Blog
AppSec & DevSecOps insights · 175 posts
Nuclei: open-source DAST using YAML templates
🛠 Nuclei: open-source DAST using YAML templates Salute, Let's take a look today at dynamic testing DAST, which uses th…
Read →
Course for MIPT on secure development
🛠 Course for MIPT on secure development At the end of this day, I want to tell you about the information that appeared…
Read →
Open Source Strong & Weak Copyleft Licenses
🤔 Open Source Strong & Weak Copyleft Licenses Salute, You and I previously looked at what free and proprietary softwa…
Read →
Hello everyone,
Hello everyone, Today it will be cool to look at such a case at the teleconference, its comparison with zoom and the to…
Read →
DevSecOps practices for C
🛠 DevSecOps practices for C Salute, Let's look at OOP today, from the perspective of non-standard recommendations for …
Read →
DevSecOps practices for Android
🛠 DevSecOps practices for Android Salute, Firstly, you and I have a great growth statistic, namely, we already have 20…
Read →
Access Control Terminology
🤔 Access Control Terminology Salut, let's finish the day by looking at access rights and separately highlight take-gra…
Read →
Security Champion Terminology
🤔Security Champion Terminology Salute, There are a lot of questions about the market, who are these people and what do…
Read →
Terminology Malicious
🤔 Terminology Malicious Fireworks, the difficult 6th day of the week, so we will look at what malware is and what type…
Read →
CyberDefend Terminology
🤔 CyberDefend Terminology Salute, let's start looking at the base and how business operates within the framework of in…
Read →
Grype as SCA for artifacts
🛠 Grype as SCA for artifacts Salute, today I propose to look at another open source tool for scanning vulnerabilities …
Read →
MITM Terminology
🤔 MITM Terminology Salute, I thought it would be cool to see posts with terminology that will allow you to broaden yo…
Read →
Non-trivial security base for Docker
🤔 Non-trivial security base for Docker Wow, you've got it, let's do it, I often come across questions about the securi…
Read →
Typical "sins" of using JWT
Typical "sins" of using JWT Salute, I recently crossed paths with colleagues with whom I recorded a podcast on secure…
Read →
Bandit as linter on pre-commit
🛠 Bandit as linter on pre-commit Salute, Let's take a look at SAST for python today. We look at Bandit as a linter, be…
Read →