Blog
Java Naming and Directory Interface (JNDI) is a Java API that allows clients to discover and look up data and… Read more
Tenendo proposes focused red teaming: it is tailored to evaluate specific elements of a target company's security posture. Read more On December 10, 2021, Apache released a fix for CVE-2021-44228, a critical RCE vulnerability affecting Log4j that is being exploited… Read more Preventing JNDI injection vulnerabilities by using a source code review is always a good idea. Read more Secure secrets management in Docker containers from the offensive point of view. With examples and demo scripts. Read more Secure secrets management in Docker containers from the offensive point of view. Secrets in memory. Secrets in build arguments Read more Secure secrets management in Docker containers from the offensive point of view. Secrets in bash/zsh scripts. Secrets in logs. Read more Secure secrets management in git from the offensive point of view. With examples and demo scripts. Read more Obtain secrets from storage buckets, static landing pages and other static content with examples Read more Injection attacks refer to a broad class of attack vectors. In an injection attack, an attacker supplies untrusted input to… Read more
Applying Henry Ford's principles to software development emphasizes efficiency, standardization, and continuous improvement. Streamline processes, reduce waste, and optimize workflows… Read more In this section, we'll describe some general principles for preventing cross-site scripting vulnerabilities and ways of using various common technologies Read more
