Johnny Cold·Oct 23SSRF Is Not About the Code. It’s About Where the Code Runs.Here is a Go handler. Is it vulnerable?
Tɧε Pεntεstįng Mątėrįål·Sep 25Master Source Code Review: A Step-by-Step Guide to Finding High-Severity Logic Flaws &…From manual code auditing to identifying security risks in modern applications — here is my complete playlist/learning path.
Gupta Bless·Aug 10Stop Using Generic AI Prompts: Build Structured Claude Skills for SecurityIntroduction
Johnny Cold·Jul 27I Audited an Open-Source Go Web Project: CORS Leakage & Unauthenticated WebSocketsWhen building microservices and web APIs in Go, performance and simplicity often take the spotlight. However, during secure code reviews, I…
Robert Broeckelmann·Jul 23Secure Code Reviews: Finding Security Issues Before Attackers DoThis post is also published on the IyaSec blog.
