Krzysztof Pranczk – Medium

Krzysztof Pranczk

Pinned

Published in
ITNEXT

Web API Security Champion: Broken Object Level Authorization (OWASP TOP 10)

Explaining one of the most common web API vulnerability classes — Broken Object Level Authorization in a practical manner. Providing a…

Apr 22, 2024

Web API Security Champion: Broken Object Level Authorization (OWASP TOP 10)

Apr 22, 2024

Pinned

Published in
ITNEXT

Security Code Challenge for Developers & Ethical Hackers — The Damn Vulnerable RESTaurant

Introduction to a security code challenge dedicated to developers and ethical hackers. It focuses on security vulnerabilities in Web API.

Apr 3, 2024

Security Code Challenge for Developers & Ethical Hackers — The Damn Vulnerable RESTaurant

Apr 3, 2024

Pinned

Published in
ITNEXT

Python for DevSecOps and Any Security Engineer

Does DevSecOps Engineer need programming skills? What is the value of utilising Python for security purposes? What you need to learn to…

Oct 11, 2023

Python for DevSecOps and Any Security Engineer

Oct 11, 2023

Pinned

A Practical Approach to SBOM in CI/CD

The article covers the concept of SBOM, its advantages, popular formats and practical implementations for both Java and Python projects.

Sep 17, 2023

A Practical Approach to SBOM in CI/CD

Sep 17, 2023

Published in
ITNEXT

Building AI Agents to Solve Security Challenges

In this article I’m presenting how to build AI agents to remediate security vulnerability using the CrewAI framework. It explores the…

1d ago

Building AI Agents to Solve Security Challenges

1d ago

Published in
ITNEXT

Unrestricted Access to Sensitive Business Flows — Web API Security Champion Part VI

Explaining one of the most common web API vulnerability classes — Unrestricted Access to Sensitive Business Flow in a practical manner…

Oct 8, 2024

Unrestricted Access to Sensitive Business Flows — Web API Security Champion Part VI

Oct 8, 2024

Published in
InfoSec Write-ups

Building and Automating Cybersecurity Newsletter — DevSec Selection Case Study

Nowadays, creating an email-based newsletter is a straightforward process, as several platforms allow you to build one quickly and often…

Sep 23, 2024

Building and Automating Cybersecurity Newsletter — DevSec Selection Case Study

Sep 23, 2024

Published in
ITNEXT

Broken Function Level Authorization — Web API Security Champion Part V

Explaining one of the most common web API vulnerability classes — Broken Function Level Authorization in a practical manner. Providing a…

Jul 20, 2024

Broken Function Level Authorization — Web API Security Champion Part V

Jul 20, 2024

Published in
ITNEXT

Unrestricted Resource Consumption in a Password Reset — Web API Security Champion Part IV

Explaining one of the most common web API vulnerability classes — Unrestricted Resource Consumption in a practical manner. Providing a…

Jun 18, 2024

Unrestricted Resource Consumption in a Password Reset — Web API Security Champion Part IV

Jun 18, 2024

Published in
CodeX

Web API Security Champion Part III: Broken Object Property Level Authorization (OWASP TOP 10)

Explaining one of the most common web API vulnerability classes — Broken Object Property Level Authorization in a practical manner…

Jun 3, 2024

Web API Security Champion Part III: Broken Object Property Level Authorization (OWASP TOP 10)

Jun 3, 2024

Krzysztof Pranczk

Krzysztof Pranczk

Software Engineer and Security Researcher, writing about application security in SDLC and DevSecOps - https://devsec-blog.com 🔐

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams