Credential Management Vulnerabilities Exploitation Case Study
In the last few articles, we discussed how credentials are used in applications, how credential management can go wrong and how attacks like SQL Injection...
Cryptography
How To Exploit Credential Management Vulnerabilities
In the previous article, we discussed some examples of poor credential management. Hardcoded credentials, improper error handling and insecure data storage...
Poor Credential Management
As discussed in the previous article, use of credentials is one of the most common approaches used in applications and this is the de facto method that users...
How Is Cryptography Used In Applications?
Cryptography is used in software to protect the data from adversaries. The key principles of cryptography is to provide confidentiality, integrity and authenticity...
Decrypting Downloaded Files
Malware authors commonly design their malware to communicate with their operators. In some cases, these command and control (C2) channels are designed to...
Decrypting Malware Command and Control
Network traffic analysis is a common approach to cyber defense. By performing deep packet inspection of all inbound and outbound traffic, an organization...
Introduction to Hash Functions
Hash functions are most commonly used mathematical functions in cryptography for implementing security. A Hash function converts an input value of any arbitrary...
Introduction to Asymmetric Cryptography
Encryption is the process of converting plaintext to encrypted text. Since encrypted text cannot be read by anyone, encrypted text hides the original data...
The Advanced Encryption Standard (AES)
Encryption is the process of converting plaintext to encrypted text. Since encrypted text cannot be read by anyone, encrypted text hides the original data...
Fundamentals of Symmetric Cryptography
Encryption is the process of converting plaintext to encrypted text. Since encrypted text cannot be read by anyone, encrypted text hides the original data...