The latest articles on DEV Community by Taylor Ellis (@ellis_38). https://dev.to/ellis_38 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4210609%2F8f0199f3-7ce9-488f-b0ca-0cbbb9a8f31d.jpg https://dev.to/ellis_38 en Taylor Ellis Tue, 27 Oct 2026 15:42:02 +0000 https://dev.to/ellis_38/automating-the-first-10-minutes-of-a-review-2heh https://dev.to/ellis_38/automating-the-first-10-minutes-of-a-review-2heh <p>Every security review I do starts the same way: collect URLs, headers, API paths, and a list of the tech stack. It's 10 minutes of copy-paste that I've done hundreds of times.</p> <p>I finally automated it. The script does:</p> <ul> <li>Pull response headers for the main pages</li> <li>Extract script/link URLs and look for API paths</li> <li>Check for common misconfigurations (missing CSP, open directory listing)</li> <li>Write everything into a timestamped notes file</li> </ul> <p>It doesn't find bugs. It just removes the boring part, which means I spend the first 10 minutes thinking instead of typing.</p> <p>I'm reading about Kotlin Multiplatform for some mobile testing experiments. Any good resources on mobile attack surfaces would be welcome.</p> security tools automation