How to add content verification using hmac in PHP

December 7, 2009   -   PHP   -   19 comments

Many times a requirement arises where we are supposed to expose an API for intended users, who can use these API endpoints to GET/POST data on our servers. But how do we verify that only the intended users are using these API’s and not any hacker or attacker. In this blog post, I will show [...]

Web Security : Using crumbs to protect your PHP API (Ajax) call from Cross-site request forgery (CSRF/XSRF) and other vulnerabilities

October 5, 2009   -   PHP   -   12 comments

Have your API calls ever being used directly by someone without your permission? If yes, read on to find out how can we protect our API’s from such spammers and hackers. Before we go ahead and see a possible solution for this, lets try to list out a few cases, when our API’s can be [...]

Warning for Google Chrome Users : Chrome's 'Save As' Flaw Could Give Attackers Control

September 8, 2008   -   Tech News   -   Comment

Bach Khoa Internetwork Security, a security-research firm in Vietnam, claims to be the first to discover a critical vulnerability in Google’s Chrome browser. “This is the first critical Chrome vulnerability permitting [a] hacker to perform a remote code-execution attack and take complete control of the affected system,” the firm wrote in its Sept. 5 advisory. While [...]

Gain admin access on windows system using your guest account

July 11, 2008   -   Web Development   -   74 comments

Hello All, Ever thought of how to get into your friend’s system and see the access denied files and folders? Or ever wanted to hack into someone’s admin account? Well here is a method which exploits yet another windows bug. Have you ever noticed that if you press your system’s SHIFT key >= 5 times continuously a [...]

Powered by Wordpress. © 2008-2010 All Rights Reserved.