Browse by Tags

• Authentication
• Code Inspection
• Deployment Phase
• Development Phase
• IIS 7
• Implementation
• Information Gathering
• Planning Phase
• Security
• Test Phase
• Tools

Avoid Manipulating Passwords In Memory - It Is Easy To Reveal

Revealing clear text passwords in memory seems to be a trivial task. This post describes how to reveal clear text passwords and what countermeasures to apply. Summary of steps: Install WinDbg Attach to process or open dump file Load SOS .Net extensions Read More...

Posted 08 December 07 05:55 by alikl | 3 Comments   
Filed under Test Phase, Security, Sensitive Data, Authentication, Planning Phase

IIS 7 Configuration File - applicationHost.config - Password Management

From my learning of IIS7 I understand that IIS7's metabase is actually XML configuration file very familiar to me and similar to ASP.NET's web.config. It is called applicationHost.config and sits in C:\Windows\System32\inetsrv\config My first interest Read More...

Posted 24 April 07 08:52 by alikl | 0 Comments   
Filed under Security, Sensitive Data, Deployment Phase, IIS 7

Code Inspection - First Look For What To Look For

Reposted from Security Code Inspection - First Look For What To Look For for further reuse on this blog. I found it extremely productive to first look for strings in the code. But what strings to look for? And how to look for the strings? Looking into Read More...

Posted 20 March 07 10:13 by alikl | 8 Comments   
Filed under Test Phase, Security, Information Gathering, Sensitive Data, Tools, Code Inspection, Development Phase

SecureString Class Two Real Usages And Counting!

SecureString Class "Represents text that should be kept confidential. The text is encrypted for privacy when being used, and deleted from computer memory when no longer needed. This class cannot be inherited. " I first was very excited about SecureString Read More...

Posted 19 March 07 04:03 by alikl | 0 Comments   
Filed under Security, Sensitive Data, Development Phase, Implementation

Google Code Search - Different Perspective

Google launches a special treat just for developers ... I'd like to present it from some different perspective. Imagine you provide search criteria as follows: " Initial Catalog " - try it. What do you see? More like these here Doesn't it make you want Read More...

Posted 05 March 07 08:56 by alikl | 1 Comments   
Filed under Test Phase, Security, Information Gathering, Sensitive Data

Search

This Blog

• Home
• Email