Web Application Penetration Testing Cheat Sheet
1–10 of 40 posts
Re: Web Application Penetration Testing Cheat Sheet
#2what's with the title? edit: was "Yo" lol
Re: Web Application Penetration Testing Cheat Sheet
#3Nice, just started reading and looking forward to it, but also I'm loving this blog setup, particulary how clean the "warning" sections are. Is it a custom setup?
Re: Web Application Penetration Testing Cheat Sheet
#4what's with the title? edit: was "Yo" lol
Saw that too weird lol
Re: Web Application Penetration Testing Cheat Sheet
#5This looks cool! I have the other perspective -- I have a site that I want secured. This seems helpful for that angle also. I'd be interested if there are other resources as well that could be suggested on this thread!
Re: Web Application Penetration Testing Cheat Sheet
#6Nice, just started reading and looking forward to it, but also I'm loving this blog setup, particulary how clean the "warning" sections are. Is it a custom setup?
It seems to be the default Jekyll theme: https://jekyllrb.com/docs/home/
Re: Web Application Penetration Testing Cheat Sheet
#7This looks cool! I have the other perspective -- I have a site that I want secured. This seems helpful for that angle also. I'd be interested if there are other resources as well that could be suggested on this thread!
You should check out the youtube channel LiveOverflow [0], it's mostly about infosec and pentesting.
As someone who is neither into infosec nor pentesting, I found it to be a very interesting and informative channel which improved my understanding of coding and security in general.
[0] https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/fea...
Re: Web Application Penetration Testing Cheat Sheet
#8Be sure to let AWS know you are pentesting before you start testing your app hosted there. https://aws.amazon.com/security/penetration-testing/
Re: Web Application Penetration Testing Cheat Sheet
#9Be sure to let AWS know you are pentesting before you start testing your app hosted there. https://aws.amazon.com/security/penetration-testing/
Commentary in the spirit of security automation:
Of course Amazon still compels a human review.
By contrast, Google App Engine and Microsoft Azure are fine with you doing it on your own provided you're not a moron.
https://support.google.com/cloud/answer/6262505?hl=en
https://docs.microsoft.com/en-us/azure/security/azure-securi...
(I deal with AWS, Azure, and GAE across multiple companies. heh)
Re: Web Application Penetration Testing Cheat Sheet
#10Are there tools that automatically do all, or most, of this and present the data in a nice GUI?