Author
Alaeddine Mesbahi
Alaeddine Mesbahi is the co-founder and CEO of Ostorlab, where he leads the company's vision for automated security testing and vulnerability management. Before founding Ostorlab, he held roles at Google on the security automation team and at Cisco's Trust Office. Alaeddine started his career as a penetration tester, building deep hands-on expertise in offensive security and technical research. He has presented at leading industry conferences including Black Hat US, BruCon, and OWASP AppSec, and holds several professional certifications such as OSCP, OSCE, and GREM.
Finding superhuman XSS polyglot payloads with Genetic Algorithms
The following article is a technical deep dive into how genetic algorithms can be leveraged to create superhuman XSS polyglot payloads.
Mar 01, 2021
Ostorlab adds Web Security Scanning to its arsenal
Ostorlab is adding Web Security Scanner to its arsenal with novel approaches to vulnerability discovery.
Feb 15, 2021
Autonomous Security: Pushing Security Automation to the Next Level
The article introduces the term Autonomous Security in the context of security scanning and defin...
Oct 26, 2020
Two efficient features to continuously monitor mobile applications
Whether we are developing a mobile application or assessing its security, we need to continuously...
Oct 24, 2020
More by Alaeddine Mesbahi
Create scans directly from the Android and iOS Store
Ostorlab now supports creating scans directly from Android Play Store and iOS App Store
Aug 16, 2020
How to Carry out Nation-scale Mobile Devices Compromise: COVID-19 Contact Tracing App BeAware Bahrain Review
Mobile security testing of Covid-19 Contact Tracing Application BeAware
Jul 05, 2020
COVID-19 Contact Tracing App Wiqaytna Mobile Application Security Review
Mobile security testing of Covid-19 Contact Tracing Application Wiqaytna
Jun 15, 2020
What's New in Ostorlab Mobile Security Scanner 2020.05.08
Xamarin decompilation, deprecated TLS protocols, hardcoded secrets and even more, Owasp top 10
May 08, 2020
Detection Engine @ Ostorlab
Overview of the detection capabilities provided by Ostorlab
May 01, 2020
What's New in Ostorlab 2020.04
Better management of scan lifecycle, export scan results and subscriptions
Apr 08, 2020
DOM XSS Fuzzing strategies - Part 1
XSS are still by far the most common type of vulnerabilities, this article presents strategies to automate the search for XSSes.
Dec 22, 2018