_pdp_

61 ms·

961.
Simple ShellShock Bug Bounty Fuzzer(fuzzer.secapps.com)
1 points by _pdp_ 9y ago|0 comments
962.
Built with React: Advanced API Fuzzer(fuzzer.secapps.com)
3 points by _pdp_ 9y ago|0 comments
963.
Advanced REST Client(rest.secapps.com)
2 points by _pdp_ 9y ago|0 comments
964.
Show HN: Bug Bounty Hunter(fuzzer.secapps.com)
1 points by _pdp_ 9y ago|0 comments
965.
by _pdp_ 9y ago
Again, appreciate your feedback. Doing it right means that just because you can do something it does not mean that it is the right thing. In the case of this app, it was a deliberate design choice to build it as it is and we are planning to
966.
Show HN: JSFiddle for HTTP fuzzers – useful for API testing(fuzzer.secapps.com)
1 points by _pdp_ 9y ago|0 comments
967.
by _pdp_ 9y ago
Thanks for the feedback. A desktop app is certainly something we are considering but we want to do it right hence why we have not released one just yet. In terms of the shouts - this is just a joke :)
968.
by _pdp_ 9y ago
It is a pre-configured fiddle which exploits a vulnerability in Wordpress. The readme contains some instructions how it works but it is plug and play.
969.
by _pdp_ 9y ago
For all practical reasons, web apps cannot bend the rules of same origin policy. As a result of this the browser extension is required to fill the gap. The extension itself is idle unless used so there is no performance hit whatsoever. In t
970.
by _pdp_ 9y ago
It is a pre-configured fiddle which exploits a vulnerability in Wordpress. The readme contains some instructions how it works but it is plug and play.
971.
Wordpress Exploit(rest.secapps.com)
2 points by _pdp_ 9y ago|2 comments
972.
Share HTTP Requests JSFiddle-Style(blog.websecurify.com)
2 points by _pdp_ 9y ago|0 comments
973.
by _pdp_ 9y ago
One of the authors here. Let me know if you have any questions. I would love to answer them.
974.
Show HN: JSFiddle for HTTP requests(rest.secapps.com)
10 points by _pdp_ 9y ago|10 comments
975.
by _pdp_ 9y ago
These are a bit generic imho ... Here is something more specific related to the qs module in express and mongodb: http://blog.websecurify.com/2014/08/hacking-nodejs-and-mongo...
976.
by _pdp_ 9y ago
I am sure this works really well for apps with minimal UI as it is the case.
977.
Fuzz JSON with this one weird trick(blog.websecurify.com)
2 points by _pdp_ 9y ago|0 comments
978.
by _pdp_ 9y ago
This reminds of the Citibank incident a few years back. Not technically a hack but can land you in trouble.
979.
How to make your own version of Nikto(blog.websecurify.com)
1 points by _pdp_ 9y ago|0 comments
980.
by _pdp_ 9y ago
There is no magic. You have to try things. There are two things that worked for me personally: * Study the technology in order to find out potential oversights and design problems. * Fuzz test it to find problems by brute force. Keep in min
981.
Crack Those Logins – Effective credential cracking using fuzz-testing(blog.websecurify.com)
1 points by _pdp_ 9y ago|0 comments
982.
by _pdp_ 9y ago
Try this ( https://rest.secapps.com ) It is as close as it get to Paw. Also this ( https://fuzzer.secapps.com ) for fuzz-testing.
983.
Show HN: Web APP and API fuzz-testing inside your browser(blog.websecurify.com)
1 points by _pdp_ 9y ago|0 comments
984.
by _pdp_ 9y ago
While I agree with the comments that political parties should hire infosec people to get their shit secured, you will be surprised how many fortune 500 companies actually do that and how many of them have more than 3 infosec specialist on s
985.
by _pdp_ 10y ago
Well I hope it is secure.
986.
Progressive combinatorics with JavaScript iterators example(github.com)
1 points by _pdp_ 10y ago|0 comments
987.
by _pdp_ 10y ago
I would love to see that. Is it public?
988.
by _pdp_ 10y ago
Maybe I am not getting it but ethereum is way to complex to make it successful - and because it is decentralised it looks deeply fragmented. As I said, I am probably not getting it.
989.
by _pdp_ 10y ago
There are some commercial efforts but not much in the open source space which in my opinion is a bug problem because APIs should be fuzzed properly - especially when written with dynamic scripting languages.
990.
by _pdp_ 10y ago
Burp suite does not do a good job at fuzzing APIs - not biased but true. APIs require more structured fuzzers that expose application level problems - not like burp's fuzzers which are working on raw HTTP requests which was useful some

More ›