New posts in Appsec

What is the next step of this file upload attack?

Testing for HTTP TRACE method

How to secure or (Ensuring Integrity) of Web Data in transit and in store?

How Involved Should a Developer Be in Designing a Security Policy?

How to exploit HTTP Methods

Tools to help test the security of Android applications

Canonicalization & Output Encoding

Standards for encrypting passwords in configuration files?

Where to start with security testing?

How to use OAuth with Active Directory