Registration is open for the next KY ISSA full-day Workshop: Personal Digital Privacy! Join us for a great training that supports the KY ISSA community. Lunch is included. Registration:

I talked to several Project Teams struggling to fine-tune Google Cloud Armor rulesets, without deactivating the WAF. I built a live environment to show how to quickly locate and tune out false positives.

The first KY ISSA training of 2024 is in Louisville this Saturday. There are still some tickets although EventBright dropped the "Going Fast" fire emoji on the event this morning.

@mubix @ashleyhacksss The purpose of the pen test is to generate actionable intelligence for the customer. The report is what matters. All the hacking is just but an intermediate step in the process.

On Saturday, January 20, the KY ISSA is hosting the Application Security Testing Workshop, live, in-person in Louisville KY. Road trip!

Mutillidae 2.11.1 released; Server-side Request Forgery (SSRF) added, bugs fixed; Merry Christmas;

Off topic, but my students ask a lot "Where did the Kali menu bar go?", so I made a 1-minute video;

Adding several new lab walkthroughs to Mutillidae; Two videos will drop each day this week;

Scanning Terraform configuration for security vulnerabilities in less than 5 minutes with @bridgecrewio's Checkov;

Playlist: Vuln Scanning Dockerfiles, Terraform configs, and container images with @AquaSecTeam's Trivy;

Playlist: Automating Web Application Vulnerability Assessment using @StackHawk's Scanner;

@psiinon @owasp I'll see if the issue can be resolved. Thanks for the heads up something was wrong. BTW, Stack Hawk is coming along nicely.

Video series released on basic of application containers;

@psiinon @owasp Yes, it is. Been so long since I filled out the project page, I can't even tell you how long.

Posted video tutorial on running Mutillidae from Dockerhub images;

Mutillidae 2.8.57 released; Added diagnostics page for when app cannot connect to the database; Helps folks deploying to Docker/Kubernetes/Cloud;

Mutillidae DockerHub project released; uses Docker Compose to pull the official Mutillidae images from DockerHub;

Video tutorial on How to Run Mutillidae on Docker (using the mutillidae-docker project);

New project: Running Mutillidae on Docker (Official); Automates build process;