reading club, security testing
TL;DR A practical step by step security and privacy guide for macOS. Who Several contributors. Why You will learn about security testing for the operating system and how to do…
reading club, security testing
TL;DR In this week of a reading club, we share The Cyber Security Body Of Knowledge. The CyBOK project aims to bring cybersecurity into line with the more established sciences…
reading club, security testing
TL;DR SQL injection is when it is possible through the regular web application interface, run database query that application creator does want to be possible to execute. We share with…
learn testing, security testing
TL;DR Many applications are using email as user username. This blog post is about risk analysis for case insensitive emails used as application usernames. Introduction User management is core security…
TL;DR At Zagreb Webcamp 2018, I attended talk A Token Walks Into a SPA… by Ado Kukic. During the Q and A session I finally realized difference between JWT and…
TL;DR At WebCamp Zagreb I attended Luka Kladaric excellent talk on HTTP Strict Transport Security Header (HSTS) Header. This talk and Q&A session at the end helped me to fully…
Ruby on Rails, security, security testing
TL;DR This post is about checking “The Gates” of your Rails application. Every web application is a set of urls. Some of them are publically available and some are available…
Ruby on Rails, security, security testing, Uncategorized
TL;DR This post will explain how to check your Ruby on Rails code base against sql injections [Wikipedia]. After you have read Wikipedia source link about sql injections, you are…
Ruby on Rails, security, security testing
TL;DR In previous post I described how to do security hardening for your Ruby on Rails web server. In this post I will talk about other servers: database, openvpn, cache…
OWASP, Ruby on Rails, security, security testing
TL;DR Next series of blog posts is about Ruby on Rails bottom up security. I will cover all aspects of web application written in Ruby on Rails framework. Described security…
