Medium

Krzysztof Pranczk

Pinned

In

ITNEXT

by

Krzysztof Pranczk

·

Apr 22, 2024

Web API Security Champion: Broken Object Level Authorization (OWASP TOP 10)

Explaining one of the most common web API vulnerability classes — Broken Object Level Authorization in a practical manner. Providing a…

Web API Security Champion: Broken Object Level Authorization (OWASP TOP 10)

Pinned

In

ITNEXT

by

Krzysztof Pranczk

·

Apr 3, 2024

Security Code Challenge for Developers & Ethical Hackers — The Damn Vulnerable RESTaurant

Introduction to a security code challenge dedicated to developers and ethical hackers. It focuses on security vulnerabilities in Web API.

Security Code Challenge for Developers & Ethical Hackers — The Damn Vulnerable RESTaurant

Pinned

In

ITNEXT

by

Krzysztof Pranczk

·

Oct 11, 2023

Python for DevSecOps and Any Security Engineer

Does DevSecOps Engineer need programming skills? What is the value of utilising Python for security purposes? What you need to learn to…

Python for DevSecOps and Any Security Engineer

Pinned

Krzysztof Pranczk

·

Sep 17, 2023

A Practical Approach to SBOM in CI/CD

The article covers the concept of SBOM, its advantages, popular formats and practical implementations for both Java and Python projects.

A Practical Approach to SBOM in CI/CD

In

ITNEXT

by

Krzysztof Pranczk

·

Jan 12, 2025

Building AI Agents to Solve Security Challenges

In this article I’m presenting how to build AI agents to remediate security vulnerability using the CrewAI framework. It explores the…

Building AI Agents to Solve Security Challenges

In

ITNEXT

by

Krzysztof Pranczk

·

Oct 8, 2024

Unrestricted Access to Sensitive Business Flows — Web API Security Champion Part VI

Explaining one of the most common web API vulnerability classes — Unrestricted Access to Sensitive Business Flow in a practical manner…

Unrestricted Access to Sensitive Business Flows — Web API Security Champion Part VI

In

InfoSec Write-ups

by

Krzysztof Pranczk

·

Sep 23, 2024

Building and Automating Cybersecurity Newsletter — DevSec Selection Case Study

Nowadays, creating an email-based newsletter is a straightforward process, as several platforms allow you to build one quickly and often…

Building and Automating Cybersecurity Newsletter — DevSec Selection Case Study

In

ITNEXT

by

Krzysztof Pranczk

·

Jul 20, 2024

Broken Function Level Authorization — Web API Security Champion Part V

Explaining one of the most common web API vulnerability classes — Broken Function Level Authorization in a practical manner. Providing a…

Broken Function Level Authorization — Web API Security Champion Part V

In

ITNEXT

by

Krzysztof Pranczk

·

Jun 18, 2024

Unrestricted Resource Consumption in a Password Reset — Web API Security Champion Part IV

Explaining one of the most common web API vulnerability classes — Unrestricted Resource Consumption in a practical manner. Providing a…

Unrestricted Resource Consumption in a Password Reset — Web API Security Champion Part IV

In

CodeX

by

Krzysztof Pranczk

·

Jun 3, 2024

Web API Security Champion Part III: Broken Object Property Level Authorization (OWASP TOP 10)

Explaining one of the most common web API vulnerability classes — Broken Object Property Level Authorization in a practical manner…

Web API Security Champion Part III: Broken Object Property Level Authorization (OWASP TOP 10)

Krzysztof Pranczk

Krzysztof Pranczk

Software Engineer and Security Researcher, writing about application security in SDLC and DevSecOps - https://devsec-blog.com 🔐

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech