Click here to Skip to main content

Submit your article

Security

security

Great Reads

Protecting .NET 4.+ Application By C++ [Unmanaged]

by The Ænema

Inject your 4.5 framework .NET application into a C++ unmanaged host application - fast, secure & without any extra tool or library.

The Secrets of Google Chrome Credentials

by Michael Haephrati

Chrome stores all passwords and other credentials in an encrypted database but guess what: they can be retrieved by anyone with the proper knowledge. This article will show you how.

Reverse Engineering with OllyDbg

by Ajay K. Yadav

The objective of writing this paper is to manifest, how to crack an executable without peeping its source code by exercising OllyDbg tool.

Evolution of Polymorphic Malware

by Kewin Rausch

An introduction on how these applications self-defend themselves against scanning techniques, and how they could have evolved from simple and naive forms to more sophisticated ones.

Latest Articles

Decouple ASP.NET Core Identity, Authentication and Database Engines

by Zijian

Reusable codes for JWT security in business applications

How to Transform Binary Files into Powershell Script(s) in Order to Copy them Silently on a Server

by Federico Di Marco

A tool which creates one or more Powershell scripts which in turn recreate one or more binary files

Azure Automation Runbooks in 2024

by Wessel Beulink

Azure spearheads cloud evolution, Azure Automation Runbooks manage hybrid/SOC environments effectively

Azure’s New Private Subnet

by Wessel Beulink

Microsoft Azure enhances security with private subnets, fostering efficient network management.

All Articles

Security

Decouple ASP.NET Core Identity, Authentication and Database Engines

U 17 Apr 2024 by Zijian

Reusable codes for JWT security in business applications

How to Transform Binary Files into Powershell Script(s) in Order to Copy them Silently on a Server

2 Mar 2024 by Federico Di Marco

A tool which creates one or more Powershell scripts which in turn recreate one or more binary files

How to Write Your ERC20 Tokens

2 Jan 2024 by Viktoria Dolzhenko

Creating an erc20 Token using the hardhat Package and Typescript

Self-Hosted Artificial Intelligence: Keeping Control of Your Data

13 Nov 2023 by Chris Maunder

In this article we will explore how self-hosted AI, specifically CodeProject.AI Server, empowers businesses to leverage the power of AI while maintaining control over their data.

artificial-intelligence

Solving Real-World Problems with Self-Hosted AI: Unleashing the Potential in Your Applications

13 Nov 2023 by Chris Maunder

Discover the fundamentals of artificial intelligence (AI) and how it can revolutionize your business. Learn about the benefits, applications, and practical use cases to ignite your curiosity

computer-vision

artificial-intelligence

DAO. Short and Clear. Let's Create Our Own.

12 Oct 2023 by Viktoria Dolzhenko

An introduction to the concept of DAO and a workshop on how to create your own

Resilient High Availability VPN with Kill Switch in OpenWRT Routers

16 Jul 2023 by hemanthk119

An algorithm and a set of scripts which work in a closed loop on an OpenWRT router that enable resilient and high availability VPN (openvpn) connection for all connected router clients

Protecting Data Transfer in Documentum REST Services

13 Jun 2023 by Peng Qiu

In this article, we will talk about what web security related configuration parameters help protect the transfer data in the REST API and how to configure them.

Understanding Service Principal Names for SQL Server Integrated Security

15 May 2023 by Bruno van Dooren

Basics of Service Principal names, and what they mean for SQL Server security

active-directory

Migrating a SQL Database with CLR Integration from Old SQL Server Versions

4 May 2023 by Bruno van Dooren

Ways to deal with changed security for CLR code in SQL databases

Secure Authentication for Web Applications: Avoiding Password Storage to Mitigate Cybersecurity Risks

10 Apr 2023 by Denny Boechat

The Importance of Secure Authentication in Web Applications and the Role of Identity Providers

Protecting Electron Based Applications by Using a Native Bridge

16 Jan 2023 by The Ænema

In this article, you will learn an easy way to protect your critical code logic in electron-based applications using a C++ native library.

No need to Store, Encrypt or Memorize Passwords!

28 Dec 2022 by Sergey Alexandrovich Kryukov

Generator of highly secure passwords based on cryptographic hash and master password, which should be memorized; no password storage is involved.

