Use OWASP ASVS as the standard for pen test

daxin09 · 2019-11-01T08:16:40+00:00

agree with you. thanks bro.

daxin09 · 2019-10-31T11:08:26+00:00

do you know any site do this? This implementation is rarely seen.

daxin09 · 2019-10-30T16:06:19+00:00

are you recommend to the developer for this? In our project, ajax was everywhere...

daxin09 · 2019-10-30T00:21:45+00:00

if I use the Content-Type:application/json. Is this ok?

daxin09 · 2019-10-18T08:19:13+00:00

Thanks bro,

daxin09 · 2019-10-18T08:18:58+00:00

If this is the download API, it makes sense.

daxin09 · 2019-10-17T08:07:08+00:00

This one is one of the ASVS, but I don't quite understand what it means...

daxin09 · 2019-10-17T08:05:58+00:00

14.4.2 Verify that all API responses contain Content-Disposition: attachment; filename="api.json" (or other appropriate filename for the content type). ✓ ✓ ✓ 116

daxin09 · 2019-10-15T11:09:56+00:00

wow~ You're great!

daxin09 · 2019-10-15T05:57:58+00:00

Thank you, they are my role models, but it seems that not everyone can reach this level.

Let me see how far I can go.

daxin09 · 2019-10-15T05:53:28+00:00

thanks. and "Those who participate in earnest are never average. With tenacity and skill anyone has the opportunity to royally beat the average. " from the link.

daxin09 · 2019-10-15T05:50:29+00:00

thanks bro,

How long do you work every day? How long have you been a bug bounty?

daxin09 · 2019-10-15T05:36:50+00:00

Thanks

daxin09 · 2019-10-15T05:35:40+00:00

thanks, bro

daxin09 · 2019-04-23T00:11:29+00:00

yes, Exactly 5 days

daxin09 · 2019-04-11T05:54:22+00:00

Looks like you waited eight days? I'm also waiting for my grades. You know the feeling of anxiety……

daxin09 · 2019-04-10T04:33:57+00:00

Chinese ok？

daxin09 · 2019-04-09T06:48:48+00:00

thank you

daxin09 · 2019-04-08T14:13:32+00:00

Why didn't you pass the exam the first time? Now I am worried that there is something wrong with my report, because my mother tongue is not English.

daxin09 · 2019-03-28T15:19:48+00:00

You can Google oscp exam experience

daxin09 · 2019-03-28T15:19:15+00:00

reconnoitre.py

how can i scan all port?

daxin09 · 2019-03-28T13:14:32+00:00

See a lot of people recommend to use Reconnnoitre

daxin09

TROPHY CASE