What Makes Penetration Testing Impactful – Post Exploitation
As a penetration tester, we often come across this riddle – What Makes Penetration Testing Really Impactful. As per penetration testing methodology – we identify…
Beware Android Users – CLOAK AND DAGGER is here to exploit you
The WORLD has still not got over with the WannaCry ransomware menace and here comes one more android ransomware – Cloak and Dagger! People have…
Buffer Overflow Attacks
Introduction to Buffer Overflow Buffer is a storage place in memory where data can be stored. It’s mostly bound in a conditional statements to check…
Threat Advisory Report on WannaCry Ransomware (Critical Severity)
Here we will discuss Threat Advisory Report on WannaCry Ransomware (Critical Severity). 1. Introduction On Friday, May 12, countless organizations around the world began fending…
How To Develop Secure Software – Action Plan To Make Secure
The purpose of this article is to help to develop secure software. Easily avoided software defects are a primary cause of commonly exploited software vulnerabilities….
Mobile Vulnerability Database (MVD)
Mobile Vulnerability Database, or MVD, is a unique place to find out about vulnerabilities reported worldwide for Mobile Platforms. Introduction to Mobile Vulnerability Database: The…
Introduction to Secure Software Development Life Cycle
The most effective way to reduce application security risk is to implement a formal development process that includes security best practices to avoid application vulnerabilities….
External Penetration Testing – Case Study
ABSTRACT External Penetration Testing consists of a reviewing and assessing the vulnerabilities that could be exploited by external users/Hacker without any credentials or without having…
Shell Shock – The Bash Vulnerability
BASH (Baurne Again Shell) Bash is the shell, or command language interpreter, that will appear in the GNU operating system. Bash is an sh-compatible shell…
Android Malwares – An Overview
Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems. It can…