Канал: StackHawk

Code to Cloud with Microsoft, GitHub, and StackHawk

Code to Cloud with Microsoft, GitHub, and StackHawk

Constructing a Secure AppSec Foundation with CommunityAmerica Credit Union & StackHawk

Constructing a Secure AppSec Foundation with CommunityAmerica Credit Union & StackHawk

Office Hours: Scan Discovery with HAR Files and Auth Updates

Office Hours: Scan Discovery with HAR Files and Auth Updates

Secure with StackHawk: A Continuous Approach to Application and API Security.

Secure with StackHawk: A Continuous Approach to Application and API Security.

DAST is Dead! Long Live DAST! The Evolution of Dynamic API Security Testing

DAST is Dead! Long Live DAST! The Evolution of Dynamic API Security Testing

Elevate Your AppSec Program with the Dynamic Duo: StackHawk and Snyk

Elevate Your AppSec Program with the Dynamic Duo: StackHawk and Snyk

How to Shift Left the Right Way

How to Shift Left the Right Way

StackHawk — API Security Testing for Teams that Deploy Software Every Day!

StackHawk — API Security Testing for Teams that Deploy Software Every Day!

Turning Win-don’ts into Win-do’ws: Automating HawkScan Across Azure Pipelines, Windows, and More

Turning Win-don’ts into Win-do’ws: Automating HawkScan Across Azure Pipelines, Windows, and More

