Application Security
How Parameterized Queries Stop SQL Injection Attacks
How parameterized queries work and stop SQL injection attacks. I will explain it clearly here, with examples. What is SQL...
Category: Application Security
Blog
Binary Protections: ASLR, DEP, SafeSEH, Strong Naming, Authenticode, Control Flow Guard, and High Entropy VA
I’ve spent a fair bit of time analysing Windows binaries in security assessments, and one of the first things I...
Blog
What is a CSRF Attack? How It Works and How to Prevent It
I was reviewing a web application during a security assessment when I spotted a fund transfer endpoint that accepted a...
Application Security
What is Content Security Policy (CSP) Header?
Content Security Policy Header is a security feature implemented in web browsers to prevent a range of attacks, such as...
Application Security
OWASP Mobile Top 10 – Simplified
The OWASP Mobile Top 10 is a crucial guide for developers and security professionals focused on mobile application security. It...
Application Security
Understanding the TLS 1.2 Handshake Process: Secure Your Online Connections
When you visit a website or make an online purchase 🛍️, your personal information travels across the internet 🌐. But...
Blog
API Security Checklist: A Practical Guide to Testing APIs for Security
A practical API security testing checklist covering OWASP API risks, authentication, authorization, BOLA, JWTs, business logic, SSRF, GraphQL, API inventory...
Blog
The Basics of Encoding, Hashing, and Encryption: What You Need to Know
Encoding, hashing, and encryption may all make data look unreadable, but each has a different job. Learn when to use...