OWASP’s Most Wanted (Continued)

OWASP’s Most Wanted (Continued)

In my last blog I talked about Command Injection and OS InjectionOWASP’s Most Wanted, and will now discuss SQL Injection. So as before, I will be using SamuraiWTF in this demonstration. You can download the current release of Samurai from GitHub. So my first step is to get up and ... Read More
OWASP’s Most Wanted

OWASP’s Most Wanted

| | Penetration Testing
So you ask who is this OWASP and why do I care? Well, let’s hear it directly from them: “Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals ... Read More
Teaching an old dog new tricks

Teaching an old dog new tricks

| | Penetration Testing
We all get older, and technology is always changing. With changes in technologies, we are continually faced with new ways we perform tasks in our daily lives. Most banking and credit card companies are now making their users apply for paperless billing and only using electronic documents. For a young ... Read More
Going the distance with Burp

Going the distance with Burp

Welcome to the 5th blog on Burp Suite, and Happy 4th of July! Please visit Secure Ideas’ previous blogs on using Burp Suite at the following links: Part 1: Burp Repeater Part 2: Introducing Burp Correlator Part 3: Running Burp on a Mac Part 4: Burp-suite-continuing-the-saga As in previous articles, ... Read More
Burp Suite continuing the Saga

Burp Suite continuing the Saga

Welcome to the fourth blog introducing and exploring the features of Burp Suite. Please visit Secure Ideas’ previous blogs on using Burp Suite at the following links: Burp Repeater Introducing Burp Correlator Running Burp on a Mac As discussed previously in Burp Repeater, Burp is a tool used during web ... Read More

Secure Guardrails