Mobile Testing Considerations

Discover essential considerations for testing mobile web applications efficiently.

Mission Imfuzzable: How to Fuzz Web Apps you can’t Intercept

This post deals with a real-world scenario of testing a web app that could not be intercepted, and the tooling that came from the solving that.

Quick Bites Episode 8 – (Back From the) Dead Space

In this ep of Quick Bites, we’re discussing the critical risk vulnerability in MOVEit Transfer, and how you can protect yourself from it…and Necromorphs.

Understanding Server-Side Template Injection (SSTI)

Discover the risks of Server-Side Template Injection (SSTI) vulnerabilities, learn how to detect and prevent them, and safeguard your web applications.

Introducing BILE – Groundbreaking Classification for Web App

Discover the BILE Classification Scheme, a simple yet effective system for classifying web application vulnerabilities. Download the whitepaper now.

Quick Bites 7 – Dr. TamperMonkey (Or: How I Learned to Stop Worrying and Love JavaScript)

In this episode of Quick Bites, you will learn some tips on writing your own browser-based userscripts.

ZAPmas Feedback

A great introduction to ZAP that provide a very fair and balanced comparison to Burp Suite.

12 Days of ZAPmas – Day 12 Testing a new Content-Security-Policy

This final day closes out the series with a look at using ZAP to test and refine a Content-Security-Policy (without breaking your app).

Twelve Days of ZAPmas – Day 11 – ZAP impressions from a Burp user

Day 11 of the series makes a comparison of ZAP versus Burp from the perspective of a long-time Burp user who is relatively new to ZAP.

Twelve Days of ZAPmas – Day 10 – Manual Web App Testing Unproxied

Day 10 of the series delves into manual testing of web apps that you can’t proxy for some reason, and how to work around that limitation.