passfree

14 ms·

91.
by passfree 12y ago
Hi tptacek, Proxy.app is not meant to compete with Burp. Burp is a different beast and not necessarily, in our humble opinion, the best approach to penetration testing web applications. We know how difficult it is to write security tools be
92.
by passfree 12y ago
Good questions. While Charles and other proxies are doing a fine job our dev team is also frustrated by the way they integrate with OS X. This is what we mean by native experience. The application is in effect a single binary and makes use
93.
by passfree 12y ago
Burp Suite is one-size-fits-all type of solution. Indeed, it comes with a lot of other tools which are primarily used for penetration testing. On the other hand, Proxy.app is just a good proxy and already comes with many of useful features.
94.
by passfree 12y ago
This tool follows slightly different philosophy. We could have bundled all Websecurify security testing frameworks inside this app and make it more penetration testing friendly. Instead we thought that a different approach would be to creat
95.
by passfree 12y ago
You can intercept any http connection from the iOS simulator quite easily. For intercepting stuff on an actual device you require more extensive setup. We will publish docs how to do that soon.
96.
by passfree 12y ago
you can monitor and also intercept requests and responses and modify their contents.
97.
Proxy.app Lands In App Store(blog.websecurify.com)
64 points by passfree 12y ago|63 comments
98.
Advanced Live HTTP Headers for Chrome(chrome.google.com)
1 points by passfree 13y ago|1 comments
99.
by passfree 13y ago
I do not practice what I preach as effectively as I would want to but the best thing to do is to run them in sprints. In other words, a week worth of coding is complimented by a week of marketing regardless whether you employ people to do w
100.
by passfree 13y ago
You may want to try: https://github.com/websecurify/node-vxdocker
101.
by passfree 13y ago
At my company we use both SVN and Git (via GitHub) at the same time. SVN is for the serious dev while Git is for toy project we post online from time to time. Some of you may say that we may not be doing things right but the only reason SVN
102.
by passfree 13y ago
You should learn go instead of C.
103.
Cash For Bugs(blog.websecurify.com)
1 points by passfree 13y ago|0 comments
104.
by passfree 13y ago
Good luck with this approach. I am not saying you should throw away this - awesome technology btw - but rather impractical in many ways. You will find very little use-cases where you can apply this with direct benefit. In most cases this w
105.
by passfree 13y ago
Typically it takes a single request to dump various data via SQL injection. Just saying.
106.
by passfree 13y ago
This is wishful thinking at the moment. I understand perfectly well what that means but data is data. An application typically has access to all data and the fact that you run it through a VM doesn't change anything. I can find this te
107.
by passfree 13y ago
I cannot see what this has to do with security. At the end of the day, it is the data that attackers are after and the app needs to be able to access it whether it is virtualised or not.
108.
by passfree 13y ago
I took the courtesy to convert these into pdf slides (for easier reading on iDevices, etc) you can download them from here ( http://blog.websecurify.com/uploads/aa_StartupSchool.pdf ) for now but it will be great if Greg
109.
Ask HN: How to do auto-renewal properly?
1 points by passfree 13y ago|0 comments
110.
Tab Completion For Chrome And Firefox(blog.websecurify.com)
1 points by passfree 13y ago|0 comments
111.
Friday Fun With Vortex and Puppet(blog.websecurify.com)
1 points by passfree 13y ago|0 comments
112.
Run puppet under Vortex(github.com)
1 points by passfree 13y ago|0 comments
113.
Chrome Extension Development - Simplified(blog.websecurify.com)
2 points by passfree 13y ago|0 comments
114.
by passfree 13y ago
You can also have a look at VxDocker https://github.com/websecurify/node-vxdocker
115.
by passfree 13y ago
This is what happens when Mozilla stopped giving shit about their XUL platform.
116.
Work with Soap UI project straight from your browser.(suite.websecurify.com)
1 points by passfree 13y ago|0 comments
117.
Learn Websecurity(learn.websecurify.com)
1 points by passfree 13y ago|0 comments
118.
Continuous delivery: What works (and what doesn't)(theregister.co.uk)
1 points by passfree 13y ago|0 comments
119.
Roost - provisioner in CoffeeScript for NodeJs(github.com)
1 points by passfree 13y ago|0 comments
120.
by passfree 13y ago
The advantage is that you don't think in terms of virtual machines. It feels like you are actually using docker but on a foreign OS that doesn't natively support LXC. # vxdocker run ubuntu ls -la is exactly the same as # docker ru

More ›