Posted by Sheran Gunasekera on Aug 04
Hello,I'm assuming you mean application vulnerability scanners? As far as
I'm aware this is an area that needs improvement. I've done several
pentests for applications developed by third-party vendors for my
clients. I generally follow this approach:
1. Get a copy of the app (usually I get it through the developer; if
its live, you could download it) and reverse engineer it. During this
stage I check for:
a. Storing...