Hosting a Web App in AWS EC2

26 Sep 2022 by Necmettin Demir

All steps to host a web app files in EC2 and accessing them through FTP

securelocker: an httplite "pretty secure" file storage locker

8 Jan 2022 by Michael Sydney Balloni

An exciting proof-of-concept that sews httplite with security components

Creating Your Very Own x64 PE Packer/Protector from Scratch using C++

13 Nov 2021 by The Ænema

This article brings you a very detailed but easy to learn experience on creating your own x64 PE packer/protector using only VC++!

Cross-Solution Microsoft Identity for Java Developers Part 1: Adding Authentication to a Spring Cloud Java Application Using Microsoft Authentication Library

18 Oct 2021 by Matthew Casperson

In this article we’ll explore integrating Azure AD and MSAL with a Spring Boot web application.

Creating Shellcode from any Code Using Visual Studio and C++

7 Jun 2021 by The Ænema

Learn how to convert any code to a stable shellcode using Visual Studio 2019 and VC++ in easy steps!

A Simple 32bit Ret2libc Attack in Linux

27 May 2021 by Oscar-Tark

In this article, we will be looking at a more advanced version of a buffer overflow attack.

Password Flows Middleware for Express-based Applications

19 May 2021 by Ohad Redlich

authentication-flows-js is a powerful and highly customizable middleware for Node.js that covers all flows that any express-based authentication-server needs

Row Level Data Security in Tableau - Part 1

11 Jun 2020 by Imran Abdul Ghani

Step by Step Implementation of Row Level Data Security in Tableau

Identity-Based Authentication in .NET Core 3.0 using In-Memory Database

31 Jan 2020 by Prashant Rewatkar

This article demonstrates how to add Identity-Based Authentication in .NET Core 3.0 using In-Memory Database.

KeePass Password Safe

13 Jan 2020 by Dominik Reichl

KeePass is a free, open source, light-weight and easy-to-use password manager.

Hot Patching C/C++ Functions with Intel Pin

27 Aug 2019 by Dan Sporici

This article discusses the idea of Hot Patching C/C++ functions using Intel Pin in order to remove known vulnerabilities

401 and/or 403 and a Short Story of Secure RESTful

3 Jul 2019 by rtybase

401 and/or 403 and a short story of secure RESTful

How to Reverse Engineer Software in a Right Way (for Windows)

6 May 2019 by Anton Kukoba, Apriorit Inc, Sergii Bratus

The knowledge base needed to perform reverse engineering, basic principles of reverse engineering a piece of Windows software, disassemblers, and tools

Formal Verification of Smart Contracts with the K Framework

15 Mar 2019 by Apriorit Inc, MikeSotnichek

We analyze the pros and cons of formal verification.

Understanding the FPGA: From Developing Configurations to Building a VGA Driver

18 Feb 2019 by Apriorit Inc, ruksovdev

A detailed description of an FPGA-specific framework called ISE Design Suite, and the main steps you need to take in order to create a VGA driver using FPGA

artificial-intelligence

machine-learning

parallel-processing

How to Implement a Custom Blockchain for Your Business: Graphene Framework

5 Feb 2019 by Apriorit Inc, MikeSotnichek

The experience of creating a custom blockchain network using the Graphene framework.

Smart Contract Security Guaranteed by the Network: Cardano and Zilliqa

24 Jan 2019 by Apriorit Inc, MikeSotnichek

Smart security contract in Cardano and Zilliqa

Hooking Linux Kernel Functions, Part 2: How to Hook Functions with Ftrace

22 Jan 2019 by Apriorit Inc, Sergey Stepanchuk

Learn how you can use ftrace to hook critical function calls in the Linux kernel

Hooking Linux Kernel Functions, Part 3: What Are the Main Pros and Cons of Ftrace?

17 Jan 2019 by Apriorit Inc

In this article, we focus on the main ftrace pros and cons and describe some unexpected surprises we’ve faced when hooking Linux kernel functions with this utility.

Hooking Linux Kernel Functions, Part 1: Looking for the Perfect Solution

9 Jan 2019 by Apriorit Inc

Two theoretical ways to protect a Linux kernel module from hooks.

Document and Test API with Swagger UI

17 Dec 2018 by Benktesh Sharma

More than often, developers test API, either through a browser request or using some clients such as POSTMAN, Advanced Rest Client (ARC).

Overview of Azure Key Vault

10 Nov 2018 by DataBytzAI

What is Azure Key Vault and where is it useful?

