ePsiLoN's Information Security Blog

Application Security

OWASP guide v4 application testing checklist-tracker

ePsiLoN

02/02/2015

Application Security, Random

This is a simple tracker I have created to facilitate the process of appetising so I do not lose myself…
Doxygen & PHP static code analysis call graphs

ePsiLoN

10/14/2013

Application Security, Security tools

This post is more to document my own “discovery” and not to get into the loop of researching the same…
Fix the problem, not just point at it – thoughts on the “bug hunting” initiatives etc.

ePsiLoN

10/12/2013

Application Security, Vulnerabilities and Vulnerability management

I have been thinking a lot about the fact that the panetesting, sourco code reviews and all those security assurance…
HTTP Basic Authentication Dictionary and Brute-force attacks with Burp Suite

ePsiLoN

03/22/2013

Application Security, Attacks, Security tools

HTTP Basic Authentication brief explanation HTTP supports several authentication mechanisms. Upon a request for resource within a protected space the…
Security source code review scoping questionnaire – v 2

ePsiLoN

12/11/2012

Application Security, Security tools

Here is amended version of the security source code review questionnaire. I added couple of questions and reworded couple of…
Web application security assessment scoping questionnaire

ePsiLoN

11/19/2012

Application Security, Security tools

I’ve got frustrated couple of days ago when I needed to send quickly a scoping questionnaire focusing on web application…
Security source code review scoping questionnaire

ePsiLoN

07/19/2012

Application Security, Security tools

Usually when a customer comes with request for security source code review one of the main questions is “How long…
SWFInvestigator – a new tool for testing SWF files

ePsiLoN

03/10/2012

Application Security, Security tools

Three days ago Adobe Labs surprised me with a beta version of their opensource Air application for SWF analysis called…
BITS issues Software Assurance Framework

ePsiLoN

02/06/2012

Application Security, Information Security Management and Governance

BITS is The Financial Services Roundtable technology division. At the end of January 2012 BITS issued a document containing detailed…
MITRE issued their perspective on most dangerous software errors

ePsiLoN

07/02/2011

Application Security, News, Vulnerabilities and Vulnerability management

Software is everywhere those days, and unfortunately bad codding practices together with tight schedules and demanding market brings tones of…