Prateek Gianchandani

Prateek Gianchandani, a recent IIT graduate, has interests in the field of Penetration Testing, Web Application Security and Intrusion Detection. He is currently a researcher for InfoSec Institute. In the past he has worked for security-based startups.

You can contact him at prateek.searchingeye@gmail.com and on twitter @prateekg147 or you can visit his personal website at highaltitudehacks.com

Articles from Prateek Gianchandani

IOS Application Security Part 31 - The problem with using third party libraries for securing your apps

March 19, 2014

In this article, we will talk about why we shouldn't completely rely on using third party libraries for securing our apps. Usually, some of the things we try

Learn More

IOS Application Security Part 30 - Attacking URL schemes

March 10, 2014

In this article, we will look at how we can use a feature in iOS named url schemes to exploit an application. URL schemes are used by applications to communi

Learn More

Getting started with Damn Vulnerable iOS Application

February 25, 2014

In this article, I will write about how to get started with Damn Vulnerable iOS Application. Damn Vulnerable iOS App (DVIA) is an iOS application that I wrot

Learn More

IOS Application Security Part 29 - Insecure or Broken Cryptography

January 29, 2014

In this article we will look at an example of Insecure or Broken Cryptography which is a common vulnerability found in most IOS applications. This vulnerabil

Learn More

IOS Application Security Part 28 - Patching IOS Application with Hopper

January 27, 2014

In Part 26 of this series, we looked at how we can use IDA Pro and Hex Fiend to patch an IOS application and modify its implementation. Patching an applicati

Learn More

IOS Application Security Part 27 - Setting up a mobile pentesting environment with IOS 7 Jailbreak

January 23, 2014

In this article we will look at how we can set up a mobile pentesting platform on our device with the new IOS 7 jailbreak. There has been quite a lot of disc

Learn More

Security Predictions for 2014

December 26, 2013

As the year 2013 draws to a close, we decided to make some predictions for the most popular Security Trends in 2014. Here is what we think are the major poin

Learn More

IOS Application Security Part 26 - Patching IOS Applications using IDA Pro and Hex Fiend

December 16, 2013

In the previous applications we have looked at how we can hijack method implementations during runtime using Cycript, and even change the logic of the code r

Learn More

IOS Application Security Part 25 - Secure Coding Practices for IOS Development

December 10, 2013

In this article, we will look at some of the best practices an IOS developer should follow in order to make sure that their application is not easily exploit

Learn More

IOS Application Security Part 24 - Jailbreak Detection and Evasion

November 27, 2013

In this article, we will look at the checks a developer can incorporate in his application to check whether the device on which the application is running is

Learn More

IOS Application Security Part 23 - Defending against runtime analysis and manipulation

November 18, 2013

In the previous articles, we have looked at how we can use debuggers and tools like Cycript to do runtime analysis and manipulation of IOS Applications. We h

Learn More

IOS Application Security Part 22 - Runtime Analysis and Manipulation using GDB

November 11, 2013

In this article, we will look at how we can use GDB to perform runtime analysis of IOS applications. In the previous articles, we have looked at how we can u

Learn More