Research, techniques and field notes.

New feature released for SecApps Asset allows for bulk importing of multiple assets with a single operation. Import a list of asset names and associated types using the import dialog.

Websecurify is thrilled to announce full integration between BountyPage and Slack for improved messaging and notifications. This new feature allows for streamlining internal communications and ensures that team members are always informed about the status of bug bounty submissions. Sign up now to start using the Slack integration and improve your team's efficiency and transparency.

BountyPage is an all-in-one platform that makes it easy to start and manage crowd-sourced vulnerability disclosure programs. It is an easy-to-use and accessible solution that enables you to launch a bug bounty program quickly and scale up over time.

This is an announcement of the deprecation of the SecApps Online Security testing suite.

Cohesion is a state of the art web application security testing toolkit designed to be scripted

In this tutorial we will show you a very simple technique on how to find secrets across many web pages

Quick tutorial how to find leaked API keys and credentials in TravisCI

To mitigate the exposure to 3rd-party risk, businesses must perform technical security due diligence.

Finding github gists for security research and more.

Implementing Firesheep 2.0 in AppBandit

Practical Bruteforce Attacks in Web Applications and Web Services

Simple guide how to fuzz JSON web services properly