Data Encryption in Azure

8 Nov 2018 by DataBytzAI

Overview of encryption at rest, in motion and in use with Azure Encryption

Secure Spring Boot Web Application with Spring Security

2 Nov 2018 by Han Bo Sun

In this article, I will show the reader how to secure a web application based on Spring Boot and WAR archive, using the Spring Security and Tags. The application will have a login page, page access based on user roles, login failure, and access denied pages.

Cyber Security Techniques for Web Sites

30 Aug 2018 by Member 10280272

The focus in this article is on avoiding over-the-wire security issues that can be addressed in web pages.

Poor Man Web Monitoring Tools

13 Aug 2018 by Bryian Tan

This article shares the idea on how to utilize free tools to download log files from server, upload IIS log files into the database, display the results and compare the baseline and production files.

Security in Angular - Part 1

16 Jul 2018 by Paul D. Sheriff

A technique for securing Angular 2/6 applications

Security in Angular - Part 2

16 Jul 2018 by Paul D. Sheriff

Part 2 of how to add security to our Angular applications

ASP.NET Core Security Overview

17 May 2018 by Sriganesha Rao

This article provides an overview of ASP.NET Core security features.

SQL Server Brute Force Attack Detection: Part 4

30 Apr 2018 by Ryan G Conrad

Using Powershell and Windows Task Scheduler API to detect malicious login attempts on a remotely accessible SQL Server database

Evolution of Polymorphic Malware

14 Apr 2018 by Kewin Rausch

An introduction on how these applications self-defend themselves against scanning techniques, and how they could have evolved from simple and naive forms to more sophisticated ones.

SQL Server Brute Force Attack Detection: Part 1

25 Mar 2018 by Ryan G Conrad

Prevent brute-force login attacks on a remotely accessible SQL Server database using T-SQL

SQL Server Brute Force Attack Detection: Part 2

25 Mar 2018 by Ryan G Conrad

Additional logging and data collection

Protecting .NET 4.+ Application By C++ [Unmanaged]

25 Mar 2018 by The Ænema

Inject your 4.5 framework .NET application into a C++ unmanaged host application - fast, secure & without any extra tool or library.

YAPM (Yet Another Password Manager)

10 Mar 2018 by Joe Dillon

This article describes the security techniques required to create a secure offline password manager and how the Libsodium library has been used to achieve this. YAPM stores passwords with AES encryption and authenticates users with an Argon2 hash.

JWT Security Part 1 - Create Token

4 Sep 2017 by Bart-Jan Brouwer

Learn how to create JWT and use with WebApi, REST and MVC all build with .NET Core

JWT Security Part 2, Secure REST Service

4 Sep 2017 by Bart-Jan Brouwer

Learn how to create JWT and use with WebApi, REST and MVC All Build with .NET Core

JWT Security Part 3 - Secure MVC Application

4 Sep 2017 by Bart-Jan Brouwer

Learn how to create JWT and use with WebApi, REST and MVC all build with .NET Core

IdentityServer3, WebAPI , MVC, ASP.NET Identity, Specflow: The Magnificent Five

29 May 2017 by Veronica S. Zotali

This article shows how to configure IdentityServer3, when you need to authenticate and authorize usage of your WebAPI/MVC, for users stored in SQL Server.

Missteps in Securing Autonomous Vehicles

24 Feb 2017 by Intel

It is important to institute optimal security capabilities as part of the design and core functions (Hardware, Firmware, OS/RTOS, software, endpoints, networks, etc.) to protect passengers and pedestrians from potentially catastrophic accidents resulting from digital compromises

The Secrets of Internet Explorer Credentials

30 Jan 2017 by Michael Haephrati

Third of several articles covering the secrets of obtaining stored (and encrypted) credentials stored by browsers

The Secrets of Google Chrome Credentials

30 Jan 2017 by Michael Haephrati

Chrome stores all passwords and other credentials in an encrypted database but guess what: they can be retrieved by anyone with the proper knowledge. This article will show you how.

Getting Started With Predix - A Builders Journey - Episode 1

19 Jan 2017 by Rich Dost

In this first episode we'll tackle the first thing, security. We are at the start of a journey. We'll learn about many Predix services and components. We'll find the good, the bad and the ugly, and we'll complain the whole way. After security we'll hit Asset and Analytics.

product-showcase

5 Tips to Get the Most out of Your Cloud Infrastructure

18 Jan 2017 by Alibaba Cloud

Here are five top tips from our expert team to help you maximize the benefits of your cloud infrastructure.

