Web applications

Serverless (in)security

Author:Paweł Rzepa TL;DR Most of vulnerabilities existing in traditional applications can also appear in serverless...

iOS Security Suite – anti-tampering Swift library

Security is a topic that should be considered also by iOS developers. Since the platform cannot be treated as 100% secure, devs and security...

Seven-Step Guide to SecuRing your AWS Kingdom

AWS (Amazon Web Services) tries to decrease the number of security issues among its customer by releasing new services or upgrading the old...

Apache Airflow

Vulnerability description: Incorrect Fileloc validation for the selected item allows you to send JavaScript code that will undergo server...

CONFidence 2019 – conference recap

Every year CONFidence is one of the most important events for us and is supported by our entire team. We prepare substantive lectures,...

We need to go deeper – Testing inception apps

We need t go deeper – Testing inception apps. from SecuRing When it comes to thick-clients, java applets, embedded devices or mobile...

Building & Hacking Modern iOS Apps

Building & Hacking Modern iOS Apps from SecuRing After my offensive presentation “Testing iOS Apps without Jailbreak in 2018”...

Artificial Intelligence – a buzzword, new era of IT or new threats?

Artificial Intelligence – a buzzword, new era of IT or new threats? from SecuRing In my presentation I will show you a couple of applications...

Security education via security features

Security education via security features from SecuRing Let’s talk about UX and security – those two may not seem to go...

Attacking AWS: the full cyber kill chain

While it is quite common practice to do periodic security assessments of your local network, it is really rare to find a company who puts the...

Resource takeover x monkeyuser.com

Missed last available coffee mug? Watch out, April Fools’ Day! There are many things, besides the last free mug of course, that...

Ethereum Responsible Disclosure Messenger

This tool is used to: send a secret message to the owner of a personal or contract Ethereum address, encypted with its owner ECC public key, decrypt...

DumpsterDiver

DumpsterDiver is a tool used to analyze big volumes of various file types in search of hardcoded secrets like keys (e.g. AWS Access Key, Azure Share...

BucketScanner

BucketScanner is a tool used to: find collectable files for an anonymous/authenticated user in your buckets verify if an anonymous/authenticated user...