If you missed the @Owasp_DevSlop show this morning, here is the recording.
youtube.com/watch?v=0Ic62L92…
Hello everyone! Here's another #attackgram for you. This one is especially dangerous when it leads to remote code execution.
The #attackgram for this week is Cross-Site Request Forgery (CSRF). Hopefully banks are not vulnerable to this attack anymore but you’ll find plenty of web apps that still are.
Haven’t posted an #attackgram in a while. Here’s a good one. Have you heard of Cross-Site Scripting 😊?
Happy new year everyone! Coming back from vacation and resuming the #attackgram series. Here's Open Redirect.
One #attackgram a day keeps the security bugs away. Today’s attack is 'Download of Code Without Integrity Check'
One #attackgram a day keeps the security bugs away. Today’s attack is ‘Integer Overflow’
One #attackgram a day keeps the security bugs away. Today’s attack is ‘Password Guessing’
One #attackgram a day keeps the security bugs away. Today’s attack is ‘Use of Unsalted Hash’
One #attackgram a day keeps the security bugs away. Today: ‘Use of a Broken Crypto Algorithm’
One #attackgram a day keeps the security bugs away. Today’s attack is ‘Missing Encryption of Sensitive Data’
One #attackgram a day keeps the security bugs away. Today’s attack is ‘Missing/Incorrect Authorization’
One #attackgram a day keeps the security bugs away. Today’s attack is ‘Reliance on Untrusted Inputs’
One #attackgram a day keeps the security bugs away. Today’s attack is ‘Authentication Bypass’















