Understanding Server-Side Template Injection (SSTI)
Discover the risks of Server-Side Template Injection (SSTI) vulnerabilities, learn how to detect and prevent them, and safeguard your web applications.
Introducing SamuraiWTF 5.3: A Powerhouse for Web App Pen Testing
Explore SamuraiWTF 5.3, the latest in web application penetration testing. New updates to Katana offer enhanced tools for a robust security toolkit.
How often should web penetration testing be conducted?
Regular web application penetration testing is crucial for security. Learn how often to conduct tests and tips for effective implementation.
ZAPmas Feedback
A great introduction to ZAP that provide a very fair and balanced comparison to Burp Suite.
Twelve Days of ZAPmas – Day 11 – ZAP impressions from a Burp user
Day 11 of the series makes a comparison of ZAP versus Burp from the perspective of a long-time Burp user who is relatively new to ZAP.
Twelve Days of ZAPmas – Day 10 – Manual Web App Testing Unproxied
Day 10 of the series delves into manual testing of web apps that you can’t proxy for some reason, and how to work around that limitation.
Twelve Days of ZAPmas – Day 4 – Fuzzing for Injection
The fourth day of the series introduces using ZAP’s Fuzzer tool to fuzz for injection flaws in the client (XSS) and server.
Twelve Days of ZAPmas – Day 1 – Setting Up ZAP
This post kicks off the 12 day series by setting up OWASP Zed Attack Proxy and walks through the manual steps to setup Chrome or Firefox to proxy through.
Coming Soon – Twelve Days of ZAPmas
This announcement teases the upcoming (December 2022) series providing an onramp for developers and QA specialists to start using OWASP Zed Attack Proxy.
Quick Bites Ep 4 – Let’s Talk About SSRF, Baby!
This Quick Bites will help you gain a basic understanding of SSRF, how it’s exploited, and how to mitigate it.