Over the last few months I’ve been teaching free classes for the ISSA Kentuckiana chapter in Louisville Kentucky. After doing one on Nmap and another on Sniffers, I talked it over with my buddies Brian and Jeff and decided that the next one should be on web application vulnerabilities.
Без рубрики
A Review of "Building Secure Products and Solutions"
Historically speaking, many applications were designed to be overly trusting. For example, early personal computers were not networked and it was assumed whoever was in front of them owned them and should be able to do whatever they wanted with them. Another example is that in the early days of the Internet,
1337 in the Library: Obtaining your information security education on the cheap
The two quotes above were my inspiration for writing this article, along with the fact people keep asking me “How do I get started in security”. Well, if you’re asking for career advice I’m not your man, but on the learning side of things I think I have a few tips I can give you.
XSS, Command and SQL Injection vectors: Beyond the Form
Active Directory Not to beat a dead horse, but what about all of the fields you can fill out on an Active Directory or LDAP object? Now that I think about it, maybe it’s time for me to update my ADS Reaper tool. Application Names and Metadata Got an asset tracker that lists the software installed … Read more