Being Agile in the Security World

Disclaimer: Every attempt has been made to refer the contents used in this post to their rightful owners. There is no attempt here made to plagiarize the original work in any manner. In case of an unintended use of a copyright material, the post will be immediately amended in the appropriate sense. No pun intended.

ag·ile
ˈajəl/
adjective
  1. 1.
    able to move quickly and easily. - an expected trait of a security professional

  2. 2.
    relating to or denoting a method of project management, used especially for software development, that is characterized by the division of tasks into short phases of work and frequent reassessment and adaptation of plans. - the unwittingly favorite method of software development running amok through security folks

The scope of  this blog post is limited 

Comments

Post a Comment

Popular posts from this blog

Remotely start..someone else’s car!

Probably the heading for this post was tricky enough to make anyone read through the following passage. But the truth is that I was able to execute this feat, SUCCESSFULLY! I am not from the hard-core hacker community or a penetration tester who tries his best to break an application. I just had to open the App on my mobile, tap few screens and then viola, the German engine growls underneath the hood. I can Let’s get something straight here, I DID NOT – ·       Reverse engineer the mobile app and manipulate the internal workings ·       Execute a man-in-the middle attack to snoop in the commands that the App was sending to the car ·       Send a phishing email to the actual owner and track down the user credentials ·       Hack the car company’s datacenter to gather sensitive details Of course, the company in question is reputed enough to gain that trus...
Read more

Web Technology - Tools and Tricks

Image
Tags and WebTech Web Technologies Web technologies is a general term referring to the many languages and multimedia packages that are used in conjunction with one another, to produce dynamic web sites such as this one. Each separate technology is fairly limited on it's own, and tends to require the dual use of at least one other such technology . [ Source ] The chrome extensions such as WASP.Inspector, Wappalyzer and Ghostery provide wealth of information that happen behind the scene. Although built for analyzing the performance of a website, security professionals would rather use these tools to track the web tags, technologies and API calls. WASP Inspector -  Web Analytics Solution Profiler Wappalyzer -  Identify technology on   websites Ghostery -  Privacy and security related browser-extension View the below video to see these browser extensions in action:
Read more