Securing applications is not the easiest thing to do. An application has many components: server-side logic, client-side logic, data storage, data transportation, API, and more. With all these components to secure, building a secure application can seem really daunting.
Thankfully, most real-life vulnerabilities share the same root causes. And by…
When learning how to find, exploit, or prevent security vulnerabilities, it’s important to understand the root causes of the vulnerability and what actually makes an application vulnerable.
Today, let’s talk about an extremely common vulnerability, XSS, it’s mechanisms, and how you can spot it in source code.
Cross-site scripting vulnerabilities…
Main Branch is a comic strip for developers produced by James Gilbreath, Jason Green, and Vickie Li.
You’ve probably heard of the OWASP top ten or the top ten vulnerabilities that threaten web applications. OWASP also periodically selects a list of top ten vulnerabilities that threaten APIs, called the OWASP API top ten.
The current API top ten:
In this episode of Sources and Sinks, I got the opportunity to sit down with Ben Sadeghipour, known online as NahamSec, about the experience of being a content creator in the infosec space. …
Main Branch is a comic strip for developers produced by James Gilbreath, Jason Green, and Vickie Li.
Main Branch is a comic strip for developers produced by James Gilbreath, Jason Green, and Vickie Li.
You’ve probably heard of the OWASP top ten or the top ten vulnerabilities that threaten web applications. OWASP also periodically selects a list of top ten vulnerabilities that threaten APIs, called the OWASP API top ten.
The current API top ten are Broken Object Level Authorization, Broken User Authentication, Excessive…
Main Branch is a comic strip for developers produced by James Gilbreath, Jason Green, and Vickie Li.
Twitch, a popular live video streaming service, was breached last week. Last Wednesday, an anonymous individual published a file online containing the entirety of twitch.tv’s source code, information about twitch’s internal services and development tools, penetration testing reports and tools, and payouts to prominent Twitch streamers. …
Professional investigator of nerdy stuff. Hacks and secures. Creates god awful infographics. https://twitter.com/vickieli7
