yes, no, maybe, i don't know. can you repeat the question?
Bitola, Macedonia
Joined June 2010
- Tweets220
- Following446
- Followers187
- Likes597
a small hand in helping improve OSS projects.
thanks @avelinorun for the quick and effective mitigation.
🚨Security Advisory🚨
Systemic SQL Injection vulnerability in pREST!
Initial report details published: github.com/prest/prest/secur…
#Doyensec #AppSec #Security #PostgreSQL #SQLInjection
Viktor Chuchurski retweeted
↓ A Race to the Bottom
How inadequate concurrency control in databases can lead to race condition bugs
@owasp AppSec Lisbon talk by @doyensec's @viktorot
🛠️ Vulnerable Go app
github.com/doyensec/db-race-…
📖 Slides
doyensec.com/resources/Globa…
+Semgrep rules
blog.doyensec.com/2024/07/11…
Viktor Chuchurski retweeted
We're proud our testing helps ensure the security of @ThinkstCanary's OSS Canary Tokens! As part of their transparency efforts, you can read the results of our latest round of testing here:
doyensec.com/resources/Doyen…
#doyensec #appsec #security #thinkst
if your making heavy use of database transactions in your system, make sure that you properly handle concurrency control. head over to out blog and read about the details on how transactions are processed and what issues can arise in the worst case scenarios!
Stop by and learn how to escape client-side path traversals to CSRF. @maxenceschmitt @Doyensec #owasp #appsec
Viktor Chuchurski retweeted
Let's welcome @viktorot in our lineup with his talk "A Race to the Bottom - Database Transactions Undermining Your AppSec". Congrats!
stop by and say hi!
Congrats to Doyensec's @maxenceschmitt and @viktorot for being selected to present at @OWASP's Global AppSec conference this June in Lisbon!
lisbon.globalappsec.org/
#doyensec #appsec #owasp
Viktor Chuchurski retweeted
💳 The case for improving crypto wallet security
Research from @viktorot on phishing scams targeting crypto wallets and how their security can be improved
🧰 Check their PoC, a service to collect information on ETH Dapps:
github.com/doyensec/wallet-i…
blog.doyensec.com//2023/03/2…
Viktor Chuchurski retweeted
New advisory! @viktorot provides details on a CSRF protection bypass he discovered in Sveltekit. Ensure your apps are up-to-date.
#doyensec #appsec #javascript #DevSecOps
doyensec.com/resources/Doyen…
While crypto wallets are constantly improving, there is still more to be done. The post describes a potential wallet enhancement, which will provide users access to necessary information about the Dapp they’re using, helping them more easily weed out scam attempts.
Viktor Chuchurski retweeted
📚 tl;dr sec 163
With great work from:
@nicolas_frankel, @raesene, @Doyensec, @viktorot, @includesecurity, @8x5clPW2, @sethsec, @luketucker, @emtunc, @mihai, @Tailscale, @blastbots, @simonw, @mikepsecuritee, @DanielMiessler
and more!
tldrsec.com/blog/tldr-sec-16…
Viktor Chuchurski retweeted
Announcing the release of `safeurl` - a library to help #golang devs "Build with Security"! This module provides tested & versatile protection against Server Side Request Forgery (SSRF)! Hurry and check it out!
#doyensec #AppSec
blog.doyensec.com/2022/12/13…
github.com/doyensec/safeurl
Viktor Chuchurski retweeted
The latest coordinated disclosure from our researchers (Norbert Szetei @73696e65 & Viktor Chuchurski @viktorot) details a SQLi and DoS via Prototype Pollution in #TypeORM! Time to update!
More details: doyensec.com/research.html#8…
#doyensec #TypeScript #Electron #NodeJS #appsec
