|
Over the years I have invested heavily in product R&D building a wide
assortment of new skills, and fostering a diverse background and understanding.
These are some of the papers I have developed along my journey that I make freely available to help others along. |
Sandsprite Papers
Reverse Engineering / Binary Analysis
Web Apps
Real World XSS
Circumventing Client Side Code
Http Authentication
Http Header Manipulation
Moving into existing Web Apps
URL Encoding Explained
Raw Http Requests Over SSL
Visual Basic 6
- Securing Business Apps - Rise of the White Collar Cracker
How secure are your business apps from internal threats? Is your proprietary and customer data vulnerable to disgruntled employees or other office staff?
Most of the internal business apps developed for industry were programmed with efficiency, not security in mind.
This is a 15 page paper aimed at informing developers, auditors, and IT Managers on how common software access schemes can be bypassed to allow unauthorized login, and manipulation of proprietary business applications.
Article includes sample business app, API manipulation utility, and a patch manager demo so that you can directly experiment and follow along with the article.