The Secret Handshake – Covertly Redirecting Mobile Traffic to a Different Backend
Learn how to covertly redirect mobile app traffic to different backends during penetration tests, overcoming common challenges with Burp Suite and mitmproxy.
The Critical Need for API Security Testing
Discover why API security testing is crucial for protecting sensitive data and preventing breaches in modern applications.
The Client-Side Security Trap: A Warning For Developers
Shed light on the importance of a balanced approach to security, emphasizing the critical role of server-side controls alongside client-side mechanisms
Quick Bites Episode 11 – Ranking Application Risks
Learn how to rank the risk associated with vulnerabilities in your application, then prioritize the risk based on criticality.
What does PCI require for Developer Training?
Understand what the PCI DSS requires for annual developer training.
Does Time Boxed Pentesting Have Value?
Discover the efficiency of time-boxed penetration testing. Maximize coverage, complement ongoing testing, and address security challenges effectively.
Mission Imfuzzable: How to Fuzz Web Apps you can’t Intercept
This post deals with a real-world scenario of testing a web app that could not be intercepted, and the tooling that came from the solving that.
Essential Security Requirements for Application Development
Explore common security requirements for customer-facing applications.
Understanding Server-Side Template Injection (SSTI)
Discover the risks of Server-Side Template Injection (SSTI) vulnerabilities, learn how to detect and prevent them, and safeguard your web applications.
Introducing SamuraiWTF 5.3: A Powerhouse for Web App Pen Testing
Explore SamuraiWTF 5.3, the latest in web application penetration testing. New updates to Katana offer enhanced tools for a robust security toolkit.