Absolute AppSec

Latest Episodes:

Episode 144 - Fuzzing, Radamsa, Property Testing Aug 17, 2021

Show notes

With @cktricky still on hiatus, @sethlaw and @lojikil talk fuzzing, property testing, semantic analysis and demo radamsa.

Episode 143 - HTTP/2, Black Hat/DEFCON, Kubernetes Aug 10, 2021

Show notes

With @cktricky out adventuring, @sethlaw is joined by a familiar face (@lojikil) to dive deeply into recent research presented at Black Hat/DEF CON, HTTP/2, and how everything old is new again.

Episode 142 - AI Code Generation, Puma Scan, HTTP Request Smuggling Jul 20, 2021

Show notes

Dreamin', Beamin', and Streamin' about using artificial intelligence (AI) to generate code (*cough*, *cough*). When and where to use automated source code analysis tools, specifically Puma Scan for .Net/C# code. Also a primer on HTTP Request Smuggling and what you should know about it.

Episode 141 - print(), Cross-Site Scripting (XSS), RiskIQ, Amass Demo Jul 13, 2021

Show notes

Just two grumpy old men with some AppSec sprinkled in. Topics this week include new research from portswigger using print to bypass new Chrome XSS iframe restrictions, how XSS is still the best (and worst) issue we deal with, and Microsoft's acquisition of RiskIQ.

Episode 140 - Naomi Buckwalter - Gatekeeping, Developing AppSec Resources Jun 29, 2021

Show notes

Naomi Buckwalter (@ineedmorecyber) joins Ken and Seth in a discussion about security gatekeeping, how anyone can get into application security, and the relationships between development and security.

Episode CXXXIX - Return of the @lojikil (Stefan Edwards) Jun 22, 2021

Show notes

Stefan returns and we pick his brain about information security degrees, format strings, and different testing methodologies. Then we spend most of the episode googling the words that come out of his mouth.

Episode 138: Ransomware Jun 15, 2021

Show notes

The duo is back to talk about consulting scheduling and ransomware. Somehow this evolved to a discussion on Hipster Vulns and how auditing is the Crocs-n-SOCs of application security.

Episode 137: CSRF, GraphQL, Kubernetes, Docker, NoSQL Injection Jun 08, 2021

Show notes

Live from their parent's basement and dripping with tin foil - Seth and Ken talk about how CSRF is a thing in GraphQL. Kubernetes gets an intentionally-vulnerable setup, and you should definitely check the security of your docker. Finally, some noise about the NoSQL Injection Cheat Sheet.

Episode 136: AppSec Nihilism and Breaches Jun 01, 2021

Show notes

Back off of a week's break, Seth and Ken catch up on breach news. A return of security nihilism is also in order based on recent breaches and exploits.

Episode 135: GoSDL, Language Choice, Kenna, Dependency Confusion May 18, 2021

Show notes

Punchy and Grumpy are back at it starting with a discussion on GoSDL and how it integrates with developer workflows. Followed by a discussion on language choice/experience, Cisco's acquisition of Kenna Security, and more dependency confusion in gem files.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected