28 stories

Learning & Automation

Discover tutorials and resources on automation in security workflows, from beginner to advanced, including insights for bug bounty hunters and automation enthusiasts.

Writing security templates for Apache Airflow

Apache Airflow is an Open Source tool that allows users "programmatically author, schedule and monitor workflows". We decided to create a suite of checks for testing security of Airflow installations and document the entire process to show how easy it is to write custom nuclei templates for any piece of technology. Environment Setup Before we start with template creation, we need to set up an airflow instance for testing. We found this repo on GitHub with the docker-compose file to set up a l

Interactsh: Open-Source Solution for OOB Testing

What is Interactsh? Interactsh is a server-client implementation that allows users to identify blind Out-of-Band (OOB) vulnerabilities that may not be detected by conventional testing methods. Out-of-Band testing works by generating dynamic URLs, which when requested by the target, trigger a callback. This callback can be used to identify a vulnerability. Why did we build Interactsh? We wanted an Open-Source solution for Blind OOB testing. Interactsh simplifies the server setup process. It

Learning & Automation

Github Actions for Application Security

Update: PD-Actions GitHub project is suspended by GitHub team due to abuse of Actions platform by malicious actors using PD-Actions. "GitHub Actions help you automate tasks within your software development life cycle. GitHub Actions are event-driven, meaning that you can run a series of commands after a specified event has occurred. For example, every time someone creates a pull request for a repository, you can automatically run a command that executes a software testing script." What this m

Vulnerability Management Learning & Automation

Introducing Chaos Bug bounty recon data API

We’re proud to announce release of our Chaos Bug bounty recon data API today. This API will allow hackers to get instant data on targets of their choice without running any additional tools at just single hit of request. Goals behind the project Reconnaissance is complex, it requires a proper setup and not everyone is equally good at it. People are skilled differently, some are amazing at looking at Web Attack Surfaces, some prefer to dive deep into logic bugs. Being good at recon requires some

Learning & Automation Attack Surface Management

Learning & Automation

Writing security templates for Apache Airflow

Interactsh: Open-Source Solution for OOB Testing

Github Actions for Application Security

Introducing Chaos Bug bounty recon data API

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company