Application Security, Penetration Testing, Security Consulting, Vulnerability Management, DDoS Testing, Threat Hunting, Awareness Training, Bug Bounty, Blockchain Security, Security Research
In Russian: https://blog.deteact.com/ru/yandex-clickhouse-injection/ In order to process a large amount of data in Yandex.Metrika, Yandex created a column-oriented DBMS ClickHouse. During penetration tests, we encountered ClickHouse in the systems of statistics, event collection, stock exchange
In Russian: https://blog.deteact.com/ru/dql-injection Modern web applications are less prone to injections, everyone uses prepared queries and ORM, but we still encounter such vulnerabilities in the wild. SQL dialects built into ORM libraries are of particular
Welcome back and check out our brief public profile at Y Combinator Startup School: https://www.startupschool.org/companies/deteact We graduated from the Advisor Track in November 2018. SUS gave us a lot of useful tips and hacks, sobering
We’re happy to announce that Deteact has been accepted into the Advisor Track of Y Combinator’s Startup School! For the next 10 weeks, we will be a part of the group of 27 companies supervised by
Today there’s a number of publicly available EVM bytecode decompilers. However, many of them actually work only for toy examples and fail on real-world programs. This is one of the problems for Ethereum smart contracts
Our Awareness Training services listed by an analytic center Anti-Malware.ru. They conducted an overview of Security Awareness market in Russia and worldwide (published in russian). Deteact Awareness is a part of our integrated continuous testing
You can now find us on social media: Facebook: https://www.facebook.com/deteact/ Twitter: https://twitter.com/deteact LinkedIn: https://www.linkedin.com/company/deteact/ Content on these social/blog platforms may differ, it will mainly be english and may be in russian. Don’t forget to subscribe
“Deteact” is short for “Detect and act“. We are a team of computer security professionals. Our main business is consulting and online services. Areas of our business (by service): Application Security Penetration Testing Security Consulting