Tags → #web security

Vulnerabilities
CWE Releases Top 25 List of Software Vulnerabilities
Nov 21, 2024 The Common Weakness Enumeration (CWE) Top 25 list has been released, identifying critical software vulnerabilities that require attention from developers and security professionals.
Tools
Setting Up Burp Suite for Enhanced Security Testing
Nov 19, 2024 The article outlines the setup of an enhanced environment for Burp Suite to improve its scanning capabilities, focusing on the use of the Collaborator tool and custom checks for detecting application security vulnerabilities.
Vulnerabilities
Overview of JSON Web Tokens and Security Considerations
Nov 14, 2024 JSON Web Tokens (JWTs) are widely used for secure authorization information transmission across applications and APIs, utilizing a structure that includes a header, claims, and a signature.
Vulnerabilities
Analysis of Certification Authority Authorization in Web Security
Nov 13, 2024 A recent article by researchers from HAW Hamburg and TU Dresden analyzes the shortcomings of Certification Authority Authorization (CAA) in web security, highlighting its limitations in preventing illegitimate certificate issuance.
Tools
Web Application Firewalls: Functions and Evasion Techniques
Nov 5, 2024 Web Application Firewalls (WAFs) are crucial for protecting web applications from various attacks, but they are not a complete solution for all cybersecurity threats.