StackHawk Office Hours: Gitty Up with GitHub Insights

StackHawk Office Hours: Gitty Up with GitHub Insights

StackHawk Office Hours: Eric Potter and the Sorcerer's Token

StackHawk Office Hours: Eric Potter and the Sorcerer's Token

How to Shift Left: People, Process, Technology

How to Shift Left: People, Process, Technology

StackHawk Office Hours: Automate Security Testing to Secure Your Summer Vacay

StackHawk Office Hours: Automate Security Testing to Secure Your Summer Vacay

Scaling Security Across a Herd of Applications

Scaling Security Across a Herd of Applications

StackHawk & GitHub Integrations

StackHawk & GitHub Integrations

StackHawk Teams: Secure Your Entire Flock

StackHawk Teams: Secure Your Entire Flock

Policy Management: Speed Up Security Tests and Cover Special Cases

Policy Management: Speed Up Security Tests and Cover Special Cases

StackHawk and GitHub CodeQL Integration Webinar

StackHawk and GitHub CodeQL Integration Webinar

Introducing HawkScan Rescan

Introducing HawkScan Rescan

StackHawk Office Hours: GitHub Pull Request Checks

StackHawk Office Hours: GitHub Pull Request Checks

Deeper GraphQL Security Testing Webinar

Deeper GraphQL Security Testing Webinar

Custom Test Data for GraphQL APIs

Custom Test Data for GraphQL APIs

GitHub Pull Request Checks: Security Testing in GitHub Workflows Webinar

GitHub Pull Request Checks: Security Testing in GitHub Workflows Webinar

Automate WebApp Security Testing using GitHub Actions || TestJS Summit 2022

Automate WebApp Security Testing using GitHub Actions || TestJS Summit 2022

GitHub Pull Request Checks with StackHawk

GitHub Pull Request Checks with StackHawk

Deeper API Security Test Coverage Webinar

Deeper API Security Test Coverage Webinar

Deeper API Security Test Coverage Office Hours

Deeper API Security Test Coverage Office Hours

Custom Scan Discovery Overview

Custom Scan Discovery Overview

Custom Test Data for REST APIs Overview

Custom Test Data for REST APIs Overview

Custom Test Scripts Overview

Custom Test Scripts Overview

Introducing the New StackHawk & GitHub CodeQL Integration

Introducing the New StackHawk & GitHub CodeQL Integration

Helping Developers Go Faster, Safer

Helping Developers Go Faster, Safer

StackHawk and Snyk Integration Webinar

StackHawk and Snyk Integration Webinar

Introducing the New Snyk Integration from StackHawk

Introducing the New Snyk Integration from StackHawk

Snyk + StackHawk Webinar: Moving Towards Continuous Application Security

Snyk + StackHawk Webinar: Moving Towards Continuous Application Security

Friday Hacking on ZAP - ZAP Standard Spider with Simon Bennetts

Friday Hacking on ZAP - ZAP Standard Spider with Simon Bennetts

The OWASP Top Ten 2021 and ZAP | Jim Manico | ZAPCon 2022

The OWASP Top Ten 2021 and ZAP | Jim Manico | ZAPCon 2022

ZAPCon 2022 Kick-Off | Joni Klippert | ZAPCon 2022

ZAPCon 2022 Kick-Off | Joni Klippert | ZAPCon 2022

API Security Testing Workshop | Grant Ongers | ZAPCon 2022

API Security Testing Workshop | Grant Ongers | ZAPCon 2022

ZAPCon Welcome | Simon Bennetts & Scott Gerlach | ZAPCon 2022

ZAPCon Welcome | Simon Bennetts & Scott Gerlach | ZAPCon 2022

Modern Approaches to Application Security | Panel | ZAPCon 2022

Modern Approaches to Application Security | Panel | ZAPCon 2022

How To Contribute to ZAP Workshop | Simon Bennetts | ZAPCon 2022

How To Contribute to ZAP Workshop | Simon Bennetts | ZAPCon 2022

More Power to “ZAP” - Demystifying ZAP Addons | Gowtham Sundar | ZAPCon 2022

More Power to “ZAP” - Demystifying ZAP Addons | Gowtham Sundar | ZAPCon 2022

ZAP Project Updates | Simon Bennetts | ZAPCon 2022

ZAP Project Updates | Simon Bennetts | ZAPCon 2022

The Final Frontier, Automating DYNAMIC Security Testing | Matt Tesauro & Cody Maffucci | ZAPCon 2022

The Final Frontier, Automating DYNAMIC Security Testing | Matt Tesauro & Cody Maffucci | ZAPCon 2022

ZAP for Everybody | Venkata Subrahmanyam & Ved Mishra | ZAPCon 2022

ZAP for Everybody | Venkata Subrahmanyam & Ved Mishra | ZAPCon 2022

Automated Security Testing with GitHub Actions Workshop | Zach Conger | ZAPCon 2022

Automated Security Testing with GitHub Actions Workshop | Zach Conger | ZAPCon 2022

ZAPCon 2022 Recap

ZAPCon 2022 Recap

Drive-By Pentesting with ZAP Scripts | Troy Fisher | ZAPCon 2022

Drive-By Pentesting with ZAP Scripts | Troy Fisher | ZAPCon 2022

ZAP Integration and Automation | Panel | ZAPCon 2022

ZAP Integration and Automation | Panel | ZAPCon 2022

Day 1 Wrap Up | Joni Klippert | ZAPCon 2022

Day 1 Wrap Up | Joni Klippert | ZAPCon 2022

Out-of-band Application Security Testing with ZAP | Akshath Kothari | ZAPCon 2022

Out-of-band Application Security Testing with ZAP | Akshath Kothari | ZAPCon 2022

Friday Hacking with HawkScan - Log4Shell testing with HawkScan

Friday Hacking with HawkScan - Log4Shell testing with HawkScan

Friday Hacking on ZAP - Authenticated Scanning with ZAP and StackHawk; Form Auth

Friday Hacking on ZAP - Authenticated Scanning with ZAP and StackHawk; Form Auth

Friday Hacking on ZAP - Hacking on CSP Rule Part 2 (Dev Environment Followup)

Friday Hacking on ZAP - Hacking on CSP Rule Part 2 (Dev Environment Followup)

