Pavan Kumar J

[Travel INDIA @TravelIndiaPage]

https://t.co/rMoVhCOUkS

[we45 @we45]

Are you a user of #OAuth? Our latest webinar by @topavankumarj on keeping protected user data secure is now live on our YouTube channel. Watch at https://t.co/KL4xi9Jkbm

[we45 @we45]

Be sure to tune in next week for a live session on secure @oauth_2 usage by @topavankumarj .The webinar shall include live demos and a dedicated Q&A. Register at https://t.co/hlMbRdsTSv

[Sharath Kumar Ramadas @sharathkramadas]

@abhaybhargav and I, all set to start Day 1 training of “DevSecOps - MasterClass” @OWASPIL TelAviv #GlobalAppSec @AppSecEU

[we45 @we45]

#SAST, #DAST or #SCA scans generating too much vulnerability data? Attend our upcoming webinar to learn how security teams can increase their efficiency upto 20% through effective #vulnerabilitymanagement. Register at - https://t.co/IW6aR4GY9H @zaproxy @Burp_Suite @ArachniScanner

[we45 @we45]

And the winner is "team pwnhub". Congratulations go to @bondijois , @topavankumarj , @iprav33nk , @anilprasad_as , Vishnu Prasad and Sahad Thangal

[we45 @we45]

. @we45 's #container Security, Orchestration and #Serverless training is in full swing at @devseccon Singapore. #AppSecTourBus2019

[Pavan Kumar J @topavankumarj]

Got an awesome experience by building a REST API server with flask #Fedexweek

[we45 @we45]

. @topavankumarj ,@iprav33nk and Anil A S have built an API server which can be used to run reconnaissance activities like domain lookup, port scan, domain takeover and much more with #OpenSource tools

[we45 @we45]

Alert to all #AWS S3 users: An attacker can takeover your subdomain and serve malware to your users if you forget to scrutinize your DNS records every time you terminate usage of a S3 bucket. Read more at https://t.co/gjwKDfzH4w

[Pavan Kumar J @topavankumarj]

#AppSec #zapapi #zapscripting #webinar

[we45 @we45]

Learn the gamut of possibilities that @zaproxy API and scripting bring for development and security engineering teams. @we45 webinar on #AppSec Testing with ZAP is up on youtube, watch at https://t.co/UcBXmDoH1u

[Pavan Kumar J @topavankumarj]

A lot of times S3 bucket are deleted but the corresponding DNS records are not removed which may lead to a subdomain takover. In this article, I have illustrated how to find and exploit this vulnerability
#AWS #AppSec #vulnerability #exploit #domaintakeover #amazons3

[we45 @we45]

Misconfigured #AWS S3 permissions can leave the door open for unauthorized access. Learn how an unclaimed S3 bucket can escalate to a sub-domain takeover at https://t.co/gjwKDfRhW4

[Orchestron @orchestronIO]

MYTH - Only teams with automated security testing processes need an application vulnerability platform.
FACT - All application security teams need an application correlation platform to better manage vulnerabilities; automation or not.
Learn why - https://t.co/DwNUJI4yFt

[Orchestron @orchestronIO]

How do development teams avoid fixing the same vulnerability over and over again? Here is how - https://t.co/JVTxxwUv7c

#FindEarlyFixEarly #AppSec

[Orchestron @orchestronIO]

The core philosophy of DevSecOps is in transforming a Vulnerability to a Defect. Read More https://t.co/UmO9BvlBjy

#FindEarlyFixEarly #BugTracking #JIRA

[we45 @we45]

Recently adopted #Kubernetes ? Have you made security an active consideration in its use? Get started by watching @we45 's free webinar on securing Kubernetes deployments at https://t.co/bXClVIUWNJ

[Orchestron @orchestronIO]

Orchestron is more than just a correlation tool, it's a platform that helps security AND development teams streamline their application security processes. See what Orchestron can do - https://t.co/ZVh7YBMxQ3

#FindEarlyFixEarly #VulnerabilityCorrelation #AppSec

[we45 @we45]

Did you know of @owasp @zaproxy 's ability to consume scripts, which can be leveraged by the tester to create custom functionalities that augment its capabilities. Register for our upcoming webinar to learn the same through live demonstrations at https://t.co/rtd178nmxL #AppSec

[Orchestron @orchestronIO]

Orchestron correlates and filters out scan results from multiple scanner sources and reports only the unique vulnerabilities. #DevSecOps #DevOps #AppSec #NoiseCancellation

[Orchestron @orchestronIO]

Introducing Orchestron - Helps you manage vulnerabilities, while you manage the product! #DevSecOps #DevOps #AppSec

[Pavan Kumar J @topavankumarj]

3 WAYS THAT an xxe injection attack COULD HIT YOU HARD! https://t.co/hG3JZh2JNF #xxe #xmlinjection