Application security
Application security
In this part of the series, we are going to examine the different ways to escape HTML characters in PHP in order to add security to your web project. We will
January 9, 2015
Ivan DimovApplication security
In this article we will look at all the things you need to do to set up a pentesting platform on iOS 8 and be comfortable with using all the tools. Jailbreak
December 26, 2014
Prateek GianchandaniApplication security
We have already discussed in my previous articles how to configure Mod Security Firewall with OWASP rules and also analysed the different types of logs which
December 4, 2014
Nikhil KumarApplication security
In all of our previous articles so far in this series, we discussed all the examples only on rooted devices and emulators. Generally, there are people who ar
December 2, 2014
SrinivasApplication security
In this article series, we will learn at the various concepts of Android application security while exploiting a vulnerable app InsecureBankv2. We will be lo
November 25, 2014
Prateek GianchandaniApplication security
Establishing a penetration testing methodology is becoming increasingly important when considering data security in web applications. The more we come to rel
November 21, 2014
Dan VirgillitoApplication security
In this article, we will look at how we can analyze network traffic for applications that use certificate pinning. One of the best definitions I found of cer
October 30, 2014
Prateek GianchandaniApplication security
What is a parameterized SQL query? It is used for better performance, high efficiency and prevention of SQL injection vulnerability. Before going further, l
September 19, 2014
Coder GeekApplication security
In this article, we will look at another cool utility named iDB for pentesting iOS applications. Before that, i would like to apologize for coming up late wi
August 27, 2014
Prateek GianchandaniApplication security
In the previous article, we had already configured the Mod-Security Firewall with OWASP Core Rule Set (CRS). But installing and configuring the Mod Security
August 12, 2014
Nikhil KumarLearn how to secure systems with 11 courses from Infosec Skills instructor and #1 best-selling author Ted Harrington.
- Hack your system
- Establish your threat model
- Spend wisely
- And more
In this series
- New Page Test 4
- New Page test3
- New Page test2
- New Test Page
- DevSecOps: Moving from “shift left” to “born left”
- What’s new in the OWASP Top 10 for 2023?
- DevSecOps: Continuous Integration Continuous Delivery (CI-CD) tools
- Introduction to DevSecOps and its evolution and statistics
- MongoDB (part 3): How to secure data
- MongoDB (part 2): How to manage data using CRUD operations
- MongoDB (part 1): How to design a schemaless, NoSQL database
- Understanding the DevSecOps Pipeline
- API Security: How to take a layered approach to protect your data
- How to find the perfect security partner for your company
- Security gives your company a competitive advantage
- 3 major flaws of the black-box approach to security testing
- Can bug bounty programs replace dedicated security testing?
- The 7 steps of ethical hacking
- Laravel authorization best practices and tips
- Learn how to do application security right in your organization
- How to use authorization in Laravel: Gates, policies, roles and permissions
- Is your company testing security often enough?
- Authentication vs. authorization: Which one should you use, and when?
- Why your company should prioritize security vulnerabilities by severity
- There’s no such thing as “done” with application security
- Understanding hackers: The insider threat
- Understanding hackers: The 5 primary types of external attackers
- Want to improve the security of your application? Think like a hacker
- 5 problems with securing applications
- Why you should build security into your system, rather than bolt it on
- Why a skills shortage is one of the biggest security challenges for companies
- How should your company think about investing in security?
- How to carry out a watering hole attack: Examples and video walkthrough
- How cross-site scripting attacks work: Examples and video walkthrough
- How SQL injection attacks work: Examples and video walkthrough
- Securing the Kubernetes cluster
- How to run a software composition analysis tool
- How to run a SAST (static application security test): tips & tools
- How to run an interactive application security test (IAST): Tips & tools
- How to run a dynamic application security test (DAST): Tips & tools
- Introduction to Kubernetes security
- Key findings from ESG’s Modern Application Development Security report
- Microsoft’s Project OneFuzz Framework with Azure: Overview and concerns
- Software maturity models for AppSec initiatives
- Best free and open source SQL injection tools [updated 2021]
- Pysa 101: Overview of Facebook’s open-source Python code analysis tool
- Improving web application security with purple teams
- Open-source application security flaws: What you should know and how to spot them
- Android app security: Over 12,000 popular Android apps contain undocumented backdoors
- 13 common web app vulnerabilities not included in the OWASP Top 10