🔐 aramido makes IT secure.

Further information

All blog articles on the subject of Web Application

Matthias Schmidt

Published on 22.06.2026 in the category Web Application Security published.

security.txt - How security researchers report vulnerabilities securely

Without clear reporting paths, vulnerabilities remain risky. A standardized security.txt provides security researchers with crucial information for contacting the affected parties. (read more)

Authentication Authorization • Access Control Cross Site Request Forgery (CSRF) Ethical Hacker Information Security Ransomware Responsible Disclosure Vulnerability Management Vulnerability Disclosures Vulnerability Scan Secure Coding Security Concepts Threat Modeling Company Web Application Zero-Day-Exploits

Christian Birker

Published on 27.01.2023 in the category Software Security published.

What Could (Possibly) Go Wrong? - Designing Threat Modeling with a Card Game

To make the threat modeling process more playful, aramido developed a card game. This helps development teams with Security by Design. (read more)

Secure Coding Security Concepts Threat Modeling Web Application Webshop

Hannah Schneider

Published on 21.10.2021 in the category Web Application Security published.

The New OWASP Top 10 - 2021

The OWASP Top 10 - 2021 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) DDoS OWASP Secure Coding SQL Injections Threat Modeling Web Application

Tristan Wagner

Published on 09.07.2020 in the category Security Advisories published.

Two Vulnerabilities in TeamBeam

aramido was able to identify two vulnerabilities in the data exchange platform TeamBeam. (read more)

Cross Site Scripting (XSS) Secure Coding Web Application

Benjamin Pokrant

Published on 06.05.2020 in the category Security Advisories published.

HTML Injection Vulnerability in WordPress Plugin WPForms

A security vulnerability in the WordPress plugin WPForms allowed attacks via HTML injection. How does this vulnerability affect systems and how can it be closed? (read more)

Cross Site Scripting (XSS) Secure Coding Security Concepts Spear Phishing Web Application WordPress Zero-Day-Exploits

Elisabeth Apicella

Published on 20.12.2018 in the category Security Advisories published.

Security Advisory: Three Findings at prescreen.io and jobbase.io

As aramido discovered, the cloud-based applicant management software of the company Prescreen had several security deficiencies. (read more)

Authorization • Access Control Data Theft Security Concepts Web Application

Andreas Sperber

Published on 21.11.2018 in the category Web Application Security published.

What are the OWASP Top 10 - 2017?

The OWASP Top 10 - 2017 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Best Practice Guide Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening Secure Coding Session Management SQL Injections Web Application

Regina Okun

Published on 01.10.2018 in the category aramido published.

Understanding Hacker Attacks - A Workshop for Ethical Hackers

Full-day hacker workshop as a Capture The Flag (CTF game) in Jeopardy mode. How can I as an ethical hacker test my own applications? (read more)

Capture The Flag (CTF) Ethical Hacker Juice Shop Live Hacking Symfony Training Workshop Event Web Application White Hat Hacker

Regina Okun

Published on 18.09.2018 in the category Web Application Security published.

PHP Security Podcasts on phpdevradio.de

In PHPDevRadio "The Podcast for PHP", Michael Döhler (PHPDevRadio Crew) and Andreas Sperber (aramido) talk about current PHP security topics (read more)

Daniel Matesic

Published on 13.06.2018 in the category Web Application Security published.

52nd OWASP Meetup - Guided Hacking of a Web Application

At the 52nd OWASP Meetup, numerous security risks, including the OWASP Top 10, were illustrated through guided hacking of a web application. (read more)

Burp Suite Juice Shop Live Hacking OWASP OWASP ZAP Event Web Application Webshop

Andreas Sperber

Published on 01.01.2018 in the category Web Application Security published.

Five good resolutions for secure IT systems in 2018

At the latest after a serious hacking incident, everyone becomes active. To prevent this from happening, aramido presents five security measures for web applications. (read more)

Apache Backup • Data Security Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening HTTP Strict Transport Security (HSTS) Incident Response Joomla Man-In-The-Middle (MIM) Secure Coding SQL Injections SSL-Stripping Web Application Zero-Day-Exploits

Armin Harbrecht

Published on 03.03.2017 in the category Security Advisories published.

Multiple Vulnerabilities in the New CyberForum Portal

aramido found several security vulnerabilities on the CyberForum website. They show the typical dangers of websites with user-generated content. (read more)

Authorization • Access Control Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Defacement Secure Coding Typo3 Web Application

Armin Harbrecht

Published on 06.02.2017 in the category Security Advisories published.

Security through Transparency – How We Disclose Security Vulnerabilities

The responsible disclosure of security vulnerabilities is a proven approach to making IT systems more secure for everyone. (read more)

Secure Coding Company Web Application Webserver Zero-Day-Exploits

Armin Harbrecht

Published on 05.01.2017 in the category Software Security published.

Secure Software Updates

How can I, as a software manufacturer, provide my users with secure updates? Learn about secure software update mechanisms. (read more)

Best Practice Guide Checklist • Cheat Sheet DDoS PHP Secure Coding Web Application Webserver Zero-Day-Exploits

Andreas Sperber

Published on 15.12.2016 in the category Web Application Security published.

Live-Hacking a Symfony application

Andreas Sperber from aramido is a guest at SensioLabs in Cologne on Dec 21, 2016. He hacks a Symfony app and shows what can be done for IT security. (read more)

Cross Site Scripting (XSS) DDoS Defacement Live Hacking PHP Secure Coding Shopware SQL Injections SSL-Stripping Event Web Application

Armin Harbrecht

Published on 14.11.2016 in the category Penetration Testing published.

How Much Does a Penetration Test Cost?

As penetration testers, we are often asked about the cost of a penetration test. The answer depends on several factors. (read more)

Advanced Persistent Threats (APT) Data Theft IT Risk Management Security Audit Social Engineering Company Web Application

Andreas Sperber

Published on 01.08.2016 in the category Penetration Testing published.

What is a Penetration Test?

IT is an integral part of our lives. Hackers exploit vulnerabilities to profit. Penetration tests improve IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) Authentication BSI Cross Site Scripting (XSS) Data Theft DDoS Hardening IT Risk Management PHP Social Engineering Spear Phishing SQL Injections Web Application Economic Espionage Zero-Day-Exploits

Armin Harbrecht

Published on 19.07.2016 in the category Server Security published.

aramido Penetration Testing Offer Victim of a DDoS Attack?

In DDoS attacks, attackers specifically try to overload a web application. Our server logs suggested that we ourselves were affected. (read more)

Active Directory (AD) DDoS Incident Response Company Web Application Webserver Webshop