Browsing Tag

vulnerabilities


iPhoneapps 5

Penetration Testing for iPhone Applications- Part 2

In the first part of this article, we discussed the iPhone application traffic analysis. In this part, we will take a look at the privacy

April 18, 2012 Hacking
img-0222 1

Minimizing Vulnerabilities in Applications – Part 1

When I communicate with programmers who are writing a code for custom applications, I often wonder how carelessly they relate to the issue of safety

February 22, 2012 Application Security
olzak4 0

Attack Surface Reduction – Chapter 4

This is Chapter 4 in Tom Olzak‘s book, “Enterprise Security: A practitioner’s guide.” Chapter 3 is available here: Building the Foundation: Architecture Design – Chapter 3

OLYMPUS DIGITAL CAMERA 6

Extending Burp Suite

Introduction There are multiple intercepting proxy tools available and Burp Suite is one of the best tools available for interception. If you are not yet

February 15, 2012 Application Security
phish 6

Attacking the Phishers: An Autopsy on Compromised Phishing Websites

In this article we will cover the results of an informal investigation I performed into phishing websites. Rather than simply reviewing them externally as a

February 10, 2012 Hacking
iPhoneapps 9

iPhone Hacking! Penetration Testing for iPhone Applications – Part 1

This article focuses specifically on the techniques and tools that will help security professionals understand penetration testing methods for iPhone applications. It attempts to cover

February 09, 2012 Application Security
byod 3

Top 10 Tips for Securely Managing Your Employee’s BYOD

Overview: The BYOD (Bring Your Own Device) phenomenon is expanding at an incredible rate. It is something that affects every business, from the smallest to

Writing SEH Exploits

In these two videos, we will demonstrate how to write an exploit of the Structured Exception Handler. The video assumes you already understand how SEH

June 16, 2011 Exploit Development

Adobe Vulnerability Tutorial

In this video, we will demonstrate the adobe_utilprintf exploit. We will show how to set up a PDF within Metasploit that will deliver an exploit

June 16, 2011 Hacking

Automated Vulnerability Disclosure with upSploit

Recently there have been a number of high profile vulnerabilities and problems found in software as well as in hardware. The way they have been

May 11, 2011 Hacking

Automated Vulnerability Testing with winAUTOPWN

What is winAUTOPWN? winAUTOPWN is a minimal Interactive Exploit Framework which acts as a frontend for quick systems vulnerability exploitation. It is a collection of

May 05, 2011 General Security, Hacking
Back to Top Copyright © 2012 - InfoSec Institute