👨💻 AppSec enthusiast | Shetland sheepdog addict | Open Source+AppSec+OWASP junkie | OWASP Secure Headers Project Leader. 📍 Opinions mentioned are mine.
OWASP projects GitHub repos
Joined June 2009
- Tweets4.6K
- Following0
- Followers1.1K
- Likes4.4K
Pinned Tweet
🛬Migration to @bluesky finished.
bsky.app/profile/righettod.b…
🏠I will now only post on @bluesky and @LinkedIn.
Dominique Righetto retweeted
Stop 👏 assuming 👏 every 👏 vulnerability 👏 write-up 👏 or 👏 talk 👏 at 👏 conferences 👏 shows 👏 the 👏 actual 👏 discovery 👏 path.
What you see is the polished version—the real work is messy, full of dead ends, and intuition-driven.
Embrace exploration! 🔍✨
Dominique Righetto retweeted
Je te refais découvrir ce site incroyable qui regroupe pleins de layout en CSS👀
Ça s'appelle phuoc.ng/collection/css-layo… ! Certains sont un peu gadget mais d autres sont extrêmement utile !
Dominique Righetto retweeted
Did you know you can now upload SOAP API definition files directly to Burp Suite Professional? 🧼 #SOAP #BurpSuiteTopTip
Dominique Righetto retweeted
This week has been crazy with a lot of excellent content that should keep you busy for a while! Crypto, Sandboxes, WAF Bypasses…
You can find more details in our blog: pentesterlab.com/blog/resear…
🗞 dustri.org/b/upcoming-harden…
🗞 github.com/elikaski/ECC_Atta…
🗞 mdsec.co.uk/2024/10/when-waf…
🗞 jhftss.github.io/A-New-Era-o…
🗞 github.com/martinvonz/jj/sec…
🗞 github.com/ssl/shortboost
🗞 googleprojectzero.blogspot.c…
#PentesterLabWeekly
📡 OWASP Secure Headers Project: For information, we generate statistics on the use of security headers in HTTP responses for the most popular websites. These statistics are updated monthly.
#appsec #appsecurity #http
📊 github.com/oshp/oshp-stats/b…
💡 Source used:
blog.majestic.com/developmen…
Dominique Righetto retweeted
I'm doing a talk at the @OWASPBrisbane meetup on the 18th of November on Code Review, JWT, Golang...
It's going to be a lot of fun and I will bring swag and stickers!
meetup.com/brisbane-owasp-me…
Dominique Righetto retweeted
New LOL project, LOLAD a collection of Active Directory techniques! 👇
lolad-project.github.io/
Dominique Righetto retweeted
Ever wanted to fuzz a WebSocket? We've just updated WebSocket Turbo Intruder with some new features. If you've used Turbo Intruder already, it should feel familiar :)
Dominique Righetto retweeted
Interesting how signature matching in Microsoft Defender is so sensitive regarding anything related to keyword "defender". So while bypassing such detection is tedious and annoying, it can still be done quite easily, as shown below.
Following an issue, discovered during my recent analysis of a web application, I have added new methods to my defensive code snippets project for checking for path traversal payloads. #appsec #web
github.com/righettod/code-sn…
📡 OWASP Secure Headers Project: Add a header indicating the presence of the product IBM WebSphere DataPower in the call flow.
#appsec #appsecurity #http
📖 owasp.org/www-project-secure…
Dominique Righetto retweeted
Manim : une bibliothèque Python Open Source pour créer des animations mathématiques. Parfait pour les vidéos éducatives et les visualisations interactives.
Il y a des profs de math dans notre audience ?
👉 Le projet : github.com/ManimCommunity/ma…
Dominique Righetto retweeted
Have you tried the new and improved Intruder? 😎 #BurpSuite #TopTipTuesday
Dominique Righetto retweeted
Make JSON greppable with @tomnomnom's gron!
gron converts JSON into grep-friendly assignments, making it easy to find and trace values to their exact paths.
Install now: github.com/tomnomnom/gron
Dominique Righetto retweeted
New release of my Firefox add-ons for Home Assistant (1.3.2). 🚀 More than 25k downloads already. 😁
- Enable audio support through web browser
- Passthrough audio through the host
- Web authentication
- Remote Debugging Port
- Set custom arguments
github.com/Mincka/ha-addons
Dominique Righetto retweeted
🚨 New Lab Alert! 🚨
We’ve just launched another ORM Leak Lab—this time focusing on SQLite, building on our latest blog post! 🔍
🧪 Explore the lab: pentesterlab.com/exercises/o…
📖 Read the blog post for insights: pentesterlab.com/blog/orm-le…
Dive into it and sharpen your skills! 💻 #AppSec #Pentesting #SQLite #WebHacking
