When performing web app, mobile app, and API penetration tests, we refer to the OWASP[…]
This video covers the basics of cross-site scripting, including reflected, stored, and DOM-based XSS as[…]
In this blog post, Raxis lead penetration tester Mark Fabian discusses broken access control and[…]
The latest draft of the OWASP Top 10 has been released. Though injection is now[…]
Raxis COO Bonnie Smyre discusses the vulnerabilities that arise when web apps transmit data insecurely[…]
Many of the external network and web application penetration tests that we perform list ‘clickjacking'[…]