#Spring4Shell Block List vs Allow List

If you missed the @Owasp_DevSlop show this morning, here is the recording. youtube.com/watch?v=0Ic62L92…

Hello everyone! Here's another #attackgram for you. This one is especially dangerous when it leads to remote code execution.

The #attackgram for this week is Cross-Site Request Forgery (CSRF). Hopefully banks are not vulnerable to this attack anymore but you’ll find plenty of web apps that still are.

Haven’t posted an #attackgram in a while. Here’s a good one. Have you heard of Cross-Site Scripting 😊?

Taking a note of this milestone. Here's to 10x more :)

Happy new year everyone! Coming back from vacation and resuming the #attackgram series. Here's Open Redirect.

One #attackgram a day keeps the security bugs away. Today’s attack is 'Download of Code Without Integrity Check'

One #attackgram a day keeps the security bugs away. Today’s attack is ‘Integer Overflow’

One #attackgram a day keeps the security bugs away. Today’s attack is ‘Password Guessing’