Application Security This Week for October 11

Totally forgot to do this last week, sorry.

Telerik released Fiddler Everywhere

https://www.telerik.com/fiddler

Github has added code scanning

https://github.blog/2020-09-30-code-scanning-is-now-available/

Another example of what I am admittedly harping on too much - the power of HTTP Smuggling

https://medium.com/@ricardoiramar/the-powerful-http-request-smuggling-af208fafa142

Here's a cool intro to  manual static vulnerable analysis by Will Butler

https://btlr.dev/blog/how-to-find-vulnerabilities-in-code-bad-words

Some basics of securing APIs

https://dev.to/bearer/api-security-best-practices-3gjl

Have a good week, everyone!