BLOG

As the world increasingly moves online, the importance of web application security grows. While there are many steps that organizations...

Application security is not new. It has been around since the early 2000s and in a similar environment, where Code-Red, Nimda, and other viruses were causing global havoc. Securing the software development lifecycle was initially a Microsoft initiative developed due to the growing number and impact of vulnerabilities in its products and code. The model has significantly evolved since, though the principles remain the same: catch security bugs early on in the development cyc

This project seeks to solve vulnerabilities caused by the upload of unwanted files to web application with the help of Nginx's reverse proxy

This is a story of what both I and Google engineers considered to be an SSRF vulnerability in Google Calendar – but turned out to be some...