ZAPmas Feedback

A great introduction to ZAP that provide a very fair and balanced comparison to Burp Suite.
Digging Between the Couch Cushions – CouchDB CVE-2021-38295 Breakdown

In this blog post we’re going to take a look at the recent CouchDB vulnerability, CVE-2021-38295, which I was credited with discovering.
Announcing Burp Co2!

Over the past couple of months I have been using my Java skills to build a collection of Burp extensions that have been dubbed “Co2”.
The Death and Rebirth of Musashi.js OR How I turned personal failure into better teaching tools.

As I stood in front of a class of developers trying to explain cross-origin resource sharing, I knew I wasn’t conveying it well enough.
How I Became a Security Consultant: AbsoluteAppsec Interview

Every so often, podcasts and such will invite me to speak on a variety of topics. And this week, I was very excited to join @cktricky and @sethlaw…
SamuraiWTF 4.0 Finally Released

As we discussed previously, the build process that has supported this project for the last decade is WAY too difficult to maintain.
The Future of SamuraiWTF

Samurai Web Testing Framework, if you’re not familiar with it, it’s a linux environment that is primarily now used for teaching web application pentesting.
Introducing Burp Correlator!

This new Burp extension is designed to help with efficiency when you are testing a complex application full of parameters or a series of applications.
SamuraiWTF 3.0 and into the future!

We are really excited to announce that SamuraiWTF 3.0 is now available publicly.
Burp CO2 now sports some Laudanum Scripts!

Updates to the Burp CO2 extension suite over the past couple of months but the most exciting one is the addition of Laudanum functionality.