Security Audit

Our Web Application Pentest ( WAP) attempts to address the Owasp top 10 & SANS top 20 web application vulnerabilities and other exploitable loopholes of your web application . Along with it our WAP team also test web applications for Business logic flaws that can directly or indirectly effect the functioning of application.

Trainings

We are here to help you solve your biggest query- where and how to start? CDI has brought various courses in Ethical Hacking in Chandigarh where all you technology lovers will be given the much needed push to move forward and create a niche for yourself in the field. From Beginner to Expert level we have many kinds of training patterns.

India Nigeria Partner With Us Latest Events Articles
91-771045-0011
Call Us : +91-771045-0011
91-771045-0011

Beware VMware users! Hackers Could Hijack Your Web Session!

 Posted By: Ljsingh / Apr 15, 2016 /  VMware Plugin Vulnerability , MITM Attack , Session Hijack , cyber security , Information Security , CDI

Beware VMware users! Hackers Could Hijack Your Web Session!     Are you a VMware player and VMware Workstation user? If yes, then update it as soon as possible. A major vulnerability has been found by some security researchers in Client Integration Plugin of VMware. This security issue was allowing hackers to hijack the web session of VMware users. MITM attack was also possible due to this vulnerability. This vulnerability has been registered by the security researchers under CVE-

OAuth2.0 Protocol Used in Login process of Facebook is vulnerable!

 Posted By: Ljsingh / Jan 13, 2016 /  OAuth2.0 Protocol , Vulnerability , HTTP 307 Temprary Redirect , MITM Attack , cyber security , Information Security , CDI

OAuth2.0 Protocol Used in Login process of Facebook is vulnerable! OAuth2.0 is security protocol, which has been used by many social networking websites for user authentication process. Researchers have found two vulnerabilities in this protocol. By performing MITM (Man-in-the-middle) attack hackers can steal credentials of user, due to these flaws. A couple of vulnerabilities has been found by 3 researchers of Trier University in OAuth2.0 protocol. By Exploiting these vulnerabilities hacker

Why Hackers Hack Normal user’s social media accounts?

 Posted By: Ljsingh / Nov 9, 2015 /  cyber security , Brute Force Attack , MITM Attack , China MITM Attacks , Phishing , Hacked , Social Media

Why Hackers hack Normal user’s social media accounts? Social media hacks are very common now a day, but what are its benefits to the hackers? Why hackers hack social accounts of non-celebrity users? A normal user thinks how it is beneficial for a hacker to hack social accounts, when there are many other things to hack like theft from bank etc. After reading this article you will understand that it is not about celebrities or non-celebrities social accounts, it’s about the &ls

Securify reveals Pinterest, Yammer iOS Apps prone to MITM attacks

 Posted By: Ljsingh / Apr 9, 2015 /  Pinterest , Yammer , Microsoft , MITM Attack

Securify, a dutch security firm, have revealed a serious vulnerability in Pinterest and Yammer iOS apps, which can lead bad actors to perform Man-in-the-Middle attacks. In an official tweet, Securify showed how burpsuite disclosed the passwords sent over the network within apps and are clearly visible. The vulnerability in the application is caused due to failure of server certificates validation, allowing bad actors to eavesdrop in users' talks. But the issue has been fixed in the latest v

After GMAIL Outage in China , its Time for MS Outlook Hack

 Posted By: cdi / Jan 19, 2015 /  Outlook , Outlook Hack , MITM Attack , China MITM Attacks , Google , GMAIL , Microsoft , GreatFire

Chinese version of "WikiLeaks" - GreatFire reported on Monday, about latest news of Microsoft's Outlook email system being hacked on 17th of January. According to the report, Microsoft's Outlook (which was merged with Hotmail in 2013), was targeted using Man-In-the-Middle (MITM) attack in China. The follwoing snapshots shows what happens when a Chinese user accesses Outlook via an email client (in this case, Ice-dove): GreatFire says, We have tested Outlook to verify the at