GIVEAWAY
Win the ultimate AI security check with a free pentest giveaway!
GIVEAWAY
Win the ultimate AI security check with a free pentest giveaway!

Blog

Thoughts, perspectives, and industry commentary from the Cobalt team.

Bypassing CSRF tokens with Python’s CGIHTTPServer to exploit SQL injections

There are ways to configure Burp using macros to bypass CSRF tokens on HTML forms, so we can use Burp Active Scans,...
Modernizing Pentesting
Oct 11, 2017
Est Read Time: 4 min
Read more

How to Survive a Vendor Security Questionnaire

Tips on vendor assessments from experts in the industry
Cybersecurity Insights
Aug 14, 2017
Est Read Time: 7 min
Read more

New Alternatives to Bug Bounty Programs

Before you can choose the right approach to test your application security, you first need to understand your options —...
Modernizing Pentesting
Aug 2, 2017
Est Read Time: 4 min
Read more

UX-Friendly Enumeration Protection in Ruby on Rails

How to avoid revealing the existence of records to attackers in web applications, while keeping a good user experience...
Cobalt Core Pentester Guides
May 23, 2017
Est Read Time: 4 min
Read more

Penetration Testing for SaaS Companies

SaaS companies have fundamentally transformed the enterprise software model and at this point it seems there is no...
Modernizing Pentesting
May 8, 2017
Est Read Time: 3 min
Read more

Start at Zero with the OWASP Top 10

Engineering is an exercise in working within constraints. Appsec increases those constraints, forcing developers to...
Cybersecurity Insights
Apr 24, 2017
Est Read Time: 3 min
Read more

Introducing In-App Pentest Reports

My name is Kevin Bourne and I recently joined Cobalt as their new Customer Success Manager. My primary responsibility...
Product Updates
Mar 28, 2017
Est Read Time: 1 min
Read more

Crowdsourced Penetration Testing and PCI DSS Compliance

Various regulatory requirements that are lurking across different industries — involving different aspects of...
Compliance
Mar 20, 2017
Est Read Time: 5 min
Read more

The Third Wave of Application Security

Cybersecurity Insights
Jan 26, 2017
Est Read Time: 8 min
Read more
    56 57 58 59 60

    Always get the latest

    Sign up to get Cobalt insights delivered right to your inbox so you never miss a story.

    More resources

    Learn pentesting best practices, read answers to our most common questions
    and get our technical docs.