The practice of software escrow consists of the deposit of the source code of an application with a third party, indicated as the escrow agent.…
Article Interview: Morey Haber, VP of Technology at BeyondTrust Today we officially kick off our long-awaited IT Thought Leader Interview series. First up in the hot seat is Morey Haber, Platform Product Manager…
Article Clickjacking, Cursorjacking & Filejacking Same origin bypasses using clickjacking Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of…
Article Defense in depth is dead; Long live defense in depth! Defense in depth is dead. The way you're thinking about data center security is outdated. Security started changing long before Sony, Target and the…
Article Tunneling, Crypto and VPNs 1. Introduction The idea of Virtual Private Network (VPN) is to simulate a private network over a public network. A VPN tunnel can be used to…
Article Taking Control of the Process In the previous article, we learned about the basics of the Stack Based Buffer Overflow, such as analyzing the stack, creating breakpoints and…
Article HTML5 security: Local storage In a previous article of mine, I discussed Cross Domain Messaging in HTML5. This article walks you through another feature, called local storage,…
Article Defeating Conundrums: Solutions to Net-Force Internet CTF Challenges About Net-Force Internet Challenges These challenges require that you provide the correct passwords that are revealed to you after solving them. The…
Article Security features and risks in Google Chrome Today a web browser has become a very important piece of software in our daily life. It is an application that finds and displays the web pages. Be…
Article Static malware analysis Starting here, I would like to share the results of my recent research into malware analysis. We will begin with some basics and proceed to advanced…
Article The importance of cyber hygiene in cyberspace The drastic increase in the frequency of cyber attacks on financial systems and the healthcare industry (both large and small scale industries) have…
Article Overwriting the Stack In previous articles, we got to know the basics of the Stack Based Buffer Overflow and changing the address in the run time by modifying the…
Article Http verb tempering: bypassing web authentication and authorization What is an HTTP VERB? Hypertext transfer protocol (HTTP) gives you list of methods that can be used to perform actions on the web server. Many of…
Article Debugging in the Cloud In the world we live in, there are different kinds of professions where debugging has been a vital piece of knowledge we must have in order to do…
Article Why Artificial Neural Networks (ANN) Technology Offers a Promising Future in IDS/IPS Intrusion systems have been the subject of considerable research for decades to improve the inconsistencies and inadequacies of existing methods,…
