Prateek Gianchandani

Prateek Gianchandani, a recent IIT graduate, has interests in the field of Penetration Testing, Web Application Security and Intrusion Detection. He is currently a researcher for InfoSec Institute. In the past he has worked for security-based startups.

You can contact him at prateek.searchingeye@gmail.com and on twitter @prateekg147 or you can visit his personal website at highaltitudehacks.com

Articles from Prateek Gianchandani

Hacking web authentication - part one

January 13, 2019

Authentication is the process of validating something as authentic. When a client makes a request to a web server for accessing a resource, sometimes the web

Learn More

iOS application security part 47 — Inspecting apps with Frida

July 24, 2018

In this article, we will talk about Frida. Frida is a dynamic instrumentation toolkit which can prove to be extremely useful in iOS application assessments.

Learn More

DNS hacking (beginner to advanced)

January 29, 2018

DNS is a naming system for computers that converts human-readable domain names e.g. (infosecinstitute.com) into computer-readable IP-addresses. However, some

Learn More

App Transport Security

June 27, 2016

One of the most common misconfiguration issues that I find during testing iOS apps is the bypass of the App Transport Security feature introduced by Apple in

Learn More

Developing Secure Java Code - Best Practices for a Team

January 20, 2016

The following whitepaper shall introduce to us the basic practices to be followed to write secure Java code. The following topics are touched on- general cod

Learn More

Enhancements in Damn Vulnerable iOS app version 2.0

June 16, 2015

In this article, I would like to give a quick walkthrough of the new vulnerabilities and challenges that we have added in version 2.0 of Damn Vulnerable iOS

Learn More

Bypassing Jailbreak Detection Using Xcon

June 12, 2015

In this small article, we will look at a very handful utility named Xcon for bypassing Jailbreak detection. As per the wiki page ... xCon is a collaborative

Learn More

iOS Application Security Part 42 - LLDB Usage continued

May 26, 2015

In this article, we will look at some of the most important commands in LLDB to debug applications. If you have been following this blog series, you would ha

Learn More

iOS Application Security Part 41 - Debugging applications using LLDB

April 15, 2015

In this article we will learn about the LLDB debugger used by Apple's Xcode for debugging applications, understand why it is better for security testing, and

Learn More

iOS Application Security Part 40 - Testing apps on your Mac

April 8, 2015

In this article, we will discuss the extent to which you can test applications on your Mac rather than the device. This could be useful for many reasons, som

Learn More

Android Application hacking with Insecure Bank Part 4

April 1, 2015

In this article, we will look at a very handy framework for analysis of android applications named Drozer. Drozer is a very useful tool as it eliminates the

Learn More

Android Application hacking with Insecure Bank - Part 3

March 25, 2015

In this article, we will look at attacking components in Android applications, starting with activities. But first, it is essential to understand what Androi

Learn More