Internet of Things Security Architecture

26 Sep 2016 by Yuri Diogenes

The objective of threat modeling is to understand how an attacker might be able to compromise a system and then make sure appropriate mitigations are in place. Threat modeling forces the design team to consider mitigations as the system is designed rather than after a system is deployed.

product-showcase

Separating Features and Authorisation. Getting More Done and Improving Quality in the Middle Tier.

16 Aug 2016 by Olubisi Akintunde

Application Managed Authorisation using Dependency Injection and Interception

10 Points to Secure Your ASP.NET MVC Applications

4 Aug 2016 by Saineshwar Bageri

In this article, we will run through 10 points which will help us to make our MVC code secure.

Internet of Things in Smart Home/Building

10 Jul 2016 by Ramneekkalra

This article will surely give an idea how to develop a self-controlled, self-connected smart home/building.

Destroy All Passwords: Never Memorize A Password Again

3 Jun 2016 by raddevus

A novel approach to generate a secure way to login that doesn't require the user to ever memorize a password again. This method can be used with any web site, program, etc. and creates a more secure password than other methods.

Mule ESB + PGP: Pretty Good Privacy

22 May 2016 by RajeshKumar D

Configuring PGP Encryption and Decryption part of MULE ESB

XSRF with Web API and Angular

15 Apr 2016 by ireiter

Using XSRF with Web API and Angular

Just another article on Cryptography, SSL and Digital Signature

21 Mar 2016 by Dharmesh_Kemkar

Basics on Cryptography, SSL and Digital Signature

The Dark Side of the Internet of Things

18 Mar 2016 by Intel

In the enthusiasm to embrace IoT technology, however, ongoing privacy issues and security threats are sometimes going unnoticed. These issues are gaining more attention, highlighting concerns that should be factored into planning, development projects, and broader IoT implementations.

OWASP #6 Preventing Sensitive Data Exposure in ASP.NET – Part 2

26 Feb 2016 by Max R McCarty

How are you storing that sensitive application data and should you be?

OWASP #6 Preventing Sensitive Data Exposure in ASP.NET – Part 1

16 Feb 2016 by Max R McCarty

OWASP's #6 most vulnerable security risk has to do with keeping secrets secret.

Salted Password Hashing - Doing it Right

14 Feb 2016 by adriancs, Taylor Hornby

Securing Password by Hashing with Salt

Intel® Hardware-based Security Technologies Bring Differentiation to Biometrics Recognition Applications Part 2

1 Feb 2016 by Android on Intel

High Performance and Security Software-Based Encryption by Intel® Advanced Encryption Standard New Instructions and Intel® Secure Key

Intel® Hardware-based Security Technologies Bring Differentiation to Biometrics Recognition Applications Part 1

14 Jan 2016 by Android on Intel

Intel® Hardware-based Security Technologies Bring Differentiation to Biometrics Recognition Applications

product-showcase

An eCryptfs-Based Solution for Securing Your Data on Android

14 Jan 2016 by Android on Intel

I will describe a new way to implement security for sensitive data based on eCryptfs (eCryptfs.org).

product-showcase

DevOps needs DevSec

1 Dec 2015 by Mark_Warren

Working with customers and partners, here is an overview of the need for DevSec and the five ‘best practice’ questions to ask when looking how to have a better ‘DevSec’ strategy

product-showcase

Security Issues - Overview and Examples

13 Nov 2015 by Paulo Zemek

Lately I am dealing a lot with security issues and, as I am thinking about security all the time, I decided to write this post. Yet, don't expect me to talk about the newest cases.So, first, what is considered a security issue?I don't have a perfect answer but maybe we can say that if anything in an

Security Best Practices for Android 5.0

30 Oct 2015 by Android on Intel

In this article, I will describe four best practices for Android device management.

Validation & Security in MVC Application

6 Sep 2015 by Passion4Code

Validation & security in MVC application

Secure Spike Engine Websockets with TLS/SSL

23 Jun 2015 by Kel_

Securing Spike Engine HTTP & Websockets with TLS/SSL layer.

Rogue Wave OpenLogic: A Review

16 Jun 2015 by Chris_Riley

I recently spent some time with Rogue Wave OpenLogic product. OpenLogic is an “open source” component review tool.

Custom Roles Based Access Control (RBAC) in ASP.NET MVC Applications - Part 1 (Framework Introduction)

8 Jun 2015 by Stefan Wloch

An introduction to custom roles based access control in an ASP.NET MVC application using the Entity Framework.

