Web Services and API Penetration Testing Part #1
Hi Readers, today we will learn about another interesting part of web services and API penetration testing part, this revolves around Security assessments of web services.
Tag: OWASP Top 10
Tag Archive
Intercepting thick clients sans domain: Thick Client Penetration Testing – Part 5
For carrying out penetration testing assessments, our main aim has been to resolve the actual domain to the loopback IP address, by adding an entry to the hosts file. Let…
Automating Web Apps Input fuzzing via Burp Macros
Hi Readers, This article is about Burp Suite Macros which helps us in automating efforts of manual input payload fuzzing. While it may be known to many testers, this article…
OWASP Top 10 : Cross-Site Scripting #3 Bad JavaScript Imports
This blog covers Cross-Site Scripting (XSS) vulnerability from a different perspective. Generally, XSS is when the application takes user supplied JavaScript and displays it without escaping/encoding. In this blog, we…