Praveen K

Application Security enthusiast, Penetration tester, Security researcher
#Appsec @iprav33nk #Security

[Praveen K @iprav33nk]

@ARanganathan72 By

[Tilak Thimmappa @tilakthimmappa]

I have updated Pyraider with following features
* Scan and Export packages by severity
* #CICD support
* Basic TestCases
Severity feature gives the precise result and also we can prioritize the vulnerabilities based on severity. #Python #appsec #DevSecOps https://t.co/B2mViKHAzS

[Inon Shkedy @InonShkedy]

==API TIPS==
To welcome the new year, we published a daily tip on API Security & API Pentesting during the month of January 2020.

Check out my new article and explore 31 tips + interesting insights about them.

https://t.co/WMSkVJj474

#bugbountytips

[Abhay Bhargav @abhaybhargav]

Highly recommend #tplmap to find and exploit server-side template injections with systems like #jinja2 #pug #velocity and others. Attempts a variety of techniques. Was able to find and exploit an SSTI in pug within minutes yesterday #webappsec #appsec https://t.co/9GDCD07Sto

[Vickie Li @vickieli7]

I just published Hacking Python Applications https://t.co/xv4asIZHV9

[Zed Attack Proxy @zaproxy]

We have brand new @owasp ZAP API docs c/o @sshniro and Google Season of Docs (@GoogleOSS) : https://t.co/3EnsjrEX0l

[Praveen K @iprav33nk]

@abhaybhargav speaking at @OWASPMelbourne on the day 1 of our Application security Essentials Training.
#appsecessentials #owasp

[Praveen K @iprav33nk]

Excited to be conducting the Devsecops master class workshop at @isacachennai ICC2019
#everythingdigital #isacachennai

[we45 @we45]

Be sure to tune in next week for a live session on secure @oauth_2 usage by @topavankumarj .The webinar shall include live demos and a dedicated Q&A. Register at https://t.co/hlMbRdsTSv

[we45 @we45]

Registrations are now open for this month's free webinar. Join @topavankumarj on July 25 for a comprehensive understanding of security in @oauth_2 usage. Save your seat here https://t.co/JVNO3plw3B

[timo @timo_thraem]

The new @OWASP ZAP is released. The HUD in the new ZAP provides more Usability, so more people can research vulnerabilities in WebApps. Download it and spread it as a "everyone can find vulns" Program in your Orga. Improve #ITSecurity together
https://t.co/Dx8EhLWm4d

[Orchestron @orchestronIO]

Blog Alert : Modify the functionality of the #OWASP @zaproxy and augment it’s capabilities to identify specific vulnerabilities https://t.co/TUH16oKd99
#AppSec #DAST

[Orchestron @orchestronIO]

Webinar Alert : Team we45 aims at improving your AppSec program! Join @abhaybhargav and @sharathkramadas as they discuss all things Application Vulnerability Correlation (AVC). Register now - https://t.co/C5mEmMUaxW
#AppSec #VulnerabilityManagement #VulnerabilityCorrelation

[Praveen K @iprav33nk]

It was a great learning experience at the @we45 CTF! Would like to thank @abhaybhargav @sharathkramadas @ti1akt for putting together the the amazing #serverless app.

#ctf #appsec #winningteam

[we45 @we45]

And the winner is "team pwnhub". Congratulations go to @bondijois , @topavankumarj , @iprav33nk , @anilprasad_as , Vishnu Prasad and Sahad Thangal

[Nithin Jois @bondijois]

.@ti1akt talking about how there's been an increase in attacks against APIs over the years at #DevSecCon Singapore.

[Tilak Thimmappa @tilakthimmappa]

@sharathkramadas is talking about attacker view of #serverless and #graphql at #DevSecCon Singapore

[Sharath Kumar Ramadas @sharathkramadas]

@tilakt from @we45 all set to present his talk about securing web services @devseccon Singapore

[Anant Shrivastava @anantshri]

Second demo started: threatmodeli g as a code : threatplaybook by @iprav33nk started at @Owaspseasides tools demo.

[Praveen K @iprav33nk]

The #threatmodeling exercise on #Blockchain by @ajithatti was a great experience at @Owaspseasides
@we45
#appsec

[Michael Stepankin @artsploit]

Exploiting Spring Boot Actuators - a hidden door to your Java Spring App. https://t.co/TsD8X8C0jr