Practical articles on application security, secure coding, penetration testing, API and mobile hardening, threat modeling, and cloud security — written by the AppSecWarrior team for developers, security engineers, and leaders who want to ship safer software. New posts from our Medium publication appear here automatically, so you always see our latest guides, research, and field notes without refreshing the page.
About Today’s Guest — Pentester Conversations: Superwoman in Cybersecurity - Pallavi’s journeyHackers and Security Enthusiasts, today we’re thrilled to welcome Pallavi Deshmukh — a dashing, dynamic woman in cybersecurit…
Read on Medium
How autonomous, LLM-driven security scanners introduce a new class of attack surface — and how to defend against itArtificial Intelligence has quickly become the shiny new tool in the security world. AI-powered scanners…
Read on Medium
Cybersecurity is constantly evolving, but the most valuable lessons often come straight from those on the front lines. With this series, our goal is to bridge technical expertise and accessible storytelling by sharing e…
Read on Medium
Objective: We are designing specialized AI agents that strengthen application security by automating critical testing workflows: a Web Pentesting Agent that conducts reconnaissance, vulnerability scanning, and controlle…
Read on Medium
Shradha’s JourneyIn the ever‑evolving world of cybersecurity, the voices of practitioners often carry the most valuable lessons. With this new series, I aim to bridge the gap between technical expertise and accessible s…
Read on Medium
As we move from static chatbots to autonomus AI agents the security landscape has shifted from “What the AI says” to “What the AI can do”. Traditional threat modeling is no longer enough. when an agent has the power to…
Read on Medium
In a recent interview session, we asked candidates about zero‑click exploits to evaluate whether they understand modern, advanced attack vectors that go beyond the typical ‘click a malicious link’ scenarios. Here is Sam…
Read on Medium
A REST API based application for practice PenTester.We solved the “Damn Vulnerable RESTaurant (DVR)” challenge earlier this year. But we totally forgot to write share how we did it!Good news though — thanks to requests…
Read on Medium
IntroductionThe HTTP Host header is a fundamental component of the HTTP/1.1 protocol, specifying the domain name of the server (for example, www.appsecwarrior.org) and optionally the port number, to which the request is…
Read on Medium
Prototype Pollution — a JavaScript VulnerabilityPrototype Pollution is a security vulnerability that affects JavaScript applications, particularly those using objects and inheritance. It occurs when an attacker manipula…
Read on Medium