The DIY AppSec Lab - ASW #185
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
Lots of web hacking can be done directly from the browser. Throw in a proxy like Burp plus the browser's developer tools window and you've got a nearly complete toolkit. But nearly complete means there's still room for improvement. We'll talk about the tools to keep on hand, setting up practice targets, participating in bug bounties, and more resources to help you learn along the way. For tips on labs beyond just appsec, be sure to check out the Security Weekly webcast on "Do It Yourself: Building a Security Lab At Home" at https://securityweekly.com/webcasts/do-it-yourself-building-a-security-lab-at-home/
Segment resources:
- https://www.darkreading.com/careers-and-people/want-to-be-an-ethical-hacker-here-s-where-to-begin
- https://github.com/AdminTurnedDevOps/DevOps-The-Hard-Way-AWS
- https://owasp.org/www-project-juice-shop/
- https://owasp.org/www-project-vulnerable-web-applications-directory/
- https://portswigger.net/web-security
- https://azeria-labs.com/writing-arm-assembly-part-1/
- https://twitter.com/0xAs1F/status/1480604655952433155
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw185
https://portswigger.net/web-security
portswigger.nethttps://azeria-labs.com/writing-arm-assembly-part-1/
azeria-labs.comhttps://www.securityweekly.com/asw
securityweekly.comhttps://securityweekly.com/asw185
securityweekly.com