WordPress for the Modern PHP Developer
Modernize WordPress development with Git, Composer, and other tools to manage themes, plugins, databases, and environments for growing web applications.
Unit Testing by Example
Learn practical unit testing techniques for PHP through realistic examples, progressing from basic to advanced concepts while considering tight deadlines and efficiency.
Debugging Effectively
Strategies for efficient debugging: tools, logical approach, challenging assumptions, isolating code paths, and automated testing. Develop intuition and mindset for quick problem-solving.
Using Open Source for Fun and Profit
Discover how open source communities can transform your career, offering opportunities for growth, networking, and personal fulfillment beyond code contributions.
Static Analysis Saved My Code Tonight
Explore static analysis tools for PHP, their benefits in code review, and integration into development cycles. Learn about AST, security checks, and migration compatibility.
Mocking Dependencies in Unit Tests with Phake
Explore Phake, an alternative mocking library for PHP unit testing, offering a concise API and advanced features to simplify dependency mocking in object-oriented applications.
Haptyc - A Library for Building Microfuzzers in Turbo Intruders
Explore Haptyc, a Python library enhancing Turbo Intruder with advanced fuzzing capabilities. Learn to create modular, reusable transforms for powerful and efficient HTTP request testing in web security assessments.
The Bug Hunter's Methodology - Application Analysis
Discover advanced techniques for application analysis in bug hunting with insights from a top-ranked researcher. Learn recon strategies and web app vulnerabilities to enhance your ethical hacking skills.
All Your -Data-base Are Belong To Us
Explore vulnerability research in office applications through fuzzing, code review, and reverse-engineering. Learn to discover and exploit zero-days, with insights on binary exploitation for curious researchers.
Push-Button Reliability Testing for Cloud-Backed Applications with Rainmaker
Explore Rainmaker, a tool for reliability testing of cloud-backed applications. Learn about its fault injection techniques, automatic policies, and success in detecting bugs in popular software.
Fast, Approximate Vector Queries on Very Large Unstructured Datasets
Explore Auncel, a vector query engine for large datasets, offering bounded errors and latencies. Learn how it outperforms existing solutions in processing high-dimensional data efficiently.
Sketchovsky - Enabling Ensembles of Sketches on Programmable Switches
Optimizing network measurement tasks on programmable switches using Sketchovsky, a framework for efficient cross-sketch optimization and composition to reduce hardware resource usage.
Augmenting Static Analysis Using Pintool - Ablation
Extracts runtime information to enhance static analysis, resolving virtual calls in C++ binaries and visually comparing samples for efficient vulnerability research and code auditing.
Abusing Bleeding Edge Web Standards for Appsec Glory
Explore risks and mitigation strategies for modern web security standards like SRI, CSP, and HPKP. Learn about implementation challenges, trade-offs, and potential exploits in legacy applications.
Into the Core - In-Depth Exploration of Windows 10 IoT Core
Explore Windows 10 IoT Core internals, security features, attack surfaces, and assessment methods. Learn to secure IoT devices and understand their role in the evolving Internet of Things landscape.
Windows 10 Segment Heap Internals
Explore Windows 10 Segment Heap internals, focusing on data structures, algorithms, and security mechanisms. Learn how to exploit memory corruption vulnerabilities in Microsoft Edge components.
Pindemonium - A DBI-Based Generic Unpacker for Windows Executable
Explore a generic unpacking algorithm for Windows executables using Dynamic Binary Instrumentation. Learn to detect and defeat popular packing techniques, reconstruct working PEs, and handle IAT obfuscation.
The Beast Within - Evading Dynamic Malware Analysis Using Microsoft COM
Explore COM's role in malware evasion and dynamic analysis challenges. Learn practical approaches for monitoring COM calls and overcoming obstacles in automated malware detection.
Web Application Firewalls - Analysis of Detection Logic
Explores detection logic in Web Application Firewalls, focusing on regular expressions. Analyzes security flaws in popular WAFs and introduces tools for identifying vulnerabilities in regex patterns.
VoIP Wars - The Phreakers Awaken
Explore cutting-edge VoIP attacks, vulnerabilities, and security testing techniques for modern unified communications, with focus on cloud-based solutions and enterprise networks.
OSS Security Maturity - Time to Put on Your Big Boy Pants
Explore open source software risks, evaluation strategies, and a maturity model for organizations. Learn to manage vulnerabilities, assess costs, and implement effective security practices in product development.