Ferran Verdés

[Ferran Verdés @ferranverdes]

https://t.co/oeJFmtBN2j

[Ferran Verdés @ferranverdes]

Thinking about security in terms of vulnerabilities is an outdated mindset.

❌ "Are we vulnerable?" is a wrong question.
✅ The one that leads to real protection is "Are we exploitable?".

Take file uploads features as a good illustration of this.

https://t.co/6xLD2nQMLk

[Ferran Verdés @ferranverdes]

🌴 Your Company Needs (Good) Digital Nomads 🌍

After five years as a digital nomad, I’ve learned one thing — freedom fuels motivation. Letting people work from paradise might be the smartest move your company makes.

👉 https://t.co/uvZhClFSoI

#digitalnomad #lifestyle

[Ferran Verdés @ferranverdes]

As a developer, you may feel your time was wasted. It was not.

https://t.co/SHTpKCcJRr

#SecureCoding #AppSec #WebSecurity #OWASP #CyberSecurity

[Ferran Verdés @ferranverdes]

Need a quick reference for securing file names when users upload files?

https://t.co/LdfKPkgwbN

This summarises everything I've learned about file name handling.

[Ferran Verdés @ferranverdes]

Just launched The Secure Cookie 🍪—a weekly newsletter with in-depth, practical insights on Secure Coding and Web Security.

https://t.co/6u7O14ESwn

[Chema Alonso @chemaalonso]

El lado del mal - HackEPS, el Hackathon de la Universidad de Lleida (27 y 28 de Noviembre) https://t.co/KNLkpxEaPy

[Ammar Amer @cry__pto]

$8,000 Bug Bounty Highlight: XSS to RCE in the Opera Browser:
https://t.co/vkRrDu8iuG

[Nicolas Krassas @Dinosn]

Pentesting Active Directory https://t.co/fuSnfQD4qF

[Syed Mushfik Hasan Tahsin @SMHTahsin33]

Hello,
If you are just getting started into bug bounties and can't find enough resources, this thread might help you to find a way 👇

[Imran Shaikh @imran407704]

Mindmap
Credit - Goes to the Owner, I am not the Owner of this Mindmap.
#mindmap #infosec #Pentesting #bugbounty #pentestingmindmap #pentest

[Revista SIC @SicRevista]

Como es habitual en cada edición, en SIC recomendamos libros de interés. En el nº143 encontrará sobre Criptografía (de @mindcrypt), Derecho (de @OfeTG), Hacking wifi (de @ferranverdes) y Comportamiento (de Wayne Patterson y Cynthia E. Winston-Proctor) https://t.co/1bqsWggMIY

[Ferran Verdés @ferranverdes]

@carlesm Moltes gràcies per compartir-ho @carlesm. S'intentarà donar més accessibilitat a la ciberseguretat a tothom.

[cr0hn @ggdaniel]

Acabo de descubrir esta maravilla: Generado de números válidos de documentos Españoles: DNI, pasaportes, IBAN, CC.... una maravilla para hacer pruebas y test de integración https://t.co/rpE7d3W58Q

[hackplayers @hackplayers]

Ataques man-in-the-browser (MitB) https://t.co/wgqQd5K2Tg

[reмо̷̷иѕec @remonsec]

I was talking about this type of attacks with XMLRPC

https://t.co/QI7viSu2kS

#bugbountytips

[Miguel A. Arroyo @Miguel_Arroyo76]

Decrypting TLS streams with #Wireshark by @DidierStevens

Part 1: https://t.co/ZBirQSCO0S

Part 2: https://t.co/57NJR2SZgU

Part 3: https://t.co/hKuB8irowJ

[AllPentesting @AllPentesting]

Os dejamos por aquí una Nmap Cheat Sheet, con todos los pasos explicados detalladamente. 💻😉

En el siguiente enlace podéis descargarla 👉 https://t.co/0nxrmB7R6U

#AllPentesting #Nmap #Hacking #Cibersecurity https://t.co/oluutvvEGm

[Luis Madero @_Y000_]

Mis escritos de inyecciones sql ya disponibles en ingles y español:

➡️Inyección sql basica:
https://t.co/RraqOArrGg
➡️Inyección sql medio - avanzado:
https://t.co/xDCshi5gh0
➡️Inyección sql usando sqlmap:
https://t.co/yqUdlKLuQZ
➡️lista de payloads:
https://t.co/jfHbZD5w6k