It’s Okay, We’re All On the SameSite
With Google’s recent announcement that all cookies without a SameSite flag will be treated as having SameSite=Lax set by default in Chrome version 80…
Better API Penetration Testing with Postman – Part 4
This is the final part of this series. We will use some of Burp Suite’s extensions to augment your API testing toolchain.
Better API Penetration Testing with Postman – Part 3
We will dig into some slightly more advanced functionality in Postman that you almost certainly want to leverage.
Better API Penetration Testing with Postman – Part 2
In Part 1 of this series, I walked through an introduction to Postman, a popular tool for API developers that makes it easier to test API calls.
Security Misconfigurations
The configuration of web and application servers is a very important aspect of web applications. Often times, failure to manage proper configurations…
Better API Penetration Testing with Postman – Part 1
This is the first of a multi-part series on testing with Postman.
Android App Testing on Chromebooks
As of March 2021, I’d recommend using Android Virtual Devices over Chromebooks.
Three C-Words of Web App Security: Part 3 – Clickjacking
Prologue back in April, called A Brief Evolution of Web Apps, to set the scene for those less versed in web application history.
Fuzz Testing
A brand new piece of software, a program, a network, or an operating system, you will want to test it for any bugs, coding errors or other potential issues
Stored XSS: What Is It
In the cyber security world, there are a number of vulnerabilities to be aware of. Today we’re going to look at a specific one; Stored Cross-Site Scripting