Viewing profile — sensiblesec

Guide to testing htmx applications

operative word is can again. I'd doubt that this happens on large scale (we would see/hear more because of the sizes of botnets). also when it does happen, removing it from bans wi…

Agree. I see an argument about C2 and DDoS from a public good perspective but it is misguided to think this will be addressed by individuals

This is classic security overreaction, when talking about home routers. Just to be clear if this is an issue for you, make sure you do not connect to any wifi you have not hardened…

This is part 1 of sharing some experience from the trenches about phishing. Prior to working with Kaufland e-commerce, I never had to deal with phishing targeting end-users on a la…

Giving you a simple to expand initial access test case and some pointers based on our testing experience to help better target your EDR coverage testing efforts

That's fair my misunderstanding in that case I'm questioning the people publishing the PoC

While that is definitely a good theoretical argument but in practice it seem to be the case that most of the (non 0day) vulnerabilities that get exploited in the wild are the ones …

EDIT: was not clear to me that Lumio has done only the writeup and not the original researchers finding the vulneraility mea culpa Lunasec, you're doing god's work! Probably there …

Often work with SMEs and startups kicking off their security programs. One main topic is vulnerability management. For these early steps I missed 2 tools: 1, For companies that don…

If everything is supposedly so bad in cyber security how come not everyone is getting hacked all the time?

Hey, I'm the author, good point! Fixed to language to make it clearer. Thanks for pointing it out