JuiceShop Workshop in less than 5 minutes
Have you ever deployed 10-30 containers in AWS with the single stroke of a key? Keep reading to find out how we did exactly this for a training class.
How to Obfuscate Strings in Rust the Easy Way Using the litcrypt Crate
How to accomplish string obfuscation in Rust the easy way using the litcrypt crate.
Application Security 202: Vulnerabilities Accepted
Studying how to accept vulnerabilities and secure applications
(Not So) Quick Bites – Episode 3 – Writing About Writer’s Block
On this (Not So) Quick Bites, we’re talking about writer’s block, and how to get over it. Here’s five tips and tricks that I use to get to writing.
Hunting Secrets
A rundown of the Secrets Hunter capability within Paramalyzer, used to quickly find instances of sensitive information leakage in web applications.
Application Security 101
Application security is a big job, for sure. And it’s not just the job of the developers or the SOC. There is an incredible amount of surface to cover.
Project Responsibilities
This page details the responsibilities for a project
Quick Bites Episode 2 – HTTP Security Headers and Why You NEED Them
Secure Ideas’ Quick Bites Ep 2 – HTTP security headers are important for webapp security. Here are some that will help lockdown your site a little better.
Privilege Escalation via File Descriptors in Privileged Binaries
Post on SetUID drop-privileges binaries with leaked file descriptors, allowing for PrivEsc. Covers how to exploit & a tool to streamline exploitation.
LD_PRELOAD: Making a Backdoor by Hijacking accept()
A demonstration on how to use LD_PRELOAD to create a backdoor in processes by hooking the accept() function.