Record · corpus.blog/posts/01a0bb4e-0eef-70ec-bdf3-62781234faf0

Some Useful AppSec Resources

littlemaninmyhead.wordpress.com · published 3 November 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at littlemaninmyhead.wordpress.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 48
Words captured: 803

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.owasp.org/index.php/Main_Page

owasp.org

https://martinfowler.com/articles/web-security-basics.html

martinfowler.com

https://www.reddit.com/r/netsec/

reddit.com

https://blog.cryptographyengineering.com/

blog.cryptographyengineering.com

https://sudo.pagerduty.com/for_engineers/

sudo.pagerduty.com

https://paragonie.com/blog

paragonie.com

https://www.troyhunt.com/

troyhunt.com

https://github.com/trimstray/the-book-of-secret-knowledge

github.com

https://www.guardsquare.com/en/blog/iOS-SSL-certificate-pinning-bypassing

guardsquare.com

https://blog.netspi.com/four-ways-to-bypass-ios-ssl-verification-and-certificate-pinning/

blog.netspi.com

https://blog.netspi.com/four-ways-bypass-android-ssl-verification-certificate-pinning/

blog.netspi.com

https://vavkamil.cz/2019/09/15/how-to-bypass-android-certificate-pinning-and-intercept-ssl-traffic/

vavkamil.cz

https://www.wst.space/cookies-samesite-secure-httponly/

wst.space

https://dzone.com/articles/do-you-really-know-cors

dzone.com

https://brutelogic.com.br/blog/dom-based-xss-the-3-sinks/

brutelogic.com.br

https://www.crypto101.io/Crypto101.pdf

crypto101.io

https://github.com/luke-park/SecureCompatibleEncryptionExamples

github.com

Top 10 Developer Crypto Mistakes Read at the source ↗

littlemaninmyhead.wordpress.com

How to Generate Secure Random Numbers in Various Programming Languages Read at the source ↗

paragonie.com

https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

foxglovesecurity.com

https://github.com/devsecops/awesome-devsecops

github.com

https://nullsweep.com/http-security-headers-a-complete-guide/

nullsweep.com

https://www.ibm.com/developerworks/library/l-sp2/index.html

ibm.com

https://medium.facilelogin.com/jwt-jws-and-jwe-for-not-so-dummies-b63310d201a3

medium.facilelogin.com

https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/

auth0.com

https://cursorblog.com/managing-a-secure-json-web-token-implementation/

cursorblog.com

https://www.slideserve.com/arnold/application-security-logging-and-monitoring-the-next-frontier

slideserve.com

https://github.com/OWASP/owasp-mstg/releases/download/1.1-excel/MSTG-EN.pdf

github.com

https://dzone.com/articles/android-webview-secure-coding-practices

dzone.com

https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc

developer.okta.com

https://www.troyhunt.com/our-password-hashing-has-no-clothes/

troyhunt.com

How to Safely Store Your Users' Passwords in 2016 Read at the source ↗

paragonie.com

https://www.troyhunt.com/passwords-evolved-authentication-guidance-for-the-modern-era/

troyhunt.com

https://hashes.org/leaks.php

hashes.org

The 2018 Guide to Building Secure PHP Software Read at the source ↗

paragonie.com

https://lightningsecurity.io/blog/race-conditions/

lightningsecurity.io

https://sakurity.com/blog/2015/05/21/starbucks.html

sakurity.com

https://www.hackerone.com/blog-How-To-Server-Side-Request-Forgery-SSRF

hackerone.com

https://blog.christophetd.fr/abusing-aws-metadata-service-using-ssrf-vulnerabilities/

blog.christophetd.fr

https://www.rfk.id.au/blog/entry/security-bugs-ssrf-via-request-splitting/

rfk.id.au

https://application.security/

application.security

https://www.wst.space/ssl-part1-ciphersuite-hashing-encryption/

wst.space

https://www.wst.space/ssl-part-2-diffie-hellman-key-exchange/

wst.space

https://www.wst.space/ssl-part-3-certificate-authority/

wst.space

https://www.wst.space/ssl-part-4-tls-handshake-protocol/

wst.space

http://www.unixwiz.net/techtips/sql-injection.html

unixwiz.net

http://bobby-tables.com/

bobby-tables.com

https://www.hackingarticles.in/beginner-guide-sql-injection-part-1/

hackingarticles.in