Want to challenge your AppSec knowledge?

Take the AppSec IQ Test

Or just looking to grow your skills?

FREE EBOOK: How to get into Application Security

> ls /var/www/html

learning, security & software engineering

> whoami

OSCP, OSWE certified security engineer, passionate coder and tinkerer

Get the latest from the AppSec world:

Secure Coding

BASICS

These days I spend most of my time reading other people’s code. Everybody makes mistakes and writes bad code.There’s no denying it. However, most of the security vulnerabilities I encounter could have been avoided by following some basic Secure Coding best practices.

SOON

  • Do not trust input. Validate everything

  • Encode output

  • Session management

  • Cryptographic best practices

  • Database security

  • …