Pluralsight OWASP API Top 10: Broken User Authentication This is the second entry in the OWASP API top 10 (API2:2019) [https://owasp.org/www-project-api-security/]. In my development career, implementing authentication was always something I feared. It's an important part of an API and implementing something like OAuth 2.0 [https://oauth.
Pluralsight Compiling the LaZagne.exe from Source Problems creating the LaZagne exe file? Use this guide to help you!
ApiTop10 OWASP API Top 10: Broken Object Level Authorisation Understand how broken object level authorisation attacks work against an API, why they work and what the potential impact is..
Security Defending from Forced Browsing…good reasons not to just hide restricted content Secure coding to protect against forced browsing. Strong defences from forced browsing require controls such as Role Based Access. Here we explain how to mount a good defence!
Security Hooking a Browser with the Browser Exploitation Framework (BeEF) A quick guide to starting BeEF and running commands against a hooked browser
Security Defence Against SQL Injection How do you defend against SQL Injection? Have you only got one or two defences in place? Cover yourself from multiple angles and perhaps help your overall security stance too!
Security My Path to CSSLP A guide to how I got the CSSLP Certification, containing resources I used and what I experienced along the way.
