Team we45

February 1, 2019

This blog is a security centred articles that is intended to help django developers secure their deployments.

Team we45

January 16, 2019

We recommend you attend OWASP AppSec Cali this year. Here’s a quick list of talks we believe are a must attend for security professionals.

Team we45

December 14, 2018

In case you haven’t heard already, a major security flaw in Kubernetes has been discovered recently. One that has a CVSS score of 9.8.

Team we45

December 3, 2018

AWS S3 provides different access permissions which, if misconfigured can leave the door open for unauthorized access potentially leading to malicious attacks.

Team we45

November 26, 2018

Learn how to gain GUI access using port forwarding with real time example and step by step process.

Team we45

October 29, 2018

We wish to put forward an application security outsourcing guideline to enable digital businesses get the best out of their application security vendor. Read the full article to know more.

Team we45

October 15, 2018

For all of you developer folks who are new to Kubernetes, here’s a baisc starter’s guide for securing your Kubernetes deployments.

Team we45

October 3, 2018

5 most pertinent security threats to your Docker deployments and ways in which you can secure it best.

Team we45

September 10, 2018

Which one is better DAST or IAST? Within the application security domain, this blog better equips you to answer the same.

Team we45

August 8, 2018

A short story you must read to understand the impact of application security in real life!!

Team we45

July 25, 2018

Successful DevSecOps implementation is impossible to achieve without adopting 3 core elements – or the Pillars of DevSecOps.

Team we45

July 10, 2018

A shortage in the workforce consequently leads to an inadequate security posture. Therefore, companies should provide proper security expertise training.

Team we45

June 28, 2018

By not using a correlation tool, you are doing yourself a disservice, even if you’re automating security into your agile pipeline.

Team we45

June 23, 2018

DynamoDB is AWS’s cloud NoSQL solution that supports both Document models (like MongoDB) and Key-Value models (like Redis). DynamoDB and Lambda are a popular combination that developers use to develop and run serverless applications

Team we45

June 20, 2018

Step by step process of scenario where Terraform is used as a way to provision and configure an Amazon EC2 Server and configure AWS Inspector.

Team we45

June 13, 2018

An insecure API can be the broken link that makes your security posture inadequate. For those of you who don’t know what a REST API is, here is a quick 101.

Team we45

May 30, 2018

This article enumerates a few terms, that are imperative for the engineering teams to be aware of from an application security and DevSecOps standpoint.

Team we45

May 23, 2018

Here's a step-by-step simpleguide to integrate BURP with Jenkins.

Team we45

May 9, 2018

Let’s take look at few of the clauses from PCI, HIPAA and GDPR that have a strong resonance to Continuous Security Automation.

Team we45

April 25, 2018

Bootstrap is one of the most popular frontend JavaScript frameworks used to implement interactive and responsive views in an application...AND is the second most starred project on Github

Team we45

April 25, 2018

What does Sherlock Holmes have to do with application security and Threat Modeling?

Team we45

April 18, 2018

Learn the right steps to integrate E2E and application security testing in this blog with actual project examples.

Team we45

April 11, 2018

Code review is essential for your application security, when even the smallest flaw has potential for abuse.

Team we45

March 27, 2018

Wait…What??? Don’t AppSec and securing Apps mean the same thing? Well, yes, I used to think so too!!

Team we45

March 14, 2018

Learn the basics of how to identify and exploit an SSTI or Server side template injection, along with a few remediation suggestions.

Team we45

March 14, 2018

Here is our compilation of what we’d like to call The Top 7 Myths of AppSec Automation for all of you who are either currently involved in or in the process of adopting DevSecOps in the near future.

Team we45

February 14, 2018

Penetration Testers are now not just required to run tools, but also find intuitive ways to automate them, saving them critical effort and bandwidth - custom scripts being one such approach.

Abhay Bhargav

February 6, 2018

Here are a few of the impressions from the AppSec Cali event, and what will be the state of things to come in Application Security

Team we45

January 18, 2018

CSRF flaws are patched in many ways depending on the application architecture. But, there are three approaches that are most practiced by developers that are not as effective as it appears.

Team we45

January 18, 2018

The OWASP Top 10 2017.These are the changes from the previous, OWASP Top 10 2013 and today’s “Golden Master” version of the OWASP Top 10 2017

Team we45

January 18, 2018

Here are three major ways to empower engineering teams with certain skills and strategies, that improves the security of applications in a self-sustained manner.

Team we45

January 18, 2018

Here are four customized scripts, written in Python, which generate payloads for performing customized attacks against web applications and web hosts.

Team we45

June 7, 2017

“Security in DevOps” is the need of the hour. Security scanning tools & aggregation platform vendors are beating the drums on how platforms bake security into the development pipeline.

Team we45

May 17, 2017

The WannaCry Attack has made waves across technologists and non-tech folks alike, and has made several folks definitely wanna cry, as they see their critical data encrypted and completely unavailable.