Friday Hacking on ZAP - Setting up a Dev Environment and Hacking on CSP Rule

Friday Hacking on ZAP - Setting up a Dev Environment and Hacking on CSP Rule

Friday Hacking on ZAP - Updating Command OS Injection Scan Rule

Friday Hacking on ZAP - Updating Command OS Injection Scan Rule

Introducing the StackHawk CLI: Technical Demo

Introducing the StackHawk CLI: Technical Demo

ZAP DeepDive: ZAP 2.11.0

ZAP DeepDive: ZAP 2.11.0

GraphQL Security Testing Technical Workshop | React Advanced London 2021

GraphQL Security Testing Technical Workshop | React Advanced London 2021

JS Security Testing in GitHub Actions Workshop | Vue.js 2021

JS Security Testing in GitHub Actions Workshop | Vue.js 2021

What's New with SAST + DAST

What's New with SAST + DAST

The New StackHawk Integration with Github Code Scanning Alerts

The New StackHawk Integration with Github Code Scanning Alerts

First Look: ZAP Automation Framework

First Look: ZAP Automation Framework

ZAP DeepDive: WebSockets

ZAP DeepDive: WebSockets

ZAPCon After Hours: Simon Bennetts Ask Me Anything

ZAPCon After Hours: Simon Bennetts Ask Me Anything

StackHawk Technical Workshop: GraphQL Security Testing

StackHawk Technical Workshop: GraphQL Security Testing

ZAP DeepDive: Fuzzing

ZAP DeepDive: Fuzzing

StackHawk Technical Workshop: Authenticated Security Testing

StackHawk Technical Workshop: Authenticated Security Testing

ZAP DeepDive: Zest Scripting Part 3

ZAP DeepDive: Zest Scripting Part 3

ZAPCon 2021 After Hours: Adding ZAP to All Your Testing

ZAPCon 2021 After Hours: Adding ZAP to All Your Testing

ZAP DeepDive: Zest Scripting Part 2

ZAP DeepDive: Zest Scripting Part 2

StackHawk Technical Workshop: Adding SCA, SAST & DAST to Your GitHub Pipeline

StackHawk Technical Workshop: Adding SCA, SAST & DAST to Your GitHub Pipeline

ZAPCon 2021 After Hours: Security Automation with ZAP

ZAPCon 2021 After Hours: Security Automation with ZAP

ZAP Deep Dive: Zest Scripting Part 1

ZAP Deep Dive: Zest Scripting Part 1

StackHawk and FOSSA Webinar: Automating AppSec Testing with GitHub Actions

StackHawk and FOSSA Webinar: Automating AppSec Testing with GitHub Actions

Scanning REST APIs

Scanning REST APIs

ZAPCon 2021 After Hours: Starting a Security Program on a Shoestring (with ZAP)

ZAPCon 2021 After Hours: Starting a Security Program on a Shoestring (with ZAP)

ZAPCon 2021: ZAP Project Updates

ZAPCon 2021: ZAP Project Updates

ZAPCon 2021: Mobile Application Security Testing with ZAP

ZAPCon 2021: Mobile Application Security Testing with ZAP

ZAPCon 2021: ZAP in Pakistani Fintech

ZAPCon 2021: ZAP in Pakistani Fintech

ZAPCon 2021: Enhacing ZAP with Feedback Based Fuzzing

ZAPCon 2021: Enhacing ZAP with Feedback Based Fuzzing

ZAPCon 2021 Recap

ZAPCon 2021 Recap

ZAP Deep Dive: Setting Up a ZAP Dev Environment

ZAP Deep Dive: Setting Up a ZAP Dev Environment

Hawk Talk: Scanning GraphQL

Hawk Talk: Scanning GraphQL

Automated Application Security in Action with Snyk and StackHawk

Automated Application Security in Action with Snyk and StackHawk

ZAP Deep Dive: Report Generation

ZAP Deep Dive: Report Generation

ZAPCon 2021

ZAPCon 2021

Adding Application Security Testing to Your GitLab Pipeline

Adding Application Security Testing to Your GitLab Pipeline

ZAP Deep Dive: Authenticated Packaged Scans

ZAP Deep Dive: Authenticated Packaged Scans

ZAP Deep Dive: ZAP Automation

ZAP Deep Dive: ZAP Automation

ZAP Deep Dive: Configuration

ZAP Deep Dive: Configuration

ZAP Deep Dive: Active Scanning

ZAP Deep Dive: Active Scanning

ZAP Deep Dive: Passive Scanning

ZAP Deep Dive: Passive Scanning

ZAP Deep Dive: ZAP 2.10.0 Introduction

ZAP Deep Dive: ZAP 2.10.0 Introduction

Automating Application Security Testing in CI/CD with StackHawk and Spinnaker

Automating Application Security Testing in CI/CD with StackHawk and Spinnaker

ZAP Deep Dive: Scripting ZAP

ZAP Deep Dive: Scripting ZAP

ZAP Deep Dive: Introduction to ZAP

ZAP Deep Dive: Introduction to ZAP

ZAP Deep Dive: The ZAP 2.9.0 Desktop Interface

ZAP Deep Dive: The ZAP 2.9.0 Desktop Interface

ZAP Deep Dive: Exploring with the Standard Spider

ZAP Deep Dive: Exploring with the Standard Spider

ZAP Deep Dive: Exploring Apps - Other Ways

ZAP Deep Dive: Exploring Apps - Other Ways

ZAP Deep Dive: The Sites Tree

ZAP Deep Dive: The Sites Tree

ZAP Deep Dive: Ajax Spider

ZAP Deep Dive: Ajax Spider

StackHawk Demo at SnykCon

StackHawk Demo at SnykCon

StackHawk Scanner - 4K

StackHawk Scanner - 4K

StackHawk Scanner

StackHawk Scanner

GraphQL Security Testing with StackHawk

GraphQL Security Testing with StackHawk

Hawk Talk: The stackhawk.yml

Hawk Talk: The stackhawk.yml

Hawk Talk: Getting Started with StackHawk

Hawk Talk: Getting Started with StackHawk