appsec_io

Old school application security and home of the AppSec Finding Database

[appsec_io @appsec_io]

Some humor to kick this off!

[appsec_io @appsec_io]

Next in the appsec series - How to wrap up an application security test - the right way #appsec #owasp #infosec https://t.co/Dr01mE6gZD

[appsec_io @appsec_io]

Clipboard Enabled now in the AppSec Finding Database - keep sensitive data away from malicious apps https://t.co/gJhyyLxCmn #appsec #infosec

[@[email protected] @buherator]

CVE-2017-12615 Apache Tomcat Remote Code Execution via JSP upload https://t.co/OcVMGzdGo9

[appsec_io @appsec_io]

Kick Off Application Security Testing The Right Way #appsec #infosec #owasp https://t.co/lYc52JZXDI

[appsec_io @appsec_io]

Discovering a Session Hijacking Vulnerability in GitLab https://t.co/rF35aSqGR5 via @incapsula_com

[appsec_io @appsec_io]

The AppSec Findings Database now has mobile - just added Code Not Obfuscated - https://t.co/kDwpoXyv6J

[appsec_io @appsec_io]

Just added cert pinning to the AppSec Finding Database. Many popular iOS and Android apps continue to be vulnerable. https://t.co/sEVCxcUcCz

[appsec_io @appsec_io]

How To Map A Web Application Like A Pro https://t.co/dIpigyespu

[appsec_io @appsec_io]

Added Insecure File Share to the AppSec Finding Database. Our favorite example, credentials to a SharePoint farm https://t.co/jonLIhZPxz

[Lee Holmes @Lee_Holmes]

The best 10 minutes you'll ever spend learning about Social Engineering from @HackingDave @kevinmitnick @defcon: https://t.co/8C6EQPsea9

[appsec_io @appsec_io]

A little #InfoSec and #appsec humor!

[appsec_io @appsec_io]

Added Insecure Web Storage to the AppSec Finding Database. Our favorite example, using it as a client side database https://t.co/YnezlEmeXm

[appsec_io @appsec_io]

How To Create An Awesome Application Security Report https://t.co/BNyyBvXvQk #appsec #infosec

[appsec_io @appsec_io]

Added Authorization Bypass as a finding today. Our favorite bypass, enabling a disabled button in the GUI. https://t.co/DDFy2vcaO0

[appsec_io @appsec_io]

How To Write An Application Security Finding https://t.co/Wh3y7Liati

[appsec_io @appsec_io]

We have added Insufficient Attack Protection as a new finding per OWASP 2017 Top 10. Much debated but we like it. https://t.co/pHNcdQkoAa

[appsec_io @appsec_io]

How To Scope A Web Application Security Test - https://t.co/YQ7aI0oBny

[appsec_io @appsec_io]

Top 10 Mistakes in Application Security Testing - https://t.co/oSfyFZkWeu

[appsec_io @appsec_io]

AppSec io, coming soon!