Articles by Dan Kuykendall

This episode of Man vs Web App Podcast marks a significant transition as we introduce two new hosts of the podcast: David Howe and Garrett […]

Podcast: Play in new window | Download (Duration: 39:38 — 32.5MB)

Subscribe: Apple Podcasts | Android | RSS

This week on the Man vs Web App Podcast we delve into the fundamentals of Inputs and Injection. Inputs cross all layers of the entire system, […]

Podcast: Play in new window | Download (Duration: 34:21 — 31.9MB)

Subscribe: Apple Podcasts | Android | RSS

This week on the Man vs Web App Podcast we delve into the topic of Out of band attacks. These go by various names, such as […]

Podcast: Play in new window | Download (Duration: 33:54 — 31.9MB)

Subscribe: Apple Podcasts | Android | RSS

This week on the Man vs Web App Podcast we delve into the topic of Web Services. This includes SOAP, REST API’s or just Web […]

Podcast: Play in new window | Download (Duration: 34:50 — 32.2MB)

Subscribe: Apple Podcasts | Android | RSS

Welcome to the Man vs WebApp Podcast! In this intro episode we do introductions and give a preview of the topics to come. The Man vs […]

Podcast: Play in new window | Download (Duration: 33:49 — 30.5MB)

Subscribe: Apple Podcasts | Android | RSS

During the last year this blog (and podcast) was put on hold to deal with the acquisition of NT Objectives by Rapid7. I was highly occupied with […]

I spent the week at  OWASP AppSec California in Santa Monica and had a great time! This is the 2nd year of having the event at […]

I’m looking forward to seeing everyone next week at OWASP AppSec California in Santa Monica and hearing some of the great talks planned, but I’m […]

I’m looking forward to reconnecting with everyone next week at AppSec California. I hope you’ll join me for my talk, Hackazon – Stop Hacking Like […]

The season is finally over! 12 managers entered, 16 weeks later one emerged as the champion. This year’s champion dominated the season and entered the playoff’s […]

The season is nearly over, and this week was exciting sets the stage for an interesting final week. Playoff week 2 winner bracket review: #1 @dan_kuykendall […]

This season of the Hackers Only Fantasy Football League (HOFFL) has been great. We have had some crazy results and many surprises throughout the season. The regular season is over, so its time to give a summary of how the season went as well as covering the first week of the playoffs.

This week a developer from Google released a new vulnerable test app named “Firing Range” which I have been digging into for the last few […]

We are about mid-season into this years Hackers Only Fantasy Football League (HOFFL) and its time to give everyone an update. Unlike last year when I […]

While Shellshock has been all over Twitter and talked about on prominent news outlets, I’m still shocked that there is comparatively less press coverage than […]

As you probably know by now, a bug, named Shellshock or “The Bash Bug” has been discovered in a version of Bash, which is a […]

The 2nd annual Hackers Only Fantasy Football League is back! The HO-FFL is a great way for us IT security professionals to enjoy some time […]

In the aftermath of the Mt. Gox meltdown and subsequent bankruptcy filing, I have been reading a lot of commentary on Bitcoin. Even Paul Krugman […]

Jim, Dan, and Michael have a lot of catching up to do. We talk about a lot of stuff because a lot of stuff has been […]

Podcast: Play in new window | Download (Duration: 1:00:33 — 87.2MB)

Subscribe: Apple Podcasts | Android | RSS

The season is over! It was fun to play with all that participated and I got to have some fun conversations about football & the […]

Stability in Only the First Issue – Security Will Be Healthcare.gov’s Real Achilles Heel There has been a significant amount of attention to the the […]

We appreciate Kevin Beaver’s recent blog post about NTOSpider’s unique ability to authenticate on some of the trickiest applications and stay properly logged-in throughout the scan. At NTO we take pride […]

We are now in the middle of week 4, but I want to catch everyone up on whats been happening.  First of all, I am […]

SQL injection vulnerabilities have threatened application security for years. So why are they still quite common, despite the fact that we, as an industry, should […]

Knowing how to prevent a SQL injection vulnerability is only half the web application security battle. A multitude of factors come into play when it […]