Lanmaster53.com - Posts tagged "appsec"

2023

Jul 5 Burp BChecks: First Impressions
Feb 1 Prototype Pollution in Flask

2022

Jan 5 Review: Burp Suite Certified Practitioner (Part 3 Final)

2021

Nov 18 Review: Burp Suite Certified Practitioner (Part 2)
Nov 15 Review: Burp Suite Certified Practitioner
Jun 14 No-Knowledge API Discovery

2019

Jun 14 Dynamic Discovery of Mass Assignment Vulnerabilities
Feb 22 A Decade of Training

2018

Jun 18 XSS Active Defense
May 24 SQLi Exploiter: Exploiting Complex SQL Injections
Mar 15 Report Spam. Get Owned.

2017

Apr 5 Handling Missed Vulnerabilities

2016

Dec 1 Proxying thru Virtual Client VPNs
Jul 15 Fun with XSShell
Mar 11 Exploring SSTI in Flask/Jinja2 - Part 2
Mar 9 Exploring SSTI in Flask/Jinja2

2015

Dec 2 Validating Redirects with Hyperlinks
Jun 11 Regex: Regularly Exploitable
May 12 Method Interchange: The Forgotten Vulnerability

2014

Oct 29 Session Fixation Demystified
May 21 Cross-Site Trust Exploitation (XSTE)
Mar 1 DOM-based Cross-Site Scripting, Revisited
Feb 17 Defending Against Harvesting Attacks on Registration Systems

2013

Jul 17 Multi-POST Cross-Site Request Forgery

2012

Dec 4 Defending Against SSL Stripping Attacks

2011

2010

Sep 23 ESPN Fantasy Football - The Complete Attack