Exadra37

defmodule Utils.TagsUnify do

  @moduledoc """
  This module unifies the given tags, by removing duplicates and merging the
  ones that are similar.

  ## Examples

      iex> "My   Elixir Status, my-elixir-status, myelixirstatus, MyElixirStatus" |> Utils.TagsUnify.string()
      "MyElixirStatus"

Exadra37

/**
 * - Securing PhpMyAdmin instalation in Ubuntu server
 * 
 * @author  Paulo Silva(Exadra37)     <exadra37ingmailpointcom>
 * @package Exadra37/SecurePhpMyAdmin
 * @version 1.0.1
 * @since   30/01/2014 - v.1.0.0
 *          05/06/2014 - v.1.0.1
 *
 */

Exadra37

HOW TO EXTRACT AN API KEY FROM A MOBILE APP WITH STATIC BINARY ANALYSIS

You can read the blog post here.

TLDR

An API key is probably the most common method used by developers to identify what is making the request to an API server, but most developers are not aware how trivial is for a hacker or even a script kid to steal and reuse an API key for unauthorized access to their APIs.

We will see how to grab an API key by reverse engineering the binary of a mobile app in an effective and quick way with an open source tool, and once we see how easy it can be, we will realize why it is even achievable by non developers.

Exadra37

SECURITY TOOLS

My personal list of security tools I recommend in the Approov Blog were I write articles as a Developer Advocate for security in Mobile and APIs.

API

• MITMPROXY or Man In The Middle Proxy - Intercept traffic from a client consuming an API.
• Fierce Domain Scanner - Enumerate hostnames for a domain.
• Certificate Transparency Logs:

• Web Interface:

Exadra37

<!-- http://silviomoreto.github.io/bootstrap-select/ -->
<select id="compare" class="selectpicker" data-style="btn-success" data-max-options="2" title="Compare Settings" data-width="25em" multiple>
    <optgroup class="multiple-options" label="Compare"  data-max-options="1">
        <option class="exadra37-1-selection-by-group exadra37-group-compare" title="Compare Daily" selected>Daily</option>
        <option class="exadra37-1-selection-by-group exadra37-group-compare" title="Compare Weekly">Weekly</option>
        <option class="exadra37-1-selection-by-group exadra37-group-compare" title="Compare Monthly">Monthly</option>
    </optgroup>
    <optgroup class="multiple-options" label="Against"  data-max-options="1">
        <option class="exadra37-1-selection-by-group exadra37-group-against" title="Against Previous Week" selected>Previous Week</option>
        <option class="exadra37-1-selection-by-group exadra37-group-against" title="Against Last Year">Last Year</option>

Exadra37

let Player = {

  player: null,

  init(domId, playerId, onReady){

    window.onYouTubeIframeAPIReady = () => {
      this.onIframeReady(domId, playerId, onReady)
    }

Exadra37

APPROOV INTEGRATION IN A NODEJS EXPRESS API

The blog post can be found here.

TLDR

This walk-though will show us how simple it is to integrate Approov in a current API server using NodeJS and the Express framework.

We will see the requirements, dependencies and a step by step walk-through of the code necessary to implement Approov in a NodeJS Express API.

Exadra37

APPROOV INTEGRATION IN A PYTHON FLASK API

The blog post can be found here.

TLDR

This walk-though will show us how simple it is to integrate Approov in a current API server using Python and the Flask framework.

We will see the requirements, dependencies and a step by step walk-through over the code necessary to implement Approov in a Python Flask API.

Exadra37

WHY DOES YOUR MOBILE APP NEED AN API KEY?

The blog post can fe found here.

TLDR

Mobile apps are becoming increasingly important in the strategy of any company. As a result, companies need to release new application versions at a fast pace, and this puts developers under pressure with tight deadlines to complete and release new features very quickly.

Exadra37

{
	"bootstrapped": true,
	"in_process_packages":
	[
	],
	"installed_packages":
	[
		"Alignment",
		"Blade Snippets",
		"CSS Format",