This post is part of an article originally published here.
In essence, cybersecurity is all about discovering non-default uses of everyday techno...
For further actions, you may consider blocking this person and/or reporting abuse
I am simply suggesting that you must be aware... I don't think you have to go and ahead learn how to build things using a framework but if you have to find bugs, you should be able to read through the code...
If it doesn't matter for web security then Web Application Security is a joke.
I encourage you to refer to this security report :
CRITICAL Account takeover via AngularJS template injection in connect.squareup.com
hackerone.com/reports/26700
$2000 bounty paid by Square...
OK...
It matters in so far as: at the end of the day you have to provide guidance to developers, who may or may not understand the security implications at a deep level. These developers are possibly using "common" frameworks and you need to know what these frameworks do and don't bring to the table. Some do common validation and output encoding for example. Some use functions with cryptographic weaknesses ECT ECT ECT. You wouldn't be able to provide guidance to them if you don't understand the framework they are using (ie the way the language is implemented).
Its also important in pentesting because it allows you to target commonly used packages and implementation for research or do hit known vulnerabilities.
We are talking about security researchers. read this article again.
Your post helps me a lot! Thank you
i am glad it helped.. :-)
Please suggest a weekly source for the best frameworks used.
commonly used..