I have a doubt regarding iOS application pentest.
I am pentesting one iOS application. The application is protected by MDM software.
Installation Process – Once I install the MDM on iPhone device and provide the VPN server credentials then…
The security of Microsoft’s cloud services is a top priority for us. One of the technologies that is central to cloud security is Microsoft Hyper-V which we use to isolate tenants from one another in the cloud. Given the importance of this technology, …
DLL planting (aka binary planting/hijacking/preloading) resurface every now and then, it is not always clear on how Microsoft will respond to the report. This blog post will try to clarify the parameters considered while triaging DLL planting issues.
I…
On January 3rd, 2018, Microsoft released an advisory and security updates that relate to a new class of discovered hardware vulnerabilities, termed speculative execution side channels, that affect the design methodology and implementation decisions beh…
On January 3rd, 2018, Microsoft released an advisory and security updates related to a newly discovered class of hardware vulnerabilities involving speculative execution side channels (known as Spectre and Meltdown) that affect AMD, ARM, and Intel CPUs…
I want to perform SQL injection but I don’t know how to use the command. So far, I have tried this:
–data=”{‘user_id’:’6′,’user_with:5*’}” –prefix=” OR user_to = 5)” –suffix=”#” -vvv`
I use ‘ instead of ” in parameter because sqlmap…
During a pentest, I’ve found a potential vulnerability on a web page, but it can only be exploited in quirks mode.
The page starts with <!doctype html>, which triggers standards mode so at first glance, it isn’t exploitable.
Are th…
I am writing a Java application that is required to locally authenticate a user with a password and then use the password to generate an AES-256 key for local file encryption/decryption.
I understand the principles behind everything and h…
I am currently building an multiplayer application game on Android, and the server-side logic is deployed using Cloud Functions, which is a server-less environment. The application logic is as follows: two users are given a question (i.e. …
I am looking for suggestions to implement a group policy that gives the control to administrator of domain to allow or disallow a user whenever he/she connects to the wifi network. Is there any way i can do this?
For example, a person in…
