Blogs about: Insecure Code
Featured Blog
Enigma?
Now this may be interesting… Should you write your own code? … or… Download already available code?… this is a question that’s been bothering me for a while, as I think w… more »
Insane Security
Enigma?
— 2 comments
dblackshell wrote 1 week ago: Now this may be interesting… Should you write your own code? … or… Download alread … more »
WebGoat - cause everyone else is doing it!
dblackshell wrote 1 week ago: The unzip and run insecure J2EE web application… at least under windows… WebGoat is a d … more »
Different aproach on including files in PHP
— 2 comments
dblackshell wrote 2 weeks ago: A couple of days/weeks ago (don’t quite remember well) I came across Savride’s blog, whe … more »
Regenerative Tokens
— 4 comments
dblackshell wrote 1 month ago: As maybe you already read the article new fashion, new ways (or not) article which presented a coupl … more »
Got new bait?
dblackshell wrote 2 months ago: Maybe this is something already used (no wondering about it), but it’s worth mentioning… … more »
less spam on blogs
— 4 comments
dblackshell wrote 3 months ago: And no it’s not a better solution than Akismet, but will do against spam bots… This is f … more »
new fashion, new ways (or not)
— 1 comment
dblackshell wrote 5 months ago: Some time ago when I posted I Love CSRF (XSRF) fazed invited me to do a presentation on CSRF attack … more »
Source code audit - PHP
— 5 comments
dblackshell wrote 8 months ago: What source code audit is? It’s a primary technique by which someone can find vulnerabilities … more »
I love CSRF (XSRF)
— 2 comments
dblackshell wrote 9 months ago: I really do love CSRF?…. and it all started back when I was reading a topic on w4ck1ng forum, … more »
XSS MuWeb
— 3 comments
dblackshell wrote 10 months ago: Very often when got nothing to do, I put my thoughts on how to better secure a website/server (it de … more »
rudimentary anti-x(ross)s(ite)s(cripting)
— 1 comment
dblackshell wrote 11 months ago: Why the following piece of code I will present is because not many people sanitize properly user inp … more »
quote: Javascript is evil
dblackshell wrote 11 months ago: And who I quote? Our little Javascript “Devil” friend SirDarckCat who is pulling it off … more »
secure PHP login script
— 20 comments
dblackshell wrote 11 months ago: This is the finalization of the insane idea I had when publishing the login (security through obscu … more »
httpOnly vs. XmlHttpRequest
— 2 comments
dblackshell wrote 12 months ago: I remember well a couple of days ago when I have read on ha.ckers.org this subject and in the first … more »
