Stored XSS: What Is It
In the cyber security world, there are a number of vulnerabilities to be aware of. Today we’re going to look at a specific one; Stored Cross-Site Scripting
Twelve Days of XSSmas
This series of daily mini-posts, running from December 12, 2018 to December 24, 2018, is intended to provide cross-site scripting (XSS) related tips.
Three C-Words of Web App Security: Part 2 – CSRF
I identified several types of requests as generally considered safer, and therefore not subject to CORS when being sent across origins.
Three C-Words of Web App Security: Part 1 – CORS
For those less versed in web applications and how they’ve evolved, I wrote a sort of prologue to this post back in April 2018.
A Brief BeEF Overview
BeEF, the Browser Exploitation Framework, is a testing tool that allows the penetration tester to look past hardened network perimeter and client system..
SQLite: the good, the bad, the embedded database
SQLite is an embedded, open-source, lightweight SQL database engine. The C based library is transactional, self-contained, and highly compact.
CORS Global Policy
I recently noticed an uptake on Cross-Origin Resource Sharing (CORS) findings showing up in automated scanning tools…
Is My Application Illegal?
Mobile devices and applications are everywhere, and we have seen tons of guides and what not on how to build successful businesses.
We Can’t Rely on the Browser for Protection
A large part of doing security consulting is providing proper mitigations and recommendations to our clients. Sure, the testing is the exciting part…
Getting Started with BeEF: The Browser Exploitation Framework
This post is the first in a series on Getting Started with information security tools.