Entries by Gilad Ofir
Guidelines for pentesting security systems
How do you perform a security test? Ever wanted to perform a penetration test on a security system (website, application, mobile and etc.) and just didn’t know where to start? These days, companies are very concerned about the security in their applications due to the increase in the number of disclosed vulnerabilities and exploits which can […]
Advanced Packet Editor – TCP/HTTP Client-Server Proxy
The Advanced Packet Editor (APE) is an open-source project for a TCP and HTTP-based proxy that allows you to intercept and manipulate communication between clients and servers. We at AppSec Labs have taken the project, modified and improved it into a useful tool for application penetration testing. This tool is under the GPL license (for […]
New SSL Vulnerabilities – Spoofing CA Certificates
OpenSSL is a widespread, open-source SSL protocol application and is widespread and used by numerous projects and organization for providing rapid, adaptable and “secure” solution. OpenSSL has recently reached headlines again, but on a bad note. As of late (the past two years or so), the older and current versions of SSL have suffered from […]
OpenSSL – Diffie Hellman and Elliptic Curve Cryptography with Digital Certificates
OpenSSL is a leading open-source SSL solution that offers many features; from client and server communication, to certificates generation and self-signing. The OpenSSL allows a user to issue CA certificates and use them to sign other certificates for both testing and production scenarios. Visit OpenSSL website: https://www.openssl.org/
SSL FREAK Vulnerablity
As security experts, AppSec Labs can help you protect against SSL based attacks as well as keeping our website, www.appsec-labs.com safe from these attacks. SSL/TLS is a transport encryption protocol which is used by most applications and infrastructure to provide confidentiality and integrity for safe communication between a client and a server.
Protecting a Windows application from premature termination
Have you ever written a Windows app that works on a specific and very important task that must be completed, but then someone force-closes it? One solution would be to send a request to the user that asks the user not to force-close the app. Unfortunately, this doesn’t usually work. There is a cool “trick” […]
Follow us
