2020-05-27 15:51
There have been multiple reports leaked from various sources about NSA hacking into Pakistan's Internet infrastructure ranging from Core Routers to Pakistan Telecommunication Green Line Comm… Read More
Blog Directory > Internet Blogs > Learn How To Hack - Ethical Hacking and security internet Blog >
Learn How To Hack - Ethical Hacking And Security Blog
rafayhackingarticles.blogspot.com
Tags:
number
security
application
sequence number
threeway handshake
webinar
vulnerability
highly effective hacker
allowed extensions
vip scam
Learn How To Hack! Know more about Computer/Internet Security and Programming,Hacking and security tips from experts
2017-05-02 08:34
TL;dr: People should refrain from any type of Pyramid Scheme especially when it comes to Cryptocurrency:Onecoin is a Cryptocurrency that has been dubbed as Ponzi Scam and the evidence surrou… Read More
2017-04-11 21:32
There have been multiple reports leaked from various sources about NSA hacking into Pakistan's Internet infrastructure ranging from Core Routers to Pakistan Telecommunication Green Line Comm… Read More
2016-09-06 18:12
This is a short blog post describing about a recent hoax pertaining the WhatsApp 4.0 version. I would like to clearly highlight that there is no such application as 'Whatsapp 4G'. The v… Read More
2016-09-02 07:51
I think it's mandatory to give back to Security community from where we learn cutting edge techniques and information. Therefore after months of effort i am presenting to you a new WhitePape… Read More
2016-08-16 06:29
IntroductionGoogle security team themselves state that "We recognize that the address bar is the only reliable security indicator in modern browsers" and if the only reliable security indica… Read More
2016-07-12 20:03
When asked to write on this topic, I admit that it made me fringe just a bit. Because I don't consider myself to be a highly effective hacker. I find myself as a noob everywhere that I'm try… Read More
2016-06-13 10:30
Recently, Wordpress Mobile Detector plugin was in news for the "Remote Code Execution" vulnerability that was found inside the resize.php file. The vulnerability allowed an external attacker… Read More
2016-06-05 08:57
Last night, Website of Acunetix(A Wellknown Automated Web Application Scanner) was hacked by Croatian hackers. From that point of this onward the website has been taken offline and acunetix… Read More
2016-05-03 21:41
Past Saturday, I conducted a "Webcast" on "Garage4hackers" on one of my favorite subjects in the field of Information Security i.e. "WAF Bypass". Initially, i had decided to present som… Read More
2016-04-21 18:02
Blackhat has just recently released the full video for my talk on the subject of "Browser Security", If you wish to read the Whitepaper/Slides and SOP Test Suite, you can refer to my previou… Read More
2016-04-13 14:07
The threat of black hat hackers has never been greater than now, considering the increasing organization of their efforts to make a dollar off of your digital assets and information. The com… Read More
2016-03-31 11:49
Few hours back, i delivered a talk at Blackhat Asia 2016 on "Bypassing Browser Security Policies For Fun And Profit", the talk covered wide variety of topics starting from SOP bypasses… Read More
2016-01-17 16:51
Every single day i get emails in my inbox and on my facebook page from users querying about how to recover hacked facebook account and a common problem i see in all of them is that they… Read More
2015-12-18 19:51
AbstractWhen it comes to the internet, security has always been an after-thought. A great evidence to support the theory can be seen when we look at the history of the internet. The internet… Read More
2015-09-25 19:03
In this post, i would like to share a very simple logic flaw I found earlier this year I have found a way to circumvent mobile verification by utilizing a different portal for logging into a… Read More
2015-07-21 22:24
It seems that in recent years most of society, especially the younger generations, have turned to texting as their preferred mode of conversation. The infinite ability to communicate with ot… Read More
2015-05-18 18:14
IntroductionGoogle security team themselves state that "We recognize that the address bar is the only reliable security indicator in modern browsers" and if the only reliable security… Read More
2015-04-25 14:10
IntroductionSucuri Cloud Proxy is a very well known WAF capable of preventing DOS, SQL Injection, XSS and malware detection and prevention. It acts as a reverse proxy which means that all th… Read More
2015-04-24 14:09
In today’s world, new mobile innovations have changed the way we bank, shop, play, and communicate. This increased demand for mobile innovation is placing pressure on organizations and… Read More
2015-04-18 07:31
On 11th April Giuseppe Trotta and myself organized a CTF (Capture The Flag) competition for Cyber Secure Pakistan (A conference that combines all the stakeholders). The challenge was hosted… Read More
2015-03-12 05:41
