Application Security
OWASP guide v4 application testing checklist-tracker
This is a simple tracker I have created to facilitate the process of appetising so I do not lose myself in the excitement of the new findings. This helps going methodically through all the areas. I have used the OWASPv4 check list and just added couple of excel formulas. Enjoy OWASPv4-Checklist-Tracker_v1.0
Doxygen & PHP static code analysis call graphs
This post is more to document my own “discovery” and not to get into the loop of researching the same topic again and again. And if someone finds it helpful its great. I was searching for PHP static code analysis tools that generate call graphs and for my surprise the tool that I found most useful…
Fix the problem, not just point at it – thoughts on the “bug hunting” initiatives etc.
I have been thinking a lot about the fact that the panetesting, sourco code reviews and all those security assurance problems just point out the problem. Fixing the discovered application security issue however is a prerogative of the developers which unfortunately are still lacking security expertise. Bug hunters and zero days discoverers have been long…
HTTP Basic Authentication Dictionary and Brute-force attacks with Burp Suite
HTTP Basic Authentication brief explanation HTTP supports several authentication mechanisms. Upon a request for resource within a protected space the server should respond with authentication challenge using WWW-Authenticate header. In order to receive authorization the client should send requested identification information using Authorization header. When the client is not authorised a 401 “Unauthorised” response status…
Security source code review scoping questionnaire – v 2
Here is amended version of the security source code review questionnaire. I added couple of questions and reworded couple of existing ones to eliminate some ambiguities. Security Source Code Review Questionnaire – v2 (English) Security Source Code Review Scoping Questionnaire – v2 (Bulgarian)
Web application security assessment scoping questionnaire
I’ve got frustrated couple of days ago when I needed to send quickly a scoping questionnaire focusing on web application security assessment and was not able to find a single one in my archives. I was sure that I’ve put together at least couple of those during the past 3 years but no find regardless…
Security source code review scoping questionnaire
Usually when a customer comes with request for security source code review one of the main questions is “How long it will take?”. And the answer of that particular question is not an easy one because it depends on so many factors: – application architecture and complexity – documentation absence or presence – code quality…
SWFInvestigator – a new tool for testing SWF files
Three days ago Adobe Labs surprised me with a beta version of their opensource Air application for SWF analysis called SWFInvestigator. It is available for download from the Adobe Labs website and the source code form the corresponding sourceforgeproject page. SWFInvestigator is a collection of small tools under common GUI umbrella. The utility is useful…
BITS issues Software Assurance Framework
BITS is The Financial Services Roundtable technology division. At the end of January 2012 BITS issued a document containing detailed framework regarding the integration of the basic security principles in the software development life cycle.It is called “BITS Software Assurance Framework” The document is developed with the support of the Microsoft SDL group. If you…
MITRE issued their perspective on most dangerous software errors
Software is everywhere those days, and unfortunately bad codding practices together with tight schedules and demanding market brings tones of vulnerabilities. Of course there are people that are happy to find out the holes and exploit them. CWE recently published their opinion regarding the software errors summarizing it in a document called “2011 CWE/SANS Top…
Recent Posts
Tags
bruteforce bug bounty bug hunting Burp Suite d3 data leak data recovery dictionary entropy pool fix fuzzing hackaday image processing Journalistic tools log analysis malware mindmap online courses Practical Reverse Engineering randomness sandbox skype SQL injection SSL technical visualisaiton visualisation Vulnerability Management Wanda the fish Zeus