Injection in ‘Export to Spreadsheet’ functionality
Comma separated vulnerability also known as Formula Injection/csv injection. Introduction: This document demonstrates the CSV injection a technique for exploiting […]
Blogs
Categories
Latest Blogs
Akshay SudanInside Dalai Lama Website Attacks: Analyzing The “Watering Hole Attacks”
Recently “watering hole attacks” are getting popular among the hacking groups for targeting large groups of victims who routinely visit […]
Dhiraj RankaUSB Forensics
In this article we will learn on how to do the forensic of USB devices, how to correlate the USB […]
Social Engineering & "Influence", by Dr. Cialdini
Over the past few years, we have completed a number of social engineering tests as part of advanced penetration testing […]
K K MookheyFormat Preserving Encryption – In the guise yet retrievable as it is
A recent dive into challenges faced from privacy compliance requirements unearthed an interesting patent. The unearthing of this new patent on the block came from the need of anonymizing data for several reasons including compliance (PCI DSS, German Data Privacy Law [BDSG], UK Data Privacy Act).
Khushbu JithraGeoEdge – IP Address Locator
From forensics point of view, investigating “which user did what on the application/server that lead to its compromise” is of the most importance. Similar scenario applies to Email investigation. It’s quite simple now to find out the IP Address of the person who is sending out fishy or threatening emails to the victim(s).
Nikhil Wagholikar