A Password safe built with Arduino Leonardo

15 Apr 2015 by webmaster442

How to build a simple hardware password safe and login system with off the shelf components.

Role Based Security Architecture Using .NET MVC & JS

23 Feb 2015 by Tushar_Gupta

A custom security architecture for role based access to components in a page

Security Engineer Manifesto

9 Feb 2015 by CdnSecurityEngineer

Security Engineer manifesto

Swanky Encryption/Decryption in C#

26 Jan 2015 by 1337Architect

Handy classes to use the .NET Encryption/Decryption

Intel® Device Protection Technology and McAfee Mobile Security for Android*

17 Nov 2014 by Android on Intel

Recent industry reports indicate Android* is the OS in more than 59 percent of laptops, tablets and smartphones worldwide.

Reverse Engineering with OllyDbg

28 Oct 2014 by Ajay K. Yadav

The objective of writing this paper is to manifest, how to crack an executable without peeping its source code by exercising OllyDbg tool.

Acunetix WVS – Audit Your Website Security

29 Sep 2014 by Dirk_Strauss

Acunetix WVS audits your website security by running a host of tests. It then provides a concise report of issues it found. Not only does it do this, but it also suggests changes you need to make to fix the issues found.

product-showcase

SecurePHPWebAppCoding - Cross Site Scripting(XSS) - What is it and How to Stop It?

26 Sep 2014 by Abani Kumar Meher

This article explains few scenarios where XSS attack can be done, how we make mistake while creating web application which leads to XSS vulnerability and what should be done to prevent XSS attacks.

SecurePHPWebAppCoding - SQL Injection - What is it and How to Stop It?

14 Sep 2014 by Abani Kumar Meher

This article describes how we write code while developing web application which results in SQL injection vulnerability and how we should write code to prevent it.

web_application

Selfhosted Secure WCF by Id password, custom validation

16 Jul 2014 by Himanshu Thawait

No config file needed – all setting in code only, No IIS – Self hosted, consume by channel factory

Understanding, Using and Customizing ASP.NET Identity System for Authentication and Authorization

16 Jul 2014 by Rahul Rajat Singh

In this article we will look into ASP.NET Identity System which comes as the default authentication and authorization mechanism with ASP.NET MVC 5 internet application template. We will try to understand the ASP.NET Identity system and compare it with the ASP.NET simple membership providor and the c

Application Security: Where You Want It, When You Need It with Visual Guard

11 Jul 2014 by Jeffrey T. Fritz

I’ve been reviewing Novalys Visual Guard for the last 2 weeks, and found some really interesting nuggets in this package that would make my network administrators stand up and take notice.

web_development

product-showcase

Automated penetration testing in the Microsoft stack with OWASP ZAP

27 Jan 2014 by GustavoMartins

Automate your penetration testing using the pentest tool ZAP and the

Thinktecture Identity Server - Configuration, Customization

19 Nov 2013 by Azeet Chebrolu

Installing, extending Identity Server and implementing session token caching

how to use login control on remote computer (live web site)

11 Oct 2013 by ASP.NET Community

step1. drag create use wizard and drop on design window on your web page(default1.aspx).step2. go to website tab and click on asp.net

11 Oct 2013 by ASP.NET Community

AJAX adds one more wrinkle to web security. I find that videos and demonstrations help me understand subtle topics like this.VideosSecurity in

SQL Server Security

11 Oct 2013 by ASP.NET Community

There's a lot of great information on SQL Server Security covering both SQL Server 2000 and 2005.Blogs/DevCentersSQL Server 2005 Security on

Threat Modeling

11 Oct 2013 by ASP.NET Community

It's absolutely necessary if you're serious about security.Whitepapers/Books/BlogsThreat Modeling for ASP.NET (PDF) - an excellent white

Security Guidelines and Recommendations

11 Oct 2013 by ASP.NET Community

There's a great deal of good prescriptive security guidance out there in the form of whitepapers and books.Whitepaperspatterns & practices

11 Oct 2013 by ASP.NET Community

Here are a few good tutorial articles that provide a good conceptual overview of how the new membership and role management system works. Check out

Code Access Security

11 Oct 2013 by ASP.NET Community

Code Access Security is one of the least-understood but most valuable aspects of the .NET Framework.WebcastsMSDN Webcast: Using Code Access