Collaborate Disseminate
Do I understand correctly that Application Layer Gateways act as proxies which are able to fully read an encrypted connection of a client behind such an ALG, with the scope of removing e.g. malware by looking into the applica… Continue reading Are Application Layer Gateways simply proxies removing malware? [closed]
Mobile becomes a prime phishing attack vector, hackers will increasingly employ machine learning in attacks and cloud will increasingly be seen as fertile ground for compromise. Continue reading 2020 Cybersecurity Trends to Watch
I’m on a website which have a program, there is a search input for keywords.
When I input & or < or > and search, it returns Got error ’empty (sub)expression’ from regexp error and when I input $ or ^ or .* I get all keywords at… Continue reading Is SQL Injection possible in this case (REGEXP)?
In our team we are planning to start pro-actively find vulnerabilities in our legacy software products. Previously, we relied on user reports, but that is not a pro-active approach. We don’t have expert penetration testers in… Continue reading Strategies to find software vulnerabilities: what are the categories? [closed]
Application flow maps are the cool feature you can use to discover that needle in a haystack—how does my running app work and what does my app connect to?
The post Why Application Flow Maps Are the Coolest Feature in Application Security app… Continue reading Why Application Flow Maps Are the Coolest Feature in Application Security
This report summarizes Contrast Labs’ analysis of real world application attack and vulnerability data from November 2019. It builds on data that Contrast Security observed over the previous months and highlights to highlight key trends and useful tidb… Continue reading November 2019 AppSec Intelligence Report
I am working on ensuring security of my company’s product. We have a mobile version of the product. This question is for the Android version
Background –
Our product is a SaaS-based product and the app is meant to be used by… Continue reading Security implication if android app can be installed on emulator
Sorry for being so general, but I know my ISP logs connections to others and all. I’m just questioning whether they keep any physical data that was over a HTTPS connection. Learned about how ISPs also “packet sniff”, do they … Continue reading What Data Does an ISP Store?
I’m a developer working on a POC for an internal web app (Python\SQL) which will handle sensitive employee information within our company. In going over the application with our security department to decide whether or not we… Continue reading Live Memory Analysis
Is it safe to let users enter in a URL in a field in my application where the backend of the application will go fetch the data for them via the URL they provided?
To clarify, the idea was to allow users to enter a URL insid… Continue reading Is it safe to let users enter a URL in my app that queries an external REST api?