Team we45

April 25, 2017

The OWASP Top 10 is important for many reasons. In our opinion it has highlighted and captured several key elements of information security that are relevant for today’s apps. Let’s take a look at some key changes in OWASP Top 10.

Team we45

April 18, 2017

Learn and understand with us, how languages/platforms and their frameworks can facilitate security and its implementation.

Team we45

April 10, 2017

As is always seen with a disruptive IT industry, security is usually forgotten, so happens with DevOps practices. Learn with our real time case studies for remediations.

Team we45

April 9, 2017

AngularJS expands the attack surface of an application significantly, hence developers need to know about the latest bypasses and build the necessary remediation in their applications.

Team we45

April 4, 2017

We crunched some numbers and I have tried to drill down to the 3 Most Resistant Application Security Vulnerabilities, from January of 2015 to the present day.

Team we45

March 24, 2017

There are 3 very critical things that organizations miss out on when trying to fix application security. Learn all of them in this AppSec Blog.

Team we45

February 14, 2017

Let's learn as to how to ensure product security?

Team we45

February 8, 2017

Your organization has a bunch of APIs or services that it hasn’t even looked at from a security testing standpoint, and that’s dangerous. Let’s delve into 3 ways you can win with API Security Testing

Rahul Raghavan

February 5, 2017

DevSecOps like security, (and almost everything else) has the mystic triad - Technology, People and Process. The pillar that's obviously making the most noise is the technology angle of security automation - which are the scanners and the tooling platforms.

Team we45

January 31, 2017

We’ve identified some simple yet effective security practices for Docker deployments. We will follow some of these areas through more granular articles, but this is a good starting point for one to consider when looking at security for container deployments.

Team we45

January 24, 2017

We have been automating tools to increase their efficiency drastically and making it a lot easier to integrate them into the Devops cycle. To automate or customize something, you need to understand how it works so that you know exactly what it is that you're changing.

Team we45

November 1, 2016

Why do companies tend to ignore security threats and bugs? That said, reaching the right people, at the right time with the right tone seems to be key for cybersecurity threats.

Team we45

October 15, 2016

Web and Mobile applications are very alluring to organizations. Ironically, the same reasons render them a security risk. Unauthorized application users can avail quick and Effortless access to data. Learn here about its remedies.

Team we45

September 10, 2016

One of the most popular authentication frameworks for stateless web services is the JWT or the JSON Web Token. The JWT replaces the need to issue and maintain a “Session Token”. Let's quickly explain how this works in this article.

August 5, 2016

Learn about my key take aways from OWASP AppSec -USA in this article.

Team we45

May 9, 2016

Over the years, Web scraping has become much easier. This technology is more accessible than ever and its big business in its own right. It can be a serious problem in any content-driven app and you need to look into it seriously, as an integral part of your security program. Let’s explore some security issues in this article.

team we45

March 9, 2016

This blogpost has been written in the wake of the potentially earth-shattering discovery of security vulnerabilities in some key Java libraries. In case you are unaware of these security issues, you must read it here in detail.

Team we45

December 25, 2015

Based on our own efforts in penetration testing and security research, we see the following changes that we believe have either become or fast becoming game changers in application delivery, and therefore in application security.

Team we45

December 5, 2015

Here’s our list of 4 predictions for Security next year.

team we45

September 15, 2015

Most sites that claim to be “great at security” do a really bad job of protecting passwords (with cryptography). Some of them use poor quality encryption and so on. Read full article to know more about this.

Team we45

August 9, 2015

Over the last 20 penetration tests that our company has performed, NTP attacks featured in over 15 of these tests. Thats a 75% hit rate! And that’s pretty significant.

Team we45

May 16, 2015

Security unfortunately does not have much of a place in the boardroom of the average company. Here are three reasons why, Information Security must occupy a seat at your next boardroom discussion.

Team we45

March 19, 2015

PCI-SSC released a document that detailed a guideline for Penetration Testing, specifically from the perspective of PCI-DSS Compliance. Penetration testing, especially after the PCI-DSS v 3.0 had become a major grey area for several companies.

Ganga Sumanth

September 23, 2014

Real life security breach case study where organizations have been hacked and the reasons will shock you!!

Aneesh Bhargav

August 26, 2014

My analogy of a Master Health Check up can be applied to an Information Security program for such organisations whom I would like to call the 'First Timers'.

Ganga Sumanth

June 26, 2014

Retail attacks and retail malware is a serious issue in the industry. However, solutions to these problems are well within reach and in the realm of practicality.

Aneesh Bhargav

January 18, 2014

Card breaches have been the central discussion point of many a portal on the "interwebs". RAK Bank in the UAE reported a credit card fraud amounting to about $45 million on their prepaid cards. The story became viral almost as soon as it was known.

Team we45

Learn from this case study about how we hacked an online voting system platform in order to rectify a hack.

Anushika Babu

This article delves deeper into identity management, explore its importance, and provides actionable steps to ensure your enterprise's security.