Ninj@S3c

Ninj@S3c is a Security Analyst with a leading MNC. He is predominantly focused on Application Security, Network Security and Wireless Security. Beyond this, he’s interested in Reverse Engineering and Forensics.

Hacking April 18, 2014 Ninj@S3c

Exploiting Heartbleed

This article explains the Heartbleed bug and shows how it can be exploited. Overview Heartbleed is a flaw in implementing the Heartbeat extension...

Reverse engineering November 13, 2013 Ninj@S3c

Reversing firmware part 1

The article will explore various strategies for reversing firmware, with some examples. Finally, some best practices are mentioned. Embedded systems are...

Application security September 27, 2013 Ninj@S3c

Ajax Security Issues

This article is about exploring major security issues we come across during assessment of Ajax based applications. Ajax or 'Asynchronous JavaScript and XML'...

Digital forensics June 6, 2013 Ninj@S3c

Linux and disk forensics

A digital forensic investigation generally consists of five major steps [Figure-1]: Identification Data Acquisition Data Recovery Analysis Reporting [Figure-1:...

Cloud security April 15, 2013 Ninj@S3c

Before you move to the cloud

What is the cloud, anyways? The term is new, but concept is not. Throughout the history of computing, IT organizations have been using their own infrastructure...

Hacking March 19, 2013 Ninj@S3c

Chaining Web Proxies to overcome limitations

This article shows a practical example of what is proxy chaining in a web proxy tool and how proxy chaining can be used to overcome limitations of web proxy...

Reverse engineering February 13, 2013 Ninj@S3c

Unpacking, reversing, patching

This article is an introduction of packing, how to unpack, to reverse an exe and finally patching it. I have chosen to show reversing of a sample exe file and...

Secure coding February 6, 2013 Ninj@S3c

Secure code review: A practical approach

This article is about different code review techniques and their application in the real world What is secure code review and how to deal with them in real-life...

Application security January 30, 2013 Ninj@S3c

Android Application Assessment

In this article, we'll discuss THE steps involved in performing A security assessment of an Android based application. We will see the use of various tools...

Hacking January 24, 2013 Ninj@S3c

Arbitrary file download: Breaking into the system

Introduction to Arbitrary File Download Difference between Arbitrary File Download and LFI/ RFI How it is exploited- a real example Countermeasures Basic...