I was reviewing a web application during a security assessment when I spotted a fund transfer endpoint...
Web Security
Last year I checked a client’s payment page and found a big problem. The page had no...
I want to start with something that happened during a client engagement last year. The company had...
A few months ago, a relative called me in a panic. She had lost her Aadhaar card...
A practical API security testing checklist covering OWASP API risks, authentication, authorization, BOLA, JWTs, business logic, SSRF,...
