Knowledge Base - Securing

Home Page
Services
Knowledge Base
About Us
Contact
Join our team

PL

Write to us

New Software Development Security

Which Single Sign-On (SSO) is for you? SAML vs OAuth vs OIDC

Natalia Trojanowska 2022.04.20 · 12 MIN reading

View all

All
Blockchain and Smart Contracts
Cloud Security
Infrastructure Security
IoT Devices Security
Mobile App Security
Our Tools
past events
Software Development Security
Threat Modeling
Web App Security

View all

Software Development Security

Which Single Sign-On (SSO) is for you? SAML vs OAuth vs OIDC

Natalia Trojanowska 2022.04.20 · 12 MIN reading

Blockchain and Smart Contracts

Smart Contracts Audits – how to get the most out of…

Paweł Kuryłowicz 2022.03.10 · 3 MIN reading

Mobile App Security

Storing secrets in Android applications

Łukasz Bobrek 2022.02.02 · 6 MIN reading

Blockchain and Smart Contracts

Front-running attack in DeFi applications – how to deal with it?

Jakub Zmysłowski 2022.01.18 · 5 MIN reading

Mobile App Security

Vulnerabilities and Threats in Local Authorization on iOS Devices

Wojciech Reguła 2022.01.12 · 7 MIN reading

Blockchain and Smart Contracts

Smart Contracts Audits – how to get the most out of…

Paweł Kuryłowicz 2022.03.10 · 3 MIN reading

Blockchain and Smart Contracts

Front-running attack in DeFi applications – how to deal with it?

Jakub Zmysłowski 2022.01.18 · 5 MIN reading

Blockchain and Smart Contracts

The future security of your smart contracts – upcoming changes in SCSVS

Paweł Kuryłowicz 2021.12.01 · 13 MIN reading

Blockchain and Smart Contracts

Reentrancy attack in smart contracts – is it still a problem?

Paweł Kuryłowicz 2021.09.22 · 7 MIN reading

Blockchain and Smart Contracts

Four common pitfalls of HyperLedger implementation

Damian Rusinek 2021.03.16 · 11 MIN reading

Cloud Security

Setting up your AWS Monitoring – Security tips

Paweł Kusiński 2022.01.05 · 14 MIN reading

Cloud Security

Top 7 AWS security vulnerabilities based on real-world tests

Paweł Kusiński 2021.07.08 · 5 MIN reading

Cloud Security

What can you find in 57K AWS S3 buckets? 2021 update

Paweł Kusiński 2021.04.21 · 9 MIN reading

Premium Cloud Security

Seven-Step Guide to SecuRing your AWS Kingdom – 2021 edition

Paweł Rzepa 2021.01.26 · 3 MIN reading

Cloud Security

Serverless (in)security

Paweł Rzepa 2020.03.05 · 6 min reading

Infrastructure Security

5 security tips for your macOS environment

Wojciech Reguła 2021.04.28 · 6 MIN reading

Infrastructure Security

Local Privilege Escalation in macOS infrastructure

Wojciech Reguła 2020.12.09 · 6 MIN reading

IoT Devices Security

GATTacking Bluetooth Smart Devices – Introducing a New BLE Proxy Tool

Sławomir Jasek 2017.06.19

IoT Devices Security

HCE cloning FAQ

Sławomir Jasek 2017.04.11

Premium IoT Devices Security

GATTacking Bluetooth Smart devices

Sławomir Jasek 2016.08.05

Premium IoT Devices Security

Connected Car Security – Threat Analysis and Recommendations

Wojciech Dworakowski 2015.10.15

Mobile App Security

Storing secrets in Android applications

Łukasz Bobrek 2022.02.02 · 6 MIN reading

Mobile App Security

Vulnerabilities and Threats in Local Authorization on iOS Devices

Wojciech Reguła 2022.01.12 · 7 MIN reading

Mobile App Security

Prevent Reverse Engineering (RE) of your Android application

Łukasz Bobrek 2021.12.15 · 8 MIN reading

Mobile App Security

How do I protect an iOS app from reverse engineering?

Wojciech Reguła 2021.11.17 · 6 MIN reading

Mobile App Security

WebView security issues in Android applications

Łukasz Bobrek 2021.10.20 · 6 MIN reading

Our Tools

iOS Security Suite – anti-tampering Swift library

Wojciech Reguła 2019.09.01

Our Tools

BucketScanner

Paweł Rzepa 2018.08.30

Our Tools

DumpsterDiver

Paweł Rzepa 2018.08.30

Our Tools

Ethereum Responsible Disclosure Messenger

Damian Rusinek 2018.08.30

Our Tools

GATTack

Sławomir Jasek 2016.08.05

past events

Hack in Paris 2019 – Hacking AWS Workshop

Paweł Rzepa 2019.06.17

past events

CONFidence 2019 – conference recap

Paweł Rzepa 2019.06.06

past events

Infoshare 2019: Let’s meet us at Crypto&Security Stage

Damian Rusinek 2019.04.28

past events

AppSec Europe 2018 – our presentations

Wojciech Reguła 2018.08.02

past events

AppSec Europe 2018 – conference recap

Damian Rusinek 2018.07.16

Software Development Security

Security Features in Financial Applications – our recommendations

Łukasz Bobrek 2021.08.19 · 7 MIN reading

Software Development Security

Before you implement Face Recognition to your app – AI hack study

Sebastian Drygiel 2021.08.05 · 14 MIN reading

Software Development Security

How to stay secure for longer? Software development case.

