Dan Amodio

Home » Posts tagged "OWASP"

Mobile Applications & Proxy Shenanigans

Slides and Video from my AppSec USA 2012 presentation with David Lindner. Learn how to:

  • Setup an intercepting proxy.¬†Android or iOS, SSL or non-SSL, device or emulator/simulator.
  • Overcome edge cases with a forward proxy.
  • Brief overview and references for Android APK reverse engineering.

Continue reading

Enterprise Security API (ESAPI) for C Plus Plus

The OWASP ESAPI for C Plus Plus was introduced to the community at AppSec DC 2012. Here are some key takeaways from the presentation:

  • ESAPI Project Overview, and why a C Plus Plus implementation is necessary.
  • Our approach to porting the ESAPI for Java API and a demonstration.
  • The future of ESAPI (3.0), and how to get involved.

Continue reading