Author Archives: Puja

Can results from DAST (Dynamic Application Security Testing) tools be false positive?

Posted on by

I know results from Static Application Security Testing (SAST) can be false positives or real and it is up to the security analyst and developer to decide which vulnerability is real based on the scenario and context.

Is the… Continue reading Can results from DAST (Dynamic Application Security Testing) tools be false positive?→

What is the relationship between HTTP response codes and successful execution of XSS attacks?

Posted on by

What is the relationship between HTTP response codes and successful execution of XSS attacks? For e.g I am using a commercial vulnerability scanner that reports XSS vulnerability found in a certain web page. It further descri… Continue reading What is the relationship between HTTP response codes and successful execution of XSS attacks?→