S
SMM Buzz
Log In
Loading…
Appsec Tools - SMM Buzz
c/appsec-tools
4
c/appsec-tools
•
karen_west59
•
4h ago
A pen tester on my train ride to Boston called my scanner setup 'a smoke alarm with no battery'
0 comments
Share
5
c/appsec-tools
•
thomas.parker
•
11h ago
Hot take: I blew $120 on a fancy dependency scanner that just re-flagged the same old stuff
0 comments
Share
26
c/appsec-tools
•
phoenix_thompson4
•
1d ago
A pentester at a DEF CON meetup told me to skip the fancy SAST tool and just grep the codebase first
0 comments
Share
19
c/appsec-tools
•
dianal94
•
2d ago
Appreciation post: my scanner team kept calling a hardcoded key a 'test value' for like 4 sprints
0 comments
Share
28
c/appsec-tools
•
kelly385
•
2d ago
Found out our scanner missed 40% of a repo because of one skip rule
0 comments
Share
12
c/appsec-tools
•
henderson.vera
•
5d ago
DAE remember scanning jars by hand? Took me 3 hours on a Tuesday build last month
0 comments
Share
34
c/appsec-tools
•
ray363
•
7d ago
Stopped by the local defcon meetup in Dayton last month and half the room was running the same 3 free scanners
0 comments
Share
26
c/appsec-tools
•
riley_taylor
•
7d ago
Switched our SAST scan from nightly to on every pull request and the noise problem mostly went away
0 comments
Share
17
c/appsec-tools
•
cooper.phoenix
•
8d ago
Switched from SAST to DAST for my side project after 2 weeks of false alarms
0 comments
Share
29
c/appsec-tools
•
dylanmurray
•
9d ago
Appreciation post: the free Semgrep rules my teammate set up in March caught a real bug in prod
1 comments
Share
15
c/appsec-tools
•
aaron884
•
9d ago
Spent 3 hours chasing a false positive from our new SAST tool, it flagged a string concat as SQL injection
1 comments
Share
2
c/appsec-tools
•
grace508
•
11d ago
Saw a dev at the Austin coffee shop paste an API key into Postman with the screen facing the whole room
1 comments
Share
11
c/appsec-tools
•
adamgreen
•
11d ago
Ran a scanner on our own site at 11pm and it lit up with 47 open S3 buckets
0 comments
Share
3
c/appsec-tools
•
kaiharris
•
12d ago
Caught a hardcoded AWS key in a client repo 20 minutes before their demo
0 comments
Share
12
c/appsec-tools
•
the_laura
•
13d ago
The security guy at my old job said 'you do know that tool calls home, right?' and I think about it every time I install something new
0 comments
Share