Ask HN: How do you continuously monitor web logs for hack attempts?

Re:Ask HN: How do you continuously monitor web logs for hack... by tptacek on Tuesday May 08, 2018 @07:12AM (#17020118)

There definitely are! Your stuff included! Burp is just the industry standard.

[ Parent | on HN ]

Re:Ask HN: How do you continuously monitor web logs for hack... by sandGorgon on Tuesday May 08, 2018 @11:57AM (#17021912)

So is it "fix whatever Burp points out" ? Is that a good first step ? Especially for api endpoints (versus websites)

[ Parent | on HN ]

Re:Ask HN: How do you continuously monitor web logs for hack... by tptacek on Tuesday May 08, 2018 @12:25PM (#17022156)

You'd ideally want a dev process where all your developers were capable of conducting integration test runs with Burp; you'd probably set up a checklist of authz tests, and set up some custom wordlists for Intruder for database, filesystem, and DOM injection vectors.

[ Parent | on HN ]

Re:Ask HN: How do you continuously monitor web logs for hack... by sandGorgon on Tuesday May 08, 2018 @01:12PM (#17022606)

Thanks. This was a superuseful suggestion. I can now Google a lot of stuff on my own.

[ Parent | on HN ]