Mateusz Olejarka 2021.07.20 · 8 MIN reading

Software Development Security

Adding security to your SDLC process

Mateusz Olejarka 2021.05.04 · 7 MIN reading

Software Development Security

How to bring security to your company mindset?

Mateusz Olejarka 2021.03.11 · 9 MIN reading

Threat Modeling

Threat Modeling – how to start doing it?

Jakub Kałużny 2021.03.30 · 9 MIN reading

Threat Modeling

Thinking what can go wrong? Introduction to Threat Modeling.

Jakub Kałużny 2021.02.17 · 9 MIN reading

Web App Security

SAML – what can go wrong? Security check

Natalia Trojanowska 2021.09.01 · 12 MIN reading

Web App Security

Why should you care about Content Security Policy?

Michał Ogorzałek 2021.03.22 · 14 MIN reading

Web App Security

How secure are webinar platforms? In-house research.

Michał Ogorzałek 2021.02.02 · 8 MIN reading

Web App Security

Why you should verify your security software — Metadefender case

Wojciech Reguła 2018.11.27 · 3 min reading

Newsletter

cutting edge knowledge delivered weekly – and not a bit of spam!

This field is required

I agree to Terms & Conditions of Newsletter

This field is required

Where you can find us?

Future Events

Confidence

Jun 20-24, 2022

Seoul, South Korea

TyphoonCon

Past Events

Immunefi Community Call

(ISC)2 Poland Chapter meetup

TestBustersNight

We speak on

Presentation

View all

All
App Security
Blockchain
Cloud
Mobile
Security Testing

How secure are webinar platforms?

Michał Ogorzałek Sep 28, 2021

20+ Ways to Bypass Your macOS Privacy Mechanisms

Wojciech Reguła Aug 30, 2021

Cloud

Serverless security: attack & defense

Paweł Rzepa Sep 28, 2020

App Security

Abusing & Securing XPC in macOS apps

Wojciech Reguła Mar 16, 2020

Security Testing

Let’s get evil – threat modeling at scale

Jakub Kałużny Dec 17, 2019

Blockchain

Web Apps vs Blockchain dApps (Smart Contracts): tools, vulns and standards

Damian Rusinek Dec 03, 2019

App Security

Abusing & Securing XPC in macOS apps

Wojciech Reguła Mar 16, 2020

App Security

We need to go deeper – Testing inception apps

Jakub Kałużny Jun 04, 2019

App Security

Testing iOS Apps without Jailbreak in 2018

Wojciech Reguła Jul 09, 2018

App Security

REST API Pentester’s perspective

Mateusz Olejarka Oct 23, 2017

App Security

Applications secure by default

Sławomir Jasek Aug 13, 2015

App Security

Bypassing malware detection mechanisms in online banking

Mateusz Olejarka Jun 09, 2015

Blockchain

Web Apps vs Blockchain dApps (Smart Contracts): tools, vulns and standards

Damian Rusinek Dec 03, 2019

Blockchain

Outsmarting Smart Contracts – an essential walkthrough a blockchain security minefields

Damian Rusinek Jun 08, 2018

Cloud

Serverless security: attack & defense

Paweł Rzepa Sep 28, 2020

Cloud

Attacking AWS: the full cyber kill chain

Paweł Rzepa Jun 08, 2019

Cloud

Hunting for the secrets in a cloud forest

Paweł Rzepa Jun 07, 2018

Mobile

Building & Hacking Modern iOS Apps

Wojciech Reguła May 28, 2019

Security Testing

Let’s get evil – threat modeling at scale

Jakub Kałużny Dec 17, 2019

Security Testing

Artificial Intelligence – a buzzword, new era of IT or new threats?

Damian Rusinek May 24, 2019

Security Testing

Security education via security features

Jakub Kałużny May 17, 2019

Security Testing

A 2018 practical guide to hacking RFID/NFC

Sławomir Jasek Jun 07, 2018

Security Testing

Internet banking safeguards vulnerabilities

Wojciech Dworakowski Jul 11, 2016

Security Testing

Demystifying Host Card Emulation Security – Best Practices for Implementing Secure Mobile Payments

Wojciech Dworakowski Jun 27, 2016

Experts

Damian Rusinek Principal IT Security Consultant
Head of Blockchain Security

Paweł Kuryłowicz Principal IT Security Consultant
Hackflix Product Lead

Wojciech Reguła Principal IT Security Consultant
Head of Mobile Security

Join our team

Take on a journey with a market leader!

Company

About Us
Knowledge Base
Careers

Stay in Touch

Contact

Services

Web Application Testing
Mobile Application Testing
SMART CONTRACTS AUDITS
Threat Modeling
Red Teaming
Trainings

Meet Us in Real Life

Krakow

Kalwaryjska 65/6
tel: +48 12 425 25 75

Warsaw

Plac Konesera 12

Stockholm

Kungsgatan 60,
tel: +46 852 500 888

Contact for Germany:

tel: +49 30 374 334 69

Meet Us on Social Media

We are using cookies to improve your experience. If you would like to know more, read our Privacy PolicyAgree