|
|
Shay Chen
@
sectooladdict
|
|
Information Security Researcher, Analyst, Tool Author and Speaker. The guy behind RvR, WAVSEP (web scanners) and WAFEP (web application firewall) benchmarks.
|
|
|
319
Tweetek
|
110
Követés
|
1 108
Követők
|
| Tweetek |
|
|
Shay Chen
@sectooladdict
|
18 h |
|
@Jhaddix both. Hundreds of test cases, new website/search/comparison features, and an SSDLC comparison twist. plans and update post soon
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
jan. 21. |
|
@joubinj it's already in. Should update the score soon for 9.0.3.4
|
||
|
|
||
| Shay Chen retweetelt | ||
|
netsparker
@netsparker
|
dec. 20. |
|
Are web security scanners effective? Watch episode #492 of Paul's Security Weekly for the answer netsparker.com/blog/news/blac… #podcast #security
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
dec. 13. |
|
@robbreck @securityweekly There were discussions w. veracode when Gartner analysts questioned, at the time I was loaded and they didn't push
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
dec. 13. |
|
@robbreck @securityweekly not necessarily, in the context of a service, they may use other commercial engines.Unknown until they participate
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
dec. 12. |
|
@robbreck @securityweekly I guess their engine can be assessed, but last I checked they also use humans...Assessing humans is a bit harder:)
|
||
|
|
||
| Shay Chen retweetelt | ||
|
Anatoly Shashkin 💾
@dosnostalgic
|
dec. 4. |
|
It's been 23 years, but Day of the Tentacle still has the best opening credits in videogames #DOSGaming pic.twitter.com/oi6UUdfDGP
|
||
|
|
||
| Shay Chen retweetelt | ||
|
Zed Attack Proxy
@zaproxy
|
nov. 22. |
|
|
||
|
|
||
| Shay Chen retweetelt | ||
|
Sam Stepanyan
@securestep9
|
nov. 20. |
|
Big step towards #DevSecOps (or #SecDevOps): The Official #Jenkins Plugin for OWASP ZAP (@zaproxy) is released: bit.ly/2g7OMJX pic.twitter.com/e0UpVgbYyO
|
||
|
|
||
| Shay Chen retweetelt | ||
|
Greg Foss
@Heinzarelli
|
okt. 25. |
|
Looking forward to participating in the @rapid7 webinar with @sectooladdict and @dan_kuykendall this afternoon! information.rapid7.com/staying-on-the…
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
okt. 11. |
|
working on json/xml test cases for wavsep, as well as 000 test cases for two new attacks. release and additional updates coming soon
|
||
|
|
||
| Shay Chen retweetelt | ||
|
netsparker
@netsparker
|
okt. 10. |
|
Next week do not forget to join Dan Cornell & @fmavituna for a free webinar about using
Netsparker with ThreadFix denimgroup.com/webinar_optimi…
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
szept. 19. |
|
Updated the recent results of Burp suite pro and Acunetix in sectoolmarket. Working on a bunch of additional updates.
|
||
|
|
||
| Shay Chen retweetelt | ||
|
Arachni Scanner
@ArachniScanner
|
aug. 27. |
|
The nightlies now include @PhantomJS v2.1.1, take them for a spin: downloads.arachni-scanner.com/nightlies/
|
||
|
|
||
| Shay Chen retweetelt | ||
|
SourceClear
@srcclr
|
jún. 13. |
|
Free tools from SourceClear for @GitHub users to find & fix open-source security vulnerabilities srcclr.com #DevSec
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
jún. 7. |
|
@goldsteinds @_ifthenelse_ there's upcoming updates for 2-3 scanners plus another new vulnerability score. All planned for this june
|
||
|
|
||
| Shay Chen retweetelt | ||
|
Kim Dinerman
@kdinerman
|
máj. 5. |
|
Social Attacks in #WebApp Hacking - Great post by @sectooladdict community.rapid7.com/community/apps…
|
||
|
|
||
| Shay Chen retweetelt | ||
|
Paul Asadoorian
@securityweekly
|
ápr. 13. |
|
RT @netsparker: @fmavituna talks automating and scaling up web application security during episode 457 netsparker.com/blog/web-secur…
|
||
|
|
||
|
|
Shay Chen
@sectooladdict
|
ápr. 14. |
|
@goldsteinds yes, closest update set for june
|
||
|
|
||
| Shay Chen retweetelt | ||
|
ToolsWatch
@ToolsWatch
|
ápr. 10. |
|
vFeed - The Correlated Vulnerability And Threat Database new API 0.6.5 - Support of MongoDB Migration github.com/toolswatch/vFe…
|
||
|
|
||