bugzy

Just published: Witcher: Managing GitHub Advanced Security (GHAS) Controls at Scale Read full article here: d3vilbug.github.io/posts/witcher/ Witcher: github.com/mf-labs/witcher #ApplicationSecurity #SAST #CyberSecurity #CodeQL #GHAS #witcher #SSDLC #ShiftLeftSecurity #AppSec #pentest

Witcher is a tool designed to streamline and automate security control management for GitHub repositories. Whether you’re enabling CodeQL, Dependabot, Secret Scanning, or IaC scanning, Witcher empowers you to implement and monitor security features across multiple repositories.

This post explores the limitations of GitHub Advanced Security (GHAS) and how Witcher enhances security management by providing greater scalability, control, and efficiency across repositories.

Just published: Witcher: Managing GitHub Advanced Security (GHAS) Controls at Scale Read full article here: d3vilbug.github.io/posts/witcher/ Witcher: github.com/mf-labs/witcher #ApplicationSecurity #SAST #CyberSecurity #CodeQL #GHAS #witcher #SSDLC #ShiftLeftSecurity #AppSec #pentest

#BSidesBerlin is back! Save the date: Saturday 26.11 at @cbase and online The CFP is Open until 16.10 papercall.io/bsides-2022-be… Tickets are available on our website bsides.berlin @SecurityBSides @cfp_time

@r0bre @Neodyme congrats 🥳🎉

excited to announce im joining @neodyme as a security researcher. 🥳

Our team mango won the first place of @nullcon berlin onsite ctf. thanks to @nullcon @antriksh_s and HackIM team for this amazing experience and LightSaber 😁 #nullcon #nullconberlin

Day 02 started with @albinowax talk ..... one of the interesting talk on web application security #NullconBerlin

i am going to attend Nullcon Berlin 2022 using public transport #tramps #greencon

more details at mandiant.com/resources/mand…

#NullconBerlin2022 talk #2 was fun and interesting .... uncovering smartness of today's smart devices 😁

I'll be giving one hours session today from 6:00 PM - 7:00 PM PKT with @BSidesPakistan teams.live.com/meet/953268143… Session: 1. Demo of encryption and decryption of request & response on the fly (below are a few scenarios) 2. Decrypting Mobile App Traffic using AES Killer and Frida

Added: AES Killer, decrypt AES traffic on the fly portswigger.net/bappstore/e5f0…

GitHub: github.com/Ebryx/AES-Kill… For more info and usage kindly read below blog posts - n00b.sh/posts/aes-kill… - n00b.sh/posts/aes_kill…

My second extension AES Killer published in the @PortSwigger BApp store. portswigger.net/bappstore/e5f0… #cybersecurity #infosec #informationsecurity #pentesting #burpsuite #bugbounty #mobileappsecurity #applicationsecurity #pentester #aeskiller #aes_killer #frida #mobilesecurity

@pradhan2030 it can decrypt and encrypt request and response with multiple variation like in this post n00b.sh/posts/aes_kill… you can check configuration for your request & response

@d3vilbug Can it decrypt payment gateway

In my second blog post, I have explained how one can decrypt the AES Encrypted mobile app traffic on the fly using AES Killer and Frida. n00b.sh/posts/aes-kill… #cybersecurity #infosec #informationsecurity #pentest #burpsuite #bugbounty #mobileappsecurity #frida #MobileSecurity

This BEAST will work with encryption & decryption of traffic on - Complete Request and Response - Specific Request Parameters and complete response - Specific JSON Request parameters and complete response - Specific Request and Response Parameters - Override Request and Response

Released AES Killer v4.0 GitHub: github.com/Ebryx/AES-Kill… Guide: n00b.sh/posts/aes_kill… #cybersecurity #security #infosec #informationsecurity #pentesting #pentest #burpsuite #plugins #hackbar #bugbounty #mobileappsecurity #applicationsecurity #pentester #aeskiller #aes_killer

Now you can directly install HackBar from the Burp suite BApp store, Thanks to the @PortSwigger Product Team portswigger.net/bappstore/c1c3… #pentesting #pentest #burpsuite #plugins #hackbar #bugbounty #mobileappsecurity #applicationsecurity #pentester #infosec