Application Security

A few things that I want to share...

[somnathguhaneogi]

High-Tech Bridge Security Advisories

Security Advisories issued on a non-profit base to help various Vendors improving security of their products. Advisories by High-Tech Bridge Security Research Lab

[somnathguhaneogi]

SAVEVIDEO.ME: download dailymotion video, download vimeo, facebook and more!

Download and save video from Dailymotion, Facebook, Vimeo, Ustream, Twitter, Vine, Aol.On, Streamable.com, Break.com, Metacafe and more! Just copy URL of the page and paste to download.

[somnathguhaneogi]

[somnathguhaneogi]

sechacking has 169 repositories written in Python, Shell, and C. Follow their code on GitHub.

[somnathguhaneogi]

I've spoken before about leveraging an sql inection to perform an xss attack and this post will discuss another form of attack chaining - exploiting an xss

[somnathguhaneogi]

The more common areas to test for and find sql injection vulnerabilities is via or s. This post will discuss another potential vector - . Once identified,

[somnathguhaneogi]

Hack Like a Pro: How to Crack Passwords, Part 3 (Using Hashcat)

Welcome back, my greenhorn hackers! Continuing with my series on how to crack passwords, I now want to introduce you to one of the newest and best designed password crackers out there—hashcat. The beauty of hashcat is in its design, which focuses on speed and versatility. It enables us to crack multiple types of hashes, in multiple ways, very fast. As mentioned in the first part of this series, passwords are stored in a one-way encryption called hashes. There are multiple ways of obtaining these hashes, such as .dll injection in Windows systems or capturing the hash in transit, such as in

[somnathguhaneogi]

Metasploit integrate John the Ripper password cracker with jtr_crack_fast auxiliary module to crack weak passwords through msfconsole.

[somnathguhaneogi]

[somnathguhaneogi]

[somnathguhaneogi]

[somnathguhaneogi]

typicode/jsonplaceholder

jsonplaceholder - A simple fake REST API server

[somnathguhaneogi]

Intercepting Native iOS Application Traffic

Intercepting Native iOS application traffic

[somnathguhaneogi]

Proxying Non-Proxy-Aware Applications with Burp and PPTP

The Problem Often times when testing iOS applications, getting access to compilable source code is not possible and I'm forced to test the application using a physical device. In order to observe a...

[somnathguhaneogi]

Dewhurst Security Blog

[somnathguhaneogi]

[somnathguhaneogi]

Safari/iOS - Cookies.binarycookies reader

Safari browser and iOS applications store the persistent cookies in Cookies.binarycookies file. This is different from other desktop browsers. For example Internet Explorer stores the persistent co...