Notsosecure Global Services Limited

21/09/2021

New Blog Post : WhitePaper Release: Defense against Client-Side Attacks : https://notsosecure.com/whitepaper-release-defense-against-client-side-attacks/ Enjoy

A whitepaper by NotSoSecure to help Developers, Pentesters and enthusiasts understand Defense against Client-Side Attacks

05/07/2021

We're honoured to announce Notsosecure Global Services Limited as our SILVER sponsor for at DEFCON Hacking Conference this year!
Thanks to Notsosecure for supporting us!

https://notsosecure.com/

23/06/2021

New Blog Post : Tool Release: Serialized Payload Generator : https://notsosecure.com/tool-serialized-payload-generator/ Enjoy

A new self-hosted tool released to help with the Serialized Payload generation during exploiting insecure deserialization

28/05/2021

New Blog Post : Project Launch : Tracking Browser Security Enhancements : https://notsosecure.com/project-launch-tracking-browser-security-enhancements/ Enjoy

A project to track browser security enhancements or downgrades at a single place.

13/01/2021

New Blog Post : Flutter based Mac OSX Thick Client SSL Pinning Bypass : https://notsosecure.com/flutter-based-mac-osx-thick-client-ssl-pinning-bypass/ Enjoy

Flutter is cross platform application development platform, we bypassed SSL pinning on a MacOSX thick client designed using flutter.

08/12/2020

We are happy to announce our collaboration with NotSoSecure(Part of Claranet Cyber Security UK)

Sarin Balakrishnan Sujata Damodaran

03/11/2020

New Blog Post : Let’s Cook ‘Compliance as Code’ with Chef InSpec : https://notsosecure.com/lets-cook-compliance-as-code-with-chef-inspec/ Enjoy

Embedding your compliance requirements in few simple lines of code using Chef InSpec.

22/09/2020

New Blog Post : Security Architecture Review Of A Cloud Native Environment : https://notsosecure.com/security-architecture-review-of-a-cloud-native-environment/ Enjoy

Overview Due to its massive adoption, cloud computing has become a critical component for every enterprise. A large number of organisations want to migrate to the cloud, however, its security posture is still a blind spot for everyone. Nevertheless, we have seen a big rise in the number of requests....

13/08/2020

New Blog Post : Semgrep A Practical Introduction : https://www.notsosecure.com/semgrep-a-practical-introduction/ Enjoy

Static Application Security Testing or SAST is a testing methodology that analyses application source code to identify security vulnerabilities (such as, but not limited to, the Injection vulnerabilities, any Insecure Functions, Cryptographic Weaknesses and more). Typically, SAST includes both manua...

24/06/2020

New Blog Post : Continuous Security Monitoring using ModSecurity & ELK : https://www.notsosecure.com/continuous-security-monitoring/ Enjoy

Learn how to do Continous Security Monitoring using ModSecurity and the ELK stack

17/04/2020

New Blog Post : Exploiting VLAN Double Tagging : https://www.notsosecure.com/exploiting-vlan-double-tagging/ Enjoy

We have all heard about VLAN double tagging attacks for a long time now. There have been many references and even a single packet proof of concept for VLAN double tagging attack but none of them showcase a weaponized attack. In this blog Amish Patadiya will use VLAN double tagging... Read More