Essential Security Requirements for Application Development
Explore common security requirements for customer-facing applications.
Understanding Server-Side Template Injection (SSTI)
Discover the risks of Server-Side Template Injection (SSTI) vulnerabilities, learn how to detect and prevent them, and safeguard your web applications.
Introducing SamuraiWTF 5.3: A Powerhouse for Web App Pen Testing
Explore SamuraiWTF 5.3, the latest in web application penetration testing. New updates to Katana offer enhanced tools for a robust security toolkit.
Introducing BILE – Groundbreaking Classification for Web App
Discover the BILE Classification Scheme, a simple yet effective system for classifying web application vulnerabilities. Download the whitepaper now.
ZAPmas Feedback
A great introduction to ZAP that provide a very fair and balanced comparison to Burp Suite.
12 Days of ZAPmas – Day 12 Testing a new Content-Security-Policy
This final day closes out the series with a look at using ZAP to test and refine a Content-Security-Policy (without breaking your app).
Twelve Days of ZAPmas – Day 11 – ZAP impressions from a Burp user
Day 11 of the series makes a comparison of ZAP versus Burp from the perspective of a long-time Burp user who is relatively new to ZAP.
Twelve Days of ZAPmas – Day 10 – Manual Web App Testing Unproxied
Day 10 of the series delves into manual testing of web apps that you can’t proxy for some reason, and how to work around that limitation.
Twelve Days of ZAPmas – Day 9 – Automated Scanning and ATTACK mode
Day 9 of the series digs into ZAP’s automated scanning capabilities.
Twelve Days of ZAPmas – Day 8 – Spidering
Day 8 of the series looks at ZAP’s spidering capabilities and the basic setup for associating login and credentials to a context.