War Stories
Avsnitt

Episode 19: "IDOR, APIs, and Passwords OH My!" ft. Jullian Gerhart

Dela

This week Zac sits down with Jullian Gerhart. Jullian is a Managing Consultant at NCC Group, which specializes in application security and application security pentesting. Jullian is also a contributor to the Application Defense Alliance (https://appdefensealliance.dev/) working to create a standardized framework for securing applications in the Google Play and Apple App Stores. Zac and Jullian discuss the current state of application security, their favorite web application security vulnerability (LOVE LIVE IDOR), and we get a great story from Jullian about compromising extremely sensitive information from an unsecured API.


Produced www.sevnx.com


CyberCoffee

drinkcybercoffee.com

Use promo code WAR10 to save 10%

Podden och tillhörande omslagsbild på den här sidan tillhör Zac Davis. Innehållet i podden är skapat av Zac Davis och inte av, eller tillsammans med, Poddtoppen.