Windows Kernel Exploitation
This write-up summarizes a workshop/humla conducted by Ashfaq Ansari on the basics of various kinds of attacks available for exploiting […]
Category: Research
Risks in Core Banking Migration
This article highlights some of the key risks in executing a successful core banking migration program. Many of these risk elements also relate to any large IT project, but are more aligned towards a core banking migration.
Vendor Risk Assessment
Introduction Companies today have third party contracts with various vendors. Most of the process are outsourced to various companies. This […]
The Internet of Things and Smart Cities – Security and Privacy Aspects
The Internet of Things and Smart Cities – Security and Privacy Aspects In a world where the technology is constantly […]
Shellshock Exploitation: Using BeEF Framework
In a previous article, we have described the Shellshock vulnerability and in this article we show how to exploit this […]
POODLE Advisory
What is POODLE? POODLE stands for Padding Oracle On Downgraded Legacy Encryption Vulnerability CVE: CVE-2014-3566 What is the attack? The […]
Bourne Again Shell (Bash) Remote Code Execution Vulnerability
Introduction A remotely exploitable vulnerability was discovered by Stephane Chazelas of Akamai in the GNU Bash command shell. The vulnerability […]
ATM Application Whitelisting Security Assessment
During a recent engagement, we were asked to test the security level of an application white-listing solution deployed on the […]
Metrics For Your Information Security Solutions
Recently, on one of the security mailing lists a query was posted as to what metrics should be produced from a […]
Authorization Vulnerability in Yahoo! Pipes
Recently, I found an interesting issue qualifying on Yahoo! Pipes. But before going into the details of this specific issue, […]