Devsecurely @devsecurely

Our sole purpose is to make security concepts accessible for all developers | We taught 320+ developers how to secure their applications. devsecurely.com Paris Joined September 2023

Tweets

961
Followers

561
Following

444
Likes

794

Devsecurely @devsecurely

4 months ago

Don't give them much to attack in the first place!

Imed Bounab @imaibou

4 months ago

Don't give them much to attack in the first place!

1 0 6 297 0

Download Image

0 0 0 81 0

Devsecurely @devsecurely

5 months ago

Restrict the attack surface to reduce the risk of getting hacked !

Imed Bounab @imaibou

5 months ago

Restrict the attack surface to reduce the risk of getting hacked !

2 0 7 562 0

0 0 3 88 0

Devsecurely @devsecurely

5 months ago

Exactly! Why would you not do it? It's easy, free, and has a lot of advantages.

Imed Bounab @imaibou

5 months ago

Exactly! Why would you not do it? It's easy, free, and has a lot of advantages.

0 0 1 291 1

0 0 1 95 0

Devsecurely @devsecurely

5 months ago

This must be one of the rare cases where getting hacked was a good thing 😅

Imed Bounab @imaibou

5 months ago

This must be one of the rare cases where getting hacked was a good thing 😅

14 1 40 2K 1

0 0 0 46 0

In soccer, the goal is the surface area defined by the goalposts. The goalkeeper knows exactly what to defend. You should identify all the websites you own that are accessible on the internet. Clearly define the attack surface you need to defend.

0 1 4 103 0

Devsecurely @devsecurely

11 months ago

I have big respect for people who reverse-engineer binary files. They stare at assembly code and manage to understand what the program is supposed to do. That takes a big level of focus. Kudos!

1 0 6 112 0

Devsecurely @devsecurely

11 months ago

You can send an HTTP request to the Office365 server with a basic authentication header. You specify the username and the password in the HTTP header “Authorization”. The research started with a simple observation: when performing an HTTP request with an invalid username, the…

0 0 1 136 0

Devsecurely @devsecurely

11 months ago

Do you see what I'm seeing? There is something horribly wrong with this login API. Please explain to our intern Joe what he did wrong.

0 0 1 117 0

Download Image

Devsecurely @devsecurely

11 months ago

0 0 4 64 0

Download Image

Devsecurely @devsecurely

11 months ago

The obstacles in front of the success you seek is just the price of entry. If it was easy, everyone would have it. And it wouldn't be special anymore. Work on that project. Learn that framework. Write that content. Enjoy the journey. The destination will come eventually.

0 0 2 68 0

Devsecurely @devsecurely

11 months ago

The faster you take decisions, the more efficient you become. Having to make a choice takes up memory space. It's an open loop. You need to close the subject to liberate the mental space. Sometimes I face difficult choices, and I hate it. It paralyzes me.

0 0 3 86 0

Devsecurely @devsecurely

11 months ago

4 0 5 67 0

Download Image

Devsecurely @devsecurely

11 months ago

Sometimes I code something that works. But the, I realize there is a better way to do it, so I re-implement the whole thing. Then I do it again, and again. I then force myself to stop thinking about it to move on. Does this happen to anyone else?

3 0 7 122 0

Devsecurely @devsecurely

11 months ago

0 0 2 30 0

Download Image

Devsecurely @devsecurely

11 months ago

Technical writing is the best skill I learned as a pentester. I remember grumbling because I had to write those pentest reports. But that taught me how to articulate my thoughts and share my ideas in a comprehensible way. And I'm grateful for that opportunity.

4 1 7 145 0

Devsecurely @devsecurely

11 months ago

1 0 1 32 0

Download Image

Devsecurely @devsecurely

11 months ago

In case you don't know about it, the service shodan.io scans all the servers on the internet. You can search for your servers' IP addresses and it will show you all the accessible services on it.

0 0 1 35 0

Devsecurely @devsecurely

11 months ago

0 0 1 34 0

Download Image

Devsecurely @devsecurely

11 months ago

I thought it was possible. But, you can't do it all alone. Find friends that have the same ambitions as you. Friends who push you. A partner who understands and supports you. You can go faster in the beginning if you're alone. But other can help you go further.

3 0 4 106 0

Devsecurely @devsecurely

11 months ago

Securing your application is simple. You can just take action on the posts we publish here, and that would give you a 1% improvement each time. That 1% will compound over time, and your application will become bulletproof after putting in minimum effort.