Indusface Blog

May 23, 2014

Venkatesh Sundar

4 min Read

XSS flaws occur whenever an application takes untrusted data and sends it to a web browser without proper validation or escaping. Cross-site scripting allows attackers to execute scripts in the.

May 2, 2014

Venkatesh Sundar

3 min Read

New critical zero-day vulnerability found in Internet Explorer 6 to 11- this is the news that we woke up to, this Monday. This vulnerability affects versions of IE from 6.

April 24, 2014

Venkatesh Sundar

2 min Read

It’s been over two weeks since the world learned that websites online were vulnerable due to the OpenSSL Heartbleed vulnerability. Explore our blog here.

April 18, 2014

Venkatesh Sundar

2 min Read

I was looking at Heartbleed bug code and it appears that it is not a buffer overflow. Rather, the buffer is left unfilled and the receiver fooled. The receiver just.

April 18, 2014

Venkatesh Sundar

2 min Read

The day the world got to know of Heartbleed, is going to be a day that security professionals, across organizations, more than anyone else will remember.

April 11, 2014

Nandini Tandon

4 min Read

On April 7th, a major vulnerability in OpenSSL, the most prevalent software used for encryption and other purposes on the web and the internet was discovered. Here are details about what.

April 4, 2014

Venkatesh Sundar

6 min Read

To prevent Broken Authentication vulnerability, use strong password policies, implement multi-factor authentication, and regularly monitor user activity.

March 28, 2014

Venkatesh Sundar

5 min Read

The Hacker Series By Bhaumik Merchant, Information Security Research Consultant, Indusface Introduction: This article demonstrates a unique kind of communication technique between an attacker machine and a victim machine during.

March 21, 2014

Venkatesh Sundar

2 min Read

From Indusface’s study on the State of Application Security in India, here are the top critical vulnerabilities that affect your web applications.

March 14, 2014

Venkatesh Sundar

3 min Read

Recently, I was conducting a security audit for an organization. They had deployed a WAF (Web Application Firewall) for their critical web apps. However, when I asked them about the.

March 7, 2014

Venkatesh Sundar

3 min Read

UNDERSTANDING OWASP TOP 10 SERIES and how to test SQL injection vulnerabilities Open Source Web Application Consortium releases its list of top 10 web vulnerabilities, every three years. The second.

February 28, 2014

Venkatesh Sundar

3 min Read

Website defacement is the electronic graffiti of choice for most “Hacktivists” these days. According to Wikipedia – Website defacement is “an attack on a website that changes the visual appearance.