The following is a low risk vulnerability that was found few months ago while testing the latest Android Stock browser on Android Kitkat. The issue that was found is commonly referred… Read More
2014-12-29 10:00
tl;dr This exploit is an issue present in Android browser < 4.4 and several other android browsers which allows an attacker to read sqlite cookie database file and hence exposing all cook… Read More
2014-12-25 11:33
twiThis article would briefly discuss the reason why Regular Expressions might not be suitable for filtersand how things could turn miserably bad when PHP comes is used with Regular Expressi… Read More
2014-12-14 19:40
0x01: Introduction to ModemsThe term DSL modem is technically used to describe "a modem which connects to a single computer, through a USB port or is installed in a computer PCI slot". The m… Read More
2014-10-24 13:05
Since, my recent android SOP bypass [CVE-2014-6041] triggered a lot of eruption among the infosec community, I was motivated to research a bit more upon the android browser, it turns ou… Read More
2014-10-18 10:36
IntroductionSame Origin Policy (SOP) is one of the most important security mechanisms that are applied in modern browsers, the basic idea behind the SOP is the javaScript from one origin sho… Read More
2014-10-02 11:53
Since, my recent android SOP bypass [CVE-2014-6041] triggered a lot of eruption among the infosec community, I was motivated to research a bit more upon the android browser, it turns ou… Read More
2014-09-20 18:39
This is a continued post from Code Execution in PHP; you can read the first post here, so if you haven't read that before please go ahead and read it first or else you would have problem und… Read More
2014-08-31 09:33
IntroductionSame Origin Policy (SOP) is one of the most important security mechanisms that are applied in modern browsers, the basic idea behind the SOP is the javaScript from one origin sho… Read More
2014-08-24 08:57
This is a two part article about code execution in PHP. It’s a very detailed article and contains references from other sources as well. I will discuss about some of the mistakes done… Read More
2014-08-03 06:12
While being impressed by Collin Mulliner's research on smart phones, I found myself very curious trying to find vulnerabilities inside it and i found several ones out. In this shor… Read More
2014-07-30 01:47
During my recent security research on "Puffin Web Browser" I found several security bugs with "Puffin Web Browser" ranging from low to high risk issues. My recent post "Puffin Web Browser Ad… Read More
2014-07-14 14:23
During my recent research on Mobile browsers i have managed to find couple of interesting vulnerabilities such as SOP bypass, Denial of service and Address bar spoofing vulnerability which a… Read More
2014-07-12 18:58
There have been a lot of lock screen bypasses lately in almost every mobile deice such as iPhone, Samsung galaxy, HTC etc and if you observe carefully most of them rely upon abusing the "Eme… Read More
2014-06-28 18:50
Lately, A lot of people have been asking me the reason of my absence and not being active on RHA. The answer is that there are countless factors to which I have lost count myself. Had it bee… Read More
2014-06-16 16:26
Last week, we announced our second XSS challenge after the tremendous success of our first XSS challenge. The challenge was based upon a blacklist based protection and the goal was to execut… Read More
2014-06-11 20:09
IntroductionThis post describes a simple design flaw inside of Qmobile handsets and describes why you shouldn't rely upon built in password protection mechanisms and why encryption is the be… Read More
2014-06-09 04:55
Update: The results are announced here.Welcome readers,After a tremendous response with our first XSS challenge, we decided to make your lives a bit harder this summer by launching another X… Read More
2006-06-07 11:16
Introduction We have already disclosed lots of findings related to DOM Based XSS and this article talks about a pretty interesting DOM Based XSS vulnerability i found long time back ins… Read More
2006-06-07 11:16
ABSTRACTMost cyber-attacks in the world that involve websites occurs due to lack of updates and the failure to validate the user input. Starting from buffer overflow vulnerability, which is… Read More
2006-06-07 11:16
ABSTRACTReaders, there are numerous reasons ... It is well known that the Internet is an unmanaged an decentralized network, running under a set of protocols, which are not designed to ensur… Read More
2006-06-07 11:16
Although most of the attacks have moved towards Web Application, but the most critical information resides upon the network and is not being exposed to the Web application, therefore a lo… Read More
2006-06-07 11:16
Every single day i get emails in my inbox and on my facebook page from users querying about how to recover hacked facebook account and a common problem i see in all of them is that they… Read More
Subscribe to Learn How To Hack - Ethical Hacking And Security
Get updates delivered right to your inbox!