Tips

Travis McCormack

Simplifying Authorization Testing in Burp Part 2

Automation is our friend Naturally, we will utilize tools and manual techniques to assess any given application. However, leveraging...

Travis McCormack

Simplifying Authorization Testing in Burp Part 1

Capturing multiple sessions can be annoying As anyone who works on appsec can probably tell you authorization testing is fundamental, but...

1,050 views0 comments

Travis McCormack

Finding a 0 Day Race Condition

The background Recently while performing an application penetration test for one of our clients we discovered a very serious arbitrary...

Travis McCormack

TLS Client Authentication While Testing Applications

So what is TLS Client Authentication? TLS client authentication is not a new concept by any means, it is simply rarely used in most web...