Garth Boyd

Never ending spider

4

I have been able to use zap-cli in the official owasp zap docker container. With a preconfigured context for login against a sample target site (juiceshop for example) the spider...

OAuth referred to as AuthN

1

This may sound pedantic but I hear it all the time and it leads to confusion about OAuth. OAuth is not an authentication (AuthN) mechanism, it is an authorization mechanism...

Dangerous FAQ suggestion on APIM subscription keys

1

[Source Link](https://learn.microsoft.com/en-us/azure/api-management/api-management-faq#how-can-i-secure-the-connection-between-the-api-management-gateway-and-my-backend-services-) The linked section states: "Use subscription key authentication." as a potential solution to the question "How can I secure the connection between the API Management gateway and my...

Update: Secrets Management Cheat Sheet

2

## What is missing or needs to be updated? Discussion of secrets management in a multi-cloud environment. ## How should this be resolved? Investigation and discussion of issues. I am...

dead link: Chrome driver: https://code.google.com/p/chromedriver/downloads/list

Firefox 65.0.1 MacOS Mojave 10.14.2 Installed via BApp store Firefox quit unexpectedly Process: firefox-bin [15638] Path: /Applications/Firefox.app/Contents/MacOS/firefox-bin Identifier: org.mozilla.firefox Version: 65.0.1 (6519.2.11) Code Type: X86-64 (Native) Parent Process: JavaApplicationStub [14745]...

[WIP ]Add Recon Section for API Chapter

21

This PR supports issue #5 - This PR introduces a section on reconnaissance of REST based APIs