#dast articles | Hashnode

Web Application Scanning: How to Match the Tool to Your Organization

Choosing a web application scanner often starts with the wrong question. Teams compare feature lists, the table fills up with checkmarks, and nobody has agreed on how many applications the organizatio

securityland.hashnode.dev

Solomon AchugwohJul 26 · 4 min read

Mobile Security Testing Setup (Android)

I have seen a lot of people struggle when trying to intercept mobile app traffic with Burp Suite for dynamic security testing. The setup most times you run into network issues, certificate problems, S

securedtips.hashnode.dev

RayhanJun 4 · 7 min read

Advanced Security Testing in SIBANGKU: Finding CSV Formula Injection Before It Reached Users

Unit tests are good at checking whether internal logic behaves correctly. But not every risk in a web application is visible from ordinary unit tests. In the SIBANGKU project, I learned this through t

rayhan-engineering.hashnode.dev

Marios GrivasMay 26 · 6 min read

Reverse Engineering the Gov.gr Wallet: How a Hardcoded API Key Exposed Millions of Citizens

When it comes to government-backed digital transformation, the gov.gr wallet has been one of Greece's flagship projects, allowing citizens to carry their IDs, driver's licenses, and other official doc

defprotocol.hashnode.dev

Solomon AchugwohMay 23 · 5 min read

Integrating Burp Suite with Claude for Security Testing

Application security testing is changing fast. Security engineers are no longer confined to manually reviewing requests, replaying traffic, or crafting repetitive payloads from scratch. With the emerg

securedtips.hashnode.dev

Sourav ChakrabortyApr 19 · 6 min read

From Code to Runtime: Closing the AppSec Gap with WAF + DevSecOps

Modern software ships fast. Security incidents ship faster. With cloud‑native apps, microservices, and open‑source everywhere, application security can no longer be an afterthought. That’s where SCA

devsecopssourav.hashnode.dev

Tech Insights HubFeb 12 · 8 min read

Security Scanning: SAST and DAST

Why Traditional Security Scanning Fails Modern Teams The security landscape in 2025 differs fundamentally from even three years ago. Cloud-native applications built on Kubernetes span multiple regions and availability zones. Serverless functions exec...

topperblog.hashnode.dev

Aditya KhadangaFeb 6 · 16 min read

How to Integrate SAST, SCA, DAST Tools into GitLab's CI/CD for Enhanced Security

Basic security terms for the course SAST, SCA, DAST, IAST SAST: Static Application Security Testing (Code review for your own code)-> white box testing SCA: Software Composition Analysis (Background check of external libraries you use) DAST: Dynam...

adityakhadanga.hashnode.dev

Prateek ShettyNov 30, 2025 · 12 min read

Building a Security Assessment Architecture That Actually Works

TL;DR: Scanners that run automatically, findings that aggregate in one place, reports that don't make stakeholders' eyes glaze over. For small-to-medium engineering teams who need real security without hiring a dedicated AppSec team. Security scanne...

prateeks007.hashnode.dev

James MillerNov 26, 2025 · 7 min read

Role of DAST in API Security: Challenges and Solutions

APIs have become the core of modern products. They power web apps, connect microservices, and move sensitive data across systems. But as API usage grows, so do the risks. Recent industry reports show API-driven attacks rising faster than traditional ...

jamesmiller459.hashnode.dev

Search Hashnode

Trending tags this week