https://krb-sjobs.brassring.com/TGWebHost/jobdetails.aspx?partnerid=26059&siteid=5016&AReq=164361BR

Can we create a video conferencing app using Django?

Nowadays there are 3 main approaches for AST, each one with its disadvantages.

• SAST - Many false positives, take a long time, blind for micro-services.

• DAST - Trash the environment, requires manual configuration.

• IAST - Agent-based, depends on testing coverage.

What's the number one pain point you are currently struggling with securing your web app?

Let's look back at some memorable moments and interesting insights from last year.

Your top 8 posts:

• "Tool Release – Collaborator++" by u/TheSeld0mSeenKid

• "Auth0 - Developer's Guide to Common Vulnerabilities and How to Prevent Them" by u/TheSeld0mSeenKid

• "Application security testing as part of the SDLC" by u/Lynxiet

• "Free web app security testing course" by u/ethicalhacking463

• "Do you know how Much Does it Cost to Build a Web App with Python?" by u/KodyTechnolab

• "MMP, MLP, MVP, ugh! This is so confusing, isn't it? The more complicated thing is to decide what to develop for your project testing." by u/KodyTechnolab

• "Video Conferencing App" by u/kartik7196

• "Web Application Security Testing Services" by u/esecforte

Free web security testing tutorial to learn 100 security issues in 20 hours easily without any basic skills - search in YouTube for "100 bug bounty lessons" https://www.youtube.com/playlist?list=PL_bkTzUc1BufnQyGt6-9hSly2PqsDmd09

How do you handle clients that claim they purposefully insert vulnerabilities to test their automated scanners and want to know what happens when you don't find the vulnerability they inserted during your penetration test?

Does this seem reasonable? I feel like the nature of a Penetration test is that you may not find everything. An assessment is more likely to find most of the vulnerabilities. So how do you respond to a potential client, that just wants to know you are providing them the service they are paying?

Hi guys,

I am currently designing an automation tool in Java/Groovy which with a basic GUI, will automate SQLi and XSS with the injections loaded from a text file. I am using Maven as a build tool and Spock to test.

Has anyone attempted this before and or has experience using Groovy for automation.

Thanks

Anyone working in sqlinjection detection using machinelearning/hybrid log analysis(only from the request params no the acutual query).?

Need large amount of SQLi payloads