Chris.Harris @AppSecTutor

Application Security Pro, cutting through the hype, continuously improving and sharing quality techn content | OSCP, CISSP, MS Software Dev - Boston University Joined April 2019

Tweets

144
Followers

107
Following

300
Likes

378

Chris.Harris @AppSecTutor

4 years ago

Excellent in depth write-up by @pwntester of some nuanced Java deserialization vulns found in Dubbo!

GitHub Security Lab @GHSecurityLab

4 years ago

Excellent in depth write-up by @pwntester of some nuanced Java deserialization vulns found in Dubbo!

0 45 104 0 17

0 0 1 0 0

5 things you must do as a new developer👇 1. You must start now 2. You must be consistent 3. You must build projects 4. You must join a community 5. You must code along when using a tutorial/course What would you add to this list?

72 193 973 0 96

Gary McGraw @cigitalgem

4 years ago

Here's the deal. If you want to do #swsec (aka #appsec), you really need to know how to code. Honest.

6 6 21 0 1

Jim Manico from Manicode Security @manicode

4 years ago

This is an amazing piece of work from @thatsjet that helps bring sense around what to log for security purposes. This cheatsheet just went live today! cheatsheetseries.owasp.org/cheatsheets/Ap…

0 13 38 0 6

Chris.Harris @AppSecTutor

4 years ago

Awesome new opportunity to join our growing AppSec squad! Looking for anyone with a passion for software security, continuous learning and helping our dev teams run fast and stay secure paychex.recsolu.com/jobs/2wtGkCjz5…

0 3 4 0 0

Chris.Harris @AppSecTutor

4 years ago

If you work with app devs and struggle to succinctly answer the question “What should I be logging?”, this is a fantastic resource to get started from!

Code Doctor @thatsjet

4 years ago

If you work with app devs and struggle to succinctly answer the question “What should I be logging?”, this is a fantastic resource to get started from!

1 2 9 0 1

0 0 3 0 0

Jonesy @jonesyt3ch

4 years ago

Cloud Learning Protip: If you can afford it, set aside $15-25 a paycheck to pay for machines/services so you can learn-by-doing. It's a really solid way to build something and gain some level of experience. Be real, you've spent more money on dumber things. Invest in yourself.

0 1 3 0 0

Chris.Harris @AppSecTutor

4 years ago

As a college kid in ‘08, reading the DNS research by @dakami totally blew my mind and was a huge part of what led me to chase a career in infosec. You are an inspiration, your passion and warmth was contagious and it lit a fire in me as well as many many others. Rest In Peace

0 0 1 0 0

𝐋𝐚𝐤𝐬𝐡 𝐑𝐚𝐠𝐡𝐚𝐯𝐚𝐧 @laraghavan

4 years ago

1/2 Don’t view XSS as a vulnerability that needs fixing - you’ll end up playing “whack-a-mole” till kingdom comes. Instead view “lack of context-aware automated output escaping” in all of your web application frameworks as the issue that needs fixing.

Jim Manico from Manicode Security @manicode

4 years ago

12 32 128 0 16

2 4 15 0 1

OWASP DevSlop 🇺🇦 @Owasp_DevSlop

5 years ago

Starting in one hour, @devops_rob will join us @Owasp_DevSlop and discuss secret management and what challenges a developer may face when their code meets secrets including how to implement simple API driven workflows. 🔗: youtu.be/Ol4HEhhwobs

0 1 6 0 0

Download Image

Jim Manico from Manicode Security @manicode

5 years ago

OAuth2 can be your best friend forever if you BFF #KeepOAuth2TokensOutOfBrowsers kennethlange.com/backends-for-f…

4 9 18 0 6

Omar Ωr Santos @santosomar

5 years ago

Damn-Vulnerable-GraphQL-Application - Damn Vulnerable GraphQL Application Is An Intentionally Vulnerable Implementation Of Facebook's GraphQL Technology, To Learn And Practice GraphQL Security ift.tt/3ahdIK8 #security #pentest #hacking #hacker #tools

2 86 270 0 75

Download Image

Chris.Harris @AppSecTutor

5 years ago

Fantastic presentation w/ lots of live coding & review by @manicode and @ronperris on XSS in React! Some really quality conversation about entity vs attribute encoding, and ensuing fixes are comprehensive. Highly recommended

Ron Perris @ronperris

5 years ago

0 11 27 0 6

Download Image

1 0 1 0 0

Chris.Harris @AppSecTutor

5 years ago

That’s a real one right there! In the same vain, a deep knowledge of fundamentals in web security and software proves hugely more valuable than trying to chase the latest obscure attacks and overhyped products

0 0 0 0 0

Jessica Valenti @JessicaValenti

5 years ago

Whenever I get discouraged and want to quit something, I remember the words of my then 3 year-old after she puked carrots all over the living room floor: "I'm gonna need more carrots."