SecVulture

SecVulture is an Information Security professional with experience in Web, Thick client and Mobile Application Security, currently working with Infosec Institute as a researcher.

Email: secvulture@gmail.com

SecVulture

Articles from SecVulture

Penetration testing

Reversing & patching .NET applications with ILSpy & Reflexil

October 31, 2016

In the previous article, we have discussed source code review of .NET applications. Readers are introduced to a tool called Visual Code Grepper, which can he

Learn More
Penetration testing

Automated Source Code Review for DVTA

September 28, 2016

Practical Thick Client Application Penetration Testing using Damn Vulnerable Thick Client App: Automated Source code review Background: In the previous arti

Learn More
Penetration testing

Application Logs & Developer Backdoors

September 26, 2016

Background: In the previous article, we have discussed the basics of DLL Hijacking vulnerabilities and how one can find and exploit DLL Hijacking vulnerabi

Learn More
Penetration testing

DLL Hijacking using Damn Vulnerable Thick Client App

September 23, 2016

  Background: Welcome to the part 7 of Practical Thick Client Application Penetration Testing using Damn Vulnerable Thick Client App (DVTA). In the prev

Learn More
Penetration testing

Reversing & Patching .NET Applications using Damn Vulnerable Thick Client App

September 21, 2016

  Background: [pkadzone zone="main_top"] In the previous article, we have discussed how .NET applications can be Reverse Engineered using dotPeek to vie

Learn More
Penetration testing

Reversing & Decrypting Database Credentials using Damn Vulnerable Thick Client App

September 19, 2016

  Background In the previous article, we have discussed injection attacks in Thick Client Applications specifically in DVTA. In this article, we will di

Learn More
Penetration testing

Injection Attacks Using DAMN Vulnerable Thick Client App

September 8, 2016

Background: In the previous article, we have seen some of the common data storage issues in Thick Client Applications specifically in DVTA. In this article,

Learn More
Penetration testing

Data Storage Issues with DAMN Vulnerable Thick Client App

September 6, 2016

Practical Thick Client Application Penetration Testing using Damn Vulnerable Thick Client App: Insecure Data Storage Background: Welcome to part-3 of thick

Learn More
Penetration testing

Traffic Analysis Using DAMN Vulnerable Thick Client App

August 30, 2016

Background: In the first part of this series, we have seen an introduction to Thick Client Applications, set up Damn Vulnerable Thick Client Application and

Learn More
Penetration testing

Practical thick client application penetration testing using damn vulnerable thick client app: An introduction

August 25, 2016

Though, thick client applications are not new, penetration testing process for thick clients is not as straight as Web Application Penetration testing. It is

Learn More