From SQL Injection To 0wnage Using SQLMap
SQL injection – one of the most critical vulnerabilities till now – is still included in the OWASP Top 10 […]
Category: Secure Coding
Bourne Again Shell (Bash) Remote Code Execution Vulnerability
Introduction A remotely exploitable vulnerability was discovered by Stephane Chazelas of Akamai in the GNU Bash command shell. The vulnerability […]
Owning The Enterprise With HTTP PUT
During a routine penetration testing engagement, we found an IIS webserver with HTTP methods (verbs) like PUT and DELETE enabled […]
SSL/TLS attacks: Part 2 – CRIME Attack
Compression Ratio Info-leak Made Easy (CRIME) attack: In the previous section we saw how the Chosen Plain-text attack was used […]
SSL/TLS attacks: Part 1 – BEAST Attack
Recently there has been a lot of news about a new SSL/TLS based attacks which was demonstrated in this year’s […]
LinkedIn Authorization Bypass Vulnerability To Send Messages
Overview: In this following test, I wanted to see whether I was able to view personal details of some other […]
Critical Joomla File Upload Vulnerability
I was reading the Joomla Update, http://developer.joomla.org/security/news/563-20130801-core-unauthorised-uploads A bug in Joomla Core and having the criticality is always awesome to […]
File Fuzzing Using Minifuzz
What is Fuzzing? Fuzz testing is a testing technique that provides malicious input to the application. Fuzz testing is crashes, […]
Identifying Security Flaws With Code Analysis Tool (CAT.NET)
Code Analysis Tool (CAT.NET) is a binary source code analysis tool that helps in identifying common security flaws in managed […]
Risk Analysis of Android Based Appliance
Overview I had to do the risk analysis of the Android 2.2 – Froyo based appliance and check for any […]