DEV Community

# appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)

Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)

Comments
7 min read
Leveraging Large Language Models for Cross-Component Vulnerability Detection

Leveraging Large Language Models for Cross-Component Vulnerability Detection

Comments
3 min read
How to pass the OWASP MASVS verification by design

How to pass the OWASP MASVS verification by design

4
Comments
6 min read
SQL Injection: the vulnerability that refuses to die

SQL Injection: the vulnerability that refuses to die

Comments
4 min read
How to do threat modeling for agile mobile app development?

How to do threat modeling for agile mobile app development?

4
Comments
8 min read
Access Control Security: Learning from Major Data Breaches

Access Control Security: Learning from Major Data Breaches

Comments
5 min read
My VAPT Learning Journey

My VAPT Learning Journey

Comments
3 min read
Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)

Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)

Comments
4 min read
Why Security Misconfigurations Matter and 5 Ways to Prevent Them

Why Security Misconfigurations Matter and 5 Ways to Prevent Them

Comments
1 min read
Introducing Omni4J: Secure your Java code

Introducing Omni4J: Secure your Java code

Comments
2 min read
DEF CON 32: What We Learned About Secrets Security at AppSec Village

DEF CON 32: What We Learned About Secrets Security at AppSec Village

8
Comments 1
9 min read
Prevention: It's Time to Save Those Millions

Prevention: It's Time to Save Those Millions

1
Comments
2 min read
Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

Comments
4 min read
Compreendendo o SAMM

Compreendendo o SAMM

1
Comments 1
6 min read
Web Security and Bug Bounty Hunting: Knowledge, Tools, and Certifications

Web Security and Bug Bounty Hunting: Knowledge, Tools, and Certifications

3
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.