Blogs about: Websecurity
Featured Blog
Multiple XSS in glassfish
Multiple XSS was found in glassfish web interface, this problems is caused because a input data validation is not occured. Sun where are input data validation?? Where are the tests??? where the securi… more →
Webappsecurity's Weblog
Web Security
oldtech5 wrote 2 months ago: There are a number of things one can do to ensure web security. Badware or malware is material that … more →
Scrap Metal2
oldtech5 wrote 3 months ago: yes most metals can be recycled I believe copper is the mostvalubel of these at about $2-3 per kilog … more →
Protect your application against SQL injections (2)
bernd essl wrote 1 year ago: In part 1 we made sure that the value is an integer, but what if a value could be a string? You have … more →
Protect your application against SQL injections (1)
bernd essl wrote 1 year ago: Many applications use a database to store data. Popular products are MySQL, SQLite and PostgreSQL. A … more →
Train websecurity with WebGoat
bernd essl wrote 1 year ago: WebGoat is a insecure web application which is designed to teach web application security concepts. … more →
Multiple XSS in glassfish
— 2 comments
webappsecurity wrote 1 year ago: Multiple XSS was found in glassfish web interface, this problems is caused because a input data vali … more →
XSS - Glassfish Web Admin Interface (Sun Java System Application
— 3 comments
webappsecurity wrote 1 year ago: Bom senhores, essa e mais uma dentro de uma interface de adminsitracao. mais um problema de validaca … more →
XSS - Nextgen gallery 0.96 wordpress plugin
— 8 comments
webappsecurity wrote 1 year ago: Bom, esse post e dedicado a esse XSS que encontrei no modoulo nextgen do wordpress, sua amplitude na … more →
Reflected XSS
— 1 comment
webappsecurity wrote 1 year ago: Esse e’ mais um video usando o webgoat pra mostrar como fazer alguns ataques, todos os videos … more →
Meu primeiro post no meu novo blog :)
— 4 comments
webappsecurity wrote 1 year ago: Bom pessoas estou novamente tentando fazer um blog, agora algo mais especifico sobre seguranca em ap … more →
hardening the PHP-CMS Joomla!
bernd essl wrote 1 year ago: I’m not a big fan of Joomla! but a client wanted to use it and so I had a closer look on it, t … more →
The null byte to hack PHP-includes
bernd essl wrote 1 year ago: The null byte (also null terminator) is a character with the value zero, present in the ASCII and Un … more →
hide your php source code (outdated)
bernd essl wrote 2 years ago: I’m a big fan of the open source philosophy but sometimes it’s useful to have an unreada … more →
