~ My learning process has been the same through the years, continuous education.
Featuring Nicolas Krassas (@Dinosn) an OG hacker from Switzerland.
1/25
Question: Could you briefly introduce yourself?
Nicolas: I'm a senior penetration tester and your friendly security guy. I like to assist people with security questions and guide them through a solution.
2/25
I come from an era where internet speeds were measured in kbps, with my first computer being an Amiga 500.
How to get into programming and earn while learning?
A Thread 🧵↓
Happy to share about a new platform made for developers called @StackUpHQ, where you can improve your programming skills while getting paid to learn and connect with a global community of developers.
Here are some of the topics you can pick up: - HTML, CSS, Javascript - WEB3, Blockchain, Solidity - Rust, Go, Python and more! You can earn cash rewards from a monthly pool of at least 10000USD 📚
#SecurityExplained S-101: CWE Top 25:
CWE-434: Unrestricted Upload of File with Dangerous Type
The software allows an attacker to upload or transfer harmful data that can be processed automatically within the product's environment.
1/
2/
This flaw could affect any software that allows users to upload files.
The arbitrary file upload weakness concerns improper or missing file type validation when uploading files.
3/
This flaw happens when an application fails to validate or verifies files incorrectly before uploading them to the system. This flaw is language independent. However, it is most common in ASP and PHP-based apps.