Application security

Application security

During penetration testing, the main objective of the auditor is to exploit and gain access. For that to happen, it is required to have some information abou

Application security

Web application security is always an important topic to discuss because websites seem to be the first target of malicious hackers. Hackers use websites to s

Application security

During vulnerability assessment or penetration testing, identifying the input vectors of the target application is a primordial step. Sometimes, when dealing

Application security

Web based interfaces are convenient for managing networking equipment, but under no circumstances should these be open to the world and the internet. Many ne

Application security

Did you say a "cookie" ? A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to

Application security

w3af (Web Application audit and attack framework) is a framework for auditing and exploitation of web applications. In this series of articles we will be loo

Application security

Why use GWT? Most modern web applications utilize an AJAX functionality of some sort to make them highly interactive and to have a user interface that works

Application security

Introduction In the second installment of this series, we discussed one of the most prevalent attacks to applications: SQL Injection. The previous discussion

Application security

Introduction There are multiple intercepting proxy tools available and Burp Suite is one of the best tools available for interception. If you are not yet fam

Application security

Burp Suite is one of the best tools available for web application testing. Its wide variety of features helps us perform various tasks, from intercepting a r