Enabling Auditing in Oracle To enable auditing and direct audit records to the database audit trail, we need to do […]
Software Project Governance – Using SDLC Metrics Software project costs generally form 40% of the total IT budget in most […]
This article presents the key risks with DirectAccess and how to audit them. Let’s begin by first understanding the DirectAccess […]
Overview ASUS Router RT-N10 Plus is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the result_of_get_changed_status.asp […]
Introduction Cuckoo Sandbox is an Open Source Automated Malware Analysis system that has been gaining more and more attention in […]
During a recent engagement, we were asked to test the security level of an application white-listing solution deployed on the […]
Recently, on one of the security mailing lists a query was posted as to what metrics should be produced from a […]
In a previous article, we have described the Shellshock vulnerability and in this article we show how to exploit this […]
From forensics point of view, investigating “which user did what on the application/server that lead to its compromise” is of the most importance. Similar scenario applies to Email investigation. It’s quite simple now to find out the IP Address of the person who is sending out fishy or threatening emails to the victim(s).
Following is the small example of creating a stored procedure. ==================================================================== CREATE PROC sp_login (@loginid nvarchar(25),@password nvarchar(25)) AS DECLARE @SQLString […]
