Comparing Authorization Levels with Burp’s Compare Site Map feature

Burp Suite from Portswigger.net is a fantastic web app testing tool that we use regularly at Secure Ideas.

Autocomplete and actual risk: Why do we look at it?

Autocomplete is always a fun topic to discuss…. ok maybe my idea of fun is not the normal idea. 🙂

Brute Forcing the Change Password Feature

As a penetration tester, brute force attacks are something I test for on every application.

Decoding F5 Cookie

There are different things you come across while performing a test like the cookies returned by the F5 BigIp Server.

Grab a CORS Light

Many of you already know that any cross-site HTTP requests invoked from scripts running within a browser are restricted by the Same-Origin-Policy.

SH5ARK: Taking a Byte out of HTML5

The new features in HTML5 have opened a whole new world of opportunities for developers and for attackers.  Secure Ideas recognized this and with the help