Tip: Running BurpSuite on a Mac
Quick tip to save some time when spinning up Burp Suite on a Mac. Use Burp Suite frequently enough that having an icon on my task bar is warranted.
SQLite: the good, the bad, the embedded database
SQLite is an embedded, open-source, lightweight SQL database engine. The C based library is transactional, self-contained, and highly compact.
CORS Global Policy
I recently noticed an uptake on Cross-Origin Resource Sharing (CORS) findings showing up in automated scanning tools…
Scary Web Services: Part 2
Although Snapchat’s breach appears to be due to some poor assumptions around an “internal” Snapchat API, it is not the type of traditional web service…
Scary Web Services: Part 1
I have several things I want to say about web services but why are web services scary to me in the role of a pen tester?
Web App Pre-Flight
I think that it is because of my background in software development that I am passionate about integrating security testing with the SDLC.
We Can’t Rely on the Browser for Protection
A large part of doing security consulting is providing proper mitigations and recommendations to our clients. Sure, the testing is the exciting part…
Comparing Authorization Levels with Burp’s Compare Site Map feature
Burp Suite from Portswigger.net is a fantastic web app testing tool that we use regularly at Secure Ideas.
Introduction to Burp Suite Webcast
The below video is an introduction to Burp Suite. This is the first of our videos that will teach people how to use Burp Suite and other tools the same…
Getting Started with BeEF: The Browser Exploitation Framework
This post is the first in a series on Getting Started with information security tools.