Exploits Work

This is my personal tech blog. Posts will primarily revolve around the various domains of information security. Note: All views are personal :-)

Menu
  • HOME
  • Tools/Scripts
  • About Me
Archive for June 2016

SSL Certificate pinning: Key Takways

Vaibhav Gupta June 13, 2016 1 Comment
Vaibhav Gupta
SSL Certificate pinning: Key Takways
There was a good discussion on OWASP-Leaders mailing list [0] some time ago regarding SSL certificate pinning in applications. 

I thought of summarizing a few key points to consider while opting for certificate pinning: 
Categories: application security appsec certificate pinning code signing Crypto Cryptography SSL Windows Security
Read More
Subscribe to: Posts (Atom)

Twitter feed - @VaibhavGupta_1

Tweets by @VaibhavGupta_1

Archive

  • ►  2017 (1)
    • ►  August (1)
  • ▼  2016 (3)
    • ►  August (2)
    • ▼  June (1)
      • SSL Certificate pinning: Key Takways
  • ►  2015 (5)
    • ►  December (4)
    • ►  August (1)

Labels

application security appsec automation certificate pinning certification code signing Crypto Cryptography Debugging DLL Hijacking Exploit Analysis Exploit Development generic infosec null oauth oauth security oscp owasp owasp zap penetration testing Privilege escalation Reverse Engineering security automation SSL Windows Security XSS zap

Popular Posts

  • CVE-2015-2098: Analysis and Exploitation of eDVR Manager ActiveX control Vulnerability
    In this post, we would be analyzing CVE-2015-2098, a stack buffer overflow vulnerability and will be building a robust exploit for Windows...
  • Design Pattern: Mitigating DLL Hijacking in Installers
    About 'DLL Search Order Hijacking' vulnerability? Windows systems use a standard method to look for required DLLs to load into...

Translate

Subscribe To

Posts
Atom
Posts
All Comments
Atom
All Comments
Copyright © 2016 Vaibhav Gupta