Understanding HTML5 security

Posted by:

Last year was great, I had time to read and understand something that was a complete mystery for me: HTML5.

After reading through the great documentation and examples at html5rocks, applying the knowledge while developing PoC applications and going through all the HTML5 security papers available it felt right to give a talk about it. This is my Prezi for “Understanding HTML5 Security”, enjoy!

Read more →
0

First w3af workshop

Posted by:

Yesterday I delivered a two hour, free, w3af workshop at the ISSA Charlotte Summit. This was the first workshop of this type I’ve delivered and the experience was great. I’m sure many awesome things will come out of it! The workshop objectives are:

  • Understand how web application scanning works and how w3af is implemented
  • Identify vulnerabilities
  • Vulnerability exploitation
  • Contributing to the project: Create new plugin and submit a pull request at Github

If you’re organizing a conference and would like to ...

Read more →
0

Sentinela: Auto-shutdown cloud servers

Posted by:

During the last weeks I’ve been using some of my time to learn various aspects of cloud computing. I spend most of my time reading and testing some new ideas on Amazon’s cloud. After using Amazon’s console for a while, I started to use the Boto library for starting my instances and then pushing some code to them with Fabric.

The problem came one day when, because of a ...

Read more →
0

Infrastructure as code

Posted by:

I’ve been experimenting with Amazon Web Services during the last month, and I have to say I’m impressed. There is a whole new world of things to learn and use, with endless possibilities. Since it all started with the migration of the w3af.org site to an Amazon ec2 instance, I decided to give a talk about that at the OWASP LATAM Tour, here are the slides!

Read more →
0

Beta-testers wanted!

Posted by:

beta-testing

It’s time. The w3af project needs your help. I’ve been improving this software during the last months and now I need you to test it before the release. I’ve done my fair share of testing, but I’m also the developer and that’s never good.

We’re looking for bugs, crashes, false positives, false negatives, typos, etc. anything that can be improved is welcome.

Follow these steps for testing:

cd ~
git clone https://github.com/andresriancho/w3af.git
cd w3af
git checkout threading2

# Backup ...
Read more →
0

Hello Web 2.0!

Posted by:

We had our old, static and boring project page for too much time. It was difficult for me to update it, didn’t allow me to blog about the project news in a format that was readable and eye-candy and many other things that I won’t mention.

Now I present you the new w3af.org website! Hopefully, this will solve all the issues with the old site and enhance the communication between all members of the w3af community.

Read more →
0
Page 2 of 2 12