Article Inserting Vulnerabilities in Web Applications In this article we will look at how we can insert vulnerabilities in web applications. Why? There are basically two reasons. [pkadzone…
Article Hacking web authentication - Part 2 In the first part of this article we looked at some of the common authentication types used in Web Applications these days and discussed their pros…
Article A Few Words on Malware - The Sality Way Malware comes in different sizes and shapes. Trojans, worms, viruses, downloaders, and others are becoming more common than common cold medicine.…
Article Under the Hood: Reversing Android Applications For several years now, there has been an explosive increase in the use of mobile applications. Included in this staggering increase of mobile…
Article Burp suite walkthrough Burp Suite is one of the best tools available for web application testing. Its wide variety of features helps us perform various tasks, from…
Article Wi-Fi Security: The Rise and Fall of WPS Wireless local-area networks which are also referred to as WLANs or Wi-Fi are prevalent these days. They are so popular that they can be found…
Article Hacking In The World’s Largest Mall Figure 1. Yes there is a ship in the mall, and a whole bunch of wireless[pkadzone zone="main_top"] [pkadzone zone="main_top"] Much has been made in…
Article Writing Self-Modifying Code Part 3: Antivirus Evasion This is the third article in a series on the topic of self-modifying code.
Article Building the Foundation: Architecture Design - Chapter 3 In this chapter, we define the various types of enterprise architectures, how to integrate them into strategic and tactical business objectives, and…
Article Top 10 Tips for Securely Managing Your Employee’s BYOD Overview: The BYOD (Bring Your Own Device) phenomenon is expanding at an incredible rate. It is something that affects every business, from the…
Article Creating backdoors using SQL injection If you're reading this article than I'm reasonably sure that you have heard of a virus, otherwise refered to as a Trojan horse or worm, which can…
Article Attacking the Phishers: An Autopsy on Compromised Phishing Websites In this article we will cover the results of an informal investigation I performed into phishing websites. Rather than simply reviewing them…
Article RootSmart Android Malware Summary Android's increasing popularity, combined with the possibility to create alternative markets, makes this platform a fertile ground for…
Article A New DNS Exploitation Technique: Ghost Domain Names DNS is a naming system which coverts human readable domain names into computer readable IP addresses. Whenever there is a query for a domain which…
Article Extending Burp Suite Introduction There are multiple intercepting proxy tools available and Burp Suite is one of the best tools available for interception. If you are…
Article Virtualization Security: Hacking VMware with VASTO With the advancement of the technology in the field of computers, requirement for hybrid setups has also escalated. Nowadays every company is using…
Article Attack Surface Reduction – Chapter 4 This is Chapter 4 in Tom Olzak‘s book, “Enterprise Security: A practitioner’s guide.” Chapter 3 is available here: Building the Foundation:…
Article pcAnywhere Leaked Source Code - An Anonymous Review [highlight color=yellow]DISCLAIMER: InfoSec Institute received an anonymous submission concerning the leaked pcAnywhere source code. The article is…
Article Information Gathering Using Maltego The first phase in security assessment is to focus on collecting as much information as possible about a target application. According to OWASP,…
Article CSRF and XSS: A Lethal Combination - Part I Introduction In the second installment of this series, we discussed one of the most prevalent attacks to applications: SQL Injection. The previous…
Article Circumventing NAT with UDP hole punching A lot of networks use NAT (Network Address Translation) these days. This allows the systems on the same network to have a single global IP address.…
Article How to Build a Secure RPC Interface for AJAX Apps With Google Web Toolkit Why use GWT? Most modern web applications utilize an AJAX functionality of some sort to make them highly interactive and to have a user interface…
Article Soft Skills: A Peek into the Mind of a Hiring Manager As a recruiter, I often have the question posed to me in a variety of ways, "Exactly what is it that hiring managers want?" What is it that they are…
Article InfoSec Book Excerpt: Security Metrics - Chapter 17 We like to read the latest and greatest security books, andsometimes the author and/or publisher is generous enough to share an extended with us -…
